Making CADA Deliver: Trust, Sovereignty and Competitiveness for Europe’s Cloud and AI Future

Making CADA Deliver: Trust, Sovereignty and Competitiveness for Europe’s Cloud and AI Future

Eurosmart Position Paper on the Cloud and AI Development Act (CADA)

Executive Summary

Eurosmart, the voice of the cybersecurity industry in Europe, welcomes the Cloud and AI Development Act (CADA) as an important step towards strengthening Europe’s digital sovereignty, fostering a competitive and innovative cloud and AI ecosystem, and reducing strategic dependencies in critical digital infrastructure.

The proposal introduces a comprehensive set of measures intended to strengthen Europe’s cloud and AI ecosystem. These include the establishment of the Union Cloud Sovereignty Framework, complementing the EU Cloud Services (EUCS) certification scheme, initiatives supporting the deployment of cloud and AI infrastructure, procurement mechanisms promoting European added value, and measures designed to enhance the Union’s technological resilience.

Eurosmart strongly supports the overall objectives of the proposal. However, several aspects of the framework could be further strengthened to improve trust, legal certainty, consistency of implementation, market uptake and SME participation.

Eurosmart recommends measures to strengthen trust and consistency in the Union Cloud Sovereignty Framework (Amendments 1, 2, 3, 5, 6 and 7), preserve the integrity of sovereignty assurance levels (Amendments 4, 9 and 15), improve governance and regulatory maintenance (Amendments 8, 12, 13 and 17), increase practical adoption of the framework (Amendments 10 and 11), strengthen SME participation in cloud and AI procurement (Amendments 16–20), and safeguard the sovereignty objectives underpinning common procurement mechanisms (Amendment 14).