The French sovereign cloud: between “trusted” clouds and cutting-edge American technologies.

The French sovereign cloud: between “trusted” clouds and cutting-edge American technologies.

What is the sovereign cloud?

At the initiative of the French government, the sovereign cloud has a double function. On the one hand, it allows French and European companies to deploy the technologies of American giants under license. On the other hand, user data is protected from extraterritorial laws and American authorities using the C.L.O.U.D. Act (Clarifying Lawful Overseas Use of Data Act) and FISA (Foreign Intelligence Surveillance Act).

The sovereign cloud complements the European project Gaïa-X of 2020, which was intended to be an alternative to GAFAM. The new French strategy announced by the government makes it possible to take advantage of advanced American technologies. It is also used to control data in a so-called “trusted” cloud. Ultimately, this cloud will allow businesses to reduce their dependence on the US and develop their own services.

Is the sovereign cloud a “trusted” cloud?

Formerly known as SecNum Cloud, the “trusted cloud” label issued by theNational Information System Security Agency (ANSSI) aims to guarantee impermeability to extraterritorial laws. It is accessible to the giants of the sector (AWS, Microsoft, Google etc...) if:

> The technologies are used under license by French or European suppliers.

> The servers hosting these technologies are located in France.

Thus, with this new certification, the French government chooses national and European sovereignty. It also collaborates with digital giants and their performance in this field.

What is the French strategy for administrations with regard to the cloud?

The digital transformation of administrations towards the use of the cloud is based on 3 essential pillars (“maximum legal and technical protection”, “access to the best global services” and “consistency with European initiatives”) according to Bruno LeMaire.

In addition, two types of cloud meet the definition of trusted cloud:

> The internal cloud: dedicated to sensitive data, it comes in the form of an IaaS offer, and PaaS on an OpenStack basis accessible to all.

> The dedicated cloud: reserved for moderately sensitive data, it will be customizable for the needs of the State and will be based on dedicated infrastructures. It includes the integration of the ANSSI security supervision service and the components of the France Connect platform.

The choice between these two entities therefore depends on the sensitivity of the organization's data. In addition, the cloud must become systematic in public administrations. Now, it is at the center of the administrations' strategy for digital hosting according to the Minister of Transformation and Public Service.

OVH is joining forces with Google.

The French company OVH joins forces with Google and signs a strategic partnership. Indeed, OVH offers a new cloud offer: Hosted Private Cloud. It is a cloud that is compatible with open source and allows customers to store their data on company servers securely. They also benefit from Google's powerful software, including Anthos. The OVH teams will operate and manage the cloud from their own dedicated infrastructure in Europe.

This agreement comes in an ideal context. Indeed, it provides a response to the needs of trust, collaboration, collaboration, security, security, interoperability and transparency expressed by customers.

Candidater maintenant