Italy wrote cloud rules to protect Europe. They favour the US

European digital sovereignty has a design problem, and Rome supplied today's clearest example of it. As Agenda Digitale reports, Italian public sector cloud tenders were built to protect European capacity, but their qualification criteria reward scale and track record in terms that in practice only providers with hyperscaler level economies of scale can meet. Local cloud federations with the technical readiness to compete, the kind the article names as EduStorage, are shut out not because they lack the technology but because the rulebook never imagined a federated European alternative as the default bidder.

That is a rule that misfires. Elsewhere today there is a rule that simply does not exist. Agenda Digitale also reports on Google's Fairwind programme, pairing a new model, Gemini 3.8 Flash Cyber, with the ability to find critical software vulnerabilities fast. Access runs through a private Google gatekeeping process, not an open standard, so one company decides who in Europe's cybersecurity establishment gets a significant defensive tool. Nothing resembling an EU framework yet decides who should hold the keys to dual use security AI at that scale.

A qualification rule only a hyperscaler can meet is not protecting Europe. It is certifying dependency.

This column has argued for weeks that European digital sovereignty splits into a fast legislative track and a slow infrastructural one: Brussels can write a rule faster than an industry can build what the rule protects. Today adds a third, more damning failure mode: legislation working against its own stated goal. A slow build is a resourcing problem. A cloud tender that certifies the dependency it was written to prevent is a drafting problem, and those are the cheapest ones to fix, once someone rewrites the criteria.

Consumers…

HTC's Vive Eagle smart glasses reach Europe with a familiar pitch, as Heise reports: privacy by design, undercut by a built in camera and the same scrutiny already levelled at Meta's hardware. HTC says the wearer can pick which AI backend processes what the glasses see, Gemini or ChatGPT among the options, and points to data anonymisation as the safeguard.

That choice is real, but it is a choice between two American AI pipelines, not an exit from one. A privacy claim is only as strong as what happens after anonymisation, and that still runs through Google's or OpenAI's infrastructure either way.

Businesses…

European tech funding fell 63% in August to 3.2 billion euros across 165 deals, Tech.eu reports, the sharpest slowdown this column has covered in weeks. But the money that did move went somewhere specific: Oulu's Creoir closed a seed round for defence and mission critical voice AI, Spain's iPronics raised 107.6 million euros with NVIDIA's backing for AI data centre optical networking, and the Novo Nordisk Foundation is putting 62 million dollars into a quantum chip plant in Copenhagen, opening in 2027.

That last one matters beyond its size. Most of this year's European quantum money, IQM's Nasdaq listing, Quantum Motion's late stage raise, Eleqtron's Series A, went to computing and software. A Copenhagen plant making quantum materials and test chips is capital finally reaching the manufacturing layer underneath those companies, exactly the kind of capacity Italy's cloud tender problem shows the rulebook still struggles to recognise.

Read August's slump as caution too. Norway's 2 trillion dollar sovereign wealth fund is modelling crash scenarios for its own portfolio, Heise reports, with a shock to AI infrastructure or US tech regulation capable of cutting the fund's value by up to 35%. When an investor that size is stress testing AI concentration risk, a quieter month of European dealmaking looks less like a drought and more like everyone else catching up to that math.

Government…

Italy's cloud tender is a live case study for any government still drafting sovereignty procurement rules: define the capability floor a bidder must clear in technology neutral terms, not in terms that happen to describe the incumbent. A European alternative does not need exemption from scrutiny to win a tender, it needs the tender to measure what it can actually do. Established providers like OVHcloud already operate at a scale procurement rules could be written to recognise, rather than assumed against.

Fairwind is the harder half of today's lesson, because there is no rule to rewrite yet. No clear European framework decides who should be trusted with AI tools that find critical vulnerabilities faster than human researchers, which today means one American company makes that call alone. That is a governance gap Brussels or national cyber agencies could close without waiting for anyone to build new infrastructure first.

Further today

• UK's AI Score raises €4.6M for AI agent control platform · EU-Startups
• UK cloud mail service Docmail offline for third day · The Register
• UK AI governance startup AI Score raises $5.4M seed funding · Tech.eu
• WAD Capital raises €67.5M first close for debut fund with €25M European Investment Fund backing · EU-Startups

Sources

• Italy's cloud procurement rules qualify hyperscalers by default and shut out ready local federations like EduStorage · Agenda Digitale
• Google's Fairwind programme gates access to its fast vulnerability hunting AI through a private process · Agenda Digitale
• August European tech funding fell 63% to 3.2 billion euros across 165 deals · Tech.eu
• Oulu's Creoir raised a seed round to scale voice AI for defence and mission critical systems · EU-Startups
• Spain's iPronics raised 107.6 million euros with NVIDIA backing to scale AI data centre optical networking · EU-Startups
• The Novo Nordisk Foundation is funding a 62 million dollar quantum chip plant in Copenhagen · The Next Web
• Norway's sovereign wealth fund is modelling AI boom crash scenarios that could cut its value by up to 35% · Heise Online
• HTC's Vive Eagle smart glasses launch in Europe with privacy claims despite a built in camera · Heise Online