Summary The proposed Cloud and AI Development Act (CADA) would fundamentally reshape how EU public authorities procure cloud and AI services to actively foster start-up participation. Under Article 33(5), contracting authorities would be required to promote preliminary market consultations, facilitate matchmaking between public buyers and innovative solutions provided by European SMEs and start-ups, and develop public contract clauses that are favourable for innovative SMEs. Furthermore, Member States would be obligated to pursue an objective of awarding at least 25% of their procurement for cloud computing services and AI systems to innovative SMEs, creating a dedicated market channel for emerging providers.

Detail

The Cloud and AI Development Act (CADA), as proposed in COM(2026) 502 final, is designed not only to enhance the Union's strategic autonomy but also to revitalize the European cloud and AI ecosystem by breaking the dominance of non-EU incumbents. A critical mechanism for achieving this is the strategic use of public procurement to de-risk market entry for smaller, innovative European providers. The proposal explicitly targets the structural barriers that often prevent start-ups and small and medium-sized enterprises (SMEs) from competing in complex public tenders.

The 25% Innovation Objective

The most significant market signal in the proposal is the quantitative target set out in Article 33(4). This provision states that "Member States shall pursue as objective that at least 25% of their procurement for cloud computing services and AI systems be awarded to innovative SMEs."

It is crucial to understand the legal nature of this provision. The text uses the phrase "pursue as objective," indicating a strategic target rather than a rigid, per-tender quota. However, the obligation is binding in terms of planning and reporting. Member States must include "plans on how they intend to achieve this objective" within their national cloud and AI strategies, as required by Article 7. This ensures that the 25% target is not merely aspirational but is integrated into the long-term digital transformation agenda of each Member State. The target specifically applies to procurement for cloud computing services and AI systems, distinguishing it from general IT spending and focusing resources on the high-growth sectors where European start-ups are most active.

Mandatory Actions to Enable Start-up Access

To ensure that the 25% objective is achievable, Article 33(5) imposes three specific, mandatory duties on Union entities and contracting authorities. These measures are designed to lower the "entry cost" for start-ups, which often lack the resources to navigate opaque or overly complex procurement processes.

  1. Preliminary Market Consultations: Authorities must promote preliminary market consultations. This allows public buyers to engage with the market before a formal tender is launched. For start-ups, this is a vital opportunity to shape the technical specifications, demonstrate their innovative capabilities, and ensure that the requirements are not inadvertently tailored to the capabilities of large incumbents.
  2. Matchmaking: As explicitly mandated by Article 33(5)(b), authorities must promote "matchmaking between public buyers and innovative solutions provided by European SMEs and start-ups." This provision creates a legal basis for public bodies to actively connect with the start-up ecosystem, rather than passively waiting for tenders to be submitted. It addresses the information asymmetry where start-ups may not know which public bodies need their specific solutions, and public bodies may not know which start-ups exist.
  3. SME-Favourable Clauses: Authorities are required to promote the "development of public contract clauses that are favourable for innovative SMEs." Standard public contracts often contain terms regarding liability, payment schedules, and insurance that are disproportionately burdensome for smaller entities. CADA would compel authorities to adapt these terms to the reality of start-up operations, thereby reducing the financial and legal risks of winning a public contract.

Monitoring, Reporting, and Accountability

The proposal establishes a robust feedback loop to ensure these measures are effective. Under Article 33(3), Member States must monitor and report annually to the Commission on their use of procurement of innovation. This reporting must include specific data points:

  • The size of economic operators participating in such procurement.
  • SMEs participation trends, including the number of contracts awarded to SMEs, their share of the total contract value (as a percentage), and the share of cross-border SME participation.
  • Measures taken to improve SME access to public procurement procedures.

This data-driven approach ensures that the Commission can track progress toward the 25% objective and identify specific barriers that may require further regulatory intervention or guidance.

Integration with National Strategies

These procurement obligations are not isolated; they are woven into the broader governance framework of CADA. Under Article 7, Member States must adopt national cloud and AI strategies within one year of the Regulation's entry into force. These strategies must explicitly include "plans on how they intend to achieve this objective" regarding the 25% SME target. This creates a direct link between national policy planning and the day-to-day actions of contracting authorities, ensuring that support for start-ups is a core component of the national digital agenda.

What this means for you

If you are a cloud service provider, data centre operator, or AI developer, particularly a start-up or SME, the proposed CADA creates a structured pathway to access the public sector market. Here is how you can leverage these provisions:

  • Proactively Engage in Preliminary Consultations: Do not wait for a formal Request for Proposal (RFP). Actively seek out and participate in preliminary market consultations announced by public authorities. This is your opportunity to educate buyers on your technology, influence the technical specifications, and ensure your solution is considered viable before the competition begins.
  • Leverage Matchmaking Initiatives: Pay close attention to the "matchmaking" platforms and events promoted by public authorities under Article 33(5)(b). These are not optional networking events; they are a mandated part of the procurement strategy. Ensure your company is visible in these networks and that your innovative solutions are clearly communicated to public buyers.
  • Advocate for SME-Favourable Clauses: When engaging in contract negotiations, reference the obligation under Article 33(5)(c) to develop clauses favourable to innovative SMEs. If a public authority presents standard, rigid terms that are unsuitable for a start-up (e.g., excessive liability caps or upfront payment requirements), remind them of their duty to adapt these terms to support innovation.
  • Highlight Your "Innovative" Status: The 25% objective specifically targets "innovative SMEs." Ensure your marketing and tender responses clearly articulate the innovative nature of your solution, its technological edge, and how it contributes to the European cloud and AI ecosystem.
  • Monitor National Strategies: Keep a close watch on the national cloud and AI strategies of the Member States where you operate. These documents must outline the specific plans to achieve the 25% target. Use these plans to identify upcoming initiatives, funding opportunities, and specific procurement pipelines designed to support your participation.

For larger incumbents, CADA signals a significant shift in the market dynamics. Public buyers will be increasingly required to actively seek out and engage with smaller, innovative providers. This may lead to more competitive tendering environments, a greater emphasis on partnership models, and a potential reduction in the market share of non-EU incumbents as the public sector pivots toward European innovation.

Common misconceptions

"CADA guarantees start-ups 25% of all public cloud contracts." No. The 25% figure is an objective for procurement of innovation in cloud and AI, not a blanket quota for all public IT spending. It applies to procurement procedures specifically aimed at fostering innovation. Furthermore, it is a target for Member States to pursue through their strategies, not a strict per-contract reservation.

"Start-ups are exempt from sovereignty and security requirements." Incorrect. CADA's support for SMEs does not override its sovereignty framework. Start-ups must still meet the relevant Union assurance levels (Level 1, 2, 3, or 4) depending on the sensitivity of the public sector activity. However, the matchmaking and SME-favourable clauses are specifically designed to help SMEs navigate these requirements and compete on a level playing field.

"Matchmaking is optional for public authorities." False. Article 33(5)(b) explicitly requires authorities to "promote" matchmaking. It is a mandatory action intended to support the broader SME participation goals. Authorities cannot simply ignore this obligation in their procurement planning.

"The 25% target applies to every single tender." No. The target is a strategic objective for Member States to achieve over time through their national strategies. It is not a requirement that every individual tender must be awarded to an SME, but rather that the aggregate procurement portfolio should reflect this ambition.

Related

This is general information about a draft EU regulation, not legal advice.