Summary As proposed, the Cloud and AI Development Act (CADA) would reduce cloud costs and mitigate vendor lock-in for startups by promoting an "open source first" approach in public procurement and establishing a centralized EU Open Source Solutions Catalogue. It also supports startups through subsidized access to high-performance computing resources for frontier AI projects and encourages multi-cloud strategies to prevent dependency on single providers. However, CADA primarily targets public sector bodies and large-scale infrastructure; direct cost savings for private startups will likely stem from indirect market effects, such as increased availability of sovereign, interoperable cloud services and shared open-source tools.

Detail

The proposed Cloud and AI Development Act (CADA) addresses the dual challenges of high cloud costs and vendor lock-in through a combination of supply-side capacity building, demand-side procurement rules, and open-source promotion. For startups, particularly those in the AI and tech sectors, these measures aim to lower barriers to entry and provide viable alternatives to dominant non-European hyperscalers.

Open Source as a Lever Against Lock-in

A core mechanism for reducing lock-in is the promotion of open-source software. Article 41 of CADA establishes that the Union and Member States "shall take the necessary measures to encourage Union entities and public sector bodies to use and facilitate the reuse of open standards and components released under an open source licence when building their cloud and AI ecosystem or stack." While the text uses the term "encourage" rather than a strict "require," this obligation creates a powerful market signal. The Explanatory Memorandum and Recital 81 frame this as essential for transparency, security, and reducing dependency on single vendors, effectively establishing an "open source first" policy direction for the public sector.

To operationalize this, Article 42 mandates that when Union entities or public sector bodies make software available for reuse under an open-source license, they "shall do so using a catalogue or repository that is connected to, and made accessible through, the EU Open Source Solutions Catalogue." Article 43 establishes this catalogue as a centralized hub, hosted on the Interoperable Europe portal, allowing any public administration to search for and access reusable software. For startups, this creates a larger, more visible market for open-source-compatible solutions and reduces the need to build foundational infrastructure from scratch. Furthermore, Article 44 establishes a network of Open Source Programme Offices (OSPOs) to facilitate cooperation and best practices, further embedding open-source culture into the public sector, which is a major buyer of cloud services.

Subsidized Compute and Frontier AI Support

CADA directly addresses the high cost of compute, a significant burden for AI startups, through targeted support mechanisms. Article 8 sets out the criteria for the Commission to recognize "frontier AI priority projects." These are pioneering projects focused on scaling up frontier AI technologies. Article 9 then outlines the support for these projects, stating that the Union and Member States "shall ensure that sufficient AI computing resources... are allocated to support the development of frontier AI priority projects."

Crucially, Article 9(2) specifies that "The Union shall at least match the AI computing resources contributed by Member States to frontier AI priority projects to the extent that sufficient AI computing capacity is available within the Union's share of European high performance computing access time." This conditional matching mechanism effectively subsidizes compute costs for qualifying startups and research entities. By pooling resources and matching contributions, CADA aims to lower the financial barrier for developing advanced AI models, provided capacity exists. Additionally, the Cloud and AI Leadership Initiatives (established under Article 3 and detailed in Article 4) support the development of cutting-edge technologies, including industrial and physical AI, providing further avenues for funding and resource allocation for innovative startups.

Multi-Cloud Strategies and Sovereignty

Vendor lock-in is often exacerbated by the dominance of a few global hyperscalers. CADA introduces a sovereignty framework to mitigate this. Recital 65 explicitly states that "To enhance resilience and limit dependency on a single cloud computing service provider, Union entities and Member States should, as part of their public procurement procedures, consider whether a multi-vendor or multi-cloud strategy may be appropriate." While this recital specifically addresses public sector procurement, the push for multi-cloud architectures encourages the development of interoperable services and reduces the risk associated with relying on a single provider.

The sovereignty framework, outlined in Articles 16–24, establishes four "Union assurance levels" for cloud services. While primarily aimed at ensuring security and data sovereignty for public sector activities, this framework creates a market for European cloud providers that can meet these standards. For startups, this means a growing ecosystem of compliant, interoperable European cloud services that can serve as alternatives to non-EU providers, fostering competition and potentially lowering prices.

Data Centre Deployment and Cost Competitiveness

CADA also aims to increase the overall supply of cloud capacity in the EU, which can drive down costs through competition. Title III of the regulation focuses on data centre capacities, introducing "data centre acceleration zones" (Article 10) where deployment is facilitated through streamlined permitting and sustainability requirements. By tripling EU data centre capacity over the next five to seven years (as stated in the Explanatory Memorandum), the proposal seeks to reduce reliance on foreign infrastructure and create a more competitive domestic market. Increased supply, coupled with the promotion of European providers, is expected to exert downward pressure on cloud computing costs.

What this means for you

For CTOs and architects at startups, CADA presents both opportunities and considerations:

  • Leverage Open Source: Align your technology stack with open standards and open-source components. This not only positions you favorably for public sector contracts (which will increasingly favor such solutions under Article 41) but also reduces your own technical debt and lock-in risk. Monitor the EU OSS Catalogue (Article 43) for reusable components that can accelerate your development.
  • Apply for Compute Support: If your startup is working on frontier AI, investigate the criteria for "frontier AI priority projects" (Article 8). Qualifying for this status could grant you access to subsidized high-performance computing resources via the EuroHPC infrastructure (Article 9), significantly reducing your R&D costs, subject to capacity availability.
  • Embrace Interoperability: Design your cloud architecture to be portable and interoperable. As the public sector moves toward multi-cloud strategies (Recital 65) and sovereign cloud services (Article 16), demand will grow for services that can operate across different environments. Avoid deep integration with proprietary, closed ecosystems that hinder migration.
  • Engage with the Ecosystem: Participate in the network of Open Source Programme Offices (Article 44) if you are providing services to the public sector. This can provide valuable insights into best practices and potential collaboration opportunities.

Common misconceptions

  • CADA directly subsidizes all startup cloud bills: CADA does not provide blanket subsidies for all startups. Compute support is targeted at specific "frontier AI priority projects" (Article 9) and other strategic initiatives. General cloud cost reductions are expected to come from market competition and increased supply.
  • Open-source mandates apply to private companies: The obligations to use open-source first (Article 41) and reuse software via the EU OSS Catalogue (Article 42) apply to Union entities and public sector bodies. Private startups are not legally bound to use open source, but doing so aligns with the market direction and public procurement trends.
  • CADA bans non-EU cloud providers: CADA does not ban non-EU providers. Instead, it establishes a sovereignty framework with assurance levels. Non-EU providers can still operate in the EU, but public sector bodies with high-risk activities may be required to use services meeting higher Union assurance levels (Article 30), which may favor EU-based or compliant providers.
  • Multi-cloud is mandatory for all entities: Recital 65 suggests that public sector bodies consider multi-cloud strategies to reduce dependency. It is not a strict mandate for all entities, but a recommendation based on risk assessments.

Related

This is general information about a draft EU regulation, not legal advice.