Summary The Cloud and AI Development Act (CADA), as proposed in COM(2026) 502 final, is a regulatory framework establishing legal standards for cloud sovereignty, data-centre deployment, and public procurement. InvestAI is a strategic financing initiative (often cited in policy contexts as mobilizing approximately EUR 200 billion) designed to fund the physical infrastructure, including AI factories and gigafactories, required to meet those standards. CADA defines the "rules of the road" for security and autonomy, while InvestAI provides the capital to build the assets. They work in tandem: CADA creates the demand for sovereign infrastructure through procurement mandates, and InvestAI supplies the investment to build it.

Detail

To understand the relationship between CADA and InvestAI, one must distinguish between the legislative instrument that sets the legal requirements and the investment strategy that mobilizes the capital to meet them. While they are frequently discussed together as pillars of the EU's digital sovereignty strategy, they operate through fundamentally different mechanisms.

CADA: The Regulatory Framework

The Cloud and AI Development Act (CADA) is a proposal for a Regulation of the European Parliament and of the Council. Its primary function is to harmonize the rules for the deployment, use, and procurement of cloud computing and AI services across the Union.

As outlined in Article 1(1), CADA establishes a framework to strengthen the EU's cloud and AI ecosystem through five key measures:

  1. Establishing the Cloud and AI Leadership Initiatives.
  2. Accelerating the deployment of data centres.
  3. Enabling a sovereign cloud offer to safeguard public order.
  4. Reducing dependencies on critical technologies.
  5. Fostering public-sector adoption.

Crucially, CADA introduces a Union cloud computing sovereignty framework (Article 16) comprising four "Union assurance levels." These levels classify cloud services based on criteria such as establishment in the Union, location of infrastructure, personnel citizenship, and absence of third-country control (Annex II).

Under Article 29, Member States and Union entities must conduct risk assessments to determine which assurance level is required for specific public sector activities. For activities contributing to the preservation of public order (e.g., law enforcement, defence), Article 30(3) mandates that contracting authorities procure only services recognized at Union assurance levels 2, 3, or 4. This creates a legal obligation for public buyers to seek out sovereign infrastructure.

InvestAI: The Financing Strategy

InvestAI is not a regulation but a strategic investment initiative. While the CADA text itself does not explicitly name "InvestAI" as a standalone legal entity, the proposal's explanatory memorandum and financial statement align with the broader political commitment to mobilize approximately EUR 200 billion in investment for AI infrastructure.

This initiative targets the "supply side" of the digital economy. It aims to bridge the investment gap in European compute capacity by leveraging a mix of:

  • Existing Union Programmes: Such as Horizon Europe and the Digital Europe Programme.
  • The European Competitiveness Fund (ECF): Specifically mentioned in Recital 43 and the Financial Statement (Section 1.5.4) as a key deployment instrument.
  • Private Capital: Mobilized through mechanisms like InvestEU.

InvestAI focuses on funding the physical and digital assets required to meet CADA's standards, including AI factories, AI gigafactories, and data-centre acceleration zones. The proposal explicitly supports "grand challenges" (Annex I) such as frontier AI, physical AI, and industrial AI, which require massive capital expenditure to develop the necessary infrastructure.

How They Work Together

CADA and InvestAI are complementary pillars of the EU's digital strategy, addressing the demand and supply sides respectively.

1. Creating the Market (CADA) CADA creates a guaranteed market for sovereign infrastructure. By mandating that public procurement (a significant portion of the EU market) must prioritize services meeting specific assurance levels, CADA de-risks investment for providers. A cloud provider knowing that public contracts require Union assurance level 2 or higher has a clear incentive to invest in EU-based infrastructure. Article 32 further reinforces this by allowing "Union added value" criteria in procurement, rewarding providers who strengthen the European supply chain.

2. Building the Assets (InvestAI) InvestAI provides the financial fuel to build the infrastructure that CADA requires. The proposal notes in the Explanatory Memorandum that the EU faces a "significant threat" from limited data-centre capacity. InvestAI (via the ECF and other instruments) funds the construction of data-centre acceleration zones (Article 10) and supports projects designated as strategic projects (Article 14).

3. The Synergy The synergy is direct:

  • InvestAI funds the construction of a new data centre in a designated acceleration zone.
  • CADA provides the legal pathway for that data centre to be recognized as a Union assurance level 3 service (provided it meets criteria like Union citizenship for personnel and no third-country control, per Annex II, Section 3.1).
  • Once recognized, public bodies are legally required under Article 30 to procure from that data centre for public-order-relevant activities.

This cycle ensures that the capital deployed by InvestAI is directed toward infrastructure that is legally compliant with CADA's sovereignty goals, while CADA's procurement mandates ensure a return on investment for the infrastructure built by InvestAI.

What this means for you

For public-sector bodies, cloud providers, and investors, the distinction between the regulatory and financial layers is critical for strategic planning.

1. For Public Procurement Officers

You are bound by CADA, not InvestAI.

  • Compliance is Mandatory: You must conduct the risk assessment required by Article 29 to determine the necessary assurance level for your cloud services.
  • Procurement Rules: You cannot simply choose the cheapest provider. Under Article 30, if your activity contributes to public order, you must procure only services recognized at levels 2, 3, or 4.
  • Leveraging the Ecosystem: While you do not manage InvestAI funds, you can align your procurement with the infrastructure being built by it. By prioritizing providers who have benefited from European Competitiveness Fund support or are located in acceleration zones, you support the EU's strategic goals while meeting CADA's legal requirements.

2. For Cloud Providers and Investors

You must navigate both the regulatory and financial landscapes.

  • Regulatory Pathway: To access the public market, you must undergo the recognition process under Article 17. This involves submitting evidence of Union establishment, infrastructure location, and personnel status. For levels 2–4, this requires an independent audit (Article 20) and a "positive" audit opinion.
  • Funding Opportunities: To scale your infrastructure to meet these high assurance levels, you should actively seek funding under the European Competitiveness Fund and Horizon Europe, which are the financial vehicles supporting the Cloud and AI Leadership Initiatives (Article 6).
  • Strategic Alignment: Building infrastructure in a data-centre acceleration zone (Article 10) not only accelerates permitting but also aligns your project with the strategic priorities of the investment initiative, increasing your chances of securing funding.

3. For Policy Makers

The success of the EU's digital sovereignty depends on the synchronization of these two tools.

  • Regulatory Certainty: CADA provides the legal certainty that investors need to commit capital.
  • Financial Capacity: InvestAI (via the ECF and other instruments) ensures that the capital is available to build the infrastructure that CADA demands.
  • Monitoring: The Commission will monitor the "capacity gap" (Article 15) to ensure that the investment is keeping pace with the regulatory demands.

Common misconceptions

"CADA provides the €200 billion in funding." No. CADA is a regulation, not a budget. It establishes the legal framework and the fee-based revenue streams for specific administrative tasks (e.g., the EuroCloud Federation under Article 36 and common procurement under Article 40). The massive investment figure (approx. €200 billion) comes from the broader InvestAI strategy, which leverages existing Union programmes (Horizon Europe, Digital Europe) and the European Competitiveness Fund (ECF).

"InvestAI is a law that public bodies must comply with." No. InvestAI is a financing strategy. Public bodies do not "comply" with it in the legal sense. They comply with CADA (the law), which mandates what they must procure. InvestAI simply ensures that the options to procure are available by funding their creation.

"CADA and InvestAI are the same thing." They are distinct but interdependent. CADA sets the rules (sovereignty, security, procurement); InvestAI provides the money (infrastructure, gigafactories). Confusing them can lead to errors, such as expecting a regulation to provide grants, or expecting a funding initiative to impose legal obligations on buyers.

"The €200 billion is a CADA budget line." The €200 billion figure is a strategic target for the AI Continent Action Plan and the InvestAI initiative, not a specific line item in the CADA proposal. The CADA Financial Statement estimates operational appropriations of roughly €9.3 billion (voted budget) and €54.3 billion (fees) over the 2028–2034 period, which are distinct from the broader investment mobilization targets.

Related

This is general information about a draft EU regulation, not legal advice.