The Illusion of Digital Sovereignty: Why Vendor Swapping is Not a Compliance Strategy

The recent announcement that the Schwarz Group is moving hundreds of thousands of employees to Google Workspace is being marketed as a "triumph of digital sovereignty". They built an impressive European data center infrastructure with STACKIT. But migrating from one American hyperscaler to another and calling it sovereignty is essentially an official declaration of surrender. It is a brilliant marketing campaign, but from an enterprise architecture and compliance perspective, it is a structural failure. The Cryptographic Facade To be clear, the technical execution of the storage layer is solid. Schwarz Digits is utilizing External Key Management combined with Client Side Encryption. Architecturally, holding the cryptographic keys in their own STACKIT environment while using Google purely for encrypted storage is the correct way to mitigate the US CLOUD Act for data at rest. Google only sees encrypted blobs. However, encrypting the payload is only a fraction of the governance equation.