Finnish cloud firm UpCloud bets on EU sovereignty, challenges US hyperscalers on Nordic turf

• UpCloud operates entirely under EU law and GDPR, with no exposure to US legal instruments like the CLOUD Act that can compel American firms to hand over data stored abroad
• Finland's recent 45-fold electricity tax hike on data centres has spooked US hyperscalers while potentially levelling the playing field for smaller European providers
• Nordic public-sector clients handling health records, defence logistics, and critical infrastructure face growing pressure to repatriate data from American-owned cloud platforms
• European cloud providers hold a fraction of the global market, and procurement policies in the Nordics still overwhelmingly favour US giants on cost and scale

UpCloud, a Finnish cloud infrastructure company headquartered in Helsinki, is making an explicit pitch for European data sovereignty — arguing that as long as American hyperscalers like Google, Microsoft, and Amazon control the cloud, European governments and institutions are storing sensitive data under de facto US jurisdiction. Hufvudstadsbladet reports on the company's challenge to the giants, framing it as a David-versus-Goliath contest with strategic implications far beyond Finland.

The legal exposure is not theoretical. The US CLOUD Act, enacted in 2018, gives American authorities the power to compel US-headquartered companies to produce data regardless of where it is physically stored. A Finnish hospital's patient records sitting on a Microsoft Azure server in Stockholm are, in principle, reachable by a US federal subpoena. UpCloud, incorporated in Finland and operating entirely within EU legal frameworks, faces no such obligation. For Nordic public-sector organisations — hospitals, municipalities, defence contractors — this distinction is becoming harder to ignore.

Finland has quietly become one of Europe's most significant data centre hubs, thanks to cold climate, cheap energy, and reliable grid infrastructure. Google alone has invested over three billion euros in its Hamina facility. But the Finnish government's decision to raise the electricity tax on data centres by a factor of forty-five — from 0.05 cents to 2.253 cents per kilowatt-hour — sent a clear signal that the era of unconditional hospitality for hyperscalers may be ending. The tax hike, which took effect in 2024, was designed to recapture public revenue from an industry that consumes enormous amounts of subsidised electricity while employing relatively few people. For UpCloud and other European providers operating at smaller scale, the narrowing cost gap is a structural gift.

The revenue disparity remains enormous. Microsoft Azure, Amazon Web Services, and Google Cloud collectively control roughly two-thirds of the global cloud market. European alternatives — UpCloud, France's OVHcloud, Germany's IONOS — occupy single-digit percentages at best. UpCloud does not publicly disclose revenue figures, but the company operates data centres in Helsinki, across Europe, and in select global locations, serving a client base that includes Nordic enterprises and public-sector organisations increasingly wary of transatlantic data flows.

The deeper question is whether Nordic governments will match their sovereignty rhetoric with procurement policy. Sweden, Denmark, Norway, and Finland all have public-sector digitalisation strategies that reference data protection and GDPR compliance, but procurement frameworks still overwhelmingly reward lowest cost and largest scale — criteria that structurally favour American incumbents. France has moved furthest, with its "cloud de confiance" doctrine requiring sovereign cloud solutions for sensitive government data. The Nordics have produced white papers. France has produced contracts.

A coordinated Nordic procurement standard — requiring EU-jurisdiction cloud hosting for health data, defence logistics, population registries, and critical infrastructure — would instantly create a market large enough to sustain multiple European providers. Five countries, thirty million people, some of the most digitalised public sectors on earth. The demand exists. The policy does not.

UpCloud's Helsinki headquarters sits roughly forty kilometres from Google's Hamina data centre. One company employs a few hundred people and operates under Finnish law. The other employs two million people worldwide and operates under the CLOUD Act. Nordic governments will eventually have to decide which jurisdiction they want holding their citizens' medical records.

Sources: Hufvudstadsbladet