{"id":9996,"date":"2026-10-21T16:13:05","date_gmt":"2026-10-21T13:13:05","guid":{"rendered":"https:\/\/upcloud.com\/global\/blog\/unplugging-cables-doesnt-create-data-sovereignty-reality-behind-aws-latest-announcement\/"},"modified":"2026-10-21T15:49:00","modified_gmt":"2026-10-21T14:49:00","slug":"unplugging-cables-doesnt-create-data-sovereignty","status":"publish","type":"post","link":"https:\/\/upcloud.com\/global\/blog\/unplugging-cables-doesnt-create-data-sovereignty\/","title":{"rendered":"Unplugging Cables Doesn\u2019t Create Data Sovereignty. The Reality Behind AWS\u2019s Latest Announcement"},"content":{"rendered":"\n

What AWS\u2019s disconnection test actually proves<\/strong><\/h1>\n\n\n\n

On 24 October, AWS plans to disconnect its European Sovereign Cloud from its global network backbone for several hours. The service will remain connected to the internet through European providers, while its EU-based team demonstrates that it can operate without AWS infrastructure outside the EU.<\/p>\n\n\n\n

For organisations that depend on those services, that is a useful test. They need evidence that their infrastructure can keep running if connections to systems elsewhere become unavailable.<\/p>\n\n\n\n

But a successful test leaves a central question unanswered: which authorities can require the provider to disclose customer data? Choosing a cloud provider requires balancing three distinct pillars: data location, operational control, and legal jurisdiction. Proof of one does not satisfy the others.<\/p>\n\n\n\n

Where the ownership question comes in<\/strong><\/h2>\n\n\n\n

Keeping data in an EU data center establishes its location. Having an EU-based team operate that infrastructure addresses operational control. Understanding its legal exposure requires examining the companies involved, their obligations and their control over the data.<\/p>\n\n\n\n

The CLOUD Act<\/a> is relevant here. It clarified that providers subject to U.S. jurisdiction can be required, through valid legal process, to disclose data within their possession, custody or control, even when that data is stored abroad. Whether that applies to a particular entity or data held by a subsidiary depends on the facts.<\/p>\n\n\n\n

AWS has established German-incorporated entities and EU-based governance arrangements for its European Sovereign Cloud. These are relevant to that assessment, but the disconnection test does not itself establish how they affect exposure to foreign legal demands.<\/p>\n\n\n\n

Disconnecting a network does not resolve that assessment. Equally, a provider\u2019s European headquarters should not be treated as sufficient evidence of immunity from foreign legal demands.<\/p>\n\n\n\n

For customers, the practical question is how ownership, governance and technical controls work together to protect their data, including when a provider receives a request for access.<\/p>\n\n\n\n

What customers should ask<\/strong><\/h2>\n\n\n\n

If sovereignty is part of your procurement requirements, ask for evidence you can assess alongside the technical demonstrations:<\/p>\n\n\n\n