EU Cybersecurity Procurement Shifts Toward Digital Sovereignty

European technology buyers are increasingly prioritizing digital sovereignty in their cybersecurity procurement, leading to a measurable shift in vendor preference, as The Register first reported. According to sales data from Context reported by The Register, distributor sales in EMEA for cybersecurity products from EU-headquartered vendors surged 35% in the two years leading to calendar Q3 2026.

While U.S.-headquartered companies still dominate the market with 62% of tracked sales, EU vendors grew their share by nearly three percentage points to reach 15%. During the same period, total cybersecurity sales rose 10%, while sales from U.S. firms grew by only 8%.

Context research vice president Joe Turner notes that digital sovereignty is now a primary buying decision, with customers questioning data storage locations, encryption key ownership, and log access. This shift is driven by a loss of trust in the Trump administration, as well as strict EU compliance regimes. Specifically, the Digital Operational Resilience Act (DORA), introduced in January 2025, targets the financial sector, while the NIS2 Directive, transposed into law in October 2024, mandates higher security levels for critical infrastructure.

EU-based vendors have seen significant success in specific niches, capturing 92% of security awareness training, 82% of vulnerability management, and 52% of SIEM and log management sales. In contrast, U.S. firms maintain strong holds on cloud security (54%) and identity and access management (74%).

Challenges remain in the realm of "Sovereign AI." Omdia reports that nearly one-third of AI providers offer no proof of sovereignty, and 80% of contracts state that network resilience is outside the provider's responsibility. Omdia research director Camille Mendler emphasizes that true sovereignty requires more than local hosting, demanding transparent operations and jurisdictional autonomy.