A stalled tender is the first big test of whether 'digital sovereignty' (keeping state data, encryption keys, and source code under Irish or EU control) is a real procurement condition, or just talk.
Ireland has paused a Microsoft procurement worth up to about €1 billion (roughly $1.1 billion at recent exchange rates) and given a one-line reason: "matters of concern from an interested party." The pause, first reported by The Register, is the first large-scale test of whether "digital sovereignty" can block a deal in practice rather than just decorate a speech.
Dublin's Office of Government Procurement cancelled the framework on 29 June, and Minister for Public Expenditure Frankie Feighan confirmed the decision in the Dáil on 7 July. The replacement tender, still Microsoft-only, is intended to be published "as early as is feasible," but only after the OGP reviews scope and specification. As of the Dáil exchange, the complainant and the specific concern remain unnamed.
"Digital sovereignty" is the policy hinge. Translated into procurement terms, it covers five things a state buyer can demand: where the data physically sits, who can access it under foreign law, whether the customer holds encryption keys that work without the vendor, whether the customer can keep operating the systems if the vendor pulls or is forced to pull, and whether source code is held in escrow so the state can rebuild. Each of those is a contract clause, not a slogan.
The framework under review is the planned successor to ISW023F, a Microsoft-only renewals and additional-licences framework valued at €350 million (about $385 million) that was awarded on 29 September 2023 and expires in September 2027. The published OJEU contract notice sets out the original scope. Because the existing contract runs for another 14 months, the pause is leverage, not a walk-away: Ireland can reshape the next tender, ask for contractual concessions, or split the lot without breaking service continuity.
The €750 million to €1 billion figure is a parliamentary estimate, not an OJEU-published value band. Social Democrats deputy leader Cian O'Callaghan cited the range in the same Dáil exchange; the OGP has not published an official estimate.
The European backdrop is what makes the pause read as more than a procurement footnote. The European Commission has proposed rules that would require public buyers to weigh sovereignty in tenders and to favour open source where it meets functional needs. Gartner, as cited by The Register, projects EU sovereign-cloud investment to roughly triple over five to seven years; European providers hold roughly 15 percent of regional cloud infrastructure. Most of the public-sector cloud stack still runs on US hyperscalers, and Brussels wants the curve to bend.
European precedents already show what binding sovereignty looks like, according to prior Register reporting. Schleswig-Holstein migrated 30,000 staff from Microsoft to LibreOffice, Linux, Thunderbird and Open-Xchange, saving more than €15 million a year (about $16.5 million). The French Gendarmerie Nationale moved more than 100,000 desktops to Linux for roughly €500 million (about $550 million) in savings over 15 years. Airbus is migrating about 70 critical workloads from AWS to French provider Scaleway. The named open-source suite — LibreOffice, Collabora Online, Open-Xchange, Nextcloud, Thunderbird, and Germany's openDesk from ZenDiS — is now credible at scale.
Ireland's timing amplifies the stakes. Dublin currently holds the rotating presidency of the Council of the European Union, so the OGP's review will be read as a signal of how seriously the Council takes its own proposed procurement rules. A complaint-driven pause, with the complainant unnamed, is a softer lever than a sovereignty-led rewrite. The Dáil transcript leaves both readings open.
The next dates to watch: the OGP's revised tender notice, expected later this year, and the European Commission's timetable for the proposed procurement rules. If the new Irish framework lands with data-residency, key-escrow, exit-rights, and source-code-escrow clauses, the pause becomes a template. If it lands looking much like the 2023 contract under a new number, "digital sovereignty" will have been tested and found, in this case, to be talk.