Andorra Digital secures sovereign cloud deals with Google, AWS, Microsoft

**Andorra Digital secures cloud deals with major providers, ensuring data sovereignty through sovereign key system**

Public entities and private companies in Andorra can now access cloud services from international giants like Google Cloud, Amazon Web Services, Microsoft, T-Systems and Oracle at more competitive rates than individual negotiations would offer. Andorra Digital, the public company driving digital transformation, presented the framework on Wednesday during a networking event at the Andorra la Vella congress centre.

Minister for Public Function and Digital Transformation Marc Rossell described the initiative as a "sovereign Andorran cloud" that guarantees users retain full control over their data. Central to the model is a "sovereign key" system, where clients hold an additional encryption key required to access stored information. Providers cannot view the content without this key, which Rossell likened to the multiple locks on the Casa de la Vall safe. Third parties, including the providers themselves, can only gain access through a judicial order.

Rossell emphasised that contracts include strict clauses on data residency, applicable jurisdiction—prioritising European legal spaces—and limits on third-party access. Public administrations must first classify data by sensitivity and criticality to decide placement in public cloud, private cloud or on-premises infrastructure. Encryption applies to data at rest and in transit, with audit trails logging all access attempts. Citizens will eventually be able to check who has viewed their personal information.

The minister addressed concerns raised by Social Democratic councillor Laia Moliné in parliamentary questions, who questioned protections against foreign authorities, citing US laws like the Cloud Act. Rossell insisted the robust legal, technical and organisational framework ensures public entities maintain effective control, with no risk of unauthorised access. He noted that full 24/7 availability is unfeasible with local infrastructure alone due to Andorra's size and costs, making external providers essential.

The deal benefits Andorra's mostly small businesses—95% are small or very small—by enabling joint bargaining without government costs. Access routes through local integrators and partners to build internal capacity and avoid rigid dependencies. Rossell prioritised Andorran firms where possible.

By December 2025, 71% of public entities had joined interoperability systems, reducing administrative burdens and improving data quality for citizens. No overall cost estimate exists for public cloud deployment through 2030, as adoption varies. Recent cybersecurity incidents affecting over 5,000 devices in 2025 relate to general user issues, not Andorra Digital services. Moliné expressed surprise at the lack of detailed future costs and warned of technological dependency, calling for greater transparency.