Guides

European technology alternatives

Europe is losing the technology race, and enterprise shortlists are one of the reasons. Every alternative here is assessed on merit, verdict included.

There are two arguments for choosing European technology, and the weaker one gets made far more often. The defensive argument is about jurisdiction — what the US CLOUD Act reaches, and which of your systems genuinely cannot sit under it. It is real and worth getting precise about, but it only moves organisations that already have a compliance problem.

The stronger argument is competitiveness. Draghi’s report attributes Europe’s productivity gap with the United States mainly to technology, records that no EU company worth over €100 billion has been built from scratch in fifty years, and notes that the largest European cloud operator holds 2% of its own home market. That last figure is not an engineering verdict. It is what tens of thousands of default shortlists add up to.

So these guides do two things: set out the legal position precisely enough to classify your own estate against it, and assess specific alternatives on merit. Both matter, and the second matters more — a vendor propped up by sympathy purchases learns nothing, and an industry built on them does not become competitive.

Each entry carries a verdict: adopt, adopt with caveats, a partial answer, or not yet. They are not all favourable. Two argue against the popular answer — GitLab.com does not solve jurisdiction, and Proton Docs is not ready to carry an organisation — and one assesses our own product, with that conflict stated on it. A list where everything is recommended is a list nobody should trust.

European is not the same as EU

We use European in the broad sense: companies headquartered and owned in Europe, including the UK, Switzerland, Norway and Ukraine. That is the right frame for both arguments. US jurisdiction follows whether a company is American, not whether it is in the single market — and a European technology industry that wrote off London, Zurich and Kyiv would be competing with one hand tied.

CategoryWhat it meansExamples here
EU / EEAThe legal set that GDPR, data-residency clauses and public procurement rules refer to.Mistral (FR), Clever Cloud (FR), Pitch (DE)
European, not EUOutside US jurisdiction, but not inside the EU. Usually covered by an adequacy decision, which is reviewed periodically rather than permanent.Proton (CH), Attio (UK)
European reputation, US companyFeels European, is legally American. Does not answer the jurisdiction question at all.GitLab Inc. (US)

If your own policy says "EU/EEA", read it literally — Switzerland and the UK do not satisfy it as written, however good the vendor. If your requirement is really "not under US jurisdiction", say that instead, and the field of options widens considerably.

The alternatives, assessed

Alternative Replaces Jurisdiction Verdict
Proton Mail (Proton for Business) Gmail / Google Workspace mail, Microsoft 365 Exchange Online Switzerland — outside the EU, but with an EU adequacy decision and no CLOUD Act exposure Recommended
Mistral AI (La Plateforme, Le Chat) OpenAI ChatGPT / API, Anthropic Claude France — EU, no CLOUD Act exposure Recommended with caveats
GitLab (self-managed) — or Codeberg / Forgejo for a European vendor GitHub, GitHub Enterprise Cloud GitLab Inc. is US-incorporated; Codeberg e.V. is German Recommended with caveats
Proton Docs Google Docs / Workspace, Microsoft 365 Switzerland — outside the EU, but with an EU adequacy decision and no CLOUD Act exposure Not yet
Attio HubSpot CRM, Salesforce Sales Cloud United Kingdom — outside the US, outside the EU, covered by a UK adequacy decision Partial answer
Pitch Microsoft PowerPoint, Google Slides Germany — EU, no CLOUD Act exposure Recommended with caveats
Clever Cloud AWS, Microsoft Azure, Vercel, Heroku France — EU, European-owned, no CLOUD Act exposure Recommended
TransformRadar monday.com, Asana, Microsoft Project; overlaps with Planisware EU — hosted in Paris on Clever Cloud, European-owned infrastructure Recommended with caveats

Reviewing a shortlist?

Two things worth doing properly: classify per workload what must be European and what can be risk-accepted, and make sure a European option got a fair hearing in the evaluation rather than a polite mention. Both are quick, and both are more defensible than a blanket policy in either direction.

thomas@thejn.dk +45 2048 3147

Copenhagen, Denmark · Nordic coverage · Independent & platform-agnostic