What’s Happening
SAP and S3NS, the trusted cloud joint venture between Thales and Google Cloud, have announced a strategic partnership to deliver SAP RISE private cloud edition on S3NS’s SecNumCloud-qualified infrastructure platform, PREMI3NS. The offering is expected to be commercially available by H2 2026. Thales is the inaugural customer, committing to a full ERP landscape refoundation on the platform across finance, supply chain, manufacturing, and procurement. The deal positions French-jurisdiction, sovereignty-aligned cloud infrastructure as a credible production destination for regulated enterprise workloads, not merely a compliance workaround.
The Bigger Picture
This announcement is worth more than a routine cloud partnership notice. It sits at the intersection of three converging pressures in the European enterprise market: regulatory tightening, accelerating AI adoption, and a growing appetite for cloud transformation in sectors that have historically been locked out of public hyperscaler infrastructure. The outcome matters for any organization operating under GDPR, the NIS2 directive, or sector-specific French regulations, and it sends a signal well beyond France’s borders.
Sovereignty Is Graduating from Niche to Requirement
For years, digital sovereignty in cloud procurement has been discussed as a preference or a risk mitigation posture. This deal treats it as a first-order architectural requirement. SAP’s decision to certify RISE private cloud edition on SecNumCloud-qualified infrastructure is not a minor configuration variant. It is a deliberate extension of SAP’s core enterprise transformation offering into a regulatory tier that previously had no credible hyperscaler-grade solution.
The SecNumCloud qualification from ANSSI (France’s national cybersecurity agency) is one of the most demanding cloud trust certifications in Europe. Few providers have achieved or pursued it. S3NS’s architecture is specifically designed to address the extraterritorial risk problem, meaning that data processed and stored on PREMI3NS remains under French jurisdiction and is structurally insulated from non-European legal demands. For defense contractors, aerospace firms, critical infrastructure operators, and public administration bodies, this is not a comfort feature. It is frequently a procurement prerequisite.
Thales choosing to migrate its own ERP landscape to this platform carries particular weight. The company is simultaneously the controlling shareholder of S3NS and a globally recognized authority on cybersecurity and data protection. When a group with €4.5 billion annually in R&D and deep sovereign technology expertise bets its own core business processes on a platform, the market reads that as genuine technical validation, not a marketing arrangement.
What This Means for IT Decision-Makers in Regulated Sectors
For ITDMs in aerospace, defense, critical infrastructure, and French public administration, the practical implication is direct: the argument that “cloud transformation requires regulatory compromise” has become harder to sustain. SAP RISE on PREMI3NS offers the same clean core ERP architecture, Business AI capabilities, and innovation roadmap as the standard RISE offering, but inside a trust boundary aligned to French and European regulatory expectations.
The economics of this matter. Historically, regulated organizations faced a binary choice: accept the regulatory risk of mainstream hyperscaler deployments, or build and maintain bespoke private infrastructure that lagged years behind in capability. A commercially available, sovereign-aligned offering from SAP and S3NS collapses that choice into a single procurement decision. The total cost of maintaining regulatory compliance while sustaining ERP modernization is the relevant comparison point, and that equation shifts meaningfully when a sovereign cloud option becomes industrialized rather than custom-built.
ITDMs evaluating this should track the H2 2026 commercial availability date closely. S3NS already serves more than sixty customers and has 30 managed services in production with 30 more planned in the next 12 months. That trajectory suggests the platform is not in early-stage development. The Thales deployment, which spans finance, supply chain, manufacturing, and procurement, will be the operational proof point the market will watch.
What This Means for Developers and Architects
For technical teams, the “clean core” framing is the detail worth unpacking. SAP’s clean core principle pushes customizations out of the ERP core and into well-defined extension layers and side-by-side processes. Adopting this principle during an ERP migration on PREMI3NS means Thales’s development teams are simultaneously rearchitecting for long-term maintainability and adapting to a sovereign cloud environment. That is a non-trivial dual constraint.
The inclusion of SAP’s Business AI capabilities and the planned availability of Vertex AI services on S3NS’s platform is architecturally significant. AI workloads in regulated environments have faced the same trust barriers as the underlying ERP infrastructure. If AI inference and training pipelines can run on SecNumCloud-qualified infrastructure with full data residency guarantees, that opens deployment patterns that were previously unavailable to French defense and public sector organizations. According to ECI Research’s 2025 AI Builder Summit survey, 44% of enterprise AI leaders have only moderate confidence that AI agents can act autonomously without human intervention, and sovereign infrastructure constraints compound that hesitancy in regulated contexts. A trusted cloud with AI capability built in could address both the technical and governance dimensions of that concern simultaneously.
ECI Research data also shows that 70.9% of organizations source agentic AI capabilities through platform vendors rather than building them primarily in-house. The practical implication is that SAP’s role as the AI capability vendor within a sovereign wrapper is well-matched to how enterprise buyers actually procure. Organizations that rely on SAP for ERP are also likely to consume SAP’s AI features as bundled capabilities, which makes the sovereignty layer on the platform, rather than on individual AI services, the correct architecture for this population.
Competitive Positioning and Market Dynamics
This partnership puts competitive pressure on other major ERP and cloud providers operating in France and watching European regulatory trends closely. The combination of SAP’s market position in enterprise applications and S3NS’s SecNumCloud qualification creates a credentialed reference that competitors will need to match or explain around. Microsoft, Oracle, and other enterprise software vendors with European regulated sector exposure will face customer questions about equivalent sovereign deployment options.
The Google Cloud technology base underneath S3NS is relevant here. S3NS is incorporated under French law and controlled by Thales, which satisfies the jurisdictional requirements. But the underlying infrastructure retains access to Google Cloud’s global capability roadmap. That architecture, a trusted French legal wrapper over world-class cloud engineering, is the design pattern that makes this offering commercially viable rather than technically inferior. For regulated organizations that have watched sovereign cloud options historically underdeliver on performance and feature parity, the Google Cloud lineage may address a persistent objection.
What’s Next
Near-Term: The H2 2026 Milestone Is a Market Test
The H2 2026 commercial availability date is the immediate inflection point. If SAP delivers the full RISE private cloud edition on PREMI3NS on schedule, with the Thales deployment as a visible proof of concept, the addressable market expands rapidly. French public sector bodies operating under sensitive data mandates, aerospace and defense contractors in the Thales ecosystem, and operators of vital services classified under French critical infrastructure regulations will all have a credible path to ERP modernization that was previously unavailable.
We expect S3NS to use the period between now and H2 2026 to continue expanding its managed services catalog and onboarding additional ISV partners. Sixty customers and thirty managed services is a real foundation, but enterprise organizations running complex ERP programs require a broad ecosystem. The pace of partner additions over the next 18 months will determine whether this remains a specialized offering or becomes the default architecture for regulated cloud adoption in France.
Medium-Term: The European Sovereignty Template
France is not the only European market under regulatory pressure. Germany’s BSI has its own certification frameworks, the EU’s Gaia-X initiative continues to evolve, and NIS2 creates new compliance obligations across member states. The SAP-S3NS model, a major software vendor partnering with a jurisdiction-controlled cloud operator backed by hyperscaler infrastructure, is a template that other European markets will consider adapting. ECI Research data shows that 52% of organizations now prioritize sovereignty initiatives. That number will grow as regulatory requirements tighten and as announcements like this one demonstrate that sovereign cloud can deliver at enterprise scale without meaningful capability compromise.
For SAP, this is also an AI monetization play with a long runway. The organizations most likely to adopt RISE on a sovereign cloud platform are exactly the organizations with the most complex compliance requirements around AI-generated outputs. Embedding Business AI within a sovereignty-aligned deployment model positions SAP to capture AI adoption spend in a regulated segment that would otherwise have been deferred indefinitely.
