Weighted Score:
63
High sovereignty because Dutch-controlled retailer; EU governance strong, but data-stack and supply-chain dependencies reduce sovereignty.

Company name: Coolblue B.V.
URL: https://www.coolblue.nl
eurotechguide review(s): Not reviewed

Digital services offered: Shopping
Criterion Score Short Assessment Long Rationale
SOV-1 (strategic) 4 Dutch-controlled company. Coolblue B.V. is headquartered in Rotterdam (NL) with decisive authority and shareholders anchored in the EU. → SEAL-4.
SOV-2 (legal) 4 EU jurisdiction. Dutch/EU law governs Coolblue’s operations and contracts; no US parent ownership. → SEAL-4.
SOV-3 (data & AI) 2 Data processing relies on AWS/GCP hyperscaler infrastructure. → SEAL-2 Coolblue’s infrastructure depends on US hyperscaler cloud services, including AWS services (e.g., Amazon EC2 and CloudFront) for hosting and compute across its platform. Core runtime, scaling, and operational resilience are not structurally insulated from non-EU cloud dependencies under SOV-3 criteria. → SEAL-2
SOV-4 (operational) 2 EU-run operations. Coolblue’s infrastructure is built on AWS (and partly GCP), making core runtime, scaling, and operational resilience dependent on non-EU hyperscaler services. Although engineering and support functions are EU-based, the service cannot operate independently of foreign cloud vendors. This constitutes material non-EU operational dependency under SOV-4. → SEAL-2
SOV-5 (supply chain) 2 AWS-dependent infrastructure and globally sourced hardware. Coolblue’s platform relies on AWS and partly GCP for infrastructure, while retail and logistics hardware are globally sourced. Core components of the technology and operational supply chain are not EU-controlled, creating material non-EU dependencies under SOV-5. → SEAL-2
SOV-6 (technological) 2 Proprietary commerce stack; global cloud and platform dependencies. Coolblue’s core platform is proprietary and depends on globally governed cloud and device ecosystems. Independent audit and modification rights are limited, and third-party service layers introduce material lock-in, constraining SOV-6 technology sovereignty. → SEAL-2
SOV-7 (security) 2 EU operator; hyperscaler-dependent security layers. Coolblue operates under EU law but depends on global cloud and tooling ecosystems for security posture, limiting sovereign EU control over key layers. → SEAL-2
SOV-8 (environmental) 3 Strong initiatives and reporting; limited infrastructure efficiency metrics. Coolblue publishes a Yearbook and “Go Green” initiatives with measurable actions (delivery emissions reduction, electrification). Yet SOV-8 emphasizes verifiable operational footprint and resource metrics across the full digital service/infrastructure stack; disclosures are meaningful but not data-center efficiency oriented. → SEAL-3

The scoring is done according to the Cloud Sovereignty Framework (v1.2.1 , October 2025). The scores are determined based on publicly available information, but something may have been missed. In case you want to challenge the score or submit a new digital service, click here