Anmeldung Registrierung
Auto Hell Dunkel
Erweiterte Suche
  1. Startseite
  2. Podcasts
  3. Sarah's Tech Podcast

Episoden

Dieser Podcast wird gerade aktualisiert – wir suchen nach neuen Episoden …
49 Minuten
Episode 18: Who Owns the Wire

One question, two halves. Who moves your posts around and decides who sees them — and who is allowed to read what you send privately. W Social is sold as Europe's answer to X. It stores your data in the EU and rents distribution, visibility and identity from an American company. We asked. We got a form letter. Europe owns the logbook. America owns the wire.

In this episode:

00:00 Cold Talk & Housekeeping. Six questions, one automated thank-you — and what we are deliberately not repeating from a single-source blog post.

03:53 On the Record. Venice, 8 September: Alex Gibney's four-hour "Musk", the forty-million-dollar non-disclosure agreement Ashley St. Clair says she turned down and Musk denies offering, and the synthetic Musk built because the real one refused the interview.

08:14 W Social — like a fixed "X"? The four layers of the protocol, in plain language: the logbook, the wire, the newsroom, the register. Which one W Social actually operates, and what the European Commission's own account resolves to.

14:55 The Questions to W Social. Six questions, an autoresponder, no press contact — and the numbers nobody will confirm. Then Eurosky as the opposite shape, the objection from the Fediverse, 232 gigabytes a day, and why liability decides who can run infrastructure at all.

27:02 Hall of European Tech: GSM. Copenhagen, September 1987. Fifteen operators, thirteen countries, one standard — and the hundred and sixty characters that shaped how a planet writes to each other.

30:32 Chat Control. Two different laws with one nickname. The exception that lapsed on 3 April, and the July vote where 314 against was not enough because rejection needed 360.

36:32 Canada — Chat Control, but different. The Lawful Access Act does not scan anything. It legislates access. Introduced in March, through the elected chamber by June.

40:49 Where Do We Land? Europe keeps buying the label instead of the layer — and the two hosts do not agree about what happens next.

45:05 Outro and closing song, full length at sarahs-tech.eu/?seite=song.

Key Takeaways:

Storage Is Not Infrastructure: W Social's logbook really is in the EU. Distribution, timelines and identity are not. Sovereignty was bought where it is cheap and given away where the power sits.

The Register Is the Concentrated Point: Every account's permanent identifier lives in a directory operated by an American company — including the European Commission's. It was named after the word "placeholder" and it is still running.

Decentralisation Has an Invoice: Listening to this network means receiving all of it. The lightweight alternative works by removing the cryptographic signatures — the cure for the machine load is a middleman you have to trust.

Europe Wins With Standards, Not Champions: GSM was a committee document plus an obligation to implement it, and it beat everybody. Nobody has ever announced a relay from a stage in Davos.

Both Fences Are Definitions, Not Prohibitions: Brussels exempts encryption "for now". Ottawa promises no systemic vulnerability — for services, not devices. Definitions get reinterpreted; prohibitions have to be repealed.

Links & Sources (all at sarahs-tech.eu): the infrastructure diagram for this episode at sarahs-tech.eu/media/atproto-anatomy-en.html · check the register yourself at plc.directory — resolve ec.europa.eu to did:plc:oxo226vi7t2btjokm2buusoy and read the service endpoint · W Social's legal notice at wsocial.eu/public/imprint-w-social and the company's own LinkedIn promotion of the State of the Union stream · infrastructure comparison of W Social, Bluesky and Eurosky at mrak.at · Elena Rossini's reporting on W Social, the June rate-limiting and the migration of EU institutions at blog.elenarossini.com · the user-count figures quoted in the episode come from a single German blog post of 7 September 2026 at metacheles.de, which we could not verify independently and whose further allegations we do not repeat · eurosky.tech and the Modal Foundation on shared moderation infrastructure · firehose volumes and the lightweight stream at jazco.dev and atproto.com/blog/jetstream · chat-control reporting including the July roll call at netzpolitik.org · Canada's Bill C-22 at parl.ca/legisinfo · the GSM memorandum of September 1987 at gsma.com · previous episodes: Ep. 17 "This Is European Tech" and Ep. 16 "The Kill Switch Is Not Where You Think".

Disclosure: Sarah Vailby is a synthetic host, AI-generated and disclosed in every episode under the AI Act's transparency rules. Markus works in web hosting; nothing here reflects an employer's position — and he wrote positively about W Social in spring 2026, which is said on air. The forty-million-dollar offer is Ashley St. Clair's account; Musk denies it was made. The user numbers rest on one unverified source and are labelled as such in the episode. Source state 19 September 2026; the chat-control negotiations and the Canadian bill were both moving at the time of recording.

Feedback: Go and find out where your logbook is kept — and who runs the wire it travels on. Write to feedback@experten-system.de.
46 Minuten
Episode 17: This Is European Tech

Forty-one European tech shares, fixed on paper on 31 August. This episode asks the only question that basket was ever built to answer: how much of it is actually European? Not where the office is — where the listing is, where the capital came from, and who holds control. Nine names come through without a footnote.

In this episode:

00:00 Cold Talk & Housekeeping. The song now has a video, and the basket has a birthday.

06:08 On the Record: Automattic. The board vote of 9 September that pushed Matt Mullenweg out of the CEO chair, the CFO as interim, the Slack messages, and the reversal by the weekend. Under the gossip: what it means when a company and an open-source project share one person. Source state 13 September 2026 — this one moved daily.

12:15 The Basket. What we put in it, how positions were picked, and why it is a paper basket and not a recommendation.

15:25 Nine of Forty-One. The test applied — listing venue, capital origin, voting control — and who survives it intact.

20:40 Four Patterns, Not One Story. The thirty-two do not fail the same way. Four distinct patterns, and only one of them is a problem worth losing sleep over.

24:15 The Nvidia Test. Nvidia and Hugging Face as a live case, with merger review open in Europe and the United States. Run against the basket: who is buyable, who is not, and what protection actually consists of.

31:34 Hall of European Tech. September 1991, a student in Helsinki, a newsgroup post, and the most consequential European software project nobody incorporated.

32:48 Markus Derails. The IFA in Berlin, formerly the Internationale Funkausstellung — what a consumer electronics fair still tells you about a continent's relationship with its own technology.

35:10 The Case Against Sarah. Ownership is not the same as control, indices are not economies, and a basket fixed on one day proves less than it looks like.

38:26 What To Take Away. What this changes for anyone buying, building or selling European technology.

41:48 Closing Song. "Europe On The Wire" — now with a video, full length at sarahs-tech.eu/?seite=song.

Key Takeaways:

European Is a Listing Question, Not an Address: Most of the basket is headquartered in Europe. Considerably less of it is owned and governed there.

Four Failure Modes, Not One: A US listing, US growth capital, a foreign parent and a dependency on foreign infrastructure are different problems with different fixes. Collapsing them into one complaint is why the debate goes nowhere.

Acquirability Is the Real Test: The question is not who owns a company today. It is what happens the morning an American buyer shows up with a number.

Governance Beats Ownership: A founder with the votes still lost the chair for three days. Structure is not the same thing as safety — which is the Automattic story and the basket story at once.

Links & Sources (all at sarahs-tech.eu): the full basket with ISINs and the 31 August fixing at markus.technology/the-basket · Matt Mullenweg's own site ma.tt · automattic.com and wordpress.org · the Nvidia–Hugging Face announcement and the EU and US filings · kernel.org for the Linux anniversary · ifa-berlin.com · previous episodes: Ep. 11 "The Imaginary ETF" and Ep. 16 "The Kill Switch Is Not Where You Think".

Disclosure: Sarah Vailby is a synthetic host, AI-generated and disclosed in every episode under the AI Act's transparency rules. Markus works in web hosting; nothing here reflects an employer's position. The basket is a documentation exercise, not investment advice, and neither host holds a position in it. The Automattic segment reflects reporting as of 13 September 2026.

Feedback: Build your own basket. Which European tech company would still be European after a serious offer from California — and what exactly would stop it? Write to feedback@experten-system.de.
31 Minuten
Episode 16: The Kill Switch Is Not Where You Think

A server in Italy stayed powered on the whole time, and the website on it vanished anyway. This episode follows what actually broke — the name first, then the money — and why a European hoster's liability privilege was worthless the moment pressure arrived from underneath it.

In this episode:

00:00 Cold Talk & Housekeeping. The December deadline for machine-readable marking under Article 50(2), Nvidia's roughly $13bn Hugging Face agreement as an answer to last episode's ROI question, and the date the imaginary ETF basket was fixed.

03:08 The Server Is Fine. Powered on, unreachable. Nothing on the machine failed.

04:40 What Actually Happened. The 26 August SDGT designation under EO 13224, the allegations, the denial, why a sanctions listing is not an FTO designation, plus the wind-down clock.

08:20 Anatomy of a Shutdown. Four layers: name, money, reach, certificates. The .org registry sits under US contracts, and an Italian bank suspended an Italian account over secondary sanctions risk. Who set the domain hold stays open, because it is.

12:45 Two Legal Orders, One Server. The DSA privilege assumes notice, response, eventually a court. A designation is an executive determination. The collective still holds the privilege — it is simply worthless.

16:15 What If We Just Said "No"? Article 48 GDPR says refusing a US data demand is correct. E-Evidence gives European prosecutors ten days, or eight hours in emergencies. No equivalent exists across the Atlantic.

20:25 The Case Against Me. Sarah's rebuttal: an extreme case, diversification that manufactures fragility, and infrastructure that cannot be switched off for bad reasons cannot be switched off for good ones.

22:37 What To Take Away. Draw the real map, know which link goes first, make the cheap changes not the dramatic ones.

27:00 Outro Song. "Europe On The Wire" (Eurodance mix) — like the host, mainly synthetic.

Key Takeaways:

Hosting Is the Last Layer, Not the First: The name went first, the bank account second. Server location was never the exposed part.

Sanctions Work Through Third Parties: Make staying riskier than leaving and everyone leaves unprompted — including a bank that objected publicly while doing it.

The Privilege Assumes a Procedure: Europe established that a hoster is not the judge of its users. It never addressed the hoster as defendant, without a trial.

The Difference Is Reach, Not Rigour: The EU terror list is a Council decision, not a court ruling. But an EU listing cannot take an American host offline. The reverse works.

Sources (links at sarahs-tech.eu): the Treasury and State Department announcements of 26 August 2026, OFAC General Licence 36, the collective's response, Banca Etica's statement of 1 September, DSA Articles 4–9, Article 48 GDPR, Regulation (EU) 2023/1543, AI Act Article 50.

Disclosure: Sarah Vailby is a synthetic host, AI-generated and disclosed in every episode under the AI Act's transparency rules. Markus works in web hosting; nothing here reflects an employer's position. Neither host has seen the evidence behind the designation, and both the allegations and the origin of the domain hold are left unresolved on purpose.

Feedback: Draw your own map. Which top-level domain, which registrar, which payment provider, which certificate authority — and how many answer to a jurisdiction you did not choose? Has anyone changed a supplier over this, or is it a slide? Write to feedback@experten-system.de.
30 Minuten
Episode 15: Everywhere but in the Statistics | Why the AI Payoff Is Late, Where It Will Land, and Why Europe Isn't Last

Everyone bought the technology. Almost nobody can show the return. That sounds like a scandal — until you notice it already happened once, with beige boxes in the eighties. This episode traces the rerun: from a Nobel laureate's complaint to a French terminal that worked too well, from a dialer on a magazine CD to the five doors where small firms actually make money. Plus the studies that put a stopwatch on it, and the honest test for whether a big European programme will fly or build a perfect machine for a future that never arrives.

In this episode:

00:00–00:50: Cold Talk. Sarah asks Markus whether she makes him more productive. He says thirty percent. She points out that in Episode 8 he said forty — and that agents don't forget. Measured, or a feeling? A feeling. That gap is the show.

00:50–03:55: Everyone Buys, Nobody Earns. The disclosure, then the numbers. In American surveys, ninety-seven percent of executives report rolling out AI agents in the past year and half the workforce uses them, with frontrunners describing one human working alongside five agents. And the other column: fewer than a third of organisations see significant return from generative AI, under a quarter with agents, seventy-three percent of CEOs stressed by their own AI strategy, and near-universal reports that AI sprawl has itself become a security problem. Markus asks who counted this, and Sarah answers straight — vendor studies, from companies with something to sell; the direction is corroborated, the digits deserve care. Which sounds like failure, unless you've seen the film before.

03:55–05:45: We've Been Here Before. 1987, Robert Solow: you can see the computer age everywhere except in the productivity statistics. A decade of corporate computer purchases, flat numbers, and the same question people ask now — what's the point? The payoff arrived mid-nineties. Why so late: the machines were the cheap part, and the expensive part was invisible. Rebuilding processes, training people, getting the data in order — all of it books as cost and none of it books as return, until the organisation has rearranged itself around the machine and the curve jumps. Economists call it the productivity J-curve, and it flips today's story: the twenty-nine percent ROI isn't failure, it's the bottom of the J. Which makes European data-cleaning either the invisible half of the curve — or the most comfortable excuse ever invented.

05:45–07:38: What Is Our Minitel? Before the internet reached households, Europe already had online services: BTX and later Datex-J in Germany, Prestel in Britain, Minitel in France — a terminal given away with the phone line, doing timetables, banking and messaging in the eighties, in millions of French homes. The easy version of this story says Europe failed. Sarah slows it down: Minitel didn't fail, it worked, and that was the problem. France had something functioning and had to abandon it to get something better; Germany's BTX simply flopped, which was the cheaper lesson. The real trap isn't being slow — it's owning a functioning closed system, because whoever owns one switches last. So the question isn't why Europe is slow. It's what our Minitel is today.

07:38–11:15: The Dialer Moment. How the internet actually reached German households: not through better technology, through a CD. AOL and CompuServe opened the American internet to consumers, and 1&1 took a dialer originally built for the BTX world and used it to sell internet access, stuck on CDs in magazines, millions of them. The new thing arrived through the old thing's pipe, and nobody at a ministry planned it. The question for today: where is the dialer moment for AI, and who takes agents out of enterprise pilot projects and puts them on the small company's desk? Markus discloses that hosting companies were that channel last time and that he works in the industry — not neutral, hopeful. Then the field test: eustella, a Viennese agent platform launched in June, running open-weight models it operates itself on IONOS servers in Berlin and Frankfurt. Sarah spots the pattern from last episode one floor up — Europe supplies the building and the operations, the intelligence is imported, and only one name on the model list is European. Markus counters that open weights are downloaded files nobody in California can switch off. The honest price tag: noticeably slower. The insurance premium, payable in seconds per answer.

11:15–13:30: Sarah Attacks the Analogy. Quality control, because the episode has been comfortable for Markus so far. Problem one: retrospective analogies only quote winners — nobody says the return on 3D television is still hiding, or the Segway. The test that separates a J-curve from a dead end: unit costs falling, usage rising anyway, and companies investing in the boring complements, all three at once. AI currently passes all three, which means the analogy survives — but it survives a test rather than getting waved through. Problem two is bigger: the PC was owned, and every model today is rented. Prices change, terms change. A company that rebuilds itself around a subscription hasn't built a capability, it's built a dependency with good marketing. The fix: build so the model is replaceable. Your data, your process, your judgment are yours; the model is a supplier, and suppliers get swapped.

13:30–17:00: Where the Money Actually Lands. Why corporations are the wrong place to look — for them AI cuts costs, and cost advantages get competed away; they've also run machine learning for decades, the way they still run COBOL in the basement. For small firms something different happens: a barrier falls, and work that required a minimum size no longer does. Five doors. The long tail of jobs whose fixed cost per job was too high. Vertical micro-software, where the moat isn't code but knowing how farriers actually bill. Buying instead of building — firms without successors trading at three or four times annual profit, whose backlog can be run with agents instead of back-office hires; arbitrage with an expiry date. The data you already own, fifteen years of quotes with win rates that no model has. And physical capacity, in care, warehouses and the trades, where the shortage is hands rather than orders. Then the cold water: if everyone has the same tool, prices fall and the customer keeps the gain. Wealth forms where something stays scarce.

17:00–20:40: What the Researchers Can Measure. The gold standard explained plainly — the randomised controlled trial, where a coin flip decides who gets the AI and a control group works without. Over five thousand support agents: fourteen percent more resolved cases per hour. Three field experiments at Microsoft, Accenture and a Fortune 100 company with nearly five thousand developers: about twenty-six percent more completed tasks. Against it, the study from Episode 8 — experienced developers nineteen percent slower while feeling faster, with the honest footnote that it used early 2025 tools and the researchers now call the result historical. The reconciliation is the actual finding: novices gained roughly a third, veterans barely; below-average consultants gained over forty percent, the stars seventeen. AI is a leveler, not an amplifier — everyone's floor rises, nobody's ceiling moves, which is why the competitive advantage evaporates. And the dark side: beyond the frontier of what the machine is good at, consultants were nineteen percentage points more often wrong. The jagged frontier drops off a cliff that's invisible from where you're standing. Finally, what nobody has measured: RCTs with real agents are only starting, in narrow corners like security operations. Open-ended collaboration across days and documents hasn't seen a stopwatch. Unmeasured is not the same as disproven.

20:40–24:45: When Big Programs Work. Whenever Europe feels behind, someone announces a programme — and the cheap opinion that they always fail dies on Airbus. Four cases: Japan's Fifth Generation Computer Project, which delivered its machines while the world went to cheap standard processors and later statistics instead of logic — a perfect machine for an AI that never arrived. Airbus, a plane ordered by state airlines against a known competitor. Galileo, expensive and late but up there. And Gaia-X, the German-French answer to the hyperscalers that turned into working groups, whose sharpest exit line came from a French cloud CEO describing American members blocking every step toward a vendor-neutral model — with Palantir a member from day one. From four cases, four questions to ask any programme: thing or framework, committed buyer or none, who's on the invitation list, and whether the risky bet is on technology or on demand. Applied to the AI gigafactories: thing yes, anchor demand yes, invitation list unknown, technology bet open — concrete lasts thirty years, the chips inside last five. Plus the fairness note: Gaia-X's platform ambition failed, but the portability standards survived, which is exactly what makes dependencies cancellable.

24:45–26:20: Let's Land This. One thought each. Sarah: the ROI debate is premature rather than settled, because the open kind of agent collaboration hasn't been measured — ask again in three years. Markus: Europe wasn't last during computerisation and isn't last now, but the wins never came from the podium. A chip in a school computer, a phone standard, a physicist's side project. Less envy of American numbers, more attention to the unglamorous things Europe is already good at. And the question to the audience: what is today's version of that school computer chip — and which of the five doors is yours?

26:20–30:08: Outro Song. "Europe on the Line (Sarah's Tech)" — like the host, mainly synthetic: the track was produced primarily with AI.

Key Takeaways:

The Solow Paradox Is Repeating: A general-purpose technology pays off only once the organisation has rearranged itself around it. The machines are the cheap part; processes, training and data are the expensive invisible part, and they book as cost for years before anything books as return.

European Slowness Might Be the First Half of the J-Curve: Cleaning up data before deploying is exactly the complementary investment the curve predicts. Might — because it's also the most comfortable excuse available, and the claim has to pass a test rather than be assumed.

The Minitel Lesson Isn't About Speed: France's terminal system didn't fail, it succeeded — and that's why the switch was hard. Whoever owns a functioning closed system switches last.

Last Time the Breakthrough Was a Distribution Channel: Not better technology. A dialer built for the old system, stuck on CDs in magazines. The open question is who plays that role for agents in the small-business market.

AI Is a Leveler, Not an Amplifier: Novices and below-average performers gain most; the already-excellent gain little and can even lose time. Everyone's floor rises and nobody's ceiling moves — which is why the competitive advantage gets competed away, and why the return lands on whatever stays scarce.

The Jagged Frontier Is the Real Risk: Machine ability doesn't fade gradually, it drops off a cliff — and the cliff is invisible from where the user is standing. Confidence stays constant on both sides of it.

Unmeasured Is Not Disproven: The famous trials all randomise chatbot access. Agentic collaboration across days and shared documents has barely been studied, so the ROI question is open rather than answered.

Big Programmes Fail for Identifiable Reasons: Airbus flew; Gaia-X didn't. Ask whether it builds a thing or a framework, whether a buyer is committed on day one, who is on the invitation list, and whether the risky bet is on a technology direction or on demand.

Sources & Further Reading

The stopwatch studies

Brynjolfsson, Li & Raymond — "Generative AI at Work" (NBER 31161): the customer support trial, published in the Quarterly Journal of Economics, including the distribution of gains between novices and veterans.

Cui, Demirer, Jaffe, Musolff, Peng & Salz — three field experiments with software developers: Microsoft, Accenture and a Fortune 100 company, 4,867 developers combined.

METR — measuring the impact of early-2025 AI on experienced open-source developers: the study behind the nineteen percent slowdown. Note the researchers now treat this result as historical.

Dell'Acqua, McFowland, Mollick et al. — "Navigating the Jagged Technological Frontier": the consultant experiment, the source of both the levelling effect and the invisible cliff.

The macro picture

Acemoglu — "The Simple Macroeconomics of AI" (NBER 32487): the sceptical estimate, and the best counterweight to the optimists in this episode.

Stanford HAI — AI Index Report 2026: investment gaps, data centre capacity, and the finding that generative AI reached majority adoption faster than the PC or the internet did.

Brynjolfsson, Rock & Syverson — "The Productivity J-Curve" (NBER 25148): the theoretical frame for the whole episode.

Robert Solow's original line appeared in the New York Times Book Review, 12 July 1987.

Europe, measured

Bitkom, March 2026 — AI adoption among German companies: 41 percent actively using AI, up from 17 percent, with 48 percent planning or discussing.

Trending Topics — the eustella launch: the Viennese agent platform, its open-weight model stack and the IONOS hosting arrangement.

mrak.at — what is actually sovereign about European AI: the critical reading that separates operational sovereignty from the model layer.

Programmes that flew and programmes that didn't

Gaia-X — overview, membership and the departures: including the exit statements and the presence of American members from the start.

Gaia-X's own rebuttal — "Gaia-X lebt": the association's answer to the obituaries, worth reading alongside them.

Digital Chiefs — sovereignty in 2026: where the project stands now, and why the portability standards outlived the platform ambition.

Related episodes: Episode 14, Whose Supply Chain Is It Anyway? — where the sovereignty definition used throughout this episode comes from. Episode 8, The Strategy Illusion — the strategy-execution divide, the survey data and the number Markus regrets. Plus Three Lost Platforms — why Europe keeps winning the device and losing the layer.

Disclosure: Sarah Vailby is a synthetic host. Her voice is AI-generated and disclosed in every episode, in line with the AI Act's transparency obligations. Markus works in the web hosting industry — an interest he declares on air in chapter four, since hosting companies are one candidate for the distribution channel discussed there. This show uses no tracking pixels.

Feedback: Two questions this time. If you run a small company or work freelance: which of the five doors is yours, and has anything actually shown up in the bank account yet? And for everyone: what is today's version of the chip in a school computer — the small European thing nobody is watching that everything will run on in fifteen years? Numbers beat opinions, and unflattering numbers beat both. Send your view — anonymously if you prefer — to feedback@experten-system.de. The best responses make it into a future episode.
28 Minuten
Episode 14: Whose Supply Chain Is It Anyway? | Europe Built a Ruler for Sovereignty — and Nobody Scored Full Marks

The data didn't leak from the sovereign cloud. It leaked from a vendor. That single fact organises everything else in this episode: a patent sale to Texas, a wobbly week in Neckarsulm, a new European scoring system nobody has topped, and a €30 billion tender that turns "buy compute" into "apply by November." Two hosts, two readings, and a conclusion that is uncomfortable for both of them.

In this episode:

00:00–03:19: Cold Open & A File at a Vendor. Sarah corrects Markus's prep notes before the jingle even plays — UpCloud is Finnish, not Swedish, and she read forty sources while he made coffee. Then the story: early July, Lidl informs online shop customers in Germany, Belgium and the Netherlands about an incident at an external IT service provider. Names, phone numbers, email addresses, dates of birth, customer numbers. No passwords, no payment data, no delivery addresses. The shop itself wasn't breached. Why this is a sovereignty story: Lidl belongs to the Schwarz Group, which runs Schwarz Digits, which runs STACKIT — Germany's loudest sovereign cloud. And the data walked out through the supply chain, not through the cloud. Whether that vendor is itself part of the group is speculation from comment sections; the hosts flag it as an open question and leave it open. This is a podcast, not an indictment.

03:19–05:49: The Deal. 16 July: CrowdStrike signs a binding agreement for the intellectual property of XM Cyber — more than 45 patents plus source code. Schwarz had acquired the company in 2021 for roughly 700 million dollars as the security brain of its sovereign cloud. Now the brain is sold, but the structure is unusual: customers and revenue stay with Schwarz, only the technology goes to Texas. In return, CrowdStrike's Falcon platform moves onto STACKIT, with telemetry processed in Europe. Zscaler makes the same move. Sarah signs the deal as a CFO — security products are brutally expensive, the market leader does it better, the racks get filled. Markus asks the other question, and cites the sharpest German critique: a sovereign solution that depends on a US vendor isn't one. Where they land: Schwarz didn't fail at sovereignty, Schwarz redefined it. From "we build everything" to "we own the ground it runs on." The landlord model.

05:49–07:53: One Wobbly Week. A deliberate attempt at fairness rather than a pile-on. In the same stretch of days: the data incident, a disruption at the STACKIT cloud, and the departure of co-CEO Rolf Schumann after seven years, leaving Christian Müller in sole charge — all around the opening of the new campus. Underneath the headlines, the quieter and more serious problem reported by the trade press: moving Lidl's own merchandise management into STACKIT is taking longer than planned, and customers are still waiting for SAP migration. Sarah's three levels: location works, operations are unproven, value creation was deliberately given up. Which is why "sovereignty fake" is the wrong accusation — and why the household version lands better. The basement is built and they own it. The furniture is rented. Their own belongings are still in the old apartment.

07:53–10:52: Europe Builds a Ruler. Until this year, "sovereign" was a marketing word anyone could print on a slide. The Commission's Cloud Sovereignty Framework scores eight objectives — strategic control, legal control, security, supply chain — and weights supply chain heaviest at twenty percent. The scale is SEAL, Sovereignty Effectiveness Assurance Level, 0 to 4, where 4 demands a full European supply chain from chips to software. In April it was used for real money: contracts for the EU institutions themselves, up to 180 million euros over six years, deliberately awarded to four providers so no single dependency emerges. Post Telecom with OVHcloud and Clever Cloud: SEAL-3. STACKIT: SEAL-3. Scaleway: SEAL-3. Proximus with S3NS, Clarence and Mistral: SEAL-2 — because the underlying stack is built on a US hyperscaler's technology, even though EU companies own and operate it. Owning the company is necessary; it is not sufficient. On this ruler Schwarz looks good, which retires the word "fake" and replaces it with a harder question: how do you hold SEAL-3 while inviting Falcon and Google services onto the platform? And the loose thread for later: nobody reached SEAL-4.

10:52–14:30: The Omnibus — Right Answer, Wrong Question. State of play on both buses. The AI omnibus is done: Regulation (EU) 2026/1744, in force since 27 July, five days before the original deadline. The trade inside it — industry got time, with high-risk obligations moved to December 2027 and August 2028, while civil society got new prohibitions on nudifier applications and child abuse material from December 2026. Transparency was left untouched: Article 50 has applied since 2 August, which is why this show discloses its synthetic host in every episode. The data omnibus is still in the shop, and two of its proposals read as if written for the Lidl incident: breach notification in 96 hours instead of 72, and a Single Entry Point replacing parallel filings under GDPR, NIS2 and DORA. Both make reporting cheaper. Neither makes the incident less likely. And the counter-example: Article 88b, the one measure that helped users rather than companies, was struck in a Council compromise published by noyb in June — then the vote was postponed, leaving the Council position to the Irish presidency. Parked, not dead. Plus the detail worth savouring: in the Commission's own draft, media service providers were exempt from honouring the very signals users would set.

14:30–19:17: The Billionaire Test. Markus's thought experiment: a European billionaire, patriotic about it, with a mountain of clean data, who wants to train a serious model here. Can he? Route one is the science route — JUPITER in Jülich, Alice Recoque in France, nineteen AI Factories and thirteen antennas, accessible through EuroHPC calls. Remarkably open, and a gift for a startup, but it means an allocation, not a building. Route two is commercial: OVHcloud is the only European provider listed as a Challenger in Gartner's July ranking for cloud AI infrastructure, with Scaleway and UpCloud serving fine-tuning and mid-sized runs. But nobody hands you tens of thousands of accelerators on one network on a credit card. Which leaves route three, and it isn't a purchase — it's an application. On 30 July, EuroHPC opened the tender for AI Gigafactories: up to seven facilities in at least seven member states, ten billion euros of public money as anchor demand, more than twenty billion expected privately. Deadline 12 November 2026, selection early 2027, operations within eighteen months. An informal call for interest already produced 77 proposals from 16 member states across 60 sites. What the money buys beyond GPU racks: local packaging, server assembly, an on-shore chip design ecosystem — the only route on the map that attacks the SEAL-4 gap instead of sailing around it. What it costs: purity. You wanted to be a sovereign patriot; you end up a public-private partnership, with tax money in the foundation. And the loose thread resolves: nobody reached SEAL-4 because every route runs on the same accelerators, designed in California and fabricated in Taiwan. Sovereignty ends where physics begins.

19:17–22:25: The Verdict. The honest scorecard, and deliberately from the buyer's side rather than the vendor's. Politically it worked: Europe turned a buzzword into a procurement criterion, and for a purchasing company that means real money saved on due diligence — the score does the work. Demand is real, with analysts expecting European sovereign cloud infrastructure to grow more than eighty percent this year and nearly double again next. But note the driver: not price, not features. The CLOUD Act, geopolitics, and America becoming legally unpredictable. Companies aren't buying a better product, they're buying insurance. Economically it's half a success. For standard workloads — virtual machines, storage, Kubernetes, databases — European providers deliver, often cheaper. Perhaps seventy percent of a mid-sized company's estate could move today without heroics. The other thirty is where it hurts: ERP, AI services, the hard cases. Plus the software layer, where sovereign infrastructure running American software moves the jurisdiction risk up rather than removing it, and the certification patchwork that makes cross-border operators pay compliance more than once. What a rational company therefore does: tier it. Sensitive and regulated workloads go sovereign; everything else stays put. Sovereignty in 2026 is an insurance premium, not a savings plan. Two things would change that — SAP-class workloads running properly on European platforms, and gigafactories delivering training you don't have to shop for in California.

22:25–24:08: Let's Land This. One closing thought each. Sarah: this year sovereignty stopped being a vibe and became a score, and marketing can survive an argument but not a number. Markus: the strangest fact in the whole story is that Europe's biggest single bet on digital independence — the eleven-billion-euro data center, the two-billion-euro digital division, the SEAL-3 badge — is financed by a discount supermarket. Not a tech giant, not the state, not the stock market. Which is the strength: patient family money, no quarterly earnings call, no activist investor demanding the data centers be sold. And the weakness: a private partnership company owes the public no accounts, and on that infrastructure now run government platforms and, since April, the institutions of the European Union. The question is left open on purpose — a problem to fix, or simply Europe's way of doing it? Ordoliberalism with a loyalty card.

24:08–28:12: Outro Song. "Sarah's Tech (Europe On The Wire)" — like the host, mainly synthetic: the track was produced primarily with AI.

Key Takeaways:

Location Is the Easiest Question and the Least Informative: The Lidl data left through a vendor, not through the cloud. Where the servers stand was never the risk; who else touches the file is. Sovereignty is a supply chain question.

Owning the Company Is Necessary, Not Sufficient: A European provider with European staff and European data centers still caps at SEAL-2 if the stack underneath belongs to a US hyperscaler. The technology itself has to be free of critical dependencies — which is precisely what the CrowdStrike deal trades away.

Nobody Reached SEAL-4: Not one of the four winners has a full European supply chain from chip to software. Every route to training a model in Europe — public supercomputers, commercial clouds, future gigafactories — runs on the same imported accelerators.

The Omnibus Lowers the Cost of Compliance, Not of Dependency: 96 hours instead of 72, one reporting portal instead of four. Both make an incident cheaper to report. Neither makes it less likely, and neither touches who your vendors are.

To Train at Scale in Europe, You Apply — You Don't Buy: The AI Gigafactories tender closes 12 November 2026 with operations roughly eighteen months after selection. Until then, capacity means renting from OVHcloud, Scaleway or comparable providers, with limited sovereignty either way.

For the Buyer, Sovereignty Is an Insurance Premium: Fewer features, equal or higher price, plus migration cost. Which is why the rational corporate answer is tiering, not switching — and why demand is driven by legal risk rather than by product quality.

Europe's Biggest Sovereignty Bet Is Retail-Financed: Patient capital with no quarterly pressure, and no obligation to explain itself to the public whose administrations now run on it. Both halves of that sentence matter.

Sources & Further Reading

The Digital Omnibus, both halves

European Commission — Digital Omnibus Regulation proposal: the original text and the Commission's own reasoning.

Bird & Bird — Introduction to the European Commission's Digital Omnibus Package: the clearest structural overview of what the package actually contains.

White & Case — EU agrees Digital Omnibus deal to simplify AI rules: the trilogue outcome behind Regulation (EU) 2026/1744.

Gleiss Lutz — the AI Act simplification proposal: the deadline shifts, article by article.

Usercentrics — what the AI Act deal means for transparency and consent infrastructure: useful on why Article 50 survived untouched while high-risk obligations moved.

EDRi — The Digital Omnibus is going on summer break. Your rights are not.: the civil society reading of the postponement, including Article 88b.

LYDnews — Digital Omnibus: Streit um Cookie-Einwilligung: the state of the fight over consent signals.

Bitkom — Stellungnahme Digital Omnibus (GDPR): the industry position, worth reading alongside the critics rather than instead of them.

Sovereignty, measured

European Commission, 17 April 2026 — Commission advances cloud sovereignty through strategic procurement: the Cloud Sovereignty Framework, the eight objectives and the SEAL levels, including what SEAL-4 actually requires.

European Commission, 17 April 2026 — the €180 million award for sovereign cloud services: the four winning consortia and their assurance levels.

EuroHPC Joint Undertaking, 30 July 2026 — launch of the AI Gigafactories call: scope, budget and the co-investment model behind the €30 billion figure.

EuroHPC Joint Undertaking — call for tenders: selection of AI Gigafactory consortia: the tender itself, including the 12 November deadline and the selection criteria.

OVHcloud, July 2026 — Gartner Magic Quadrant for Cloud AI Infrastructure: the ranking in which OVHcloud appears as the only European Challenger.

Schwarz Digits, XM Cyber and the wobbly week

CrowdStrike, 16 July 2026 — CrowdStrike and Schwarz Digits expand strategic partnership: the binding agreement for the XM Cyber intellectual property, in the companies' own framing.

Lebensmittel Zeitung — "Dämpfer für Digits": the STACKIT disruption, the data incident and Rolf Schumann's departure, reported together.

Borns IT- und Windows-Blog, 21 July 2026 — "Verraten und verkauft?": the sharpest German critique, and the source of the "oxymoron" argument.

heise online — "Kundendaten bei Dienstleister abgeflossen: Datenschutzvorfall beim Lidl-Shop": the incident at the external IT service provider and the data fields affected.

Related episodes: Episode 13, A Ritual Without a Religion — how Europe almost killed the cookie banner, and why Article 88b matters here too. Plus Three Lost Platforms — why Europe keeps winning the device and losing the layer, and The Imaginary ETF — where European tech is actually owned.

Disclosure: Sarah Vailby is a synthetic host. Her voice is AI-generated and disclosed in every episode, in line with the AI Act's transparency obligations. Markus works in the web hosting industry. This show uses no tracking pixels.

Feedback: If you buy cloud services for a company: has a sovereignty score ever changed a purchasing decision you made — or is it a box that gets ticked after the vendor was already chosen? And what's still stuck on a hyperscaler because there's no European equivalent? Be specific; we're more interested in your migration list than in your position. Send your view — anonymously if you prefer — to feedback@experten-system.de. The best responses make it into a future episode.
In Podcasts werben
Schalte jetzt Werbung in Podcasts.

Über diesen Podcast

A deep dive into the European tech scene. Sarah, a business analyst with a data science background, explores the hidden stories behind Europe's tech renaissance. From Berlin's startup culture to the deep-tech hubs in Munich – this podcast is for anyone who wants to understand how Europe is shaping the global technology landscape. Probably a bit boring for most, but just right for tech enthusiasts.
Podcast melden

„Sarah's Tech“

Worum geht es? Danach fragen wir noch nach dem Grund.

Abonnenten

Teilen

Mein Archiv

Deine Privatkopie der Folgen, die du nicht verlieren willst.

Podcast-Folgen verschwinden. Feeds werden auf die letzten Episoden gekürzt, Hoster räumen alte Dateien ab, Formate wechseln den Anbieter und lassen ihr Archiv zurück. Mit „Mein Archiv“ sichert podcast.de die Folgen deiner Podcasts für dich — angefangen bei den ältesten, denn die sind zuerst weg.

  • Deine gesicherten Folgen bleiben hörbar, auch wenn das Original offline geht.
  • Auch Folgen, die im heutigen Feed gar nicht mehr stehen — podcast.de kennt sie noch.
  • Herunterladen bleibt möglich, solange die Folge beim Podcaster liegt. Der zählt seine Abrufe wie bisher.
Startet bald

Sei beim Start von Mein Archiv dabei

Mein Archiv ist fast fertig. Trag dich ein, dann bekommst du eine E-Mail, sobald es losgeht – und bist von Anfang an dabei. Wir schreiben dir nur zum Start, keine Werbung, keine Weitergabe deiner Daten.

Du bekommst zuerst eine Bestätigungsmail. Abmelden geht jederzeit. Datenschutz