- GAIA-X is an international non-profit association (AISBL) created in 2021 in Brussels, at the initiative of France and Germany.
- Its purpose is not to be a European hyperscaler, but to define a framework of common rules (Trust Framework) so that cloud and data players can interoperate on a sovereign basis.
- The project went through a positioning crisis in 2021-2022 after non-European players joined (Amazon, Microsoft, Google, Huawei, Alibaba), which fuelled debate about its real scope.
- Since 2023, GAIA-X has refocused its output on technical specifications (Trust Framework, Compliance, GXDCH) and sector data spaces (Catena-X, Mobility Data Space, Eona-X).
What is GAIA-X?
GAIA-X is an AISBL, that is, an international non-profit association under Belgian law, based in Brussels. The project was jointly announced by the German and French economy ministries in October 2019, then set up as an association in early 2021.
Its initial aim was to bring European cloud and data providers together around common rules on transparency, portability and protection. The idea was not to build a single infrastructure, but to establish a normative framework and a compliance verification mechanism.
Today, GAIA-X produces three families of deliverables: a Trust Framework setting the requirements applicable to services, a Digital Clearing House (GXDCH) that automatically verifies compliance, and a set of sector data spaces that apply these rules to concrete use cases.
From the Dortmund announcement to data spaces
- October 2019Joint announcement by Germany (BMWi) and France (Bercy) of the GAIA-X project at the Dortmund Digital Summit.
- June 2020Publication of the Technical Architecture white paper describing the intended infrastructure and federation.
- January 2021Official incorporation of the GAIA-X AISBL association in Brussels, originally bringing together 22 European founding members.
- 2021-2022Non-European members join (Amazon Web Services, Microsoft, Google, Alibaba, Huawei). Internal tensions and the departure of several French founding members, who denounce a dilution of the sovereignty ambition.
- 2023Refocus on operational deliverables: Trust Framework v22.10, launch of the GAIA-X Digital Clearing House (GXDCH), which provides compliance verification for services.
- 2024-2025First services labelled GAIA-X compliant. Ramp-up of sector data spaces (Catena-X in automotive, Eona-X in aviation, Mobility Data Space).
What GAIA-X actually produces
Six deliverables and limitations to know so as not to confuse GAIA-X with a cloud provider.
No GAIA-X infrastructure of its own
GAIA-X is not a cloud. It does not operate any data centre or IaaS service. The project defines rules and a compliance label; it is the member providers that deliver the infrastructure.
Trust Framework and labels
The Trust Framework describes the transparency, portability and data protection requirements a service must meet to be declared GAIA-X compliant. There are three levels (Basic, Substantial, High).
GAIA-X Digital Clearing House
The GXDCH is the technical body that automatically verifies the compliance attestations of candidate providers. Several nodes exist, operated by members such as ANSSI, T-Systems or Aruba.
Sector data spaces
GAIA-X is applied in practice through data spaces: Catena-X (European automotive), Mobility Data Space (Germany), Eona-X (aviation), Agdatahub (agriculture). These spaces rely on GAIA-X interoperability rules.
Interplay with the EUCS and the Data Act
GAIA-X does not replace cybersecurity certification (EUCS, being adopted by ENISA) or the obligations of the Data Act. It is a complementary framework focused on trust, interoperability and portability.
Persistent criticism
Several commentators and sovereign players still regard GAIA-X as a marketing label as long as hyperscaler services can benefit from it without any change to their extraterritorial exposure. The debate remains lively within the association itself.
Three common confusions
“GAIA-X is a European cloud under construction.”
GAIA-X is an association and a normative framework. It builds neither data centres nor cloud services. The infrastructure remains that of its members.
“A GAIA-X compliant service is immune to the CLOUD Act.”
The Trust Framework does not impose extraterritorial immunity by default. Only the highest level addresses requirements close to SecNumCloud, and this interplay is still under discussion.
“The project died after Scaleway and Atos left.”
Several French founding members left the association in 2021-2022, but GAIA-X continued its technical deliverables. Its focus has shifted towards compliance and data spaces.
Further reading
- Official website of the GAIA-X AISBL association (gaia-x.eu)
- French Treasury (Direction générale du Trésor), GAIA-X 2019 press kit (tresor.economie.gouv.fr)
- Bundesministerium für Wirtschaft und Klimaschutz, GAIA-X overview (bmwk.de)
- European Court of Auditors, special reports on the sovereign cloud (eca.europa.eu)
- ENISA, work on the EUCS and its interplay with national frameworks (enisa.europa.eu)