Drupal

Open Source, sovereignty and security: Europe faces the digital challenge of the GAFAM

Published on 13 June 2025
Imagine a world where public servers, cloud services, healthcare applications, or educational platforms suddenly stopped working. This scenario is not so hypothetical: it could result from an excessive dependence on American technologies. At bluedrop.fr, a Drupal agency and fervent advocate of open-source software, we explore why digital independence has become a major strategic issue for Europe in the face of GAFAM’s dominance.

GAFAM, systemic domination

The GAFAM (Google, Apple, Facebook, Amazon, Microsoft) have managed to establish themselves as the invisible backbones of global digital technology. They control the various layers of the digital world: hardware, operating systems, cloud services, software platforms, AI, advertising, and more. Their dominance creates a structural dependency for European states, businesses, and citizens.

Some concrete examples of this dependency:

  • Cloud: over 70% of European cloud data is hosted on infrastructure by Amazon, Microsoft, or Google.
  • Professional email: a majority of government administrations use Office 365.
  • Education: public schools are adopting G Suite with no local alternatives.
  • Healthcare: some hospitals use American diagnostic AI solutions without knowing where or how their data is processed.

But this dependence comes at a price

Legal Extraterritoriality

Through laws such as the Cloud Act (Clarifying Lawful Overseas Use of Data Act), adopted in 2018, the United States allows its authorities to demand access to data even when it is hosted outside American territory, as long as it is held or controlled by American companies. This mechanism creates a direct conflict with the GDPR and calls into question the legal sovereignty of states.

The Loss of Control Over Critical Infrastructure

This dependence results in the outsourcing of strategic functions to foreign companies subject to non-European legislation. In the event of geopolitical strife, sanctions, or even unilateral commercial decisions by these companies, administrations could lose access to essential services, undermining their ability to ensure continuity of public missions (health, education, security). This also presents a very real risk of espionage or data leaks. And when it comes to health, education, or public safety, can we really take that risk?

Cybersecurity

Cyberattacks are exploding across Europe according to ANSSI. Ransomware encrypts an organization’s data and demands a ransom for its return, thereby paralyzing hospitals, local authorities, or businesses. These attacks directly target the stability of our societies. If a major provider is compromised, the impact can be massive: unavailability of public services, leaks of medical or administrative data, or even disruption of critical supply chains. Even worse, if there’s a critical flaw in proprietary technology, it's impossible to analyze, fix, or even know what was really compromised. We’re left in the dark. Without control over technologies, data, or security protocols, Europe exposes itself to a strategic loss of control over its infrastructure.

Algorithmic Opacity

Behind every search engine or content recommendation lie opaque algorithms. You don’t know why a particular result appears, nor who decided it was relevant. This lack of transparency has real consequences: it makes it impossible to understand the criteria influencing what we see, and exposes us to invisible discriminatory or ideological biases. The result: trust in digital tools is weakened and conspiracy theories are on the rise.

Lack of Regulation

Beyond the technical aspects, platforms have also made ideological choices with heavy consequences. Since Donald Trump’s election, the founders of Meta (Zuckerberg) and X (Elon Musk) have deliberately weakened regulatory mechanisms by removing fact-checking tools in the name of so-called “absolute freedom of expression.” This deregulation has enabled massive disinformation, radicalized public debate, and undermined democracy. With no alternatives to these tools, we are therefore at the mercy of their decisions.

Amid increasing geopolitical tensions, the need to protect personal data, and the concentration of technological power in the hands of a few non-European players, Europe can no longer ignore these dangers.

Open source, the key to technological independence?

We often have a mistaken image of free software, reduced to amateur use or free tools with no commercial value. In reality, it forms the backbone of global digital technology:

  • The entire Internet relies on free software (Apache, NGINX, Linux, BIND, OpenSSL).
  • The major tech companies themselves massively use open-source projects (Kubernetes, TensorFlow…).
  • Critical infrastructures (supercomputers, 5G networks, embedded systems) largely depend on open technologies.

So it is not a marginal alternative. It is the invisible engine of modern digital technology.

Collaboration, transparency, security—values that are naturally aligned with those of Europe

Open source is based on powerful principles: collaboration, transparency, freedom, and shared innovation. These values resonate particularly strongly in Europe.

For us at bluedrop.fr, these values have guided our technological choices from the beginning: 

  • Collaboration: Open source solutions are the result of collaboration between developers from all over the world.
  • Freedom: Open source licenses give users the freedom to use, modify, and distribute the software. No organization or country can claim ownership of the code.
  • Knowledge sharing: Open source promotes the sharing of knowledge and skills. By making source code accessible, developers can learn from one another and improve their abilities.
  • Innovation: Open source creates a true virtuous circle of skill development, stimulation, and quality.
  • Security: Thanks to transparency and collaboration, security vulnerabilities can be identified and fixed quickly. The open source community can respond rapidly to security threats, which can make open source software more secure.

And above all: open source lets you keep control. At a time when digital sovereignty is becoming a strategic issue, it's an essential lever for resilience.

Of course, managing open source solutions yourself can be complex. But in Europe, a strong ecosystem (of which we are a part) has taken shape around these technologies. In France alone, it accounts for 11% of the digital sector and nearly 64,000 jobs (2022).

A concrete example: Drupal

To talk about an example we know well, Drupal is a true open source success story. With its robust and modular architecture, this CMS benefits from a structured international community, transparent governance, and exceptional adaptability to specific needs (accessibility, security, multilingual capabilities, GDPR).

At bluedrop.fr, we have made Drupal our core expertise for 20 years:

  • We build open source projects for private companies, local authorities, NGOs, ministries, cultural and scientific institutions.
  • We contribute to the ecosystem by sharing and maintaining Drupal modules with the community.
  • We develop open source solutions such as DropFactory, our Drupal-based multisite factory solution. A 100% open source alternative to Aegir, which is coming to an end. Because when an open source component disappears, we don't just sit back and watch—we take action, we build, we contribute.

European industrial lag: a strategic vulnerability

The Draghi report (2024) highlighted a paradox: Europe is the source of many key innovations but fails to industrialize them.

Why this industrial lag? There are many reasons. 

For example, one can cite the weakness of private investment in tech or the incompletion of the single market. In other words, the fact that economic and legal regulations are not fully harmonized among the European Union member countries prevents the emergence of continental champions. Without a truly unified market, European tech companies face different regulatory, tax, and administrative hurdles depending on the member state. This hinders their growth, economies of scale, and competitiveness compared to American or Chinese giants who operate in a homogeneous economic space.

When it comes to AI, Europe lags behind in capitalization (OpenAI, Anthropic...) but stands out in regulation (AI Act) and ethical open-source projects (Mistral AI, BLOOM). Furthermore, the popular success of ChatGPT in Europe raised awareness, but has not yet resulted in massive industrial uptake, at least for the time being.

What the European Union does

It is now clear that the European Union must urgently act to address all these challenges.  In terms of security, it has already begun:

  • The ProtectEU program (2024) 
    This program strengthens the resilience of critical infrastructures (health, energy, transport, etc.) against cyber threats. It supports cybersecurity projects, encourages the use of audited open source technologies, and promotes cooperation between Member States for better crisis response.
  • The Cyber Resilience Act (CRA)
    Adopted in 2024, this law requires manufacturers of connected devices and embedded software to integrate security from the design stage. The key points: rapid patches, clear documentation, transparency on updates… and an obligation to report major incidents.

Open source software is becoming a strategic building block, as it ensures the auditability, interoperability, and adaptability of the systems used.

It's a good start, even if it does not solve our dependency problem.

A collection of ideas to develop European digital sovereignty

Among the frequently mentioned ideas: adopting an "Open Source First" policy at the European level. In short: systematically prioritizing open source solutions in public procurement, except in duly justified cases. Italy has already led the way since 2012.

Another key lever: supporting our open source SMEs with concrete measures (quotas in calls for tenders, subsidies, easier access to European innovation programs). Too often, smaller players are left out due to lack of resources… even though they drive innovation.

Training in open technologies from an early age would also represent a real cultural shift. Because a sovereign ecosystem also relies on talent that understands, masters, and develops these tools.

Some stakeholders are also advocating for a European platform for the tech needs of major corporations, open to local start-ups, to build bridges and spur continental innovation.

But beware: transformation must not rely solely on the public sector. The private sector has a key role to play in making open source a driver of innovation aligned with our interests and values.

Open source, a strategic lever for a sovereign Europe

For us, there is no doubt: open source must become a pillar of European industrial and security policies. It is the only model capable of combining innovation, transparency, technological independence, and support for local stakeholders.

In a tense world, amid cyber threats, private monopolies, and geopolitical challenges, Europe has a choice: endure or build. To build means investing in training, supporting SMEs in the sector, requiring open source criteria in public procurement, and supporting digital transition.

At bluedrop.fr, this has always been our direction. We believe that sovereignty begins with mastery of your tools, contributing to the commons, and transparency in the technologies used.

Want to develop your digital platform along these lines? Let's talk about it. We’re here to build, together, a freer, more resilient, more European digital future.

Read more articles on Drupal