BSI Releases C3A: New Benchmark for Digital Sovereignty in Cloud Procurement (vergabeblog.de)

• C3A defines requirements for sovereign cloud procurement.
• Not legally binding but serves as a reference framework.
• Focuses on data protection, encryption, and dependency avoidance.

"Germany's Federal Office for Information Security (BSI) has published the Cloud Computing Compliance Criteria Catalogue (C3A), setting requirements for cloud services to enhance digital sovereignty. Though not legally binding, it is expected to serve as a reference for public procurement."