We advised a global software company on how to meet local legal requirements for using and offering cloud-based services and infrastructure. The focus was on making sure the company’s data processing, storage, and service delivery in the cloud met national rules, while staying in line with its global cloud setup and internal policies.
As a global provider of enterprise software and cloud solutions, the client handles large volumes of customer and partner data across different countries. Their use of public, private, and hybrid cloud systems raised several compliance questions, including:
- Data localisation laws
- Corporate Sustainability Reporting Directive (CSRD) rules
- Sustainability and public procurement requirements
- Due diligence for cloud providers
- How national data protection laws interact with GDPR and sector-specific IT security rules
We helped the client by:
- Mapping local laws that affect data storage, cross-border transfers, and IT outsourcing
- Reviewing and adjusting cloud service and data processing agreements to fit national standards
This project was key to helping the client roll out its cloud services in a way that was legally compliant and reliable. It dealt with complex data governance issues, especially after the Schrems II ruling and in a climate of growing regulatory focus on how cloud vendors are chosen and managed. We worked closely with the client’s global privacy, legal, and IT compliance teams to deliver a clear, country-specific compliance roadmap for cloud services.
As a result, the client was able to expand its cloud services confidently within the local legal framework, while keeping operations secure and compliant. The work also strengthened the company’s position as a reliable and compliant cloud provider, aligned with both global privacy standards and national regulations.
