AWS European Sovereign Cloud: Why a Separate German Region Still Can't Close the CLOUD Act Gap
AWS went GA in Brandenburg on January 15, 2026 with a separate German entity, 90 services, and €7.8B behind it. Why physically separate still isn't legally sovereign — scored through the EU's SEAL 0–4 framework and the CLOUD Act's corporate-jurisdiction test.
OVHcloud's SecNumCloud GA in June 2026: Why 'EU-Headquartered' Isn't a Sovereignty Certification
OVHcloud's SecNumCloud-qualified instances went GA in June 2026 on ANSSI's 360-control visa. What certified immunity, operational separation, and capital caps require beyond an EU headquarters — and when your PaaS needs to name the visa.
Heroku Retired Its Data Bridge Add-On. The 'Smooth' Migration Path Is the Real Warning.
Salesforce retired Heroku Data Bridge and even offered a migration path — but the path was entirely Salesforce's to design, schedule, and re-bill. Here's why a vendor-provided replacement still isn't the same as not being locked in, and a five-question framework for auditing your own bundled PaaS integrations before the next one hits.
Your Deploy Agent Has the Same Privileges as a Human Push — and No Insurance
AIUC-1 and California's AB 316 just made 2026 the year AI agent liability got real, while insurers quietly excluded it from standard coverage. Here's what's actually covered, what isn't, and the audit-trail and permission design a deploy-from-chat platform needs today.
Daytona's $24M Compliance Bet: What a HIPAA/SOC 2 AI Sandbox Really Costs to Build Yourself
Daytona's $24M Series A prices out HIPAA/SOC 2 compliance for AI sandboxes — the real dollar-and-timeline cost of building that compliance yourself, and why a self-hosted platform already owns the harder half of the pitch for free.
Coolify Shipped an Audit Log. It Still Wouldn't Survive a SOC 2 Review.
Coolify v4.1 shipped the first structured audit log among self-hosted PaaS platforms — but it only covers API mutations. Here's the gap against a real SOC 2 review, and the checklist a compliance-ready deploy API actually needs.
Cloud Native Buildpacks Ship SBOMs by Default: What a Build-Time Bill of Materials Gets You That a Scanner Never Can
Cloud Native Buildpacks generate a CycloneDX/SPDX bill of materials as a build-time side effect, populated from dependencies the buildpack actually resolved and installed. A Dockerfile pipeline's nearest equivalent, Docker BuildKit's SBOM attestation, scans the finished image instead — and misses build-stage-only dependencies right when the EU CRA's September 2026 reporting deadline makes that gap expensive.
The EU's Cloud Sovereignty Framework Grades Providers SEAL-0 to SEAL-4: Where Owned Hetzner Hardware Lands That a Hosted PaaS Provider Can't Follow
The EU's new SEAL-0 to SEAL-4 sovereignty scale just rated a Google-powered cloud service 'sovereign' — here's the real methodology behind that number, and where self-hosted, owned Hetzner hardware actually lands on it.
The EU Data Act's Cloud-Switching Mandate Takes Effect: What a 30-Day Portability Deadline and a 2027 Fee Ban Actually Change
The EU Data Act's cloud-switching rules are already in force: a 2-month notice cap, a 30-day transition window, and a full ban on switching fees from January 12, 2027. Here's the exact timeline, what it actually forces vendors to hand over, and what it still doesn't reach.