European “sovereignty” in tech and security is often framed as an absolute goal—but in practice it is a question of degrees, trade-offs, and credible pathways. 

This session takes a pragmatic look at what European sovereignty can realistically mean in areas such as cloud infrastructure, AI, data, cybersecurity, defence tech, and critical digital services, acknowledging dependencies on global supply chains and allied ecosystems. Rather than abstract visions, the discussion focuses on concrete levers Europe actually controls: regulation and procurement, industrial policy, standards-setting, public-private partnerships, and targeted capability-building. 

Drawing on current initiatives and lessons from recent crises, the session maps out how Europe can move from vulnerability to resilience over the next five to ten years—clarifying where autonomy is feasible, where interdependence is inevitable, and how to make both work in Europe’s strategic interest.