Netherlands Abandons Microsoft 365 Cloud Shift for Open-Source Sovereignty

The Netherlands’ Tax and Customs Administration has officially scrapped its planned migration to Microsoft 365’s public cloud infrastructure. The decision underscores a growing continental trend prioritizing digital sovereignty, as highlighted by recent findings from the Linux Foundation.

The cancellation aligns with the 2026 State of Open Source in Europe report, released at the Open Source Summit Europe. The study revealed that 94% of EU organizations regard digital sovereignty as important, with 61% labeling it a critical priority. Thierry Carrez, general manager of Linux Foundation Europe, noted during his keynote that Europe has clearly embraced the message regarding technological autonomy.

Dutch officials did not act in isolation. Several other European nations, including Switzerland, Austria, France, Germany, and Ireland, have recently announced or executed shifts away from proprietary US software toward Linux distributions and open-source office suites such as Germany’s openDesk. This movement reflects broader concerns about reliance on American technology giants.

The Netherlands had originally targeted a 2025 transition to Microsoft 365, aiming for full completion by late 2026. Approximately 5,000 employees had already undergone migration when the Dutch Advisory Council on ICT Assessment issued a recommendation in June to reverse the public-cloud strategy. The government subsequently paused the initiative in July, and the latest announcement formalizes the pivot toward an on-premises and open-source framework.

According to a letter sent by State Secretary for Finance Eelco Eerenberg to Parliament, the government will retain existing Microsoft software for the time being. The immediate plan involves establishing an on-premises mail and calendar system in 2027, followed by European open-source solutions for personal storage and collaboration later in 2027 and into 2028. Eerenberg described this trajectory as a path toward a more sustainable and autonomous operational model.

Several technical and strategic flaws were identified in the original Microsoft 365 proposal. The ICT assessment concluded that the selected cloud design failed to meet adequate standards for information security, data processing, and future-proofing. A primary objection involved the transmission of confidential government documents through American servers rather than domestic government networks.

Encryption standards also drew significant criticism. The proposed configuration relied on standard Microsoft encryption instead of Double Key Encryption, which would have provided the administration with greater control. Furthermore, end-to-end encryption was not enabled by default for one-to-one Teams calls, a feature the Dutch government has long demanded. The selected setup also rendered this encryption unavailable for group calls.

Additional dealbreakers included vendor lock-in, reduced flexibility, potential compromises to digital sovereignty, and the lack of a robust exit strategy. These factors reflect a wider distrust of US-based companies among European governmental bodies under the current political climate.

While specific software selections remain undefined, other Dutch agencies are developing the Digital Autonomous Work Environment for Government (DAWO). This initiative seeks to replace Windows desktops with the Dutch Linux distribution NixOS. Potential candidates for the desktop suite include France’s La Suite and Germany’s openDesk. Another possibility is a custom-built stack derived from MijnBureau, which integrates open-source tools such as Nextcloud for storage, Collabora for documents, Element for messaging, and OpenProject for task management.

For now, the on-premises email environment will continue utilizing Microsoft Outlook, while the broader open-source transition focuses on collaboration and storage rather than a complete desktop overhaul.