Carrefour Champions French Sovereignty. Its Data Sits in California.

Carrefour is the French retail industry. The company runs more than 14,000 stores worldwide from its headquarters at 93 Avenue de Paris in Massy, just south of Paris. Carrefour Banque is a regulated French consumer credit institution. The Carrefour group employs more than 320,000 people across Europe, Latin America, the Middle East, Africa, and Asia.

France is also the European country that has pushed hardest for digital sovereignty. France co founded Gaia-X with Germany. France pushed the cloud de confiance (trusted cloud) policy that requires French government workloads to run on cloud platforms operated under French legal control. The French government took stakes in Atos, OVHcloud has been positioned as a national champion, and the digital sovereignty discourse in Paris is louder than anywhere else in the EU.

On 11 June 2018, Carrefour signed a strategic partnership with Google. In 2022, Carrefour announced Chapter two of that partnership, migrating almost the entire IT estate, including SAP S/4HANA, to Google Cloud.

This is the finale of our series. Spotify scored 12, Booking.com 40, Klarna 11, Adidas 17. Carrefour sits at 13.

Methodology. Eight infrastructure layers scored zero to ten on European ness, weighted by sovereignty impact. The Carrefour case is the most politically loaded in the series. France's digital sovereignty rhetoric and Carrefour vendor mix are publicly available facts. We are not arguing that Carrefour did anything wrong. We are documenting what the public record shows.

Compute and Orchestration

Carrefour compute sits on Google Cloud. The Carrefour Links data platform uses Terraform, Docker, Cloud Composer, and the Google Cloud SDK on Google PaaS services. GKE and Anthos are implied by the GCP first posture but not named explicitly in primary material. Host: Google Cloud Platform. Layer score: 0 of 10.

Storage and Databases

SAP S/4HANA is the system of record. Almost all of Carrefour's SAP stack runs greenfield on Google Cloud, per Carrefour's own 2022 announcement. Specific managed database products (Spanner, Cloud SQL) are not publicly named. Host: Google Cloud. Layer score: 0 of 10.

Data Warehouse and Analytics

Google BigQuery is the central data warehouse. Legacy data centres were migrated into BigQuery, with the data architecture modernised through Devoteam Flycs reference architecture on GCP. Host: Google Cloud. Layer score: 0 of 10.

AI and Machine Learning

Demand forecasting and replenishment run via the AI and ML embedded in SAP S/4HANA on GCP. Predictive supply chain use cases include grain shortage forecasting. A Carrefour and Google AI innovation lab in Paris was part of the original 2018 deal. Direct branded Vertex AI deployment is not explicitly named in primary sources but is implied by the SAP plus GCP posture. Host: Google Cloud. Layer score: 0 of 10.

Observability and Monitoring

Google Cloud Operations (formerly Stackdriver) plus Looker, also a Google product, handle system and performance monitoring at Carrefour Links. Host: Google Cloud. Layer score: 0 of 10.

Identity and Access

Google Workspace was deployed to more than 160,000 employees from 2018 onward as part of the original partnership, providing internal collaboration and SSO surface. Customer side identity is not publicly disclosed in primary sources. Host: Google Cloud (workforce). Layer score: 0 of 10.

CDN and DNS

No primary public source confirms a specific CDN or DNS vendor. Layer score: not publicly evidenced.

Payments

This is the bright spot, and it is uniquely French. Worldline (headquartered in Bezons, France) is the card acquiring and processing partner. A 21 October 2023 Worldline outage briefly took CB payments down at Carrefour, McDonald's, and IKEA, confirming the dependency. The domestic Carte Bancaire (CB) scheme is accepted, typically co badged with Visa or Mastercard. Carrefour Banque issues the Carte PASS Mastercard for consumer credit. Host: Worldline (France), Carte Bancaire (France), Carrefour Banque (France). Layer score: 10 of 10.

Layer	Weight	Score
Compute and orchestration	20	0
Storage and databases	18	0
Data warehouse and analytics	14	0
AI and machine learning	12	0
Observability and monitoring	8	0
Identity and access	8	0
CDN and DNS	not scored	unverified
Payments	10	10

Weighted total across the scored layers: 13 out of 100.

Badge: American with European Branding.

Carrefour stack is the cleanest illustration of the sovereignty paradox in this series. Every layer except payments runs on a single US hyperscaler. The payments layer, governed by French banking and card scheme regulation, is fully French. That contrast is the story.

Series wrap up

Company	Country	Score	Badge
Spotify	Sweden	12	American with European Branding
Booking.com	Netherlands (Delaware parent)	40	Mixed
Klarna	Sweden	11	American with European Branding
Adidas	Germany	17	American with European Branding
Carrefour	France	13	American with European Branding

The European company that scored highest on European ness was the one with a US parent, because it owns its own hardware. The four companies that are fully European in legal terms run on AWS, GCP, Salesforce, Databricks, Akamai, Okta, OpenAI, and a long tail of US SaaS. The one consistent EU bright spot across the series is payments, which sits in Adyen (Netherlands) or Worldline (France) for every company except Klarna, which is itself a payment provider.

The Carrefour case is the easiest to imagine on a fully European stack, precisely because so much of the work has already been done by French companies that Carrefour does not buy from.

• Compute and orchestration. OVHcloud is a French listed company headquartered in Roubaix. Scaleway is part of the French Iliad group. Outscale (part of Dassault Systemes) was specifically built for sovereign workloads and holds the SecNumCloud qualification from ANSSI, the French cybersecurity authority.
• Storage and databases. Object storage from OVHcloud, Scaleway, or Outscale. SAP S/4HANA can run on Outscale (SecNumCloud qualified) or on T-Systems sovereign cloud.
• Data warehouse and analytics. ClickHouse hosted on Aiven (Helsinki) or on European infrastructure.
• AI and ML. Mistral AI (Paris) for general purpose LLM workloads, available via API and via OVHcloud and Scaleway as hosted offerings inside French data centres.
• Observability. Self hosted Grafana and Prometheus, or managed Grafana from a European hosting provider.
• Workforce collaboration. Infomaniak (Switzerland) offers kSuite. OnlyOffice (Latvia) provides the office suite. For 160,000 employees, Infomaniak enterprise tier or Open-Xchange (German) are closer fits.
• CDN. BunnyCDN (Slovenia), CDN77 (Czech Republic), or a French solution.
• Payments. Already Worldline, Carte Bancaire, Carrefour Banque.

See the cloud computing platforms hub, the Alternatives to GCP page, and the office suites hub.

Carrefour 2026 strategic plan commits three billion euros to digital between 2022 and 2026, with a target of ten billion euros in e commerce GMV by 2026 and 30 percent omnichannel customers. That budget is being spent on Google Cloud. Redirecting it mid plan would mean re tendering an active multiyear contract, rebuilding integrations with SAP S/4HANA, and re training 160,000 employees off Google Workspace.

The 2022 Chapter two announcement included a claimed 45 percent energy reduction from the move to Google Cloud. That is a real environmental argument that any replacement vendor would need to meet or beat.

Gaia-X was meant to make this kind of migration easier, and Carrefour is not on the public list of Gaia-X members. The founding French members were Atos, Bosch, Orange, Safran, and OVHcloud. CNIL, the French data protection authority, has fined Carrefour and Carrefour Banque a combined 3.05 million euros in November 2020 for GDPR and cookie violations, but those fines did not concern the Google Cloud partnership.

We did not find any French regulator commenting publicly on the Carrefour Google partnership specifically. We did not find any Carrefour public statement on the US CLOUD Act or on the trade off between digital sovereignty and the chosen cloud architecture. See our coverage of the US CLOUD Act and European digital sovereignty for more context.