S3NS (the Thales × Google Cloud joint venture launched in 2021) just crossed a major milestone: ANSSI SecNumCloud 3.2 certification (granted December 2025) and a high-profile unveiling at the S3NS Summit in Paris (February 17, 2026, Palais Brongniart). Their product, PREMI3NS, targets a concrete business need: host and process sensitive data in a public-style cloud that is nevertheless sovereign, with infrastructure confined to Île-de-France across three datacenters.
For an SME, mid-market enterprise, or an IT organization, the question isn’t a binary “cloud vs. on‑prem” argument — it’s about reducing legal and cyber risk while preserving modern deployment velocity. Today, PREMI3NS ships with 27 services (IaaS, analytics, admin). The roadmap is ambitious: 23 more services in 2026 (targeting ~80% of common use cases) and another 18 in 2027 (aiming for ~90%). On the AI front, Vertex AI is slated for H2 2026.
The Opportunity for SMEs
If you handle critical datasets (health, finance, sensitive personal data, HR records, identity documents, scoring, fraud detection…), the proposition is straightforward: reach state-level trust without building an IT bunker.
- Reduced extraterritorial risk: a clear commercial benefit is lowering exposure to laws like the US CLOUD Act, which still complicate many procurement decisions and risk committees.
- Faster project delivery: starting on a pre-qualified infrastructure saves months spent justifying hosting choices. Your teams focus on applications, not plumbing.
- Modern cloud experience under a sovereign framework: Google Cloud’s operational DNA remains, but inside a sovereign perimeter. In practice: modernization without defaulting back to on‑prem designs.
Notably, S3NS already lists 68 customers (including EDF, France Travail, Qonto, Club Med). This isn’t a small lab POC.
Where to Be Cautious
“Sovereign cloud” is not a magic switch. There are four key vectors you must evaluate before signing.
- Cost: expect roughly a +20% price premium versus public Google Cloud. S3NS hasn’t published a per-service price breakdown, so you’ll need to actively manage TCO (compute, storage, request costs, egress, etc.).
- Single region (Île‑de‑France): for users outside the Paris region — or in neighboring countries like Switzerland or Belgium — assess latency and multi-region resilience. Some apps tolerate it; others won’t.
- Partial functional coverage: today the platform covers an estimated 60–70% of typical use cases. You may need staged migrations or temporary multi-cloud patterns until more services arrive.
- Indirect lock‑in: the stack runs on Google Cloud. Even inside a sovereign wrapper, managed services and architectural patterns can bind you to that ecosystem.
The Compliance Angle
GDPR: hosting compliance is materially simplified (FR/EU hosting, SecNumCloud framework, reduced exposure to extraterritorial laws). In practice, the compliance burden shifts to governance: map sensitive data, set retention policies, control access, enforce traceability, and document legal bases.
nLPD (Switzerland): sources don’t explicitly detail Swiss nLPD guarantees. If you operate in Switzerland, you’ll need to validate contractual guarantees and assess latency impact (single-region hosting in Île‑de‑France).
AI Act: with Vertex AI expected in H2 2026, any plan to run models or LLMs on sensitive datasets should anticipate a focused “AI governance” program (use-case validation, risk controls, oversight, and documentation).
Conclusion & Cohesium Support
S3NS PREMI3NS is a compelling option for organizations that want the operational comfort of the cloud without hitting a sovereignty or compliance wall. The decision should remain business-led: ensure the premium is controlled, the architecture is compatible, the dependency risk is understood, and you have a realistic migration plan for missing services.
Rather than cobbling a solution together, Cohesium AI can support your move with pragmatic, expert services and custom integration. We offer:
- a nLPD compliance audit + sensitive data mapping to prepare a migration to S3NS PREMI3NS, and the design of sovereign data governance;
- a cloud‑sovereignty diagnostic comparing S3NS with alternatives based on your scope (Exoscale, Scaleway, OVH, Infomaniak…), including a 2‑year TCO and a team upskilling roadmap.
Contact us to discuss a tailored integration plan or a strategic audit adapted to your risk profile and business objectives.
Contact us