Sovereign Kubernetes, hosted and operated in Europe
Run your containers on infrastructure hosted in Europe, operated by a European company, with no subcontractor under US jurisdiction. Standard Kubernetes, reversible, at a predictable cost.
A sovereign Kubernetes is a cluster where you control three things at once: where the data lives, who operates it, and which law it falls under. Hosted in Europe, operated by a European company, built on standard open source you can take back in hand.
Bunker covers the whole spectrum: a dedicated cluster that is yours alone, a managed offer to hand off the operations, a multi-cloud architecture for fault tolerance. This page is the entry point; each need has its dedicated page below.
Three ways to run sovereign Kubernetes
Whether you want your own cluster, want to hand off the operations, or want to spread your workloads, the entry point changes. Sovereignty stays the same.
Dedicated Kubernetes
A whole cluster reserved for your organisation, on dedicated hardware, hosted in Europe or on your premises. Predictable cost, nodes that are yours alone.
See dedicated KubernetesManaged Kubernetes
You hand off the operations. Managed open-source services running on our cluster today, and soon managed namespaces with a self-service console.
See the managed offerMulti-cloud Kubernetes
An agnostic infrastructure combining our servers and third-party capacity for fault tolerance, with centralised management and backups.
See multi-cloudWhat "sovereign" actually means
Hosted and operated in Europe
The cluster lives in a European datacenter and operations are handled by a European company. This is not a European datacenter attached to a US parent company: the operator falls under European law.
No subcontractor under US jurisdiction
The database (CloudNativePG, PostgreSQL), authentication (self-hosted OIDC SSO), backups (internal object storage) and the mail relay (a German provider, within the European Union) depend on no company subject to US law.
Reversible through open source
We deploy Kubernetes that conforms to the project standards. Your manifests, Helm charts and images stay portable: you can move your workloads the day you decide to, with no proprietary format holding you back.
A cost you know in advance
Rather than a usage bill that tracks your load, a stable rate on reserved resources, or a flat rate per service for the managed offer. You size it, you know what you pay.
Kubernetes hosted in Europe: what it changes
"Hosted in Europe" is only useful if the operator is European too. A cluster can run in a European datacenter while being operated by a subsidiary of a US group, in which case the data stays exposed to that group's law. At Bunker, the cluster is hosted in Europe and operated by a European company, with no subcontractor under US jurisdiction.
In practice, your production data, your backups and your secrets stay within a European perimeter, under GDPR. For a public body, a healthcare organisation or an IT department that must trace where its processing takes place, that is the difference between compliance on paper and real sovereignty. Need physical control on top? The cluster can be installed in your own datacenter.
Sovereign Kubernetes or a hyperscaler's managed Kubernetes
The managed offers from the hyperscalers take care of running the control plane. A sovereign Kubernetes also settles location, jurisdiction and reversibility.
| Criterion | Managed Kubernetes (GKE, EKS, AKS) | Bunker sovereign Kubernetes |
|---|---|---|
| Hosting | Provider datacenters | Europe |
| Operator | US provider | European company |
| Jurisdiction | United States (CLOUD Act) | France and European Union (GDPR) |
| Subcontractors | Services internal to the provider's cloud | No subcontractor under US jurisdiction |
| Cost model | Per use: control plane, nodes, outbound traffic | Stable rate or flat rate per service |
| Reversibility | Proprietary add-ons that tie you to the cloud | Standard Kubernetes, portable manifests |
Let's talk about your dedicated Kubernetes cluster
Describe your need in a minute. An engineer calls you back with an estimate and an architecture matched to your estate.
Frequently asked questions
What is a sovereign Kubernetes?
It is a Kubernetes cluster hosted in Europe and operated by a European company, with no subcontractor under a foreign jurisdiction. Your data stays under French and European law (GDPR), and the cluster runs on standard open source you can take back in hand. This contrasts with managed Kubernetes running on a US provider's cloud, exposed to the CLOUD Act.
Where is the cluster hosted?
In Europe. You can also have the cluster installed in your own datacenter (on-premise) or on your servers. In every case, operations are handled by a European company, and no subcontractor under US jurisdiction touches the infrastructure.
What is the difference between dedicated, managed and multi-cloud?
The dedicated option gives you a whole cluster reserved for your organisation. The managed option lets you hand off the operations of your services. The multi-cloud option spreads workloads across several infrastructures for fault tolerance. All three can be sovereign.
Who can shut down my Kubernetes cluster?
With a sovereign Kubernetes, no non-European provider is in a position to shut down your cluster overnight. This is the "kill switch" risk: a sanction, an embargo or a political decision can force a provider under US law to suspend a service. Infrastructure hosted in Europe, operated by a European company and reversible through open source neutralises that risk, and if you decide to leave, you take your cluster back and redeploy it elsewhere.
Is sovereign Kubernetes SecNumCloud certified?
Sovereign Kubernetes at Bunker is not SecNumCloud certified. SecNumCloud, HDS and ISO 27001 are stated objectives, not certified to date: we follow a security approach aligned with the good practices of an information security management system, without claiming a label we do not hold. The sovereignty we describe concerns hosting in Europe, the European operator and jurisdiction, all verifiable facts.
Kubernetes is a trademark of the Cloud Native Computing Foundation. Amazon EKS, Microsoft Azure AKS and Google Kubernetes Engine are trademarks of their respective publishers. Bunker is not affiliated with any of them. Comparisons are based on public offer models at the time of publication.