top of page
Business & Enterprise
Cloud Technology
Cloud Infrastructure
STACKIT
Won European sovereignty demand by converting Schwarz Group’s internal retail-scale cloud into a German and Austrian sovereign platform for regulated enterprises and public sector, despite hyperscalers’ superior global scale and developer ecosystems.
1
MODEL
BUSINESS MODEL
IaaS
- Enterprises and public-sector organizations consume IaaS, PaaS, managed Kubernetes, databases, object storage, colocation and sovereign workspace services.
- STACKIT operationalizes sovereignty through data centers located exclusively in Germany and Austria, European legal governance and infrastructure operated for European compliance requirements.
- It first proved the platform at Schwarz Group retail scale, then opened the same operational capability to external customers.
- Managed services reduce customer operational burden, while colocation and Distributed Cloud extend the model to customers needing on-premises control.
- Partnerships, including Google Workspace data residency and client-side encryption, expand the platform into regulated workplace workloads without abandoning the sovereignty position.
1. Build the platform first for a demanding internal customer whose scale, security and reliability requirements resemble the external market.
2. Prove operational maturity before selling externally; prerequisite: the internal workload can run reliably under real production pressure.
3. Define a narrow trust boundary—jurisdiction, residency, compliance and operational control—and make it verifiable.
4. Productize the internal capability into self-service infrastructure and managed services, rather than selling bespoke internal tooling.
5. Use the parent’s distribution and reference value to reach regulated buyers, while building independent sales and support capacity.
6. Avoid becoming a captive IT department with external branding; the common mis-build is opening the platform before utilization, support, billing and product management can operate as a standalone business.
DISTRIBUTION MODEL
STACKIT was built from 2018 to run Schwarz Group’s own digital transformation and protect sensitive retail data; it opened to external customers in 2022 and became a standalone company on September 1, 2024. Its scaling unit is sovereign infrastructure capacity: virtual machines, Kubernetes clusters, databases, storage and colocation must be provisioned, secured and operated across European data centers. STACKIT operates data centers in Germany and Austria, is building a fifth in Lübbenau with an announced initial capacity of about 200 MW and €11 billion investment, and was selected for the European Commission’s €180 million sovereign-cloud services contract. The model scales only if internal demand, external demand and capacity utilization grow together.
HOW THEY BUILT IT
HOW TO ARCHITECT IT
Direct Sales, Enterprise Sales, Partnerships, Channel Partners
HOW THEY OPERATIONALIZED
HOW TO REPLICATE WHAT WORKED
dm
- STACKIT initially distributed through Schwarz Group’s internal companies, using Lidl, Kaufland and other group operations as production-scale references.
- Direct enterprise sales targeted regulated industries, public sector and organizations with data-sovereignty requirements.
- Partnerships extended reach into workplace productivity and sovereign cloud; the Google Workspace arrangement added local data storage and client-side encryption.
- BT’s 2026 partnership created a route into EU sovereign-cloud demand, while public-sector selections such as the European Commission contract provided institutional validation.
What worked: An internal reference customer with real scale can validate reliability and compliance before external sales begin; the parent’s trust becomes the initial distribution asset.
Trap if copied blindly: Internal-use platforms often lack product management, self-service onboarding and commercial support; selling externally requires rebuilding the operating model as a customer-facing business, not merely opening access to internal infrastructure.
| PATTERNS OF THIS MODEL
PATTERNS IN INTERNAL-PLATFORM-TO-COMMERCIAL-CLOUD TRANSITIONS:
1. Internal scale proves feasibility, not market fit. Running a platform for a parent company demonstrates reliability but does not prove external buyers will pay for it.
2. Sovereignty creates a procurement wedge. Data residency, legal jurisdiction and compliance can outweigh feature breadth for regulated buyers.
3. Managed services determine commercial maturity. External customers need onboarding, billing, support and product roadmaps, not only access to internal infrastructure.
THE WEAKNESS: A platform built for one parent can inherit architectural assumptions, support processes and cost structures that do not fit a broad external market.
What companies with this model reveal
| OPPORTUNITY INTELLIGENCE
GOLDMINE 1 — SOVEREIGN AI FACTORIES. The opportunity is packaging European compute, data residency, model governance and compliance-ready operations for public sector and regulated enterprises; the buyer wants an AI operating environment, not raw GPUs.
GOLDMINE 2 — SOVEREIGN WORKPLACE LAYER. Productivity, email, files and AI can be delivered with client-side encryption and EU residency, turning cloud infrastructure into a workspace-control proposition.
GOLDMINE 3 — REGULATED-INDUSTRY REFERENCE ARCHITECTURES. Healthcare, finance, energy and government need pre-approved patterns for identity, logging, encryption and data residency; reusable architectures reduce sales friction and implementation cost.
THE PIT — CAPACITY WITHOUT EXTERNAL DEMAND. Building data centers ahead of contracted external customers creates utilization and financing risk.
THE SECOND PIT — PARENT-CAPTIVE ECONOMICS. If most revenue remains internal, the platform may not develop the sales, support and product discipline required for a standalone market.
MOVE WITH CAUTION — Do not sell “sovereignty” without a precise boundary: clarify which parties can access data, where backups reside, how subprocessors are governed and what exit rights exist.
Untapped Business Model / Gaps / Goldmines / Pits
Patterns & Insights
2
MARKET
mkt mt es
STACKIT entered public sector and regulated enterprises where legacy infrastructure, data-protection requirements and sovereignty concerns slowed cloud adoption. Rather than selling digitization itself, it sold a compliant infrastructure path: German and Austrian data residency, European legal governance, managed Kubernetes and colocation. Its selection for the European Commission’s €180 million sovereign-cloud contract and the federal government’s €250 million AI platform shows demand from institutions that need more than a standard public-cloud offer.
MARKET TYPE
Emerging Market
ENTRY STRATEGY
Brownfield Entry
WHY THEY WON
European sovereign cloud is emerging as regulation, geopolitical risk and AI adoption change procurement criteria. Traditional public cloud is mature, but sovereignty—not merely cloud—is the newer buying category. STACKIT’s opening was the gap between hyperscalers’ global scale and European buyers’ need for local legal control, operational transparency and protected data flows. The market remains early because sovereignty definitions, certifications and buyer expectations are still forming.
EXECUTION
STACKIT entered by modernizing Schwarz Group’s internal IT and cloud infrastructure, then offering that proven platform externally. It did not start from zero demand: the parent’s retail operations provided production-scale workloads, security requirements and a reason to build sovereign infrastructure. This was appropriate because the platform had to prove reliability and compliance internally before it could credibly sell sovereignty to external regulated buyers.
FOOTHOLD STRATEGY
Lighthouse Customer Strategy
STACKIT’s first lighthouse customer was Schwarz Group itself: Lidl, Kaufland and other group companies used the platform for retail-scale, security-sensitive operations. Their adoption proved that the infrastructure could handle demanding production workloads and created the credibility needed to approach external regulated buyers. The path outward was public sector, critical infrastructure, regulated enterprises and organizations seeking European data residency.
GROWTH CAMPAIGN
CAMPAIGNS THAT WORKED
SO WHAT: STACKIT’s strongest commercial mechanism is converting high-credibility public-sector and parent-company references into a trust-based wedge for regulated buyers.
KEY LEARNING: In sovereignty markets, institutional validation matters more than feature count; buyers need evidence that the vendor can meet legal, operational and security requirements.
HOW TO USE: Win one demanding public-sector or regulated reference, then turn its architecture and compliance evidence into a repeatable sales and delivery asset.
KEY LEARNING
In an emerging sovereign-cloud market, buyers are not simply comparing infrastructure prices; they are assessing legal exposure, data access, operational control and long-term independence. The vendor must make its sovereignty boundary concrete across legal, technical and organizational controls.
gc
Market Context
| MARKET INTELLIGENCE
PATTERNS IN INSTITUTIONAL-REFERENCE PLUS PARTNER-LED SOVEREIGN CLOUD GROWTH:
1. Public-sector validation unlocks regulated demand. Government contracts signal compliance, reliability and procurement credibility.
2. Parent references reduce perceived execution risk. A large internal customer demonstrates that the platform can operate at production scale.
3. Partnerships extend sovereignty into familiar workflows. Integrating with workplace or productivity tools makes the platform relevant beyond infrastructure specialists.
4. THE WEAKNESS: Sovereign-cloud sales can become politically and institutionally dependent; a change in public-sector budgets or partnerships can slow the growth engine.
| MARKET ENTRY PLAYBOOK
Use brownfield entry when the company already operates a demanding internal platform and can productize it for external buyers. It fails when the internal platform lacks multi-tenancy, commercial support, billing and product management; internal usefulness alone does not create external product-market fit.
How to enter
| FOOTHOLD STRATEGY PLAYBOOK
Choose a lighthouse customer whose scale and risk profile resemble the target market. Expand only after the reference produces documented operational outcomes, compliance evidence and a repeatable delivery model; otherwise each external deal becomes a custom infrastructure project.
How to get the first strong position
MARKET PATTERNS & PLAYBOOK
3
MONEY
money rev pri
STACKIT monetizes through pay-as-you-go cloud consumption, managed services and colocation contracts. Its public price list shows compute billed per vCPU-hour, Kubernetes cluster management billed per cluster-hour, and a calculator for combined compute, storage and network costs. Enterprise and public-sector deployments add longer-term commitments, making revenue a mix of consumption, managed services and contracted infrastructure.
REVENUE MODEL
Usage-Based, Contract Revenue, Service Fee
PRICING MODEL
Usage-Based Pricing, Custom Enterprise Pricing, Value-Based Pricing
WHY THEY WON
Customers pay for consumed compute, storage, Kubernetes, databases and networking, while colocation and enterprise deployments create contracted revenue. Managed services add recurring service fees by reducing the customer’s operational burden. Revenue expands as sovereign workloads, AI platforms and regulated applications remain live and grow.
STACKIT uses transparent pay-as-you-go pricing for standard cloud resources and custom pricing for enterprise, colocation and sovereign deployments. A current anchor is €0.15092590 per vCPU-hour for compute in its German price list, with Kubernetes management priced per cluster-hour. The meter is consumed infrastructure and managed-service scope, with sovereignty and compliance as value multipliers.
TARGET AUDIENCE
European public sector (sovereign cloud; want EU residency, compliance and control); regulated enterprises in finance, healthcare, energy and critical infrastructure (managed cloud; want European governance and security); large enterprises needing colocation or on-premises sovereignty (Distributed Cloud; want operational control without abandoning cloud operations).
CUSTOMER BUYING BEHAVIOUR
The trigger is data-sovereignty requirements, AI adoption, legacy modernization, regulatory pressure or a need to reduce dependence on non-European cloud providers. Buyers evaluate through RFPs, security and compliance review, architecture workshops and reference checks; decisions involve IT, legal, procurement, security and business leadership. Adoption is phased through pilots, migrations and managed-service rollout, with expansion tied to sovereign AI, data and application workloads.
| PRICING INTELLIGENCE
What makes this model effective & make customers pay
Regulated buyers are not buying cloud capacity; they are buying reduced legal, geopolitical and operational dependence on foreign infrastructure.
RULE 1 — PRICE THE SOVEREIGNTY BOUNDARY. Willingness to pay rises when residency, access control and exit rights are explicit and enforceable.
RULE 2 — PRICE THE MANAGED OUTCOME. Public-sector and regulated buyers value compliant operations, not raw virtual machines.
RULE 3 — USE COMMITMENTS TO MATCH CAPACITY. Sovereign AI and infrastructure require long-term demand visibility before capital is deployed.
RULE 4 — WATCH UTILIZATION. A sovereignty platform becomes unprofitable if capacity is built for policy narratives rather than contracted workloads.
The buyer is really buying digital sovereignty and compliant infrastructure operations, proven by the public-sector IT, security or AI-infrastructure budget.
PRICE & REVENUE
| Revenue Risk - The biggest threat to revenue stability
Capacity utilization risk: Data centers and AI infrastructure require enormous capital before external revenue is secured.
Public-sector concentration: Government contracts can be large but politically and budget sensitive.
Parent-captive risk: If Schwarz Group remains the dominant customer, external commercial discipline may lag.
Hyperscaler response: AWS, Azure and Google Cloud can offer EU regions, local partnerships and sovereign-like offerings.
Definition risk: “Sovereignty” is contested; unclear data-access, subprocessor or exit claims can undermine trust.
STACKIT is part of Schwarz Digits and does not disclose standalone revenue, ARR or profitability; its €11 billion Lübbenau investment and 200 MW initial capacity are announced plans, not completed financial results.
Where the model can break
4
MOTION
motion ge cs
STACKIT sells security-sensitive, compliance-heavy infrastructure to public sector, critical infrastructure and regulated enterprises. Its contracts require procurement, legal, security and architecture review; deployments involve migration, managed services, residency controls and sometimes colocation. Public-sector selections and enterprise partnerships indicate a consultative enterprise-sales motion rather than a pure self-serve model.
GROWTH EXPANSION MODEL
Market Development, Platform Expansion
HOW THEY EXPAND
STACKIT expanded from Schwarz Group’s internal cloud into external IaaS, PaaS, managed Kubernetes, databases, colocation and sovereign workspace services. It expanded vertically by owning and building data centers in Germany and Austria, including the planned Lübbenau campus. It expanded into AI through sovereign infrastructure for public-sector AI platforms and into workplace workloads through the Google Workspace partnership. The dependency is the sovereignty boundary: expansion must preserve EU residency, governance and operational control.
COMPETITIVE STRATEGY
Differentiation
HOW THEY COMPETE
Against AWS, Azure and Google Cloud, STACKIT differentiates through European ownership, German and Austrian residency and a sovereignty-first architecture. Against OVHcloud and other European providers, it differentiates through Schwarz Group’s retail-scale reference and public-sector validation. Its constraint is service breadth, developer ecosystem and global reach relative to hyperscalers.
GROWTH ENGINE
GTM
Content Flywheel
Schwarz Group’s internal adoption validates the platform and creates operational learning. Public-sector selections and partnerships bring external credibility; managed services and colocation convert institutional trust into recurring infrastructure relationships. Each regulated reference makes the next sovereignty-sensitive sale easier. The loop weakens if external demand remains thin, public-sector budgets slow, or the platform cannot productize internal capabilities for outside customers.
STACKIT runs a consultative, partner-led enterprise GTM. Internal Schwarz Group adoption provides the reference; direct sales and partners target public sector, regulated enterprises and organizations with sovereignty requirements. Public-sector selections and partnerships reduce institutional risk, while managed services and colocation expand the account beyond initial compute. The primary motion is enterprise sales because sovereignty, compliance and migration risk dominate the decision; self-service infrastructure supports evaluation but does not replace consultative selling.
SUSTAINING MOATS
High Customer Lock-In
moat
The moat is STACKIT’s sovereign European infrastructure boundary: German and Austrian data centers, European legal governance, Schwarz Group scale and public-sector validation. For buyers where data access and jurisdiction are strategic risks, this combination is harder to replace than a standard cloud region.
| MOAT INTELLIGENCE
THE STANDARD: A sovereignty moat lasts when legal control, physical locality and operational governance are aligned and verifiable.
RULE 1 — JURISDICTION CREATES PROCUREMENT VALUE. German and Austrian residency matters to buyers with European legal or geopolitical constraints.
RULE 2 — PARENT SCALE CREATES CREDIBILITY. Schwarz Group’s internal use proves the platform can handle demanding production workloads.
RULE 3 — COMPLIANCE EVIDENCE COMPOUNDS. Public-sector selections and certifications make future regulated sales easier.
THE SIGNAL: STACKIT’s role in the European Commission’s €180 million sovereign-cloud contract and Germany’s €250 million AI platform supports institutional validation; the moat does not protect against underutilized capacity, hyperscaler counter-positioning or an unclear sovereignty definition.
Why this company remains defensible
ARR & TAKEAWAY
ARR Journey - what to do at each stage
PRE-$1M ARR — BUILD FOR THE INTERNAL REFERENCE. Create a cloud platform for Schwarz Group’s retail-scale, security-sensitive operations; the key move was solving a real internal sovereignty problem. WATCH: avoiding an internal tool that cannot become a product.
$1–5M ARR — PRODUCTIZE THE INTERNAL CAPABILITY. Add multi-tenancy, self-service, billing, support and external product management before opening broadly.
$5–10M ARR — OPEN TO EXTERNAL DEMAND. Launch externally in 2022 and target regulated enterprises and public sector.
$10–50M ARR — BUILD INSTITUTIONAL PROOF. Win public-sector and enterprise references that validate sovereignty, compliance and operational reliability.
$50–100M ARR — EXPAND THE SOVEREIGN PLATFORM. Add managed Kubernetes, databases, colocation, Distributed Cloud and sovereign workspace workloads.
$100M+ ARR — NOT REACHED / UNVERIFIED. STACKIT does not publicly disclose standalone revenue or ARR; its planned Lübbenau campus—six buildings, roughly 200 MW initial capacity and €11 billion announced investment—represents future capacity, not current revenue.
Rule: In sovereign infrastructure, convert internal proof into external product-market fit before committing to hyperscale capacity.
COPY PLAYBOOK : What Worked → What Failed → What to Replicate → What to Avoid
THE STANDARD: Build a sovereign infrastructure business by proving the platform on a demanding internal customer, productizing it for external buyers, then using institutional references to enter regulated markets.
SEQUENCE: 1. Solve a real internal problem at production scale; prerequisite: the internal workload has security, reliability and compliance requirements similar to the target market. 2. Productize the platform before external launch; gate: external customers can self-serve, receive support and be billed without bespoke internal processes. 3. Win one institutional reference, then turn its architecture into repeatable compliance and delivery assets; gate: the reference reduces sales friction for similar regulated buyers.
WORKED: STACKIT used Schwarz Group as a production-scale lighthouse, then expanded into public sector, managed cloud and sovereign workspace partnerships.
CAUTION: Do not confuse internal IT success with external product-market fit; do not build data-center capacity ahead of contracted sovereign demand. Standalone financials are undisclosed, so replication should be measured by external revenue share, utilization, sales-cycle conversion and compliance-asset reuse.
bottom of page