Recital (53)

printed pages 27–28 · source locator: Recital (53); printed pages 27–28

Official source: COM(2026) 502 final — Proposal for a Cloud and AI Development Act

(53)

It is important that national competent authorities of establishment of the cloud
            computing service provider can assess whether cloud computing service providers
            aiming to provide their cloud computing services to Union entities and public sector
            bodies offer the appropriate assurance level. A mechanism for recognition of cloud

     29
            Regulation (EU, Euratom) 2024/2509 of the European Parliament and of the Council of 23 September
            2024 on the financial rules applicable to the general budget of the Union (recast) (OJ L, 2024/2509,
            26.9.2024, ELI: http://data.europa.eu/eli/reg/2024/2509/oj).

            computing services that either have an EU statement of conformity against Union
            assurance level 1 or have received a ‘positive’ audit opinion and audit report by an
            auditing organisation has been established. Once the mechanism of recognition has
            been positively concluded, the cloud computing service is recognised across the Union
            as offering the appropriate Union assurance level. In the interest of clarity, simplicity
            and effectiveness, the powers to supervise and enforce the obligations relating to the
            cloud computing sovereignty framework should be conferred to the competent
            authorities in the Member State where the main establishment of the cloud computing
            service provider is located.

Qualifications

• Text is a faithful source slice; PDF page furniture and form-feed separators are removed.
• Source footnotes remain in the source slice in their printed location.