Cloud sovereignty and digitalization in public transport: Using new opportunities responsibly
The discussion surrounding the further development of IT and cloud infrastructures in local public transport is becoming increasingly nuanced. While cooperation with US hyperscalers is currently viewed very critically for reasons of digital sovereignty, the picture has now changed significantly: providers such as AWS and Microsoft are responding to European requirements with concrete offerings that are specifically geared toward data protection, governance, and regional control.
At the same time, expectations for flexibility, security, and modern operational management are rising—not least in the context of critical infrastructures. Against this backdrop, many transportation companies are faced with the question of how IT and OT systems can be designed today to ensure that they are future-proof, secure, and efficient—without relinquishing central control and remaining sovereign in the long term.
US hyperscalers are moving closer to European requirements
In the public debate surrounding cloud services and data sovereignty, a clear contrast is drawn between US hyperscalers and European sovereignty. However, this view no longer reflects current developments. Major providers such as AWS and Microsoft have announced and implemented extensive investments in Europe in recent years – and are now beginning to offer new services tailored specifically to the European market.
One concrete example is the AWS European Sovereign Cloud, which is scheduled to go live at the end of 2025. This offering aims to meet the highest standards of data protection, access and operating models, and European governance – entirely within the EU, with local staff and an isolated operating structure. Similar developments are also emerging among other providers.
“This opens up new perspectives for many public transport companies: cloud services can be used with significantly greater confidence than was previously possible—without having to compromise on scalability, automation, or modern operational management”, Sebastian Ullrich, CEO at PROTOS.
From our practice: References, use cases, and industry feedback
Learn more about how PROTOS is already supporting public transport in Germany.
- Blog: Digitalization in public transport requires IT infrastructure – otherwise, it will remain patchwork
- Use Case: Generative AI securely at work: automated ticket analysis in AWS Cloud
- Reference: Migration and optimization of a travel platform for the DB Regio Bus
IT/OT convergence in public transport: potential, but also structural challenges
A growing topic in the digitalization strategy of many transport companies is the convergence of IT and OT systems. Traditionally, these areas were planned and operated separately: while IT deals with commercial processes, passenger information, sales systems, and billing, OT focuses on controlling and monitoring the operational infrastructure—such as signaling systems, vehicle control, and energy supply.
Modern architectures—especially cloud-based ones—are making it increasingly possible to view these two worlds in an integrated way. This opens up new areas of activity:
- Real-time data can be automatically transferred from OT systems to IT applications—e.g., for forecasting utilization rates or dynamically adjusting schedules.
- Operational data can be analyzed securely to enable predictive maintenance.
- Passenger information is becoming more accurate and personalized—for example, through app-based travel assistants connected to OT data.
- Security and surveillance systems can be centrally evaluated and coordinated.
This convergence is not an end in itself, but rather a possible way to improve operational efficiency, transparency, and responsiveness in public transport—while at the same time meeting growing demands for data protection, system availability, and governance.
Strategic preparation: What is possible now
Many transport companies in Germany are currently in a transitional phase: pilot projects are underway, hybrid IT architectures are emerging, and requirements for critical infrastructure are increasing. At the same time, modernization is often slowed down by limited budgets, aging system landscapes, and scarce human resources.
In this situation, it can be helpful to systematically assess the current status—for example:
- Which systems contain sensitive data (e.g., subscription management, fare revenue)?
- Where does technical debt arise due to outdated applications or non-integrated data flows?
- Which processes can be improved through IT/OT convergence?
- Which infrastructure components could potentially be transferred to sovereign cloud environments in the future?
“A structured, technology-neutral view of the existing architecture—with a particular focus on migration paths toward sovereign cloud models—often provides more clarity than the search for a grand solution”, Karsten Quellec, CTO at PROTOS.
The sovereign cloud as a realistic building block
Upcoming offerings such as the European Sovereign Cloud are not a one-size-fits-all solution, but an increasingly robust tool for the strategic development of digital infrastructures. Especially for IT/OT-related systems, where requirements for KRITIS, data protection, and availability play a central role, a gradual shift to sovereign cloud models can prove to be a viable path—with the necessary freedom and control.
The framework conditions for this are currently improving noticeably. Taking an early look at future usage options – without making any immediate commitments – can help to gain planning security and significantly simplify later migration steps.
PROTOS Technology: Cloud consulting for confident change in public transport
With AWS’s announcement of the European Sovereign Cloud, many public transport companies are facing strategic decisions: Which systems are suitable for migration? What requirements apply in the KRITIS environment? And how can the necessary transformation work be integrated into existing operating models?
PROTOS Technology has been supporting transport companies and their technology partners for many years in matters relating to cloud infrastructure. Our services include:asst:
- Consulting on the selection and evaluation of secure cloud architectures – tailored to the specific requirements of public transport
- Identification and prioritization of technical debt with a view to cloud migration and modernization
- Implementation and operational support for secure cloud infrastructures, from pilot projects to productive use
- Support for IT/OT convergence, especially for security-critical applications and the integration of sensitive operating data
We see ourselves as partners on equal footing—with sound technological expertise, but also with a clear understanding of the operational and regulatory realities in the public transport environment.
