Sovereign Video Conferencing: Open Source Instead of U.S. Hyperscalers
Digital Sovereignty: From a Letter of Intent to a Procurement Issue
- Digital Sovereignty
A video conferencing solution is considered sovereign when an organization can review the software, operate it itself, and switch providers if necessary, and when the provider is subject to the laws in effect where the data is processed. Open-source solutions from Europe are best suited to meet these conditions. They reduce dependence on U.S. hyperscalers without compromising data protection.
Digital sovereignty has been on the political agenda for years at the federal, state, and European Union levels. This refers to the ability to design, operate, and switch digital infrastructure independently. Decisions on this matter are rarely made in strategy papers but rather in procurement: What software runs in government agencies, schools, and businesses? Who owns the code? Where is the data stored?
Why are video conferences the benchmark for digital sovereignty?
Because hardly any other application has become so commonplace while also conveying such sensitive content. Performance reviews, administrative procedures, classes, client meetings—everything runs on the same technology. Anyone who relinquishes control here is doing so in an area that is used every day.
What risks arise from dependence on U.S. hyperscalers?
A large portion of Europe’s cloud and communications infrastructure is in the hands of just a few U.S. providers. This gives rise to three risks.
How legally sound is data transfer to the U.S.?
The European Court of Justice has already declared two agreements governing data transfers to the U.S.—Safe Harbor (2015) and Privacy Shield (2020)—invalid. The third, the EU-U.S. Data Privacy Framework, was upheld by the EU Court in September 2025. The ECJ will rule on the appeal that has been filed. For data controllers, this means planning uncertainty: Their data protection compliance depends on a framework over which they have no control and whose two predecessors have been overturned.
What does the CLOUD Act mean for data stored in EU data centers?
The U.S. CLOUD Act allows U.S. authorities, under certain conditions, to access data controlled by a U.S. company, regardless of where it is stored. A data center in the EU therefore does not necessarily resolve this conflict as long as the provider is subject to U.S. law. For organizations with specific secrecy and confidentiality obligations, this is a key consideration.
Why are vendor lock-in and a lack of transparency a problem?
Proprietary systems make switching, auditing, and customization difficult. Without access to the source code, users can only take security claims at face value. Added to this are pricing models, product decisions, and licensing terms that the provider can change unilaterally.
What Defines Sovereign Video Conferencing
These risks give rise to criteria against which solutions can be evaluated:
Open source. The software is auditable, and its operation is not tied to a single provider. Switching providers or operating the software in-house remains possible.
European jurisdictions and data centers. Operations are conducted exclusively within the EU or the EEA, and the provider is subject to European law.
Effective encryption. End-to-end encryption based on open standards reduces the attack surface and the number of people who can view content.
Accessibility and compliance. Public agencies require solutions that meet requirements such as the BITV and WCAG 2.1 and integrate seamlessly into procurement and data protection processes.
openVisavid as a European open-source alternative
openVisavid is an enterprise open-source video conferencing solution that addresses these criteria. openVisavid GmbH was founded on July 1, 2026. Visavid, the product on which openVisavid is based, has been in use since 2020, including at private schools, professional associations, tax advisors, and law firms. Since 2021, it has been used in more than 6,200 schools as part of the Bayern Cloud Schule initiative, and it is also used by the Federal Police, for example.
No single product can make anyone digitally sovereign
Digital sovereignty stems from architectural decisions, procurement practices, operational expertise, and open interfaces. Open-source solutions from Europe are a necessary foundation for this because they enable transparency, interoperability, and control over operations. However, they do not replace the work of clearly defining requirements, selecting operational models, and demanding security certifications.
Video conferencing is a good place to start here because it involves sensitive communication, and European alternatives can be implemented with manageable effort. openVisavid offers an open-source solution operated in Europe that is already in productive use in government and education.
