“Technological sovereignty is now a strategic pillar for European industry,” declared a statement from Orange, prefacing the French telco’s research into developing a sovereign content delivery network (CDN) hosted entirely in Europe.

In other words, Orange wants European traffic to stay on European infrastructure, controlled by European network operators, using European-made technologies. This is Orange’s warning shot across the bow of public CDNs like AWS CloudFront, Akamai, Cloudflare, and Google.

The idea for a sovereign CDN was presented at Orange OpenTech, the operator’s flagship technology research event last autumn, under the subject of “Trusted Content Delivery Boost”- a pitch designed to both bolster quality of service and protect infrastructure against cybersecurity attacks, even in the event of a partial network failure.

The “Trusted CDN” topic dovetails with the “LiveRemediation” project, which demonstrates how AI agents might be able to support diagnostics and even reduce energy consumption when fully integrated into the Orange network.

Hosted at the Orange Gardens campus in the Paris suburbs, the timing of Orange OpenTech was appropriate, given the coinciding widely disruptive Cloudflare outage. Meanwhile, CDN reclassification is ruffling feathers in Italy.

In the case of Orange, which operates a proprietary CDN via its Orange Wholesale division, the organization is advocating not only for hosting local data in European jurisdictions, but equipping those jurisdictions with the tools required for real-time analysis, protection, and optimization of data flows—without having to rely on external actors.

With Orange advocating for a shift of traffic away from US-owned infrastructure, this in turn will hurt the wider cybersecurity ecosystems surrounding the major hyperscalers.

Much has been written on Akamai’s transition from traditional CDN traffic shifter to successful cybersecurity slinger, and now the company’s European expansion plans could be clipped by Orange’s sovereignty shears.

The security layer of Orange’s CDN infrastructure has been recently strengthened by the integration of Orange Cyberdefense (OCD) and certified local “Trust” technologies to ensure that demonstrations comply with strict reliability criteria and technical specifications. In doing so, Orange is making an implicit and potentially antagonistic argument that US CDN security is untrustworthy.

OCD is a fitting acronym, frankly, for a feature that positions the Orange CDN as the anti-public cloud option, obsessively tightening control over every layer of traffic and telemetry.

For instance, Orange claims that (unlike public CDN providers) it has imposed a ban on pirated content. Furthermore, Orange guarantees that management data is always hosted in Europe where it is protected (unlike public CDN providers) from non-European legislation like the Cloud Act.

European data in US hands

The US Cloud Act (2018) mandates that any US-based company must hand over data no matter where that data is physically stored—whether at the headquarters in Houston or a datacenter in Dublin.

A US cloud provider may therefore be legally forced to deliver EU citizens’ data to US authorities, even when in violation of GDPR restrictions. This has irked EU policymakers, and the failure to challenge the US is forcing local infrastructure owners like Orange to forge their own anti-US, sovereignty rhetoric.

In addition, Orange’s statement about providing real-time traffic analysis without relying on external actors is another swipe at Big Tech, but also potentially some smaller vendors specializing in CDN analytics or traffic steering.

Launched in mid-2023, Orange’s CDN has since been reinforced with an integrated firewall that protects against DDoS attacks and manages bots, accelerated by the integration of AI into the Security Operations Center. We should not forget the core job of a CDN either, as Orange’s CDN has also added image optimization, edge computing, and storage features since its launch a year and a half ago.

Of course, Orange’s sovereignty masterplan must originate in France and expand outward. Currently, Orange has eight points of presence (PoPs) in France, compared to only one or two each for the major public CDNs.

An important distinction is why Orange is only throwing public CDNs under the bus, while private CDNs from Big Tech firms—like Netflix’s Open Connect CDN—get a free pass. The reason is that private CDN appliances are already deployed inside ISP networks, including in Orange’s own footprint, which means the sovereignty risk is markedly lower.

Operators control the location of these appliances and the network integration itself, as well as power and cooling, while dictating routing policies that govern how traffic enters the ISP backbone. However, in the example of Open Connect, Netflix maintains control of the software stack, cache logic, request handling, and content selection. This efficiency trade means private CDNs are not seen as a threat to sovereignty.

With Orange upselling its in-house CDN, we can expect it to target European broadcasters, governments, regulated industries, and even banks—effectively any organization that eats up the sovereignty narrative for breakfast.

Meanwhile, Orange’s LiveRemediation demo presented at the OpenTech event was fully on the buzztrain, demonstrating the integration of agentic AI into the heart of the Orange network, pushing agents far deeper than cloud workflows.

For instance, AI agents are being deployed in Orange’s Livebox home routers to repair processes and retrieve information that is fed directly to customer service advisors.

Again, sovereignty is central to LiveRemediation, with Orange emphasizing that smaller AI models can be just as fast for targeted tasks than some of the larger and more costly models (and, of course, much less energy hungry).

There is also an angle for shipping these sovereign AI agents to SMEs in the Orange footprint to develop content such as text and images for social media, though this is early days.

Right now, the priority is to stick it to Big Tech, in the most quintessentially French way.

This article originally appeared in Faultline from Rethink Research