A Threshold Low Enough To Matter

Prime Minister Donald Tusk's cabinet confirmed in June 2026 that a mandatory technological sovereignty test, test suwerenności technologicznej, will apply to Polish public-sector technology purchases above 5 million zloty, about EUR 1.15 million at current exchange rates, and to infrastructure projects above 15 million zloty, about EUR 3.45 million. The scoring runs alongside the usual price and functionality tests and weighs five factors: supplier jurisdiction, the practical cost of migrating away from a vendor, use of open standards, supply-chain security, and dependency on a single supplier.

The number matters more than it looks. Brussels has spent 2026 awarding multi-hundred-million-euro sovereign cloud contracts to a handful of providers. A 5-million-zloty bar reaches far below that: a regional hospital's records system, a municipality's case-management software, a ministry's helpdesk contract all qualify. That is the design, not an accident.

A Trade Number, Not A Breach

No hack, court order or outage is cited as the trigger. The case comes from a report, Cyfrowa racja stanu, Digital Reason of State, published by the Polish Cloud Association, chaired by Wiesław Wilk, and the Polish Economic Network, co-authored by Maria Świetlik and Dr. Jan Oleszczuk-Zygmuntowski. Citing Łukasiewicz Centre analysis, the report puts Poland's digital-technology trade deficit above 60 billion zloty a year.

The trend behind that number is what makes it stick: digital imports rose from roughly 9 billion zloty in 2016 to nearly 48 billion zloty in 2024, about 25 percent annual growth, while digital exports stayed close to 3 billion zloty over the same period. A security argument can be debated case by case. A widening line on a trade balance sheet is harder to argue away.

The State Does Not Know What It Buys

Central Polish public administration spent more than 7 billion zloty on IT systems development and maintenance in 2024 alone, and officials have acknowledged they cannot say what share of that reached Polish suppliers versus foreign ones. Marcin Wysocki, deputy director of the Cybersecurity Department at the Ministry of Digital Affairs, described the goal as restoring visibility rather than shutting vendors out: technological sovereignty, in his words, is the state's ability to make informed choices, maintain control over its data, ensure operational continuity and manage technological dependencies.

The stated ambition is domestic alternatives capturing 20 to 30 percent of specific segments, government cloud services, databases, enterprise systems, within five years, a timeline officials call ambitious but achievable rather than guaranteed.

A Different Machine From France's Exit

France's Health Data Hub, covered separately by Servola, took the opposite shape: one high-visibility migration of a single national database off Microsoft Azure, executed against a fixed 2026 deadline. Poland's test is a standing filter applied automatically to every qualifying purchase, indefinitely, with no single vendor or dataset named as the target.

The threshold is what makes that difference matter. A 5-million-zloty bar is low enough to touch far more individual contracts in its first year than any single headline sovereign-cloud tender touches in a year. The unglamorous procurement clause, applied quietly to hundreds of ordinary purchases, may end up moving more total spending than the dramatic migrations that make headlines.

What Changes For Vendors Selling Into Poland

Bidders on qualifying contracts will need to document supplier jurisdiction, demonstrate a credible exit path, and show open-standards compatibility as scored criteria, not a compliance checkbox filed and forgotten. Non-EU cloud and software vendors are not barred; ministry officials describe the test as a scoring input, and US and other foreign vendors can still win. What changes is that jurisdiction and lock-in risk now carry a documented weight in the award decision, where before they did not enter the evaluation at all.

The Polish Cloud Association's own report argues the deeper value is administrative memory: for the first time, Warsaw will hold a structured, contract-by-contract record of where its technology dependencies actually sit, rather than reconstructing the picture after a crisis forces the question.