The French Ministry of National Education has extended its framework agreement with Microsoft until 2029, a decision that contradicts the state’s own directives on digital sovereignty and data security. The renewal, confirmed on March 9, 2026, allows for spending of up to €152 million on Microsoft products and services across the Ministries of National Education, Higher Education, Sports, and Youth.
The agreement, initially signed in 2020 and renewed in March 2025 for twelve months with a possible tacit extension, covers approximately one million workstations and servers. The decision to extend the contract for four additional years, despite internal recommendations to the contrary, has sparked criticism regarding France’s technological dependence on American companies.
France’s “Cloud at the Center” doctrine, outlined in a 2023 circular, prioritizes the use of cloud providers certified by SecNumCloud, the country’s highest level of cybersecurity certification. SecNumCloud certification guarantees immunity against extraterritorial laws like the U.S. Cloud Act, effectively excluding American tech giants like Microsoft, Amazon, and Google.
Just weeks before the contract extension was finalized, the Ministry’s Directorate of Digital Education issued a note to regional administrators, or recteurs, explicitly advising against the use of Microsoft 365 for sensitive data. This internal directive underscores the apparent contradiction between the Ministry’s public recommendations and its procurement decisions.
Concerns over data security have been amplified by recent actions from the U.S. Government. In February 2025, Microsoft reportedly removed the email account of a prosecutor from the International Criminal Court following pressure from Washington. The FISA and Cloud Act grant U.S. Authorities access to data processed by American companies, even when hosted in Europe.
The Ministry maintains that its data is stored on state-owned servers running Linux, and is therefore not directly exposed. However, critics point out that Microsoft software remains essential for the operation of these servers, leaving some level of risk.
The contract is valued at a maximum of €152 million excluding taxes, with €130 million allocated specifically for software licenses. The decision to proceed with the extension was reported by Mediapart on March 7, 2026, and has since been confirmed by multiple sources.
As of March 10, 2026, the Ministry of National Education has not issued a public statement addressing the concerns raised regarding the contract extension and its alignment with national sovereignty goals.
