The cloud service provider MUST have a registered head office in the EU.

The cloud service provider MUST have a registered head office in Germany.

If the cloud service provider uses a subcontractor for the provision of services, such as operations, that subcontractor MUST also meet the criteria. If restrictions are imposed by cloud service customers for EU or Germany, they should be justified, and it should be ensured that their implementation, for example, in procurement procedures, is legally permissible on the basis of reasons such as public safety.