Cloud sovereignty and digitalization in public transport

The discussion surrounding the further development of IT and cloud infrastructures in local public transport is becoming increasingly differentiated. While collaboration with US hyperscalers is currently viewed very critically for reasons of digital sovereignty, the picture has now changed significantly: providers such as AWS and Microsoft are responding to European requirements with concrete offers that are specifically aimed at data protection, governance and regional control.

At the same time, expectations for flexibility, security and modern operational management are increasing – not least in the context of critical infrastructures. Against this background, the question for many transport companies is how IT and OT systems can be designed today in such a way that they are operated in a sustainable, safe and efficient manner – without giving up central control options and remaining sovereign in the long term.

US hyperscalers are moving closer to European requirements

In the public discussion about cloud services and data sovereignty, a clear contrast is drawn between US hyperscalers and European sovereignty. However, this view no longer does justice to current developments. Large providers such as AWS and Microsoft have announced and implemented extensive investments in Europe in recent years – and are now starting to to provide new offers specifically tailored to the European region.

A concrete example is this AWS European Sovereign Cloudwhose operational start is planned for the end of 2025. This offering aims to meet the highest requirements for data protection, access and operating models as well as European governance – completely within the EU, with local staff and an isolated operational structure. Similar developments are also emerging from other providers.

From our practice: References, use cases & voices about the industry

Find out more about how PROTOS already supports public transport in Germany.

IT/OT convergence in public transport: potential but also structural challenges

A growing topic in the digitalization strategy of many transport companies is this Merging IT and OT systems. Traditionally, these areas were planned and operated separately: While IT deals with commercial processes, passenger information, sales systems or billing, the focus of OT is on controlling and monitoring the operating infrastructure – such as signaling systems, vehicle control or energy supply.

Modern architectures – especially cloud-based ones – make one integrated view of these two worlds increasingly possible. This opens up new fields of action:

• Real-time data from OT systems can flow automatically into IT applications – e.g. B. to forecast capacity utilization or dynamic timetable adjustment.

• Operationally relevant data can be safely analyzed predictive maintenance to enable.

• Passenger information is becoming more precise and individualized – for example through app-based travel assistants connected to OT data.

• Security and monitoring systems can be evaluated and coordinated centrally.

This convergence is not an end in itself, but a possible way forward Operational efficiency, transparency and responsiveness in public transport – while at the same time increasing demands on data protection, system availability and governance.

Strategic preparation: What is possible now

Many transport companies in Germany are currently in a transition phase: pilot projects are underway, hybrid IT architectures are emerging, and criticality requirements are increasing. At the same time, modernization is often slowed down by limited budgets, evolved system landscapes and scarce human resources.

In this situation, it can be helpful to systematically assess the current status – for example:

• Which systems contain sensitive data (e.g. subscription management, fare revenue)?
• Where does technical debt arise from outdated applications or unintegrated data flows?
• Which processes can be improved through IT/OT convergence?
• Which parts of the infrastructure could potentially be transferred to sovereign cloud environments?

“A structured, technology-open look at the existing architecture – with particular attention to migration paths towards sovereign cloud models – often creates more clarity than looking for a big hit,” Karsten QuellecCTO bei PROTOS.

The sovereign cloud as a realistic building block

The upcoming offerings such as the European Sovereign Cloud are not a blanket solution, but are an increasingly resilient tool for the strategic development of digital infrastructures. This can be particularly true for IT/OT-related systems where CRITIS, data protection and availability requirements play a central role a gradual shift to sovereign cloud models as a viable path prove – with the necessary freedom of design and control.

The framework conditions for this are currently improving noticeably. An early look at future possible uses – without making any immediate determination – can help Gain planning security and to significantly simplify later migration steps.

PROTOS Technology: Cloud consulting for confident change in public transport

With a view to the announced European Sovereign Cloud from AWS, many public transport companies are faced with strategic decisions: Which systems are suitable for migration? What requirements apply in the KRITIS environment? And how can the necessary transformation work be integrated into existing operating models?

PROTOS technology has been supporting transport companies and their technology partners in cloud infrastructure issues for many years. Our offer includes:

• Advice on the selection and evaluation of sovereign cloud architectures – tailored to the specific requirements of public transport

• Identifying and prioritizing technical debt with an eye on cloud migration and modernization

• Implementation and operational support of sovereign cloud infrastructuresfrom pilot projects to productive use

• Supporting IT/OT convergenceespecially in safety-critical applications and the integration of sensitive operating data

We see ourselves as partners on an equal footing – with sound technological expertise, but also with a clear understanding of the operational and regulatory realities in the public transport environment.