Study Reveals German Companies' Heavy Dependence on Global AI Providers and Governance Challenges

A recent study by Red Hat, conducted among IT decision-makers in Germany and other European countries, has highlighted significant dependency of German companies on global AI providers, alongside governance and sovereignty challenges. According to the survey, only 57% of German companies have a concrete exit strategy if their primary AI provider were to restrict access, while 37% foresee moderate to severe disruptions to business continuity if forced to switch providers. This points to a critical vulnerability in the AI operations of many firms.

The study also found governance gaps in AI adoption, with only 30% of respondents reporting mature governance structures for their Agentic AI solutions. Data transparency remains problematic — just over half (51%) of German firms have full visibility of data location and processing, while 46% only have partial insight. In response to these concerns, 72% of German IT leaders support political mandates to establish trustworthy, sovereign AI grounded in Open Source principles. Moreover, 69% believe Open Source plays a crucial role in enhancing control over AI development and operations, potentially reducing dependency on foreign providers.

This finding gains additional relevance as the EU AI Act prepares to take effect in August 2026, threatening companies with fines up to €35 million or 7% of global revenue for non-compliance. The Act aims to ensure transparency, accountability, and sovereignty over AI systems. The Red Hat study underscores that genuine AI sovereignty involves not only technology but also the ability to orchestrate and pivot among different AI providers. German firms are showing strong interest in sovereign AI solutions to secure operational resilience amid intensifying regulatory scrutiny and geopolitical risks.

In the broader context, 90% of companies in the DACH region are already pursuing greater digital independence, particularly focusing on data residency within the EU. Regulatory changes under the EU Digital Omnibus seek to harmonize AI and data regulations and ease bureaucratic loads, yet they demand companies to revamp internal compliance processes urgently.

Red Hat executives emphasized that transparency and accountability are paramount for trustworthy AI systems. The combination of evolving regulation and rising business risks is prompting German firms to rethink their AI strategies, pushing for greater governance maturity and political support for open, sovereign AI frameworks. The study’s insights provide an urgent call to action to mitigate dependency risks and ensure business continuity in the rapidly evolving AI landscape.