Public Sector Cloud Procurement

Abstract

Sovereignty is ultimately enforced or abandoned at the procurement contract, not the architecture diagram — the strongest technical design fails if the contract governing it grants the vendor unilateral termination rights, opaque subcontracting, or no verified exit path. This paper specifies a governance model for public-sector (and sovereignty-sensitive private-sector) technology procurement, tracing the history of public-sector technology procurement as a discipline. It covers vendor qualification criteria mapped to the four-plane framework in SDIS-01, exit-strategy and portability requirements, procurement vehicle design, and an oversight structure for ongoing verification rather than point-in-time certification. It presents sixteen case studies drawn from composite and anonymized procurement review experience and closes with economic and organizational considerations, a seven-phase implementation roadmap, a glossary, and a self-assessment checklist.