Risky Configuration: China’s Footprint in Germany’s Technology Stack

Executive Summary

Germany—just like the EU as a whole—has recognized the strategic importance of reducing unilateral dependencies in digital technologies. In the face of geopolitical threats and economic uncertainty, the new German government has vowed to strengthen the country’s technological growth and resilience. 

Germany confronts a changing global order, in which it faces a growing threat from Russia while traditional security guarantees under the transatlantic alliance have weakened. While the threat from Russia dominates Berlin’s immediate strategic concerns, the growing alignment between Moscow and Beijing demands that this challenge cannot be viewed in isolation. As Germany recalibrates its national security posture from a peacetime orientation to one prepared for potential war, it is crucial to address the deepening strategic ties between Russia and the People’s Republic of China (PRC) as part of a broader, interconnected threat.

The PRC’s growing dominance in the German technology landscape threatens both Germany’s national security and its long-term economic resilience. Germany’s new government should now make increased efforts to effectively implement its China strategy, especially in the technology sector. Reducing exposure to systemic risks and de-risking the technological ecosystem is an urgent economic need and should be a security priority.

This analysis examines the digital footprint of PRC entities in Germany’s technology ecosystem. It applies a “tech stack” framework to assess this footprint and its associated risks across five technology layers: network infrastructure, data infrastructure, device, application, and governance. The report illustrates the PRC’s involvement within each layer, situates this engagement within the PRC’s broader strategic objectives and identifies key vulnerabilities that could undermine Germany’s security and competitiveness if left unaddressed.