The BSI has published criteria for cloud autonomy. They are intended to help assess the sovereignty of cloud services.