This category covers content delivery networks, DNS hosting and resolution, domain registration and related edge services such as DDoS protection and web application firewalls. Organisations use them to make websites and applications fast and available, to point domain names to the right services and to absorb attacks.
These services sit in front of everything else. A CDN that terminates TLS sees traffic in clear text, including cookies, tokens and form data, and a DNS or registrar account controls whether your domain resolves at all. Losing or being locked out of a domain or its nameservers is an availability and security incident in itself. NIS2 counts digital infrastructure among the sectors covered by its risk-management rules. Lock-in arises from proprietary edge rules and workers, and from registrar transfer locks and DNSSEC key handling when you move.
When choosing a European option, ask where edge nodes and logs are located, who owns the operator, whether registry and registrar fall under European jurisdiction, how DNSSEC and domain transfers work, and whether you can keep a secondary DNS provider so that no single party controls name resolution on its own.