Image generated with AI
Digital sovereignty goes beyond data residency. It is about maintaining effective control over your data, services and operations, managing critical external dependencies, and addressing exposure to foreign jurisdictions and influence. This self-assessment helps you evaluate your current level of digital sovereignty and identify areas for improvement.
Control or decisive authority sits outside the EU, or no meaningful safeguards exist. Contracts and controls are absent or ineffective, and evidence is missing.
Some EU elements exist, such as an EU entity or policy statements, but non-EU override or practical exposure remains dominant. Safeguards are mostly formal, weakly enforceable, or easy to bypass, and evidence is minimal.
EU control is partial, but there is still a material non-EU dependency or enforceability gap. Mitigations exist and are documented, but risk remains relevant for continuity, control, or legal exposure.
EU control is clearly leading, with only narrow, documented, low-impact exceptions. Controls are operational, tested where relevant, and evidence is largely available.
Control points, legal posture, and operational capability are fully EU-controlled, or operated under an EU-trusted custodian model, with no material non-EU override. Controls are enforceable, consistently applied, and supported by service-specific evidence suitable for review and audit.
1 This free Digital Sovereignty Basic Self-Assessment is an informational, indicative self-assessment based on a simplified independent adaptation of the European Commission Cloud Sovereignty Framework (Source: European Commission, Cloud Sovereignty Framework, Version 1.2.1 – Oct. 2025. © European Union, 2025. Reuse is authorised under Commission Decision 2011/833/EU). The result is generated solely from the answers selected by the user. T-Systems does not verify those answers or the underlying evidence.
Use of this free tool does not create a contractual, advisory, or consultancy relationship between the user and T-Systems. The output does not constitute legal, regulatory, compliance, security, audit, procurement, or other professional advice. It is not a certification, assurance statement, warranty, or guarantee of sovereignty or compliance. It does not represent an assessment, approval, or endorsement by the European Commission.
The tool is provided “as is” and “as available” without warranty of any kind, express or implied. The assessment may not cover all facts, dependencies, jurisdictions, or contributing factors relevant to a specific organisation or service.
T-Systems International GmbH accepts no liability for the accuracy, completeness, or suitability of the assessment result, except in cases of intent (Vorsatz) or gross negligence (grobe Fahrlässigkeit) and — to the extent mandatory under law — for injury to life, body, or health.
Users must not rely solely on the result when making legal, compliance, procurement, migration, or investment decisions and must obtain independent professional advice where required. Assessment responses are stored exclusively in the user’s browser (Local Storage) and are not transmitted to T-Systems. T-Systems does not access, collect, or process this data.
This disclaimer and any non-contractual obligations arising from use of the tool are governed by the laws of the Federal Republic of Germany.
In addition to this Disclaimer, the General Terms and Conditions for Work Performance and Services apply.
2 Source: European Commission, Cloud Sovereignty Framework, Version 1.2.1 – Oct. 2025. © European Union, 225. Reuse is authorised under Commission Decision 2011/833/EU.
