Buyer sovereignty assessment - Sovereign Computing Initiative

Answer each question for your organisation's main infrastructure. There are no wrong answers - "Unsure" is a valid response and tells us where guidance would help. Use the information button beside each question to see what it means and where it comes from.

Your data and privacy

We use your responses only to produce your report. We delete the submitted assessment data within 7 days of producing your report, unless you ask us to keep it. We keep your contact details on record so we can follow up about Sovereign Computing - unless you choose "Report only" at the end, in which case we use your details to send your report and then delete them.

Organisation name *

Your name *

Email (for your report) *

Your role *

Organisation type *

Where your core infrastructure runs today *

1. It runs on hardware you own or that is dedicated to you *

2. Data is encrypted at rest and in transit by default *

3. You can export all data and workloads in standard formats without vendor help *

4. You, not a provider, control identity and access management *

5. You hold and control your own encryption keys and secrets *

6. You could move core workloads to another provider within 90 days *

7. Your workloads avoid proprietary, provider-specific services *

8. You have a documented, tested exit plan *

9. You could source operational support from two or more independent providers *

10. Your stack is open source and maintainable by parties other than the original vendor *

11. You have built-in high availability and tested disaster recovery *

12. You have centralised logging for audit, security, and performance *

13. Your core can operate without dependence on an external or internet service *

14. No single provider holds more than 40% of your critical infrastructure *

15. You have assessed the business impact of a provider changing its terms or access *

16. You are subject to NIS2, the Cyber Resilience Act, or data-residency rules *

Anything else we should know? (optional)

Staying in touch *

Last updated: 11 August 2026