Buyer sovereignty assessment - Sovereign Computing Initiaitve

Answer each question for your organisation's main infrastructure. There are no wrong answers - "Unsure" is a valid response and tells us where guidance would help. We will store your responses and send a tailored report to the email you provide.

Organisation name *

Your name *

Email (for your report) *

Your role *

Organisation type *

Where your core infrastructure runs today *

It runs on hardware you own or that is dedicated to you *

Data is encrypted at rest and in transit by default *

You can export all data and workloads in standard formats without vendor help *

You, not a provider, control identity and access management *

You hold and control your own encryption keys and secrets *

You could move core workloads to another provider within 90 days *

Your workloads avoid proprietary, provider-specific services *

You have a documented, tested exit plan *

You could source operational support from two or more independent providers *

Your stack is open source and maintainable by parties other than the original vendor *

You have built-in high availability and tested disaster recovery *

You have centralised logging for audit, security, and performance *

Your core can operate without dependence on an external or internet service *

No single provider holds more than 30% of your critical infrastructure *

You have assessed the business impact of a provider changing its terms or access *

You are subject to NIS2, the Cyber Resilience Act, or data-residency rules *

What is prompting this assessment?

May we contact you with your report? *

Last updated: 26 June 2026