Round seven adds 927 vendors across 78 categories, 345 of them European. The knowledge base now lists 6,254 vendors.
Round six adds 338 vendors in 32 categories, 148 of them European. The knowledge base now lists 5,327 vendors.
Round five of the country-by-country sweep adds 265 vendors in 36 categories, 260 of them European. The knowledge base now lists 4,989 vendors.
A country-by-country sweep adds 293 vendors in 34 categories, 289 of them European. The knowledge base now lists 4,724 vendors.
Round three of the category sweep adds 154 vendors in 21 categories, 94 of them European. The knowledge base now lists 4,431 vendors.
Round two of the category sweep adds 260 vendors in 32 categories, 173 of them European. The knowledge base now lists 4,277 vendors.
A sweep across 48 categories fills gaps in the knowledge base, including 202 European providers. Every vendor has sources and an introduction in four languages.
53 email marketing platforms, with AGNITAS and other European providers as alternatives, and 52 AI agents, automation platforms and local AI apps. Each with sources and an introduction in four languages.
The footer and a few page titles now name only the EU Sovereignty Score; who runs the site is in the colophon and the line at the bottom of the page.
Every country page now shows all vendors from that country with their sovereignty score (0 = high exposure, 100 = sovereign), sortable by score, alphabet or category, plus an overview by category.
The map shows how many European vendors are headquartered in each country, with a panel for the chosen country and a list of every country. The map runs entirely on our own server: no request goes to an external map service.
The alternatives page now starts with one search box and popular searches. Below it, each category shows how many vendors are European, as a number and as a bar. The categories overview shows this for every category.
The About page now shows at a glance how the score works: five dimensions weighted 20% each, the scale from 0 (high exposure) to 100 (sovereign), how we check vendors and what the evidence labels mean.
The submission form is split into the product, optional evidence that speeds up the check, and your details. Beside it is what we check before a listing goes live, and that a listing cannot be bought.
The advertising page shows the price, the format, the number of slots per category, what an ad does and does not buy, and the house rules beside the booking form at a glance.
On the support page you choose an amount and see what your donation pays for. Below it are the other ways to support the tool. The donation bar at the bottom does not appear on this page.
You now search the whole knowledge base at once, click the well-known vendors per category directly and always see your selection beside the list. From that selection you go straight to your score, or first to the optional context.
The pricing page shows the three report variants side by side, with what each one includes. Below them are the business licence and the option to support the knowledge base with a donation.
The result shows your score with the five dimensions next to the heatmap per category, followed by the main risk factors and two European alternatives per vendor with their score. The report contains the remaining alternatives, the board questions and the migration path.
Every category page now shows each vendor's sovereignty score and lets you sort by most sovereign, A to Z or country. The non-European vendors in the category also show their score, with the number of European alternatives.
Every vendor page now shows the sovereignty score at the top with its five dimensions and a short explanation for each, a facts table in which the key facts carry their evidence level, and the European alternatives, each with its own score.
The home page now shows a real example result (the demo stack, computed with the same model as the assessment), what the free assessment and the report give you, how our data is built and why it matters now.
The Digital Sovereignty Heatmap is now called EU Sovereignty Score, with a new logo, colours and typefaces. The tool, the knowledge base and the method stay the same.
The sovereignty score has been flipped. 0 now means high exposure, 100 means sovereign; higher is better. Every score is mirrored (new = 100 − old), so the relative order and the assessment itself are unchanged.
Mailcoach, a Belgian email marketing platform, is now in the catalogue. In addition, a vendor page no longer shows a security.txt file once the expiry date in that file has passed.
During the CRA research we found vendors that have changed owner or website. That information is now up to date, each with sources.
The Cyber Resilience Act signals now also appear for all 81 vendors in the cybersecurity category, such as endpoint protection, firewalls, SIEM and identity management. They do not count towards the score.
The Cyber Resilience Act signals now also appear for 190 vendors of password managers, VPNs, operating systems, browsers, virtualisation and network equipment: the product types the CRA marks as important products. They do not count towards the score.
Switzerland is not an EU member, but the EU recognises Swiss data protection as adequate. Hosting in Switzerland therefore now scores between EU hosting and hosting outside Europe. Hosting in Norway, Iceland and Liechtenstein counts as EU, because the GDPR applies there directly.
The 37 vendors in the CMS category now show which CRA signals can be found publicly, such as a security.txt, a way to report vulnerabilities and a supported-versions policy. They do not count towards the score.