EU Sovereignty Score

1077 open-source vendors

1077 vendors in the knowledge base offer their software as open source, across 88 categories. Open source is the highest form of technological sovereignty: you can audit the source code, self-host it, and keep the encryption keys under your own control, regardless of the developer's headquarters.

By category

Last checked: 11 October 2026.

How we count

A vendor counts as open source here when its source code is published under an OSI-approved licence (for example Apache 2.0, MIT, GPL or AGPL) and that code is what actually runs the product, not a proprietary wrapper around an open core. Each entry carries one of four sovereignty badges: EU sovereign (headquartered and hosted inside the EU/EEA), Self-hosted / open source (you control where it runs, regardless of the maintainer's location), EU-hosted, non-EU parent (hosted in the EU but ultimately owned outside it — the real CLOUD Act signal), and Non-EU vendor (headquartered and typically hosted outside the EU). The badge reflects where control actually sits, not just where the headquarters is. Borderline ownership and licensing cases follow our published provenance policy, which sets out how we classify open-core products, foundation-governed projects and recently acquired vendors. Provenance policy (ADR-001)