Skip to content

Supplier-side index: what a sovereignty score should measure

The European Commission has awarded one of its own cloud tenders on a sovereignty score, in April 2026, and a proposed Regulation would extend assurance levels to every Union public body. Every published framework lists its dimensions and weights without deriving them. This programme specifies the index behind the EuroStack Solution Finder: what it measures about one service from one supplier, which evidence it admits and at what strength, and how it combines that evidence into a result a buyer can read and check. Its policy reading of the Commission's own assessment is the note Ask Me Something Hard.

Building a Supplier-Side Sovereignty Index for the EuroStack Solution Finder

Paper page PDF

The index measures how much of six decisions about a service stay with the buyer or can be taken back: who can read the data, alter the service, stop it, set the terms, decide what it becomes, and maintain or replace it. Each is read as a degree, retained, recoverable or ceded, with the European value-added content of each euro paid reported beside them. A criterion enters as evidence of a stated strength: 94 criteria from eighteen frameworks are coded blind under a written rulebook, and fifteen are strong under every coding. The channel a criterion is read through bounds what a reading can show, so a supplier's own declarations move the estimate little and count once. The result is a profile with its coverage: a degree, or a bound such as at least recoverable, only where the evidence makes it more than 80 percent likely, and "not established" elsewhere. The paper prepares the scoring; a review of twenty services is designed to test its classification.