00 AI Sovereignty Check

How sovereign is your AI?

Twelve questions. Five minutes. No email. No tracking. You'll find out where your company stands on AI sovereignty — and where you have gaps that many European mid-market companies share.

Anonymous & local. Your result never leaves your browser.

Four areas that determine AI sovereignty.

Data control

Where does your data live, who has access?

Model sovereignty

Which AI do you use, who controls it?

Economics

What does it cost long-term, who profits?

Compliance & resilience

How safe are you regulatorily and technically?

Section 1 of 4

01 · Data control

Where does your data live, who has access?

1.1 Where are your company documents processed when you use AI?

Entirely in our own network (local) Partly local, partly cloud (e.g. Microsoft 365) Entirely in a US provider's cloud We don't know exactly

1.2 Who can technically access your data when it is used for AI requests?

Only authorized employees of our company Also the AI provider, contractually limited Also the AI provider and potentially US authorities (CLOUD Act) We haven't checked this

1.3 Do you have a written guarantee that your data will not be used for model training?

Yes, contractually guaranteed (or technically excluded) Yes, in the provider's terms No, that's the provider's default setting We don't know

Please answer all questions to continue.

Section 2 of 4

02 · Model sovereignty

Which AI do you use, who controls it?

2.1 Which AI models does your company primarily use today?

Open-source models, deployed locally Models from European providers (e.g. Mistral, Aleph Alpha) Proprietary models from US providers (OpenAI, Google, Anthropic) A mix — and we're losing track

2.2 What happens if your AI provider doubles their pricing or discontinues the service?

Nothing — we can switch providers without issue It would take effort, but no show-stopper We would be in significant dependency We would have an operational problem

2.3 Can your AI applications continue to work without an internet connection?

Yes, fully Partially — critical functions yes No, without internet everything stops We have never tested this

Please answer all questions to continue.

Section 3 of 4

03 · Economics

What does it cost long-term, who profits?

3.1 How do you currently pay for AI usage?

One-time investment, we own the solution Flat rate, independent of user count Per user per month (cloud license) Per request / token consumption

3.2 Do you have a 5-year cost projection for your AI usage?

Yes, with concrete numbers and scenarios Rough estimate — we know the order of magnitude No, we renew licenses annually as needed We have never calculated it

3.3 Who benefits from the long-term learning effect of your AI usage?

We do — the model learns with our data Both — us and the provider, in a controlled way Mainly the provider — they train on our data We haven't checked this

Please answer all questions to continue.

Section 4 of 4

04 · Compliance & resilience

How safe are you regulatorily and technically?

4.1 Do you have a documented AI compliance strategy for the EU AI Act?

Yes, written down and maintained Yes, internally discussed but not documented No, we're waiting and seeing What is the EU AI Act?

4.2 If your AI provider has a data incident — how many of your customers would you have to inform?

None — data does not leave our network A few specific customers Many — we process a lot of customer data in AI tools We wouldn't know

4.3 What happens to your AI when your internet goes down?

It keeps running — everything is local Reduced functionality Nothing — complete dependency We'd have to test

Please answer all questions to continue.

Your result

0 of 36

Score by area

Methodology: 0–3 points per answer. Maximum 36 points. 0–11 = High dependency · 12–24 = Partially sovereign · 25–36 = Sovereign.

How sovereign is your AI?

Four areas that determine AI sovereignty.

Data control

Model sovereignty

Economics

Compliance & resilience

Where does your data live, who has access?

Which AI do you use, who controls it?

What does it cost long-term, who profits?

How safe are you regulatorily and technically?

Score by area

Let's talk.Or just send us a note.

Let's talk.
Or just send us a note.