Digital sovereignty

Your data,
under European law.

Microsoft 365 is a good product and most teams should keep running it. But some of your workloads sit under a jurisdiction you did not choose. This page shows which ones can move, which ones should not, and what the swap actually costs you.

The case

Four things worth knowing.

01

Residency is not jurisdiction

Data stored in a German datacentre operated by a US company is still reachable under the US CLOUD Act. Where the bytes sit and which law applies are two separate questions, and only one of them is on the marketing page.

02

The EU Data Act changed the exit maths

The Data Act obliges cloud providers to make switching possible and to phase out egress fees. Leaving got cheaper — which makes it worth knowing what leaving would involve, even if you never do it.

03

Some data is more equal than others

Board minutes, HR files, legal correspondence and patient records carry a different risk profile than a shared team calendar. Sovereignty is a question you answer per workload, not per company.

04

Lock-in is a cost you already pay

If moving off a platform would take a year and a consultant, that dependency has a price even while you stay. Knowing the number is useful at renewal time.

Not all-or-nothing

Nobody sensible leaves Microsoft entirely.

The useful question is not "Microsoft or open source" — it is which workload belongs where. In practice most teams keep the majority of Microsoft 365 and move two or three things where the jurisdiction genuinely matters. That is a hybrid, and it is the outcome I recommend most often.

Usually worth keeping
  • ·Exchange Online — the migration cost rarely pays back
  • ·Teams, where your clients already live in it
  • ·Entra ID as the identity backbone
  • ·Anything your compliance officer has already signed off
Often worth moving
  • ·Document storage for regulated or confidential material
  • ·Meetings where the other party cannot use Teams
  • ·Automation, where per-seat licensing scales badly
  • ·Code, backups and internal tooling
What I run

The tools I use myself.

These are the ones I run day to day and can deploy and hand over to you. Each lists what you gain, what you give up, and roughly what the move costs. Anything I have not run in production is in the directory further down, not here.

File storage, sharing and sync — the OneDrive and SharePoint document layer.

You gain
EU jurisdiction, no per-seat licence, storage you size yourself, and full audit access to who opened what.
You give up
Co-authoring works but still trails Office. No Copilot. Search across large libraries is slower, and you own the upgrade cycle.
Migration effort
2–4 weeks for 50 users, including data migration and one training session.
Fits when
Document-heavy teams with confidential material and modest real-time co-authoring needs.
Collabora OnlineOutside EUGB

Browser-based document editing on top of Nextcloud — the Office for web replacement.

UK-seated since 2020 — outside EU jurisdiction, but self-hostable on EU infrastructure.

You gain
Real ODF and OOXML editing with no document leaving your server, and no per-user Office licence.
You give up
Complex Excel workbooks break: pivot tables, advanced conditional formatting and some macros do not survive the round trip. Test your worst spreadsheet before committing.
Migration effort
Days, if Nextcloud already runs. It is an add-on, not a separate migration.
Fits when
Teams whose documents are mostly text and simple sheets, not financial models.

Self-hosted mail, calendar and contacts — the Exchange Online replacement.

You gain
Mail on EU infrastructure with no per-mailbox licence and full control over retention and routing.
You give up
You own deliverability. Blocklist reputation, SPF/DKIM/DMARC and the occasional fight with a large provider become your problem. This is the row I most often advise against moving.
Migration effort
3–6 weeks including migration and a deliverability warm-up period.
Fits when
Teams with a genuine legal reason to hold mail in-jurisdiction, and tolerance for owning deliverability.
KeycloakOutside EUUS-owned

Single sign-on and identity brokering — the Entra ID replacement for applications.

Open source, but stewarded by Red Hat/IBM. Self-hosting keeps the data in your jurisdiction; the project's governance is not European.

You gain
Standards-based SSO across your own applications, with the identity store on your infrastructure.
You give up
The admin console is unfriendly and the learning curve is real. No Conditional Access equivalent out of the box, no device compliance, and none of the Microsoft-ecosystem integrations you get free with Entra.
Migration effort
2–3 weeks to a working setup, longer if you are federating many applications.
Fits when
Organisations with several self-hosted applications that need one login.

Chat, calls and screen sharing inside Nextcloud — the Teams conversation layer.

You gain
Conversations stay on your server, with the same identity and permissions as your files.
You give up
Large calls are unreliable past roughly 20 participants. No federation with Teams, so external parties need a guest link. The mobile app is noticeably behind.
Migration effort
Days if Nextcloud is running. Weeks if you also need to migrate chat history — which mostly you cannot.
Fits when
Internal team chat where external parties are the exception, not the norm.
UmamiOutside EUUS/OSS

Privacy-friendly web analytics — the Google Analytics replacement, self-hosted.

US-origin open source. Self-hosted, the visitor data never leaves your server — this site runs it first-party at /stats.

You gain
Visitor statistics with no tracking cookies and no consent banner, on your own server. This site serves it first-party from /stats so blockers do not break it.
You give up
Far less depth than Google Analytics: no audience segments, no attribution modelling, no ad-platform integration. The project itself is US-based open source — self-hosting is what keeps the data yours.
Migration effort
A day to deploy and add the script; historical data does not come with you.
Fits when
Sites that need honest traffic numbers rather than a marketing analytics suite.

Self-hosted Git forge with issues and CI — the GitHub replacement you run yourself.

You gain
Source code and CI on your own infrastructure, lightweight enough to run on a small server.
You give up
A much smaller action/plugin ecosystem than GitHub, no Copilot, and third-party integrations often assume GitHub and need adapting.
Migration effort
Days to stand up; a week or two to migrate repositories, issues and pipelines.
Fits when
Teams whose code is the asset and who do not depend on the GitHub marketplace.

Hosted Forgejo run by a German non-profit — GitHub without running the server yourself.

You gain
EU jurisdiction and a non-profit operator, with no infrastructure to maintain. This repository lives there.
You give up
CI minutes are limited and community-funded, uptime guarantees are not commercial, and it is not appropriate for private commercial work at scale.
Migration effort
Hours for a repository migration.
Fits when
Open source and small private projects where you want EU hosting without running a server.

European infrastructure — servers, storage and managed databases replacing Azure basics.

You gain
German jurisdiction, prices roughly a third of the hyperscalers, and straightforward capacity.
You give up
No managed equivalents for most Azure PaaS services. Fewer regions, less sophisticated IAM, and support is email-based rather than an account team.
Migration effort
Varies entirely with what you are moving; a container workload is days, a PaaS-heavy estate is months.
Fits when
Container and VM workloads that do not depend on proprietary Azure services.
Proton PassOutside EUCH

Password and secret management for a team — shared credentials without a spreadsheet.

Swiss, so outside EU jurisdiction — but end-to-end encrypted, which makes the seat matter far less here than it does for plaintext workloads.

You gain
End-to-end encrypted vaults, straightforward sharing, and apps people will actually use.
You give up
Swiss, not EU, and not self-hostable — you are trusting a vendor rather than your own server. No on-premise option if your policy demands one, and admin controls are lighter than enterprise incumbents.
Migration effort
Hours to roll out; the real work is getting people to stop reusing passwords.
Fits when
Small teams who want encryption and usability over self-hosting purity.
Receipts

This site is the demo.

The site you are reading is built and shipped on the stack described above: source on Codeberg, containers on Docker, deployed from a Git stack, analytics on self-hosted Umami. No tracking cookies, no US analytics vendor.

And what I have not moved

The contact form on this site sends your message to Groq, a US provider, to be classified as spam or not. That is inference on visitor-submitted text outside EU jurisdiction, and it is a compromise I made for a working spam filter. I am telling you because a sovereignty page that only lists wins is marketing. Every stack has trade-offs it has not resolved yet, including mine.

The wider landscape

European and open-source alternatives.

A reference list, not a recommendation list. Jurisdiction is the vendor’s legal seat, not where they host — those are different questions, and the difference is the whole point.

Tool
Category
Seat
Model
Licence
Files & documents
DEEU
both
AGPL-3.0
Files & documents
GBOutside EU
both
MPL-2.0

UK-seated since 2020 — outside EU jurisdiction, but self-hostable on EU infrastructure.

Files & documents
LVEU
both
AGPL-3.0

Latvian seat; developed by Ascensio, of Russian origin.

Files & documents
DEEU
self-host
MPL-2.0
Files & documents
DEEU
self-host
Apache-2.0
Files & documents
DEEU
both
AGPL-3.0
Files & documents
FREU
both
AGPL-3.0
Files & documents
DEEU
saas
proprietary
Mail & calendar
DEEU
self-host
GPL-3.0
Mail & calendar
DEEU
both
AGPL-3.0
Mail & calendar
DEEU
both
GPL-2.0
Mail & calendar
DEEU
saas
proprietary
Mail & calendar
DEEU
saas
GPL-3.0
Mail & calendar
NLEU
saas
proprietary
Mail & calendar
CHOutside EU
saas
proprietary

Swiss — strong domestic privacy law, but outside EU jurisdiction; adequacy is a separate arrangement.

Mail & calendar
CHOutside EU
saas
proprietary
Identity & access
US-ownedOutside EU
self-host
Apache-2.0

Open source, but stewarded by Red Hat/IBM. Self-hosting keeps the data in your jurisdiction; the project's governance is not European.

Identity & access
DEEU
both
MIT
Identity & access
CHOutside EU
both
Apache-2.0
Identity & access
DEEU
self-host
AGPL-3.0
Meetings & chat
DEEU
both
AGPL-3.0
Meetings & chat
US-ownedOutside EU
both
Apache-2.0

Open source, owned by 8x8 (US). A self-hosted instance keeps meeting data in your jurisdiction.

Meetings & chat
CAOutside EU
self-host
LGPL-3.0
Meetings & chat
GBOutside EU
both
AGPL-3.0

UK-seated. Widely used by European public sector precisely because it is self-hostable.

Meetings & chat
NOEEA
saas
proprietary

Norway — EEA, so GDPR applies, but not an EU member state.

Automation & AI
DEEU
both
fair-code
Automation & AI
FREU
both
AGPL-3.0
Automation & AI
US/OSSOutside EU
self-host
Apache-2.0
Automation & AI
FREU
both
mixed
Automation & AI
DEEU
both
proprietary
Automation & AI
US/OSSOutside EU
self-host
MIT
Automation & AI
DEEU
saas
proprietary
Projects & knowledge
DEEU
both
GPL-3.0
Projects & knowledge
DEEU
both
AGPL-3.0
Projects & knowledge
ESEU
both
AGPL-3.0
Projects & knowledge
FREU
both
LGPL-2.1
Projects & knowledge
FREU
self-host
AGPL-3.0
Projects & knowledge
DEEU
both
GPL-2.0
Projects & knowledge
DEEU
both
AGPL-3.0
Data & analytics
US/OSSOutside EU
both
AGPL-3.0
Data & analytics
US/OSSOutside EU
self-host
Apache-2.0
Data & analytics
DEEU
both
GPL-3.0
Data & analytics
US/OSSOutside EU
both
MIT

US-origin open source. Self-hosted, the visitor data never leaves your server — this site runs it first-party at /stats.

Data & analytics
EEEU
both
AGPL-3.0
Code & hosting
DEEU
self-host
GPL-3.0
Code & hosting
DEEU
saas
GPL-3.0
Code & hosting
DEEU
saas
proprietary
Code & hosting
FREU
saas
proprietary
Code & hosting
FREU
saas
proprietary
Code & hosting
DEEU
saas
proprietary
Code & hosting
DEEU
saas
proprietary
Code & hosting
NLEU
saas
proprietary
Code & hosting
FIEU
saas
proprietary
Code & hosting
SEEU
saas
proprietary
Code & hosting
SIEU
saas
proprietary
Endpoints & security
CHOutside EU
saas
GPL-3.0

Swiss, so outside EU jurisdiction — but end-to-end encrypted, which makes the seat matter far less here than it does for plaintext workloads.

Endpoints & security
FREU
both
AGPL-3.0
Endpoints & security
US/OSSOutside EU
self-host
AGPL-3.0
Endpoints & security
US/OSSOutside EU
both
MIT
Endpoints & security
ATEU
self-host
AGPL-3.0
Business apps
BEEU
both
LGPL-3.0
Business apps
FREU
both
GPL-3.0
Business apps
FREU
both
AGPL-3.0
63 / 63 shownLast reviewed: 2026-07
The offer

The Sovereignty Scan

A fixed-price assessment of what can move, what should not, and what either choice costs. You get a written answer you can take to a board — whether that answer is "move" or "stay exactly where you are".

€1,500 fixedup to 50 seats~2 weeks

€750 credited against any follow-on work booked within 3 months — whether that is a migration or hardening what you already have.

What you get
  1. 01Workload inventory — what your tenant holds and who touches it
  2. 02Jurisdiction map — where each workload legally sits, not where the datacentre is
  3. 03Move / keep / hybrid recommendation per workload, with reasoning
  4. 04Cost model — current licensing versus hosted alternative, including run cost
  5. 05Migration sequence and effort estimate
  6. 06A priced "do nothing" baseline

Delivered as a written report plus a 60-minute walkthrough. Over 50 seats is quoted.