How scores are calculated

Rubric 0.4 keeps four 25-point dimensions. EU and EFTA headquarters, including Switzerland, receive the same points. Scores use public-document review without on-site audit. They cover sovereignty in the stated scope, not overall quality or environmental impact.

Information still missing

The score covers documented criteria. For each of four dimensions, earned points are divided by the maximum for reviewed criteria, scaled to 25 and rounded. The four results form the score out of 100. Unknown items are excluded and reduce the separately displayed documentation coverage. Publication requires at least 60% of the rubric reviewed and 10 weight points in every dimension. A high score does not rule out dependencies in unchecked items.

The score covers documented criteria. For each of four dimensions, earned points are divided by the maximum for reviewed criteria, scaled to 25 and rounded. The four results form the score out of 100. Unknown items are excluded and reduce the separately displayed documentation coverage. Publication requires at least 60% of the rubric reviewed and 10 weight points in every dimension. A high score does not rule out dependencies in unchecked items.

1.1 · 12 pts EU or EFTA 12; other European country 6; management outside Europe 2; outside Europe 0.

1.2 · 8 pts Documented European control chain 8; ultimate holding outside Europe 4; non-European subsidiary 0.

1.3 · 5 pts Documented legal analysis: extraterritorial exposure excluded 5; indirect 2; direct 0. Headquarters alone is insufficient.

2.1 · 10 pts Production in EU/EFTA 10; Europe and adequate third country 6; European option of global offer 3; outside Europe 0.

2.2 · 6 pts Documented European backups and logs 6; partial declaration 3; confirmed outside Europe 0. Missing location: unknown.

2.3 · 6 pts Owned European hardware 6; European cloud 5; non-European cloud in Europe without access to keys 2; otherwise 0.

2.4 · 3 pts Documented European delivery and network protection, or no third party 3; non-European intermediary 0.

3.1 · 12 pts European nonprofit control 12; European majority 10; non-European blocking minority 5; non-European control 0.

3.2 · 7 pts Beneficial owners checked against a registry 7; structure publicly named by publisher 4; demonstrated opacity 0.

3.3 · 6 pts Foundation or equivalent veto on change of control 6; private company without documented protection 3; listed company without protection 0.

4.1 · 10 pts 10 minus 2 per critical non-European provider, minimum 0. Alternative payment routes are not added together. Incomplete inventory: only supported points are awarded.

4.2 · 5 pts Independent web or direct installation 5; app with dependent web access 3; single-browser extension 2; exclusive app store 0.

4.3 · 6 pts Full open-source self-hostable service 6; documented content export in open formats 4; partial/proprietary export 2; confirmed no export 0.

4.4 · 4 pts Public external report within 24 months and scope 4; documented audit with old/non-public report 2; confirmed absence 0.

Official source

Registries and contractual documents take precedence. Official publisher statements are labelled as such. Directories help discover products, never justify points. An IP address cannot locate backups. Each score revision records its date and reason.

Which Europe?

This catalogue includes publishers in the European Union and EFTA, including Switzerland. Inclusion is not a sovereignty certification.

Editorial independence

This version has no paid placements. Any future advertising or affiliate links must be labelled and must not influence assessments.