Sovereignty
Your data. Your jurisdiction. Your rules.
Allodion is a European data platform: a European company, on European infrastructure, under European law. No US parent company, no foreign legal reach, no lock-in.
Why it matters
Where your data lives is not the same as who controls it.
Choosing the EU region of a US cloud provider keeps your data in a European building. Legally, it does not keep it in Europe.
2018
The US CLOUD Act
Lets US authorities demand data from US companies, wherever in the world that data is stored.
FISA Section 702
Surveillance without a warrant
Allows warrantless surveillance of non-US persons abroad, with US providers compelled to assist.
June 2025
The providers say so themselves
Under oath before the French Senate, Microsoft France's legal director said he could not guarantee that French data would never be handed to US authorities.
A data centre in Frankfurt or Amsterdam does not change which law the provider must obey. Ownership does.
Transatlantic transfers
A legal basis built on sand.
Sending personal data to US providers relies on political agreements that keep collapsing. Regulators advise having an exit plan, because there may be no transition period when the next one falls.
2015
Safe Harbour struck down by the EU Court of Justice.
2020
Privacy Shield struck down, citing US surveillance laws.
2023
Data Privacy Framework adopted as the third attempt.
2025
Upheld by the General Court; appeal pending at the Court of Justice.
2026
EU privacy regulators ask the Commission to review its foundations.
With Allodion there is no transatlantic transfer to justify, so this risk disappears.
What it means at Allodion
Five layers of sovereignty.
Sovereignty is more than data location. It is who owns the company, who runs the platform, what it is built on, and whether you can leave.
Legal
A European company with no non-EU parent. Your data falls under EU law only.
Data
Stored and processed only in the EU, on our infrastructure or in your own storage.
Operational
Operated by an EU team from within the EU. No support or admin access from outside Europe.
Technological
Built on open source. No proprietary core a foreign vendor can switch off, reprice or restrict.
Exit
Open formats. Take your data with you at any time, with no conversion and no switching fees.
Measured, not claimed
Aligned with the EU's own definition.
The European Commission's Cloud Sovereignty Framework scores cloud services on eight objectives, from legal and operational control to supply chain, technology and compliance. In 2026 the Commission used it to award its own sovereign cloud tender. We design Allodion around those objectives.
SEAL-0
No sovereignty. Full non-EU control.
SEAL-1
EU law on paper, limited in practice.
SEAL-2
Enforceable EU law, with dependencies.
SEAL-3
Digital resilience. Cannot be blocked from outside the EU.
SEAL-4
Full EU supply chain, from chips to software.
We are honest about the limits. No provider runs on European-made chips today, and SEAL-4 is widely seen as barely achievable. What can be controlled in Europe, we control: the company, the jurisdiction, the operations, the software and your ability to leave.
Your data, your location
Hosted by us or kept in your own storage.
Bring your own storage
Connect your own EU storage. Allodion processes the data where it already lives.
Or let us host it
We store your data on European infrastructure, run by European companies, managed and backed up for you.
Bring your own BI
Use our hosted BI or connect the tools you already use. You can change your mind later.
Our position
The most sovereign platform is one you build yourself. Most teams shouldn't have to.
We will say it plainly: full control comes from building and running your own data infrastructure. But the engineers who can do that well are scarce, and the convenience of a managed platform is hard to beat. That is why so many European teams end up on US platforms. Allodion offers the middle path.
Build it yourself
Maximum control
- Full sovereignty, no vendor
- Needs a rare, experienced platform team
- Months to build, permanent to maintain
- Security, upgrades and on-call are yours
Allodion
Managed and sovereign
- The convenience of a managed platform
- European company, infrastructure and law
- Open-source components and open formats
- Lock-in kept to the absolute minimum
US platforms
Maximum convenience
- Fast to start, fully managed
- Subject to US law, wherever data is stored
- Proprietary services and pricing
- Leaving gets harder every year
And if you outgrow us, that's fine. Because Allodion runs on the same open-source building blocks you would choose yourself, moving to your own infrastructure later is a migration, not a rewrite.
No lock-in by design
Open source, open formats, free to leave.
Proprietary platforms bind you through formats, APIs and pricing. Allodion keeps your data, code and knowledge usable outside our platform. European law is moving the same way: under the EU Data Act, switching charges are banned completely. At Allodion that is already the default.
EU Data Act
12 Jan 2027
Cloud switching charges forbidden across the EU.
Compliance
Built for European regulation.
GDPR
No third-country transfers to justify. Processing stays within the EU.
NIS2
In force in the Netherlands since August 2026 as the Cyberbeveiligingswet. Supply-chain security is now an obligation, and a sovereign supplier simplifies it.
DORA
Financial institutions must manage ICT third-party and concentration risk. A European, open-source alternative reduces both.
EU Data Act
Portability and switching rights, built in from day one.
Our commitments
- Your data is stored and processed in the European Union.
- Allodion is European owned and operated.
- Open formats, so you can export your data and code at any time.
- No switching or exit fees.
- A transparent list of the service providers we use, in our privacy notice.
- Governance and single sign-on included, so you always know who has access.
Common questions
Isn't an EU region of a US cloud provider enough?
No. The CLOUD Act applies to US companies wherever data is stored. Location does not decide who can be compelled to hand it over; ownership does.
Where is my data physically stored?
Only in the EU, on our European infrastructure or in your own storage location.
Can I leave Allodion?
Yes. Your data stays in open formats, and we charge no switching or exit fees.
Is Allodion 100% sovereign?
No provider is, because hardware supply chains are global. We control everything that can be controlled in Europe today: the company, the law, the operations, the software and your exit.
Can I combine Allodion with my existing tools?
Yes. Allodion is modular. Use the full stack, or plug individual components into your existing landscape.
Ready to take back control of your data?
We are onboarding a small group of European teams.