Our mission is a digitally independent Europe. But the reality shows a deep divide: according to Bitkom* (2024), 82% of companies justify their digital dependency with a lack of alternatives. However, true independence only becomes apparent at the critical moment and thus in the ability to get up from the negotiating table at any time without risking one's own future viability.
The first step: knowing where you stand. If you don't know your dependencies, you can't control them. In a market that is increasingly unsettled by "sovereignty washing" and vague marketing promises, we create clarity. With the European Sovereign Stack Standard (ES³), we make sovereignty measurable for the first time. Our SML framework provides you with an objective analysis of your level of maturity, moving away from digital blind flying and towards a clear strategy.
The common path: sovereignty as a standard. We are not just your compass, but your partner on the sovereignty journey. Based on more than 100 independently tested criteria, we offer you the technological substance and the right solutions to take back control of your digital destiny.
Digital sovereignty is not a compliance obligation. It is your license to freedom.
Organizations often lack a clear overview of the deep digital dependencies their IT infrastructure is actually stuck in.
Vague marketing promises (sovereignty washing) and stricter regulations hinder a sovereign digitalization strategy.
The ES³ program creates a reliable standard based on verified auditability, legal security, strict compliance with EU regulations and a clear focus on AI.
The European Sovereign Stack Standard (ES³) is our digital sovereignty program that makes the vague concept of digital sovereignty objectively measurable for the first time.
The program is based on an integrated strategic maturity model - the Sovereignty Maturity Level (SML) Framework , which translates the sovereignty of digital ecosystems and cloud infrastructures into four measurable maturity levels: from "Initial" to "Future-Proof".
ES³ is setting new standards with the SML framework: at the highest maturity level, the strict requirement of 100% European DNA guarantees genuine immunity to external access. This technological independence is underpinned by seamless auditability. The SML framework uses objective measurement criteria that have been verified by the auditing company BDO as an independent authority.
Our maturity model is based on the official EU Cloud Sovereignty Framework (CSF), whose eight strategic sovereignty dimensions are specifically expanded to include the ninth and future-critical dimension of artificial intelligence (AI) - a core technology that must be taken into account when it comes to digital sovereignty in accordance with European values and data protection standards. In this way, the ES³ acts as a market standard that goes beyond mere data storage and ensures the technological self-sufficiency and operational resilience of the entire value chain.
Each of these dimensions is checked in the maturity model in a mandatory and complete manner on three levels in order to guarantee structured and complete implementation:
Regulatory (contractual): Contractual provisions and assurances (e.g., legal agreements, SLAs, and service contracts) to ensure legal immunity.
Organization (process-related): Organizational, process-related, and operational implementation (e.g., responsibilities, guidelines, and operational processes) for full governance.
Technology (technical): Technical implementation and system configuration (e.g., technical security measures and automation) as the basis for technological
No more "sovereignty washing" - the objective criteria of the SML framework are verified by the independent auditing body BDO.
At the highest level (“Future-Proof”), the model requires 100% European DNA. The consistent avoidance of U.S. parent companies guarantees immunity against external interference such as the U.S. CLOUD Act.
The maturity model is based on the specifications of the official EU Cloud Sovereignty Framework (CSF), but extends this as a pioneer by adding the future-critical ninth dimension "Artificial Intelligence (AI)".
The SML framework makes digital sovereignty objectively measurable for the first time and evaluates IT services in four clear maturity levels - from dependency (level 1) to full autonomy (level 4).
The Minimum Principle: The overall SML of a service always corresponds to the lowest level across all nine dimensions. This means that a single weakness in just one area—whether contractual (regulation), procedural (organization), or technical (technology)—immediately limits the overall result. Sovereignty is only as strong as its weakest link.
Heavy reliance on external providers. Processes are reactive (ad hoc) and lack a standardized understanding of digital sovereignty in the strategy.
Digital dependencies are mapped. Initial contingency plans and basic capabilities are documented and controlled based on rules.
Sovereignty is firmly established as a strategic goal. Tested alternative sources of supply or clear migration paths are available for all critical services.
Nearly complete digital autonomy. Core processes are based on a securely controlled infrastructure, open standards, and open-source components.
The promise: With its framework, the European Sovereign Stack Standard Program creates a reliable management tool for confident digitalization decisions and thus lays the foundation for sustainable growth in our entire ecosystem.
The European Sovereign Stack Standard (ES³) offers tremendous opportunities—and we’ll guide you every step of the way. Do you have specific questions about participation, requirements, or the benefits for your company? We’re here to help.
Jo-Ann Gosemann
ES³ Program Manager
ES3@digits.schwarz
ES³ takes a holistic view of digital sovereignty. By orchestrating a precise presales assessment (ES³ Lens), an ISV marketplace with clear sovereignty seals and a strong partner network, we accompany customers seamlessly on their entire sovereignty journey.
Objective determination of your current sovereignty maturity level using the ES³ Lens
Customized solutions for every need on our STACKIT Marketplace
Maximum transparency thanks to the SML framework
Expert support for seamless implementation and long-term development
Do you know your digital maturity level? Our interactive SaaS tool provides you with an instant maturity scorecard for your entire infrastructure.
Are you interested in the ES³ program and would like to get advice? Then get in touch now.
* Source: Bitkom (2024): Digitale Souveränität – Status Quo und Handlungsfelder. Berlin: Bitkom e.V., S. 42.
