CLOUD Act self-check The CLOUD Act self-check — 10 questions, 3 minutes, an honest answer. Who has live admin access to your production infrastructure today (hypervisor, storage, control plane)? *Exclusively our own teamOur team + an EU-based service providerA provider with operations teams outside the EU / don't knowIs there a US or other non-EU entity in your operations chain (operator, sub-processor, control-plane vendor)? *No — verified and documentedYes, but without access to customer dataYes, with an access path / never checkedCan you technically revoke your provider's remote access — yourself, immediately, without a ticket? *Yes, at any timeYes, but only via the providerNo / don't knowWho holds the encryption keys for your production data? *We do — BYOK/HYOK, provider has no accessProvider-managed, but with a customer control optionEntirely with the provider / don't knowCan your provider read your data in cleartext — technically, not contractually? *No, technically impossibleOnly in defined support scenariosYes / don't knowIf an authority compels your provider to hand over data: what would it actually receive? *Only encrypted data it cannot readPartially readable metadataReadable data / don't knowDoes your AI/inference traffic (prompts, embeddings, training data) leave your jurisdiction? *No — inference runs on-prem / in our jurisdictionOnly into an EU region of a US providerYes — external AI APIs (OpenAI, Google, Anthropic …) in production / don't knowDo you know where an inference call actually goes — endpoint by endpoint? *Yes, fully documentedRoughly, but not auditableNoUnder which law does the entity operating your infrastructure sit? *EU/EEA or Switzerland, with no US access pathNon-EU parent, but EU operations without parent accessA US entity in the chain / don't knowDo you have an air-gap option for your most critical workloads — actually usable, not just on the datasheet? *Yes, implemented or testedContractually possible, never testedNoFirst Name *Last Name *Email Address *Your Sovereignty ScoreSubmit
