The living compliance file your auditor asks for.
Trustfile turns the scattered Word policies, spreadsheets and email approvals into one living evidence file — so charities, SMEs, consultants and public-sector suppliers can show an auditor, funder or customer exactly what they can prove and what's still missing, without heavy enterprise GRC.
Trustfile. Your GDPR and EU AI Act register, vendors, policies, DSARs and audit bundles — one living file that shows what you can prove and what is still missing.
Policies and proof for organisations without a compliance team.
Most small organisations rely on one trustee, founder, office manager or operations lead to keep policies and evidence in order. SovEU gives them a guided Policy Centre and a living Trustfile — so policies aren't just old templates: they're reviewed, approved, acknowledged and backed by real evidence.
Policy Centre
Build, adapt or upload your policies from guided templates — and see what a policy like this usually covers, what's still missing, who approved it and when it's due for review.
Living Trustfile
A policy says what you intend to do; your Trustfile holds the proof — GDPR records, AI tools, vendors, DPAs, DSARs, training and staff acknowledgements.
Proof you can share
Turn it into a trustee, funder or customer pack, a public trust page or an audit bundle — without searching ten folders when someone asks.
Not just templates.
A template gives you words. SovEU keeps the policy alive — mapped to guidance, reviewed on a schedule, approved by the right people, acknowledged by staff or volunteers, linked to evidence in your Trustfile, and exported for trustees, funders, customers or auditors.
One place to prove trust — built in the EU, not rented from the US.
Trustfile is the flagship — your living evidence file. Atlas, Vigil, Caseflow and Forms feed it, so everything you need to prove compliance, reliability and sovereignty lives under one account.
Trustfile
The living compliance evidence file — GDPR & EU AI Act registers, vendor and AI records, policies, the DSAR desk and one-click audit bundles. Shows what you can prove, and what is still missing.
Learn moreAtlas
See who really owns a supplier, where your data is hosted, and which European alternative keeps you sovereign — then send it straight to your Trustfile.
Learn moreVigil
Uptime, SSL and domain-expiry monitoring on EU infrastructure, with public status pages — operational evidence that your services stay reliable.
Learn moreCaseflow
Complaints, FOI and EIR with statutory clocks and policy checks, then export-ready case packs — casework that holds up to scrutiny.
Learn moreForms
Secure intake for regulated workflows — hosted in the EU with no US analytics — feeding straight into Caseflow and your Trustfile.
Learn moreAsk SovEU
Cited guidanceCited answers grounded in your Trustfile, your documents and official guidance — advisory, never the decision-maker.
From intake to audit-ready proof — and proof that stays true.
Collect the intake
Secure, EU-hosted forms capture the request.
Manage the casework
Statutory clocks, policy checks, case packs.
Prove the evidence
Registers, DSARs and one-click audit bundles.
Inform vendor choices
Sovereignty signals and European alternatives.
Verify it stays true
Uptime, SSL and status as operational evidence.
Built to look organised — without an ops team.
No black boxes. No US default. No ad tech.
Every part of SovEU is built to survive a procurement review. The data stays in the EU and UK, the subprocessors are public, and the AI never makes the decision.
Read the security overviewNews
Read allFree for micro-charities. Charity plans to £69 a month; business plans from £49.
Built for tiny teams that need to look organised without enterprise software. Start free, upgrade only when you grow. No checkout wall — billing is a quick conversation.
Prove your trust. One European platform.
Compliance evidence, vendor risk, regulated casework and operational proof — held in the EU, on one account.