EU-sovereign by design, not by footnote.
Built to pass a procurement review: data in the EU and UK, public subprocessors, no ad tech, and AI that never makes the decision.
EU / UK data residency
All data is stored and processed within the EU and UK. No transfers to the US by default.
Public subprocessors
Every vendor we rely on is listed on a public register, kept current.
No ad or analytics trackers
No third-party ad tech, no behavioural analytics, no surprise pixels.
Self-hosted fonts & assets
Fonts and assets are served from our own infrastructure — no third-party CDNs.
AI optional & human-reviewed
AI is opt-in and advisory. The LLM never makes a compliance decision — a person does.
Full export & retention control
Export everything; set retention and anonymisation rules; leave whenever you like.
Every vendor, on the record.
Illustrative register. The live register names each specific provider and is updated whenever it changes. See the full subprocessor register.
Advisory, EU-hosted, and always overruled by a human.
AI is optional. When it's on, it retrieves the relevant policy and cites it — it never closes a case, never files a record, and never makes a compliance decision on its own.
Turn AI assistance on or off per workspace.
Every suggestion references the underlying provision.
Sovereign model providers, hosted in the EU.
Built for small charities handling sensitive records.
Use SovEU without ad trackers, behavioural analytics or surprise data sharing. AI features are optional, cited and human-reviewed — and uploaded documents are only indexed for the assistant when an admin chooses to index them, with a one-click way to remove them again.
Need this for procurement or due diligence?
We'll share our DPA, subprocessor register and security overview.