How sovereign, and where?

Pick a kind of data and where it lives. See which dependencies on the provider stay open, and the cheapest next step.

No provider recommendation. Scores, lever effects and costs are assumptions for discussion, based on the CLDN sovereignty model. Your choices stay in this browser.

Your situation

Data class

Process

Your estate

Where this class lives

Add

Keys work only while the class stays in the tenant; the access path only with a store outside Microsoft.

How far is what you added

Second channel for the critical process

A prepared way to keep talking when the main platform is gone. Easy to set up; the work is deciding who switches and practising it.

What stays open

What it costs

Relative effort for each choice, split into retraining users and technical rebuild.

Plan across all four classes, the twelve dimensions and why each item is open.

Plan across data classes

Data class	Where it lives	Added	Day 2	Normal	Critical

Profile by dimension

0target: no requirement · result: no control (our extension) 1Basic2Advanced3High: your own control Anything someone else runs stops at 2, except data processing, data location and access in a service built or adapted for you, with extra effort.

platform alone with what you added target ◆ depends on the store or on you

What you added, and how far it is

Why it’s open

The twelve dimensions

Levels 1–3 come from the CLDN study. A service someone else runs stops at 2 on 9 of the 12 dimensions. The study mentions level 0 as “no requirement” and leaves it out; here it is also a result when a set-up doesn’t reach level 1. Sustainability is shown for completeness, outside the four dependencies and the counts.

Dimension	What it asks	What raises the level	Watch in a transition