Digital sovereignty
In EG we are committed to delivering resilient software solutions while ensuring that our customers have control over their data.
Digital sovereignty in EG
EG’s approach to digital sovereignty is grounded in six clear principles. They apply to our AI in the same way as to the rest of our software.
European hosting by default
Portability by design
Supports deployment across domestic private clouds and global hyperscalers
Full control of core software technologies
Transparent supply chain
Built for regulatory alignment with NIS2, GDPR, and sector specific regulations
EG scores high against EU Standards
At EG, we assess our products against the European Commission’s Cloud Sovereignty Framework to ensure strong control over data, operations, and technology.
The framework defines clear objectives across legal protection, data handling, operational independence, supply chains, and compliance.
Below, we outline how EG meets these objectives across our portfolio.
Our assessment of the European Commission’s Cloud Sovereignty Framework
EG A/S is headquartered in Denmark, registered in the EU, and governed by EU law. EG is aligned with EU strategic priorities and anchored in the EU ecosystem.
Data in EGs systems are processed in accordance with EU Law and sector specific rules and regulations. We host core application functionality in European data centres to ensure your data stays under EU- and national jurisdiction.
Your data is protected by design in every EG solution. It is hosted in Europe and handled in line with GDPR and NIS2. The same applies to our AI: it runs on European infrastructure, it is built to be transparent and open to audit, and customer data is only used with your explicit consent.
EG provides full operational independence, with EU- controlled support and development teams ensuring continuity and resilience.
Customers have the right to understand who processes their data, where it is stored, and how it is protected.
We commit to full transparency across our supply chain.
We provide:
- Clear documentation of data processors and subprocessors
- Visibility into hosting locations
- Proactive communication about changes to suppliers
- Regular audits of strategic subprocessors
- Data Processing Agreements are available to all customers, if required.
Customers should not be locked into a single cloud provider or infrastructure choice. Where possible, we offer deployment options that match sector-specific requirements — whether that's a Nordic cloud provider or a customer-controlled environment.
Deployment options include:
- Multi-cloud strategies where relevant
- On-premises or private cloud deployments
- Flexible hosting agreements tailored to sector needs
EG's security and compliance setup are managed entirely within the EU, providing robust assurance and independence. As part of EG's ongoing commitment to security, compliance, and transparency, EG has yearly IT audit statements of the type ISAE 3000 and ISAE 3402 drawn up by an external auditor.
EG prioritizes sustainable energy and resource use, supporting long-term resilience and autonomy within the EU.
Why does it matter?
Digital sovereignty is essentially about maintaining competitiveness, security, and control over business operations, while ensuring continuity if access to digital solutions from third countries becomes limited.
For companies and public institutions, this involves mitigating unforeseen risks tied to reliance on foreign technology and ensuring that business-critical data is properly protected. Given the current global situation, it is more important than ever for companies and public institutions to ensure digital sovereignty in the IT-solutions and over their critical data.
Nordic data centres
In Denmark, Finland, Norway and Sweden. Your data stays in the region, under EU and EEA data protection rules.
EU Cloud Sovereignty Framework
We assess our products against the European Commission’s framework.
Public Sector
Nordic hosting, national integrations (e.g. MitID, NemKonto). Built for sovereign data requirements.
Healthcare
Nordic data residency, patient data sovereignty and integrations with national e-health infrastructures.
Construction & Property
Project and building data managed according to Nordic regulatory expectations.