SUSE unveils EU cloud sovereignty self-assessment tool

SUSE has launched a web-based self-assessment tool that scores an organisation's infrastructure against the EU Cloud Sovereignty Framework and produces a gap analysis in under 20 minutes.

The company said the Cloud Sovereignty Framework Self Assessment targets organisations that need evidence of compliance with sovereignty requirements as part of procurement and contracting. SUSE positioned the tool as a way to translate policy expectations into technical actions across infrastructure.

Sovereignty has moved up the agenda for European IT leaders as governments and regulated industries tighten requirements around control, transparency, and operational independence in cloud services. The EU Cloud Sovereignty Framework sets out objectives for providers and customers, with an emphasis on governance, operational autonomy, and supply chain visibility.

SUSE said organisations struggle with a lack of visibility when they try to assess their current position. It pointed to a disconnect between regulatory requirements and the technical stack in place.

"Organisations are facing a 'black box' problem when it comes to digital sovereignty, which creates significant hidden risks. There is a policy-to-technology gap with a disconnect between regulatory requirements and the technical stack needed to fix identified vulnerabilities across infrastructure," said Andreas Prins, Head of Global Sovereign Solutions, SUSE.

Scoring model

The tool produces a Sovereignty Effective Assurance Levels score, which SUSE calls SEAL. The scoring model maps an organisation to one of five levels from SEAL 0 to SEAL 4. SUSE said the scoring provides a standard way to discuss risk and contract readiness.

The self-assessment uses a questionnaire that SUSE said most users can complete in around 20 minutes. The output includes a score aligned with the eight objectives defined by the EU Cloud Sovereignty Framework. SUSE said the assessment replaces a process that often involves manual reviews and significant internal effort.

Alongside the overall score, the tool provides a weighted risk analysis across eight sovereignty objectives. SUSE said it assigns the highest weighting to supply chain considerations at 20%, followed by operational autonomy at 15%. The company said the approach highlights which gaps it considers most material in a sovereignty assessment.

Users can also download a roadmap in PDF format. SUSE said the document lists concrete next steps and recommendations based on the answers provided during the self-assessment.

Privacy approach

SUSE also emphasised the way the tool stores results. It said results remain in the user's browser rather than being stored on a remote service. The company described that as a privacy-first model aimed at organisations with strict security requirements.

The release of the tool comes as analysts forecast a stronger role for private cloud deployments in response to sovereignty pressures. SUSE cited Forrester research that it said links digital and AI sovereignty to increased private cloud activity and higher growth rates.

The company said organisations risk contract ineligibility in cases where they cannot demonstrate alignment with sovereignty requirements. It also said IT leaders face challenges in securing funding for sovereignty work without a measurable baseline.

Prins said a clear score can change internal conversations about investment. "However, without a clear sovereignty score, IT leaders cannot justify the budget needed for digital autonomy initiatives. The Cloud Sovereignty Assessment Tool provides exactly that score and a roadmap for how to close the gap, leveraging SUSE solutions and its European partner ecosystem," said Prins.

Early feedback

SUSE said the University of Luxembourg used the self-assessment tool and reviewed the recommendations. The university's experience points to how the tool may fit into internal planning and governance processes.

"The Cloud Sovereignty Framework self-assessment tool is a game-changer for IT strategy. In just 15 minutes, I gained more insight than ever before," said Markus Scherer, Infrastructure And Architecture Engineer, University of Luxembourg.

"Simply answering the questions provided immediate clarity on our current sovereignty level, but the real value lies in the final recommendations. It delivered tangible results that I can confidently present to my leadership to influence our future IT investment decisions," said Scherer.

SUSE said it will position the self-assessment alongside its open source software portfolio and its European partner ecosystem as organisations work through the requirements of the EU Cloud Sovereignty Framework.