How sovereign is your storage architecture?

How the score works

The calculator is calibrated against the architectural patterns BARC's 2026 sovereignty study identifies as separating "operational sovereignty" from "marketing sovereignty." Each question contributes up to 20 points across five dimensions:

• Cryptographic isolation — does the operator hold any path to plaintext?
• Topological spread — across how many providers and jurisdictions?
• Compelled-disclosure resistance — can a foreign court reach your data?
• Post-quantum readiness — both key encapsulation and signatures?
• Operational evidence — can auditors verify your posture without trusting you?

The maximum score is 160 — the architectural posture SkyeConnex delivers in production today. Most enterprise organisations using a single hyperscaler with default settings score 20-40.

Score bands

• 0-40 — At significant risk. Reliance on contractual sovereignty alone. CLOUD Act, Schrems II, and post-quantum exposures are all live.
• 41-80 — Partial protection. Some encryption-at-rest or multi-region setup, but the operator can still produce plaintext.
• 81-120 — Strong protection. Customer-managed keys and multi-cloud, but missing the topological or PQ pieces.
• 121-160 — Architecturally sovereign. SkyeConnex-tier or equivalent — the operator cannot produce plaintext under any compulsion.

What's not in this score

This calculator focuses on storage-architecture sovereignty. It does not measure organisational security posture (which is endpoint-, identity-, and process-driven), compliance documentation depth, or cyber-insurance underwriting fit. Those are complementary dimensions worth measuring separately.

Want the dollar figure? The Sovereignty Exposure Calculator models your total business exposure — value-at-risk plus downtime cost — and quantifies how much a sovereign multi-cloud posture removes.