Methodology
Our five-step process
Scoping
1 weekA 90-minute workshop to map your IT estate, sensitive data and regulatory constraints.
Exposure audit
2-3 weeksAnalysis of your dependency on extra-European providers: CLOUD Act, FISA 702, non-EU transfers.
Migration scenarios
2 weeksThree costed scenarios (5-year TCO), ranked by effort against sovereignty level achieved.
Transition plan
1 weekDetailed roadmap, workload forecast, risk identification, steering arrangements.
Final delivery
1 weekFinal report, ExCom presentation and implementation support (optional).
Deliverables
What you receive
All packages include a written report delivered as PDF plus raw sources (CSV, calculation files). Below is the typical table of contents of a full audit report, followed by two stylised excerpts illustrating the format.
Typical report table of contents
Context
Initial scoping, evaluated perimeter, identified regulatory and business constraints, working assumptions.
IT estate mapping
Inventory of production workloads, classification by sensitivity, mapping of current providers and regions.
CLOUD Act and extraterritorial laws analysis
CLOUD Act, FISA 702 and third-country sanctions exposure. Per-workload rating using the public NextHop framework.
Costed scenarios
Three transition scenarios, 5-year TCO, estimated migration effort, sovereignty level achieved per scenario.
Transition plan
Detailed 12-36 month roadmap, project governance, execution risk identification, measurable milestones.
Annexes
Raw analysis sources, document references, glossary, scoring methodology, TCO calculation files.
Mapping CLOUD Act dependency of SaaS workloads
Scenario B: partial migration to European sovereign cloud
Request a sample report
An anonymised sample (40-60 pages) is sent within 48 hours to identified contacts. Real samples are never published; they are delivered after signing a mutual confidentiality agreement.
No real sample is published publicly. Anonymised versions contain neither client name, nor business workload name, nor recognisable organisational structure.
Packages
Three engagement levels
Diagnostic
12,000 EUR
fixed package
Full audit
38,000 EUR
package, 6-8 weeks
Engagement
On quotation
from 90,000 EUR