Methodology
EuroVerif provides an indicative technical reading of visible website dependencies. It is not a legal audit, security audit or certification.
Research scope
EuroVerif is part of an applied research approach on European digital sovereignty led by OGPN — Observatoire de la gouvernance et des politiques numériques. It focuses on visible technical dependencies: hosting, DNS, email, CDN, third-party scripts, analytics, payment, advertising and front-end resources.
The analysis primarily targets the public homepage. Private areas, secondary pages, conditional JavaScript, consent-gated resources or services loaded only after interaction may not be detected.
Reading the indicative index
The score shown in a report is not a “percentage of sovereignty”. It is an indicative reading aid. It starts from an intermediate level and adjusts according to visible signals: favourable European or controllable dependencies improve the index; extra-European or harder-to-control dependencies reduce it more strongly; neutral elements have limited impact; unknown elements reduce confidence.
The result is then translated into an EuroScore from A to E. Class A indicates a more favourable reading of visible dependencies, while class E signals a stronger accumulation of points requiring attention. Exact thresholds and internal weightings are not published in full, in order to avoid artificial optimisation and preserve the quality of the reference database. EuroVerif does publish the reading principles: visible dependencies are prioritised, undetermined elements are handled cautiously, sensitive extra-European dependencies carry a stronger negative signal, and no score is displayed when an analysis is technically limited or inconclusive.
A partial analysis, technical error or explicit robots.txt block can also limit interpretation. The EuroScore is designed to express a trajectory — favourable, intermediate or requiring attention — not a legal or contractual verdict.
Categories
Extra-European dependencies
Services or infrastructures that may mainly fall under a non-European jurisdiction, ownership or technical ecosystem. This does not automatically mean illegality or personal data transfer.
European building blocks
Services or infrastructures operated by European actors, EU institutions or actors closer to the European legal framework, when classification is reasonable.
Open or contextual technologies
Free software, standards or technologies whose impact depends on deployment, hosting, configuration and governance.
Undetermined
Detected elements that are not sufficiently documented or not yet present in the classification base.
EuroVerifBot
Automated checks are performed by EuroVerifBot. Its user-agent is EuroVerifBot/1.0 (+https://euroverif.eu/bot). The bot checks robots.txt before retrieving the homepage and stops when a clear refusal applies.
Limits
Automated analysis may be incomplete because of WAF rules, complex redirects, CDN layers, JavaScript rendering, geo-dependent content, consent choices or unknown providers. EuroVerif uses cautious classification: uncertain elements should remain undetermined rather than be presented as facts.