Independence and resilience

Where does your data live, and who do you depend on? Where the site is hosted and under which jurisdiction, which suppliers it depends on, and what stops if one of them stops. Questions your customers, and their lawyers, may well ask.

Audit your home page for free

We look at your home page for Independence and resilience, and we email you our report within 48 working hours.

One page, one pillar. The plans cover the 9 pillars across your whole site.

What we look at

  • The hosting country, and above all the supplier’s jurisdiction: servers located in Europe can still fall under extraterritorial orders if the operator answers to the law of another state.
  • The share of your dependencies held by a single player, when one page calls on it alone for its audience measurement, its fonts, its bot protection and its maps.
  • The layers crossed by all of your traffic (hosting, domain name, address resolution, content delivery, mail), and how many of them rest on the same supplier.
  • The personal data that leaves the European Union during a plain visit, without anyone having asked for anything.
  • What it would take to leave: a site set on a closed platform does not carry its content away the way a site built on open formats does.

On what basis

GDPR, CLOUD Act

A finding is only worth something if it rests on an identifiable basis. Where one exists, we lean on a law, a standard or a specification, and for every point recorded the report names the page and gives the value we measured.

What it changes for you

The question has stopped being theoretical: your customers ask it, and their lawyers ask it before signing. A public tender, a large account, a European partner now put it in writing.

Resilience is the other half of the subject, and it is not the same thing. A site hosted entirely at a non-European player but redundant is resilient without being independent; a site at a single European host is independent without being resilient. The report scores the two separately.

What this audit does not say

The examination covers what the visit reveals: the addresses that answer, the public registries, the third parties your pages call.

Your hosting contracts, your backups and your service commitments are not readable there. A site can look concentrated on a single supplier and have a recovery plan that nothing, from outside, shows. The report establishes the concentration and asks the question, without answering it for you.

Every limit of the examination is stated in the methodology note of your report. A point that cannot be verified is never presented as compliant.

The weight of this pillar

An overall score has to weigh what matters for your business: the 9 pillars do not carry the same weight depending on what your site is for. Here is what “independence and resilience” represents in the overall score, under each weighting. The report always states which one produced your score.

Type of siteShare of the overall score
Type not determined9%
Brochure site8%
Online shop8%
Application, customer portal8%
Blog, media7%
Public-sector site13%