Sovereignty, from policy to practice
The technical layer between
policy and practice.
Independent advisory and tools for organisations that need to demonstrate control, not just claim it. AI governance, digital sovereignty, open source security.
We work with regulated organisations, public sector bodies, and technology companies that need technical depth, not policy translation.
Three lines of work.
One point of view.
Most organisations have the policy. Few have the implementation. We work the gap between them.
Products
Technical tools for governance, compliance, and security observability. Built for regulated environments, designed for real deployment.
View productsOpen Source
Public tooling and community contributions advancing the state of the art in supply chain security, SBOM, and AI governance tooling.
View projectsConsulting
Strategic and technical advisory for organisations navigating AI risk, regulatory complexity, and digital sovereignty at the executive level.
Our servicesRegulated environments
where governance failures
have real consequences.
We don't work with organisations that need a policy document. We work with those that need someone who understands the actual systems.
If your organisation has made sovereignty or governance commitments at the policy or procurement level and is now facing the question of whether the technical implementation delivers them, that's the conversation to have.
Run the sovereignty assessment
Map your organisation's posture across nine sovereignty domains in 15 minutes. Client-side only, nothing is stored or transmitted.
Start assessmentBook a discovery call
Discuss your situation and whether there's a fit. No pitch. We'll tell you directly if this isn't the right engagement.
Book a callThe Clewline briefing
Monthly intelligence on AI governance, digital sovereignty, and open source security developments. No noise.
SubscribeReady to close the gap?
If your organisation is navigating EU AI Act compliance, digital sovereignty obligations, or supply chain security, and needs someone who has done the implementation work, not just the policy analysis.