Most "EU" tools route hosting, DNS or email through a US provider. EuroSeal checks yours, re-checks it daily, and turns it into a badge you can show.
EU buyers and procurement teams increasingly ask vendors to prove their jurisdiction, not just claim it. With the EU Data Act now in force, where your data lives and who can be legally compelled to hand it over has become a purchasing question. "Trust us, we're European" is a weak answer. A live, re-checkable badge is a strong one.
Most "EU" claims have never been verified by anyone outside the company. EuroSeal does it once, then keeps doing it, and publishes the result.
Move one layer to AWS or Google and your badge turns within 24 hours. A screenshot can be faked. A live check cannot.
One click opens the full report: every provider, every jurisdiction, each line re-checkable with dig from any terminal.
If a US dependency slips into your stack, you get an email before a customer or a competitor spots it.
Hosting, CDN, DNS, email, TLS, mail senders, third-party scripts. Judged by who owns the provider, not where the box sits.
You are not buying a scan. You are buying a live badge your customers can trust, because we keep checking it for you.
Run the check above. Seven layers, judged by who owns each provider, not where the server sits.
If you come back clean, claim a founding badge. We confirm you own the domain, then send your founding invoice.
Drop the snippet into your footer. The badge goes live and re-runs the whole scan every single day.
No. Jurisdiction follows the owner, not the datacenter. AWS, Azure and Google are US-incorporated, so they are reachable under the US CLOUD Act even when the server sits in the EU. We judge by who owns the provider, not where the box is.
It still counts. Hosting, DNS, CDN and email are each their own layer. If any one of them touches a US company we flag that layer and show you which. One US layer turns the badge amber, two or more turn it red.
No. Switzerland is outside the EU but also outside the US CLOUD Act. We mark those providers as EEA / neutral, never as US. The report stays honest either way.
Only public signals: DNS records, the IP owner (ASN), the TLS issuer, response headers and the scripts your page loads. Exactly what any visitor or buyer could look up themselves. No account, no access needed.
The badge re-runs the full scan every day. If a US dependency slips in, the badge turns within 24 hours and we email you, so you hear about drift before a customer or competitor does.