FoundiX

SEAL-4 · CADA-4

Not a sticker. An operating rule.

Complete EU control of technology and operations. Subject only to EU law. No critical non-EU dependency in the critical path. EU operators. Customer-controlled cryptography. Full auditability. Genuine exit.

Admit. Isolate. Meter. Destroy.

Every spawned guest is admitted, isolated, metered and destroyed. The spawn token cannot reach foundation identity, mail or DNS.

Residual risk

  • Silicon supply chain — mitigated by configuration control, long refresh cycles and measured boot where available.
  • Microsoft residual on SovMS — isolated to the application layer; identity remains customer-owned.
  • Operator error on key material — dual-control procedures and offline key vaults.

Exit path

Open formats: ZFS send streams, LDAP/LDIF, PBS archives. A client can transfer the complete environment to different hardware or a different EU operator without proprietary lock-in.