# EuroScanner.eu

EuroScanner is a sovereignty intelligence platform that performs daily automated
scans of domain infrastructure and reports whether hosting, email, and embedded
services are under EU or US jurisdiction.

## What this site is

- Deterministic: all data comes from public sources (DNS, RIPE Stat API, SSL sockets)
- Timestamped: every scan is dated; grades reflect configuration at scan time only
- Not legal advice: grades are infrastructure observations, not compliance determinations
- Append-only: historical data is never deleted; changes are logged

## Grading system

A++: Fully EU-sovereign, manually verified
A+:  Fully EU-sovereign, manually verified
A:   EU hosting, EU email, no US frontend services detected
B:   EU hosting, EU or unknown email, minimal US frontend
C:   EU hosting, US email provider (e.g. Proofpoint), no US frontend
D:   EU hosting, US email, some US frontend services
F:   Non-EU hosting ASN (automatic F regardless of other factors)

## Key finding (May 2026)

EU institutions universally use Proofpoint Inc. (Sunnyvale, CA) as their primary
email security provider, including the EU Data Protection Board and EU Data
Protection Supervisor — the bodies responsible for GDPR enforcement.

## Data sources

- ASN lookup: https://stat.ripe.net/data/prefix-overview/data.json
- MX records: standard DNS lookup
- SSL: direct socket connection, certificate parsing
- HTML services: pattern matching against 0 known service signatures

## Domain index

- [C] 50hertz.com — 50Hertz — Germany TSO
- [D] acer.europa.eu — ACER — Energy Regulators
- [F] adyen.com — Adyen
- [F] agpd.es — Spanish DPA (AEPD)
- [F] airtable.com — Airtable
- [F] aki.ee — Estonian DPA
- [C] aleph-alpha.com — Aleph Alpha
- [F] amla.europa.eu — AMLA — Anti-Money Laundering
- [F] amplitude.com — Amplitude
- [F] anthropic.com — Anthropic
- [F] ap.nl — Dutch DPA
- [C] appf.europa.eu — Authority European Political Parties
- [F] asana.com — Asana
- [F] basecamp.com — Basecamp
- [F] beehiiv.com — Beehiiv
- [B] belgium.be — Belgian Government
- [D] berec.europa.eu — BEREC — Electronic Communications
- [F] bfdi.bund.de — German Federal DPA
- [F] bitbucket.org — Bitbucket
- [F] brevo.com — Brevo
- [B] bundesnetzagentur.de — Germany Federal Network Agency
- [F] bundesregierung.de — German Government
- [F] buttondown.email — Buttondown
- [F] cal.com — Cal.com
- [F] carrd.co — Carrd
- [F] cbe.europa.eu — Circular Bio-based Europe JU
- [D] cedefop.europa.eu — Cedefop — Vocational Training
- [C] cepol.europa.eu — CEPOL — Law Enforcement Training
- [F] cert.europa.eu — CERT-EU Cybersecurity
- [F] chips-ju.europa.eu — Chips Joint Undertaking
- [F] cinea.ec.europa.eu — CINEA — Climate & Energy
- [D] clean-aviation.eu — Clean Aviation JU
- [F] clean-hydrogen.europa.eu — Clean Hydrogen JU
- [F] clickup.com — ClickUp
- [F] cnil.fr — French DPA (CNIL)
- [F] coda.io — Coda
- [A] codeberg.org — Codeberg
- [F] cohere.com — Cohere
- [F] consilium.europa.eu — Council of the EU
- [F] convertkit.com — ConvertKit
- [F] cor.europa.eu — Committee of the Regions
- [F] cpvo.europa.eu — CPVO — Plant Variety Office
- [F] crisp.chat — Crisp
- [A] cryptpad.fr — CryptPad
- [F] curia.europa.eu — Court of Justice EU
- [F] cursor.sh — Cursor
- [F] data.europa.eu — EU Open Data Portal
- [F] datadoghq.com — Datadog
- [F] dataprotection.ie — Irish DPA
- [B] datatilsynet.dk — Danish DPA
- [F] digitalocean.com — DigitalOcean
- [F] discord.com — Discord
- [C] eacea.ec.europa.eu — EACEA — Education & Culture
- [C] easa.europa.eu — EASA — Aviation Safety
- [F] eba.europa.eu — European Banking Authority
- [C] ec.europa.eu — European Commission
- [F] eca.europa.eu — European Court of Auditors
- [F] ecb.europa.eu — European Central Bank
- [F] ecdc.europa.eu — ECDC — Disease Prevention
- [F] echa.europa.eu — ECHA — Chemicals Agency
- [F] eda.europa.eu — EDA — Defence Agency
- [F] edpb.europa.eu — EU Data Protection Board
- [F] edps.europa.eu — EU Data Protection Supervisor
- [F] eea.europa.eu — European Environment Agency
- [C] eeas.europa.eu — EU External Action Service
- [F] eesc.europa.eu — EU Economic & Social Committee
- [F] efsa.europa.eu — EFSA — Food Safety
- [F] eib.org — European Investment Bank
- [F] eige.europa.eu — EIGE — Gender Equality
- [F] eiopa.europa.eu — EIOPA — Insurance & Pensions
- [F] eismea.ec.europa.eu — EISMEA — SME & Innovation
- [F] ela.europa.eu — ELA — Labour Authority
- [F] elia.be — Elia — Belgium TSO
- [F] ema.europa.eu — EMA — Medicines Agency
- [C] emcdda.europa.eu — EMCDDA — Drugs Agency
- [C] emsa.europa.eu — EMSA — Maritime Safety
- [F] energinet.dk — Energinet — Denmark TSO
- [F] enisa.europa.eu — ENISA — Cybersecurity
- [D] entsog.eu — ENTSO-G — Gas TSO Network
- [F] epexspot.com — EPEX SPOT
- [F] eppo.europa.eu — EU Public Prosecutor
- [F] epso.europa.eu — EPSO — Personnel Selection
- [F] era.europa.eu — ERA — Railway Agency
- [F] ercea.ec.europa.eu — ERCEA — Research Council
- [F] esma.europa.eu — ESMA — Securities Markets
- [F] euaa.europa.eu — EUAA — Asylum Agency
- [C] euipo.europa.eu — EUIPO — Intellectual Property
- [F] euiss.europa.eu — EUISS — Security Studies
- [F] eulisa.europa.eu — eu-LISA — IT Systems
- [F] eur-lex.europa.eu — EUR-Lex Legal Database
- [F] eurocontrol.int — Eurocontrol — Air Traffic
- [F] eurofound.europa.eu — Eurofound
- [F] eurojust.europa.eu — Eurojust
- [C] europa.eu — EU Portal
- [C] europarl.europa.eu — European Parliament
- [F] european-council.europa.eu — European Council
- [C] europol.europa.eu — Europol
- [F] eusatcen.europa.eu — SatCen — Satellite Centre
- [F] euspa.europa.eu — EUSPA — Space Programme
- [F] fastmail.com — Fastmail
- [F] figma.com — Figma
- [A] fingrid.fi — Fingrid — Finland TSO
- [F] fly.io — Fly.io
- [F] fra.europa.eu — FRA — Fundamental Rights
- [F] framer.com — Framer
- [F] frontex.europa.eu — Frontex
- [F] garanteprivacy.it — Italian DPA (Garante)
- [F] ghost.org — Ghost
- [F] github.com — GitHub
- [F] gitlab.com — GitLab
- [B] gouvernement.fr — French Government
- [A] gov.pl — Polish Government
- [F] government.bg — Bulgarian Government
- [F] government.fi — Finnish Government
- [F] government.nl — Dutch Government
- [F] government.se — Swedish Government
- [F] governo.it — Italian Government
- [F] grafana.com — Grafana
- [F] gumroad.com — Gumroad
- [F] hadea.ec.europa.eu — HaDEA — Health & Digital
- [A] hetzner.com — Hetzner
- [D] hilma.fi — Finland HILMA
- [F] hubspot.com — HubSpot
- [F] huggingface.co — Hugging Face
- [F] imy.se — Swedish DPA (IMY)
- [F] intercom.com — Intercom
- [F] kdt-ju.europa.eu — KDT JU — Key Digital Technologies
- [B] lamoncloa.gob.es — Spanish Government
- [F] lemonsqueezy.com — Lemon Squeezy
- [F] linear.app — Linear
- [F] loom.com — Loom
- [F] lrv.lt — Lithuanian Government
- [F] mailchimp.com — Mailchimp
- [F] mailerlite.com — MailerLite
- [F] make.com — Make
- [B] migadu.com — Migadu
- [F] mistral.ai — Mistral AI
- [F] mixpanel.com — Mixpanel
- [A] mk.gov.lv — Latvian Government
- [F] mollie.com — Mollie
- [F] monday.com — Monday.com
- [F] mongodb.com — MongoDB Atlas
- [F] n8n.io — n8n
- [F] neon.tech — Neon
- [F] netlify.com — Netlify
- [F] newrelic.com — New Relic
- [D] nextcloud.com — Nextcloud
- [F] nordpoolgroup.com — Nord Pool
- [F] notion.com — Notion
- [C] ombudsman.europa.eu — European Ombudsman
- [F] openai.com — OpenAI
- [F] osha.europa.eu — EU-OSHA — Work Safety
- [A] ovhcloud.com — OVHcloud
- [F] paddle.com — Paddle
- [F] paypal.com — PayPal
- [F] penpot.app — Penpot
- [F] perplexity.ai — Perplexity
- [F] pipedream.com — Pipedream
- [F] pipedrive.com — Pipedrive
- [C] pirsch.io — Pirsch Analytics
- [F] planetscale.com — PlanetScale
- [A] plausible.io — Plausible Analytics
- [F] posthog.com — PostHog
- [F] postmarkapp.com — Postmark
- [C] proton.me — Proton Mail
- [A] pse.pl — PSE — Poland TSO
- [F] publications.europa.eu — Publications Office
- [D] rail-research.europa.eu — Europe's Rail JU
- [F] railway.app — Railway
- [F] ree.es — Red Eléctrica — Spain TSO
- [D] ren.pt — REN — Portugal TSO
- [F] render.com — Render
- [F] replicate.com — Replicate
- [F] retool.com — Retool
- [F] revolut.com — Revolut
- [F] riigiteataja.ee — Estonia State Gazette
- [F] rte-france.com — RTE — France TSO
- [F] salesforce.com — Salesforce
- [F] scaleway.com — Scaleway
- [F] sendgrid.com — SendGrid
- [F] sentry.io — Sentry
- [A] simpleanalytics.com — Simple Analytics
- [F] slack.com — Slack
- [F] sn-ju.europa.eu — Smart Networks & Services JU
- [F] srb.europa.eu — Single Resolution Board
- [D] statnett.no — Statnett — Norway TSO
- [F] stripe.com — Stripe
- [F] substack.com — Substack
- [F] sumup.com — SumUp
- [F] supabase.com — Supabase
- [B] svk.se — Svenska Kraftnät — Sweden TSO
- [F] ted.europa.eu — TED — EU Tenders
- [F] tennet.eu — TenneT — NL/DE TSO
- [F] tietosuoja.fi — Finnish DPA
- [F] trello.com — Trello
- [A] tutanota.com — Tuta
- [F] umami.is — Umami
- [D] uodo.gov.pl — Polish DPA
- [F] valitsus.ee — Estonian Government
- [F] vercel.com — Vercel
- [F] warp.dev — Warp Terminal
- [F] webflow.com — Webflow
- [F] whereby.com — Whereby
- [F] wise.com — Wise
- [F] www.entsoe.eu — ENTSO-E — European TSO Network
- [F] www.terna.it — Terna — Italy TSO
- [F] zapier.com — Zapier
- [F] zed.dev — Zed Editor
- [F] zendesk.com — Zendesk
- [F] zoom.us — Zoom

## Methodology

https://euroscanner.eu/methodology.html