The sovereign login checklist

20 questions to ask any identity provider about where your users' data lives, who can reach it, and whether you can leave. Free PDF, three pages.

What's inside

  • The questions residency misses. A UK or EU data centre is only the start. Check who runs the system and whose law applies to them.

  • What a good answer looks like. For each question, a plain note on what to expect from a vendor, so you can tell a real answer from a vague one.

  • The parts teams forget. Backups, logs, and the email and SMS providers that see your users' phone numbers and one-time codes.

For CTOs, engineering and platform leads, and security and data protection teams in the UK and Europe.

The checklist opens in a new tab. We use your details as described in our privacy policy.