CSI Composite

Editorial framework — blends EU-CSF + C3A with global adaptations

An editorial blend of EU-CSF and C3A with global adaptations. For EU/EEA: CSL 0–4 weakest-link. For non-EU: Progressive Sovereignty Maturity tiers (Dependent → Sovereign).

Output: CSL 0–4 (EU) · Maturity tier (non-EU)

Upload a pre-filled template to import all answers at once. Download blank CSI template →

Import completed answers

Upload a previously exported JSON, CSV, or filled XLSX template to skip the form.

Download blank template (.xlsx) ↓

Click to select file, or drag & drop · XLSX, JSON, or CSV

or start a new assessment manually

Country

Organisation name

Not indexed. Stored only in your assessment record.

Sovereignty domains to assess

Untick a domain to exclude those questions — useful for focused reviews.

SOV-1 — Strategic Sovereignty

Strategic sovereignty captures the degree to which the services of a cloud provider are an…

SOV-2 — Legal & Jurisdictional Sovereignty

Legal & Jurisdictional sovereignty evaluates the legal environment, exposure to foreign au…

SOV-3 — Data & AI Sovereignty

Data sovereignty captures the degree to which cloud service customers retain control over …

SOV-4 — Operational Sovereignty

Operational sovereignty assesses whether the cloud service provider maintains independent …

SOV-5 — Supply Chain Sovereignty

Supply chain sovereignty evaluates the extent to which the cloud service provider can iden…

SOV-6 — Technology Sovereignty

Technology sovereignty assesses whether the cloud service provider maintains independent a…

SOV-7 — Security & Compliance Sovereignty

Security and compliance sovereignty evaluates whether the cloud service provider maintains…

SOV-8 — Environmental Sustainability

Environmental sustainability sovereignty assesses whether the cloud service provider measu…

SOV-9 — Economic & Payment Continuity

Evaluates whether the cloud service relationship can remain stable under payment-rail disr…