The Sovereignty Dependency Check
Sovereign AI is not about independence from the world. It is about knowing which dependencies you have, choosing them deliberately, and keeping a credible way out. This tool helps you find out where you stand.
20 to 30 minutes
A small group: the AI or digital lead, someone from procurement, and someone who knows the contracts
Everything stays in your browser. Nothing you enter is sent anywhere.
The AI tools and services your organisation relies on, from the office assistant everyone uses to the model inside a critical process.
Ownership, control, jurisdiction, capability and optionality. “We don’t know” is a valid answer, and often the most revealing one.
See where you are exposed, which services need attention first, and the questions to take to your board.
Infotactica · Sovereignty Dependency Check ·
Start with an example, or from scratch
Each example is an illustrative organisation, not a real one. Load one to see how the check works, then change the answers to match your own situation.
Your answers are saved in this browser so you can come back to them.
Your AI services
For each service, say how critical it is to your operations, then answer the five questions. Answer for how things are today, not how the contract says they should be.
Your dependency map
The check separates “sovereignty” into the five questions set out by Alan W. Brown in What do we mean by sovereign AI? (Computer Weekly, September 2026). Each answer scores 0 (secure), 1 (partial) or 2 (exposed). “We don’t know” also scores 2, because a dependency you cannot describe is one you cannot manage.
- Exposure is the total across the five questions, from 0 to 10: low (0 to 3), medium (4 to 6) or high (7 to 10).
- Priority combines exposure with how critical the service is. A critical service with high exposure is “act now”. A low-criticality service with low exposure is “accept”.
- Optionality carries the most weight in the actions, because the most useful test of sovereignty is whether you can leave, how long it would take, and what you would lose.
This is a structured way to start a conversation, not an audit or legal advice. Where the check reveals uncertainty about contracts or data protection, take specialist advice.
Infotactica