Tool · Risk

The Sovereignty Dependency Check

Sovereign AI is not about independence from the world. It is about knowing which dependencies you have, choosing them deliberately, and keeping a credible way out. This tool helps you find out where you stand.

Time

20 to 30 minutes

Best done by

A small group: the AI or digital lead, someone from procurement, and someone who knows the contracts

Privacy

Everything stays in your browser. Nothing you enter is sent anywhere.

1List your AI services

The AI tools and services your organisation relies on, from the office assistant everyone uses to the model inside a critical process.

2Answer five questions for each

Ownership, control, jurisdiction, capability and optionality. “We don’t know” is a valid answer, and often the most revealing one.

3Read your dependency map

See where you are exposed, which services need attention first, and the questions to take to your board.

Start with an example, or from scratch

Each example is an illustrative organisation, not a real one. Load one to see how the check works, then change the answers to match your own situation.

Your answers are saved in this browser so you can come back to them.

Your AI services

For each service, say how critical it is to your operations, then answer the five questions. Answer for how things are today, not how the contract says they should be.

Your dependency map

How the check works

The check separates “sovereignty” into the five questions set out by Alan W. Brown in What do we mean by sovereign AI? (Computer Weekly, September 2026). Each answer scores 0 (secure), 1 (partial) or 2 (exposed). “We don’t know” also scores 2, because a dependency you cannot describe is one you cannot manage.

  • Exposure is the total across the five questions, from 0 to 10: low (0 to 3), medium (4 to 6) or high (7 to 10).
  • Priority combines exposure with how critical the service is. A critical service with high exposure is “act now”. A low-criticality service with low exposure is “accept”.
  • Optionality carries the most weight in the actions, because the most useful test of sovereignty is whether you can leave, how long it would take, and what you would lose.

This is a structured way to start a conversation, not an audit or legal advice. Where the check reveals uncertainty about contracts or data protection, take specialist advice.

Get the briefings by email

One short email when we publish a new briefing, case file or tool. Free, and easy to unsubscribe.

Subscribe by email