Legal

Legal Notice

Last updated: April 2026

1. Company Information

Company name: Soverita
Contact:
Website:
Jurisdiction: European Union

Soverita is a sovereign cloud governance platform designed and built in Europe. Additional company registration details (registered address, commercial register entry, VAT identification number) will be published here upon formal incorporation.

2. Website Content and Disclaimer

The content of this website is provided for general informational purposes about Soverita's products, services, and vision. While we make every reasonable effort to ensure the information presented is accurate and current, we do not warrant or guarantee the completeness, reliability, or accuracy of any content.

Product features, technical capabilities, service availability, compliance certifications, and timelines described on this website represent current plans and intentions. They may change without notice as the product evolves. Nothing on this website constitutes a binding contractual offer, commitment to deliver specific features, or guarantee of specific capabilities.

This website does not constitute legal, financial, compliance, or technical advice. Organisations evaluating Soverita for their infrastructure should conduct their own due diligence and seek independent professional advice appropriate to their specific regulatory and operational requirements.

3. Intellectual Property

The following are the property of Soverita and are protected by applicable intellectual property laws:

  • The Soverita name and brand identity
  • The Soverita logo (origami bird mark and wordmark)
  • Website design, layout, and visual elements
  • All text content, product descriptions, and documentation
  • Architecture diagrams, illustrations, and technical visualisations

Content on this website may not be reproduced, distributed, modified, or republished without prior written permission from Soverita. Brief quotations for the purpose of review, commentary, or academic citation are permitted with appropriate attribution.

4. Third-Party References

This website may reference third-party companies, products, services, standards, and regulatory frameworks for informational and comparative purposes. All third-party trademarks, service marks, and company names are the property of their respective owners. References to third-party products or services do not constitute endorsement, sponsorship, or affiliation unless explicitly stated.

Compliance framework references (ISO 27001, BSI C5, DORA, NIST CSF 2.0, PCI-DSS, GDPR, EUCS, SecNumCloud, NIS2, EU AI Act) describe standards and regulations that Soverita's controls are designed to support. References to these frameworks do not imply that Soverita has obtained certification under any specific framework unless explicitly stated with certification dates and scope.

5. External Links

This website may contain links to external websites and resources. Soverita has no control over the content, privacy practices, or availability of these external sites. Inclusion of a link does not imply endorsement or responsibility for the linked content.

6. Limitation of Liability

To the fullest extent permitted by applicable law, Soverita shall not be liable for any direct, indirect, incidental, consequential, or punitive damages arising from the use of or inability to use this website, reliance on any information contained on this website, or any errors or omissions in the content.

7. Applicable Law

This legal notice and the use of this website are governed by the laws of the European Union and the applicable national laws of the jurisdiction in which Soverita is registered. Any disputes arising from the use of this website shall be subject to the exclusive jurisdiction of the competent courts in that jurisdiction.

8. Regulatory Context

Soverita operates within the European regulatory framework for cloud services and data protection, including but not limited to:

  • GDPR (General Data Protection Regulation, EU 2016/679) — governing the processing of personal data
  • NIS2 (Network and Information Security Directive 2, EU 2022/2555) — establishing cybersecurity obligations for essential and important entities
  • DORA (Digital Operational Resilience Act, EU 2022/2554) — mandating ICT resilience requirements for financial entities
  • EU AI Act (AI Regulation, EU 2024/1689) — establishing requirements for AI systems including data governance and transparency
  • EU Cybersecurity Act (EU 2019/881) — establishing the EUCS certification framework for cloud services

These regulations inform the design of Soverita's governance controls. Soverita's position as a European company with no foreign-jurisdiction dependencies is a deliberate architectural decision aligned with the evolving EU regulatory requirements for sovereign cloud infrastructure.

9. Changes to This Notice

We reserve the right to modify this legal notice at any time. Material changes will be reflected in the "Last updated" date at the top of this page. Continued use of the website after changes constitutes acceptance of the modified notice.

10. Contact

For any legal enquiries: