Weighted Score:
80
High sovereignty due to Clear EU entity and control and EU jurisdiction anchored (NL).
Company name: PixelUnion V.O.F.
URL: https://pixelunion.eu
eurotechguide review(s): Not reviewed
Digital services offered: Photo
| Criterion | Score | Short Assessment | Long Rationale |
|---|---|---|---|
| SOV-1 (strategic) | 4 | Clear EU entity and control. | PixelUnion explicitly identifies itself as PixelUnion V.O.F., located in Alkmaar, The Netherlands and publishes a Dutch Chamber of Commerce (KvK) number plus Dutch VAT number. Under the framework’s definition, this supports SEAL-4 for strategic sovereignty. |
| SOV-2 (legal) | 4 | EU jurisdiction anchored (NL). | The pixelunion.eu website makes the governing legal system clear: a Dutch legal entity (V.O.F.) with EU registration details. That strongly anchors the service in EU jurisdiction, satisfying the core SOV-2 factor (“national legal system governing the provider’s operations and contracts”). Based on what is evidenced, SEAL-4 is appropriate for SOV-2. |
| SOV-3 (data & AI) | 3 | Data residency/key control not evidenced. | PixelUnion operates under EU jurisdiction and positions its storage within the EU, supporting strong data confinement. However, there is no clear evidence of universal client-side, customer-held encryption across all services or full transparency over the entire processing pipeline. Data sovereignty is meaningful but not absolute — consistent with SEAL-3. |
| SOV-4 (operational) | 4 | Open-source base improves exit. | PixelUnion is built on open-source Immich, enabling EU actors to self-host, replicate functionality, and migrate data independently of the vendor. Operational continuity does not structurally depend on proprietary infrastructure. Autonomy is transferable beyond the hosted service –> SEAL-4 |
| SOV-5 (supply chain) | 2 | Supply chain not disclosed. | PixelUnion provides no detailed public transparency regarding data-centre operators, hardware provenance, firmware stacks, or supplier audit rights. While EU-based, its infrastructure likely depends on globally sourced components without demonstrated EU supply-chain control. Without verifiable supplier-chain documentation, material non-EU dependencies are presumed –> SEAL-2. |
| SOV-6 (technological) | 4 | Open-source core; auditable stack. | SOV-6 values openness, auditability and freedom from lock-in. PixelUnion builds on open-source Immich, enabling audit, modification and interoperability while reducing proprietary dependency. Despite potential proprietary hosting layers, the open core supports SEAL-4 for technology sovereignty. → SEAL-4 |
| SOV-7 (security) | 2 | EU entity; security not evidenced. | EU-jurisdiction anchored, but no publicly demonstrated certifications, independent audits, or detailed security governance transparency. Security maturity is not verifiably evidenced. → SEAL-2 |
| SOV-8 (environmental) | 2 | Limited quantified sustainability disclosure | EU-based service but no measurable public sustainability disclosures on energy, emissions or lifecycle commitments. → SEAL-2 |