Weighted Score:
40
Low sovereignty due to US ownership decides strategy and EU ops; US legal reach.
Company name: Surfboard Holding B.V.
URL: https://www.startpage.com
eurotechguide review(s): Not reviewed
Digital services offered: Search
| Criterion | Score | Short Assessment | Long Rationale |
|---|---|---|---|
| SOV-1 (strategic) | 1 | US ownership decides strategy. | Startpage is headquartered in the EU, but majority ownership sits with a US-listed parent (System1). Under SOV-1, the framework emphasizes “bodies having decisive authority” and “assurances against change of control.” With a US majority owner, ultimate strategic authority can be exercised outside Europe and a change of control risk is inherently higher from an EU-sovereignty perspective. This maps to SEAL-1: EU law may apply locally, but strategic control is under exclusive non-EU influence. |
| SOV-2 (legal) | 1 | EU ops; US legal reach. | With a US majority owner, Startpage is plausibly exposed to US legal compulsion channels, even if operations are in Europe. This matches SEAL-1: EU law can apply, but practical insulation from foreign authority is limited because non-EU legal reach can attach via ownership/control. |
| SOV-3 (data & AI) | 2 | Privacy layer; non-EU core. | SOV-3 requires EU control over data access (crypto keys), auditability and no fallback to third countries. Startpage’s value proposition is privacy, but the core search results depend on a non-EU search stack (Google). Even if Startpage minimizes retention, reliance on non-EU service layers is a “material dependency.” EU law may be enforceable, but autonomy over the full data/AI pipeline is not. → SEAL-2. |
| SOV-4 (operational) | 2 | Depends on non-EU search core. | Core search capability depends on non-EU index providers. EU actors control the interface layer but not the underlying search infrastructure. → SEAL-2 |
| SOV-5 (supply chain) | 1 | Critical supply chain non-EU. | The most critical component (search index/results pipeline) is controlled by a non-EU actor. That is effectively “exclusive non-EU control” of a critical component, driving the rating down. → SEAL-1. |
| SOV-6 (technological) | 2 | Limited EU tech autonomy. | Startpage may use standard web protocols, but the core search technology remains proprietary and non-EU controlled. EU actors cannot audit or evolve the core indexing stack independently. This is EU control of part of the service, with material non-EU tech dependency. → SEAL-2. |
| SOV-7 (security) | 2 | EU compliance; dependencies persist. | Startpage can be GDPR compliant, but US ownership plus non-EU dependencies undermine EU-exclusive control over the full security posture of critical components. This fits SEAL-2: enforceable EU compliance with material non-EU dependencies. |
| SOV-8 (environmental) | 3 | Lightweight service, limited transparency | Lightweight service footprint but no clear, quantified sustainability reporting or renewable-energy disclosures for core operations. → SEAL-2 |