European Digital Sovereignty: Following the Commission's "Sovereignty Package", the EDRIX Index Delivers the Quarterly Measurement — Austria in the Lead

Nine months after the inaugural report, EDRIX 2.0 probes four pillars — developer ecosystem, grassroots adoption, private-sector and public-sector resilience — across 13,500 high-traffic domains and the core official sites (head of state, government, capital city) of the 27 EU member states. The finding: only four countries (Austria, Croatia, Romania, Slovenia) keep these three core sites fully on EU infrastructure and EU providers, and the structural patterns identified in September 2025 have not shifted.

Paris – June 8, 2026 – A few days after the European Commission's presentation of its "sovereignty package", the European Digital Resilience Index (EDRIX) publishes its June 2026 edition. This first edition of EDRIX 2.0 — a simplified and refined methodology compared to V1, now fully automated and refreshed quarterly — sets out to be a regular measurement instrument for tracking, publication after publication, the evolution of European digital sovereignty. Austria takes the top spot with an EDRIX score of 7.52 out of 10, narrowly ahead of Germany (7.50). The field has tightened: Finland (7.30), Slovenia (6.74), and Estonia (6.52) follow, with the top five separated by a single point.

In the detail, the core official websites of the governments of Lithuania, Malta, Ireland, Belgium, and the Netherlands are still substantially dependent on US infrastructure, with Malta and Lithuania falling to the bottom of the public-sector pillar (0.00 and 1.11 out of 10 respectively). In France, www.elysee.fr (the President's site) and www.paris.fr (the capital city) both sit behind US-controlled CDNs — Cloudflare and Fastly respectively.

The economic and geopolitical motivation behind the index is unchanged from the inaugural publication. The €264 billion annual outflow to US-based software and cloud services quantified by the 2025 Asterès/Cigref report continues, and the post-2025 collapse of the transatlantic alliance has only sharpened the strategic stakes — Europe's reliance on non-European-controlled digital infrastructure is now openly a tool of geopolitical leverage.

Key data findings from the June 2026 edition:

  • Four countries hit a perfect 10/10 on public sector resilience: Austria, Croatia, Romania, and Slovenia. Every surveyed government, head-of-state, and capital-city domain in these four is hosted on EU infrastructure and operated by an EU provider. The remaining 23 member states all have at least one of these three domains on non-EU-controlled infrastructure.
  • The Netherlands paradox. The Netherlands has the highest developer density per capita in the EU (perfectly normalised to 10.0) and, simultaneously, one of the three lowest private-sector hosting scores (3.19). Across the top 500 .nl domains, 61% are hosted on US-controlled providers — led by Cloudflare (25%), AWS (13%), Akamai (11%), Microsoft (5%), and Google (3%) — a country with the talent to host its own private sector that conspicuously does not.
  • Ireland's structural paradox. Ireland scores in the EU's top tier on developer density and literal zero on private sector resilience. As the home of AWS Dublin and Microsoft Azure North Europe — and the European corporate base of Google, Microsoft, and AWS — Irish-registered domains overwhelmingly run on Irish-soil US-controlled servers, a geographic accident of corporate-tax history that the new strict methodology now captures honestly.
  • The Czech Republic leads the EU on domestic private-sector hosting. With a perfect 10/10 on private sector resilience, the .cz ecosystem hosts more of its high-traffic domains in-country than any other EU member state — followed very closely by Slovakia (9.94). The leading Czech hosters (VSHosting, CASABLANCA INT, Master Internet, Seznam.cz, CESNET) and their Slovak counterparts (SWAN, VNET, WebSupport, Slovak Telekom) together account for a share of each TLD's top-500 unmatched elsewhere in the union.
  • Polish desktop and laptop users are the EU's most browser-sovereign. Firefox and Opera together account for 26.0% of Polish desktop and laptop browser share — narrowly edging Germany's 24.8% and well above the EU27 average of 15.8%. A grassroots story not visible in Poland's mid-tier policy framework.

Dr. Stefane Fermigier, author of the EDRIX, says:

"Even with Austria and Germany neck and neck at the top, this is not a time for triumphalism. We have countries with world-class developer talent — the Netherlands, Ireland, Estonia — running their domestic web on Amazon, Microsoft, Google, and Cloudflare. We have national presidential and capital-city websites served from Virginia and Dublin US-cloud datacenters. And we have EU27-wide Linux share on desktops and laptops still at just 4.0% — barely moved from last year's 3.7%. The structural patterns identified in the inaugural EDRIX have not shifted in nine months. Our index is now fully automated and quarterly, so policymakers and citizens can track whether the gap closes or widens, edition by edition."

The methodology has been substantially overhauled since the September 2025 publication. EDRIX 2.0 drops the inputs that required annual manual curation (the Open Source Observatory policy ratings and the EuroStack supporter/solution counts) in favor of four fully-automated pillars:

  • Developer Ecosystem — GitHub developer density per capita, sourced from GitHub's Innovation Graph.
  • Grassroots Adoption — Linux share on desktops and laptops, and Firefox + Opera browser share, sourced from Cloudflare Radar.
  • Private sector resilience — sovereignty rating of the top 500 domains in each national TLD (excluding US/UK/CN-owned brands like amazon.fr, google.sk, tiktok.fr, wise.fr), sourced from a quarterly domain scan.
  • Public sector resilience — sovereignty rating of each member state's official / government domains.

Every quarterly publication is reproducible end-to-end from its committed inputs; the methodology page documents what changed between EDRIX 1.0 (September 2025) and EDRIX 2.0 (June 2026 onward), including a retroactive correction of the September 2025 public-sector measurement which the inaugural release reported incorrectly.

This edition arrives at a pivotal moment. The European Commission presented its "sovereignty package" this week (official statement), a structuring initiative aimed at reinforcing the Union's digital strategic autonomy. Complementary Franco-German announcements on the same topic are expected by the end of June. The EDRIX figures for June 2026 provide a quantitative baseline against which the impact of these strategies can be measured, quarterly publication after quarterly publication.

The EDRIX continues to provide the data framework needed to guide the industrial policy necessary to build a resilient, sovereign "EuroStack" — an undertaking the post-2025 geopolitical context has made structurally urgent.

About the European Digital Resilience Index (EDRIX)

The EDRIX is a composite index providing a holistic, data-driven measure of a nation's ability to create, deploy, and use technology independently. As of the June 2026 publication, it is fully automated and refreshed quarterly, with four pillars: developer ecosystem, grassroots adoption, private sector resilience, and public sector resilience. The index was first published in September 2025 and underwent a major methodological revision in May 2026 (EDRIX 2.0). Every edition's underlying inputs and computed outputs are archived alongside the publication for full reproducibility.

The full report, methodology, per-country pages, and per-domain detail are available at: edrix.eu

Contact

Stefane Fermigier, author of the EDRIX
email: sf@fermigier.com