The European Digital Resilience Index — June 2026
Date: June 4, 2026
Report version: 2.0
EDRIX version: 2.0
Executive summary
The European Digital Resilience Index (EDRIX) is a data-driven assessment of digital sovereignty across the 27 EU member states. Its motivation is unchanged from the September 2025 inaugural publication: the €264 billion annual outflow to US-based software and cloud services (Asterès, 2025) is no longer a tolerable abstraction, and the geopolitical realignment since 2025 has turned digital dependency from an economic leak into a strategic vulnerability.
This is the first edition of EDRIX 2.0 — the redesigned, fully-automated, quarterly-published index. It is built around four pillars and five raw metrics that refresh end-to-end from public, scriptable data sources. See Methodology for the technical detail and the historical changes (notably the retirement of OSOR-based and EuroStack-sourced inputs, plus the new top-500-per-TLD private-sector sample with non-EU brand exclusion).
Headline findings
Austria takes the lead at 7.52, Germany follows narrowly at 7.50, Finland third at 7.30. The top of the EU27 is more compact than in any prior publication — the five leaders are separated by exactly 1.00 point.
| Rank | Country | EDRIX | Lead pillar(s) |
|---|---|---|---|
| 1 | Austria | 7.52 | Public Sector (perfect 10) + strong .at private-sector hosting |
| 2 | Germany | 7.50 | Grassroots Adoption + broad balance |
| 3 | Finland | 7.30 | Grassroots Adoption (perfect 10) — EU-leading Linux + dev density |
| 4 | Slovenia | 6.74 | Best-rounded mid-size; perfect Public Sector |
| 5 | Estonia | 6.52 | Developer Ecosystem (very high, 8.88) |
A wide middle band (4.0–6.5) contains 15 countries — Hungary, Luxembourg, Czech Republic, Poland, France, Croatia, Latvia, Sweden, Cyprus, Slovakia, Bulgaria, Netherlands, Romania, Denmark, Portugal. Ireland, Spain, Belgium, Lithuania, Greece, Italy and Malta complete the table below 4.0.
Five structural observations
1. The Czech Republic leads the EU on domestic private-sector hosting. With a perfect 10/10, the .cz ecosystem hosts more of its high-traffic domains in-country than any other EU member state, with VSHosting, CASABLANCA INT, Master Internet, Seznam.cz, and CESNET leading the domestic hosters. Slovakia follows very closely (9.94) with its own constellation (SWAN, VNET, WebSupport, Slovak Telekom). A surprise finding for two countries with respectively the EU's lowest (Slovakia) and one of the lowest (Czech Republic) per-capita developer densities.
2. Poland has the EU's highest Sovereign Browser share at 26.00% (Firefox + Opera combined), edging out Germany (24.77%). Polish users on desktops and laptops are unusually anti-Chrome — a grassroots story not visible in the country's mid-tier policy framework.
3. Four countries hit a perfect 10/10 on public sector resilience — Austria, Croatia, Romania, Slovenia. Every surveyed official domain (head of state, government, capital city) in these four is EU-hosted and operated by an EU provider. The other 23 EU27 countries have at least one official site that relies on non-EU-controlled infrastructure or a non-EU provider.
4. The Netherlands paradox. The Netherlands has the highest per-capita developer density in the EU (5.59 — perfectly normalised to 10.0 on DR_DEV_ECO) AND one of the three lowest private-sector hosting ratings (3.19, behind only Ireland and Malta). The country has the talent to host its own businesses; it doesn't. Across the top 500 .nl domains, 61% are hosted on US-controlled providers — led by Cloudflare (25%), AWS (13%), Akamai (11%), Microsoft (5%), and Google (3%). This is a policy lever, not a structural condition.
5. Ireland's paradox is structural. Ireland scores in the top 7 on Developer Ecosystem (7.02) and zero on private sector resilience. Of 963 scanned .ie domains, 83% are non-EU-hosted, with 75% on US providers (and 1% on UK providers). Dublin is the European front door for AWS / Google / Azure datacenters, so Irish-registered domains often run on Irish-soil US-controlled servers. The EDRIX algorithm scores by the company that owns the ASN, so this shows up as low sovereignty even though the bytes physically live in Ireland.
How to read the index
EDRIX is a 0–10 composite, the arithmetic mean of four pillar scores, each itself min-max normalized across the 27 member states. A country scores 10 only by leading the EU27 in every pillar; a country scores 0 only by trailing in every pillar. Movement of less than 0.2 points between editions should be treated as noise. Movement above that is a real signal — to be examined per-pillar.
The four pillars, in plain language:
- Developer Ecosystem — density of the country's GitHub developer community per million inhabitants.
- Grassroots Adoption — combined Linux share on desktops and laptops and Firefox + Opera browser share among human visits.
- Private sector resilience — sovereignty rating of the top-500 high-traffic domains in the country's national TLD (excluding non-EU-owned brands).
- Public sector resilience — sovereignty rating of the country's official / government domains.
See Methodology for the underlying data sources, the normalization steps, and the methodology-history section that documents what changed between EDRIX 1.0 and 2.0.
Archive
The original September 2025 publication, which introduced the index in its 5-pillar form, is preserved in full at Report v1.0 (September 2025). Comparisons between that version and the current one are valid only after applying the retroactive corrections documented in the methodology page.