New: Flexible service plans for Myra WAF. Learn more!
Home>
Myra Sovereignty Check
How (in)dependent is your hosting?
What are the risks of using non-European service providers?
Cloud services are widely valued because they are efficient, scalable, and highly available. But what if the cloud services you rely on suddenly become unavailable?
According to the “Cloud Report 2025” published by industry association Bitkom, almost two-thirds (62%) of companies in Germany would be unable to operate without cloud services. This is leading to growing concern in the business community about excessive dependence on non-European service providers. More than three-quarters (78%) believe that Germany is too dependent on US providers. And every second company (50%) feels compelled to rethink its own cloud strategy in light of the Trump administration's policies.
The following risks must be taken into account when using non-European service providers.
Political Influence
Service Interruptions
Access Restrictions
Loss of Data Sovereignty
Voices from the Field: Why Experts Are Calling for Greater Digital Sovereignty
Best Practices
Step by Step to More Digital Sovereignty
Digital sovereignty is not a one-time project, but rather a continuous process that must be tailored to your organization. To minimize risks, ensure long-term independence, and strengthen competitiveness, a systematic, multi-stage approach that includes both strategic and operational measures is recommended. The following steps have established themselves as best practices.
1. Status Quo Analysis
2. Goal Definition
3. Risk Analysis
4. Measure Selection
5. Implementation
6. Communication
More Digital Independence with Myra
IT security solutions made in Germany
Myra develops all security solutions in Germany, serving as a secure European alternative to US solutions.
Legally compliant with GDPR
Our solutions are legally GDPR-compliant and offer a comprehensive level of compliance for the most demanding requirements.
Data processing in Europe
At Myra, SSL/TLS termination is carried out exclusively in Germany or Europe at the customer's request.
PoPs in many European countries
We have many PoP locations throughout Europe, outside the jurisdiction of US laws such as the CLOUD Act or FISA Section 702.
This is how Myra compares to competitors in terms of digital sovereignty
Legally GDPR compliant (not subject to US CLOUD Act and FISA Section 702) | ||
Option to exclusively process data in German data centers | ||
Technology development in EU / Germany | ||
Company management based in EU / Germany | ||
EU / German law applies |
Get in Touch – and Mitigate Any Risk
You have completed your sovereignty check – now you can take the next step toward strengthening your security and digital independence. Whether you need expert guidance, a personalized security consultation, or more details on our GDPR-compliant, sovereign solutions “Made in Germany,” we’re happy to help.
All inquiries will be handled promptly and in strict confidence.
With over 11 years of experience in IT security, we are the right partner for you.
Our business hours are Monday to Friday, 9 a.m. to 6 p.m. (CET).
Simplay fill out the contact form or use one of the other contact options.
FAQ: Data protection agreements, surveillance laws, and more.
Safe Harbor was a data protection agreement between the EU and the US that was in place from 2000 to 2015 and was intended to enable data transfers between the two regions. It was based on self-certification by US companies that committed to complying with certain data protection principles without any external monitoring. The European Court of Justice declared Safe Harbor invalid in 2015 because the level of data protection in the US was considered insufficient and EU citizens were not granted adequate legal protection (Schrems I).
The EU-US Privacy Shield was introduced in 2016 as the successor to Safe Harbor and was intended to ensure a higher level of data protection for EU citizens when transferring personal data to the US. US companies could voluntarily certify themselves and had to comply with stricter data protection rules, with compliance being monitored and violations sanctioned. This agreement was also declared invalid by the European Court of Justice in 2020 due to continuing concerns about protection against access by US authorities and the lack of legal remedies for EU citizens (Schrems II).
The EU-US Data Privacy Framework has been the current legal framework for data transfers between the EU and the US since July 2023. It provides for new safeguards, including restrictions on access by US intelligence services and the introduction of an independent “Data Protection Review Court” for complaints from EU citizens. Only certified US companies may receive personal data from the EU, with the European Commission recognizing the level of data protection in these companies as adequate.
The US CLOUD Act obliges American companies to disclose data – even if it is stored on servers outside the US. If you use US-based cloud providers, there is therefore a risk that US authorities can access your data – without your knowledge or any control by European courts.
International data protection agreements such as the Trans-Atlantic Data Privacy Framework (TADPF) are intended to provide legal certainty for data exchanges between the EU and the US. However, such agreements are often criticized because they do not guarantee the same level of protection as the GDPR. Previous agreements such as Safe Harbor and Privacy Shield have already been overturned by the European Court of Justice, so companies should not rely solely on such agreements.
Following the collapse of the Privacy Shield agreement, the use of many US services is now legally problematic. According to the GDPR, the transfer of personal data to third countries without adequate data protection is only permitted under very strict conditions – and entails liability risks.
Digital sovereignty means that you always know and control where your data is located, who has access to it, and which laws apply to your infrastructure. This not only protects you from data leaks, but also from legal uncertainties and damage to your image.
With providers such as Myra as a German Cloudflare alternative, you are choosing a European, GDPR-compliant alternative that focuses on compliance, transparency, and security. This allows you to remain independent, auditable, and compliant with regulatory requirements — e.g., for critical infrastructure, the public sector, or data-sensitive industries.