Assessment
Exemplary. Top percentile in DACH B2B.
Sovereignty Scan
Geprüfte Domain: bmf.bund.de
Wir prüfen DNS, Hosting, erkannte Tools und EU-Alternativen. Bei großen Seiten kann das beim ersten Aufruf einen Moment dauern.
Sovereignty Scan
Scanning domain: bmf.bund.de
We are checking DNS, hosting, detected tools and EU alternatives. Large sites can take a moment on the first request.
Alle 1 erkannten Tools sind EU-nativ.
LinkedIn, X, WhatsApp or TikTok Story PNG with grade and logo embedded.
Assessment
Exemplary. Top percentile in DACH B2B.
We could not detect any US-jurisdicted tools with high or medium risk on this domain. This is a positive signal, but not a complete all-clear. Internal tools and services behind a login are not visible.
1 EU-compliant tools were detected as well — no action needed.
Embed Badge
Trust page, footer, RFP response. Updates automatically after every re-scan.
<a href="https://scan.meetergo.com/de/r/bmf.bund.de" target="_blank" rel="noopener" aria-label="Sovereignty Score: A – bmf.bund.de">
<iframe src="https://scan.meetergo.com/scan/api/badge/bmf.bund.de?variant=card&theme=light" width="360" height="240"
title="Sovereignty Score: A – bmf.bund.de" loading="lazy"
style="border:0;display:block;max-width:100%"
sandbox="allow-popups allow-popups-to-escape-sandbox"></iframe>
</a>Operational Signals
Five operational signals that any DNS resolver or TLS handshake exposes. They show who's behind the domain — even when the brand promises something different.
Cookies the server sets on the very first visit, before anyone clicks a cookie banner.
Cryptographic signature of DNS responses. Prevents attackers from redirecting the domain to malicious servers.
Encrypts the connection between browser and website. The Certificate Authority (CA) guarantees the domain belongs to the stated owner.
Who actually owns the website's IP address. Shows the real hosting corporation, even if the contractual partner is different.
Hostname the IP points back to. Often unset for Anycast CDNs (Cloudflare, Vercel).
Capped per bucket, low-confidence hits weighted half, EU vendors not deducted.
Total deductions: −0 · Sovereignty bonus: +0
No critical vendors detected in this bucket.
No critical vendors detected in this bucket.
No critical vendors detected in this bucket.
0 cookie(s) set before consent.
No critical category covered by an EU vendor.
The Sovereignty Scan evaluates publicly accessible signals (homepage and legal page HTML, DNS, MX, SPF, and ASN data) and compares them against our database of approximately 3,000 vendors. The mapping of tools to owners and jurisdictions is based on public sources (legal notices, privacy policies, Wappalyzer, RIPE/ARIN registrations) and is intended as a first indication at the time of evaluation, not a legally binding assessment.
The A–E grade is a risk indicator, not a GDPR compliance verdict. For a concrete GDPR assessment — especially regarding Data Processing Agreements (DPA), Standard Contractual Clauses (SCC), and Transfer Impact Assessments (TIA) — please consult your Data Protection Officer or external legal counsel. meetergo makes no claim as to whether a specific vendor can be used in a GDPR-compliant manner in any particular use case.
Correction & Response: If you are the domain owner, Data Protection Officer, or press office of the assessed domain and the signals shown here do not reflect your current tool configuration, we welcome corrections and will update the listing promptly after review.