- Live
- As of · Mon, 27 April 2026
- Lowest grade · Bayer · Grade E · 0/100
- Highest grade · Zollverwaltung · Grade A · 100/100
- Average · 47/100
- 9 of 52 at A or B
- 14 in E territory
- DAX 40 · avg 38
- Ministries · avg 87
- Agencies · avg 80
- Health Insurers · avg 69
- Next wave · Mon, 04 May 2026
How sovereign is Germany?
Weekly ranking of 52 public-sector and corporate domains by digital sovereignty: grades A through E based on their publicly observable web stack. Hosting region, ownership chain of embedded third parties, and CLOUD Act exposure are evaluated.
Germany · average
47/100
Significant risk
- A or B
- 9
- D or E
- 30
- Next wave
- Mon, 04 May 2026
sovereign
significant risk
weekly · Mondays
Distribution · 52 domains
- A · 5
- B · 4
- C · 13
- BASF: Grade C, Score 55
- Rheinmetall: Grade C, Score 56
- RWE: Grade C, Score 58
- Polizei (Verbund): Grade C, Score 60
- Heidelberg Materials: Grade C, Score 61
- DHL Group: Grade C, Score 62
- Airbus: Grade C, Score 62
- Commerzbank: Grade C, Score 63
- Deutsche Bank: Grade C, Score 63
- Brenntag: Grade C, Score 64
- MTU Aero Engines: Grade C, Score 70
- DAK-Gesundheit: Grade C, Score 72
- Techniker Krankenkasse: Grade C, Score 73
- D · 16
- Henkel: Grade D, Score 32
- Allianz: Grade D, Score 34
- Deutsche Telekom: Grade D, Score 34
- Siemens: Grade D, Score 38
- Daimler Truck: Grade D, Score 38
- adidas: Grade D, Score 39
- Barmer: Grade D, Score 39
- BMW Group: Grade D, Score 40
- SAP: Grade D, Score 42
- Vonovia: Grade D, Score 42
- Deutsche Börse: Grade D, Score 43
- Beiersdorf: Grade D, Score 45
- Volkswagen: Grade D, Score 49
- Munich Re: Grade D, Score 49
- Hannover Rück: Grade D, Score 53
- Symrise: Grade D, Score 53
- E · 14
- Bayer: Grade E, Score 0
- E.ON: Grade E, Score 0
- Fresenius Medical Care: Grade E, Score 0
- Scout24: Grade E, Score 0
- Zalando: Grade E, Score 0
- Qiagen: Grade E, Score 2
- Siemens Energy: Grade E, Score 4
- Infineon: Grade E, Score 10
- GEA Group: Grade E, Score 13
- Siemens Healthineers: Grade E, Score 25
- Mercedes-Benz: Grade E, Score 27
- Fresenius: Grade E, Score 27
- Merck KGaA: Grade E, Score 27
- Continental: Grade E, Score 29
Initial intake:
This week · overall
Lowest & highest grades in the sample
Bayer
bayer.com
Finding
Acquia Cloud Platform, Akamai + 9 more US providers in web stack.
Zollverwaltung
zoll.de
Strength
No US tools detected in public web stack.
Special rankings
By sector
Each sector has its own ranking. The DAX 40 are fully covered as the launch wave (all 40 index members). Ministries, Agencies and Health insurers start as Initial intake and are expanded weekly toward the target sample. We will scan additional sectors in the coming waves.
DAX 40
Germany's 40 largest publicly listed companies, compared on digital sovereignty
Sector average
38/100
Lowest grade
Bayer
Score 0 / 100
Highest grade
Porsche SE
Score 98 / 100
Full DAX 40 ranking
Federal Ministries
Initial intakeSovereignty score of Germany's federal ministries
Sector average
87/100
Lowest grade
Bundesministerium für Wirtschaft & Klima
Score 78 / 100
Highest grade
Bundesministerium des Innern
Score 90 / 100
Full Ministries ranking
Federal Agencies
Initial intakeFederal agencies compared on digital sovereignty
Sector average
80/100
Lowest grade
Polizei (Verbund)
Score 60 / 100
Highest grade
Zollverwaltung
Score 100 / 100
Full Agencies ranking
Statutory Health Insurers
Initial intakeStatutory health insurance domains compared on sovereignty
Sector average
69/100
Lowest grade
Barmer
Score 39 / 100
Highest grade
AOK
Score 90 / 100
Full Health Insurers ranking
Big Four & Consulting
Coming soonPwC, KPMG, EY, Deloitte, BCG, McKinsey & co.
Banks
Coming soonRetail and corporate banks compared on sovereignty
Media
Coming soonARD, ZDF, Spiegel, ZEIT, FAZ, BILD & co.
Insurers
Coming soonAXA, ERGO, R+V, HUK, Generali and others
States & Major Cities
Coming soonBerlin, Munich, Hamburg, all 16 state governments
Universities
Coming soonTU Berlin, LMU, RWTH Aachen, TUM and others
Hospitals & Clinics
Coming soonCharité, MHH, university hospitals and others
Weekly updates — and your input shapes them
Each week we re-scan the public web stack of the listed domains and publish the weekly delta plus the lowest and highest grades in the sample. We welcome domain suggestions with clear public interest (states, municipal utilities, KRITIS operators, additional corporates) for the next wave.
Methodology note: Only the public web stack is evaluated (DNS, MX, CSP, HTML, TLS). Internal IT stacks of agencies and corporates are not captured and may differ from the web frontend. Not legal advice.
Next step
Where does your domain stand?
60 seconds, no login. The Sovereignty Scan lists every detected tool with jurisdiction, ownership chain, and matching EU alternative. Same score as the scoreboard.