AI-SOV-01
Governance & Jurisdiction
Decision authority, ownership, governing jurisdiction, operators, and dependency accountability.
OwnershipDecision authorityJurisdictionOperatorsDependency governance
Sovereign AI Assurance
Build it. Control it. Prove it.
A practical, evidence-first framework for measuring whether an AI system can be governed, operated, recovered, and evolved inside its declared sovereign boundary.
One assurance model
Three measurements that must stay distinct
A maturity level, domain control coverage, and jurisdiction mapping answer different questions. SovAIHub shows them together without blending them into a misleading score.
Assurance level
Level 0–4 describes the strongest system-wide operating state supported by complete controls and evidence.
ExploreControl coverage
Ten AI-SOV domains expose strengths, gaps, and critical dependencies that an average would hide.
ExploreJurisdiction profile
A separate mapping relates technical evidence to a jurisdiction framework. EU is the first available profile.
ExploreAssurance progression
Dependency reduction, not badge collection
Each higher level retains the lower-level controls and adds stronger data, inference, supply-chain, operational, and autonomy requirements.
AI-SOV domains
Control the complete AI system
The framework covers far more than data residency: models, inference, artifacts, agents, operations, security, and networks all affect sovereignty.
AI-SOV-02
Data Sovereignty
Control prompts, outputs, retrieval and training data across residency, access, retention, deletion, and cryptography.
Prompts and outputsRAG dataResidencyRetention and deletionEncryption
AI-SOV-03
Model Sovereignty
Know, retain, license, host, replace, and govern model artifacts through their lifecycle.
OriginWeightsLicensingProvenanceReplacement
AI-SOV-04
Inference Sovereignty
Keep inference execution, endpoints, isolation, and control-plane dependencies inside the approved boundary.
Inference locationExternal APIsControl planesIsolationRuntime dependencies
AI-SOV-05
Infrastructure Sovereignty
Control compute, accelerators, clusters, storage, networks, and administrative dependencies.
Compute and GPUKubernetes/OpenShiftStorageNetworkingAdministration
AI-SOV-06
Artifact & Supply Chain Sovereignty
Import, verify, approve, store, and reproduce every critical model and software dependency.
RegistriesChecksums and signaturesProvenance and SBOMControlled importsApproved artifacts
AI-SOV-07
Agent & Tool Sovereignty
Bound agent permissions, tools, external services, approvals, sandboxes, and outbound actions.
Tool catalogueMCP integrationsPermissionsHuman approvalOutbound calls
AI-SOV-08
Operational Sovereignty
Operate, support, upgrade, recover, transfer knowledge, and substitute components independently.
Support and upgradesRecoveryIncidentsVendor lossSubstitution
AI-SOV-09
Security & Assurance
Enforce identity, secrets, key management, monitoring, testing, auditability, and configuration assurance.
IAMSecrets and keysLoggingVulnerability managementTesting
AI-SOV-10
Network & Air-Gap Sovereignty
Control Internet, telemetry, DNS, updates, endpoints, and disconnected operations.
Internet dependencyEgressTelemetryDisconnected operationTransfer zones
Evidence first
A claim is only as strong as its evidence
Use requirements to design the system, collect expected evidence during implementation, then validate configuration, behavior, recovery, and ownership.