GDPR / Potential relevance
Any future product processing personal data would need a fact-specific assessment of the data, purposes, roles, and processing arrangements. No product compliance assessment is being claimed.
Your privacy choices
This site needs limited browser storage to remember your choice. You can optionally allow your appearance preference to be saved. We do not use analytics or advertising cookies. The contact and app-interest forms use Cloudflare Turnstile for security. Read our Cookies and Privacy information.
European technology / 01
A long view on Europe's digital future
Europe should be able to
Sovereignty is not isolation. It is the ability to make real choices about the technologies, infrastructure and data that keep organisations moving.
The question
Who can build, operate and adapt the technology we depend on?
The ambition
More European capability, resilience and genuine alternatives.
The principle
Cooperate globally. Avoid unchosen dependency.
01 / The meaning
Independence is the ability to choose.
For years, European organisations have relied heavily on technology developed, controlled and operated elsewhere: software, cloud infrastructure, operating systems, AI platforms and the chips beneath them. Europe has exceptional research, engineering and industrial strengths, yet strategic digital dependencies remain.
The European Commission describes technological sovereignty as Europe’s ability to act independently in the digital world by developing and controlling key technologies, data and infrastructure while reducing reliance on non-EU providers. That does not mean making every component at home or closing the door to global partners.
It means ensuring Europe has the capability, infrastructure and companies necessary to remain in control of its digital future.
When essential services are concentrated among a small number of providers, organisations may have few alternatives if commercial, political, regulatory or technical conditions change. More capability means resilience—not autarky.
European Commission: EU tech sovereignty02 / The whole stack
Sovereignty is
A resilient digital economy depends on capability across many connected layers—from physical components to the tools people use at work.
Select a layer to explore01 — 06
Semiconductors
The physical foundation: chips, components and the capacity to make them.
Digital infrastructure is becoming as critical to continuity as energy, transport and communications.
Cloud, AI, data storage, cybersecurity and business applications are connected dependencies—not isolated purchases.
Europe’s ambition spans semiconductors, connectivity, compute, quantum technologies, software and open-source communities.
03 / EU policy & legislation
Rules matter.
Building matters too.
These summaries draw on official EU sources; they are not product certifications. The scope and obligations of each instrument depend on its text, implementation, and the facts of a particular service or organisation.
GDPRGeneral Data Protection RegulationEnacted · applies where its scope is metLast reviewed: 30 September 2026
Sets rules for processing personal data and responsibilities for controllers and processors. It is not a product certification; whether it applies depends on the processing and the parties’ roles.
DMADigital Markets ActEnacted · obligations target designated gatekeepersLast reviewed: 30 September 2026
Creates obligations for digital platforms designated by the Commission as gatekeepers in specified core platform services. It is not a general certification or requirement for European software.
DSADigital Services ActEnacted · scope depends on intermediary service and roleLast reviewed: 30 September 2026
Sets responsibilities for online intermediary services, with obligations varying by the service and its scale. It is not a general certification for software.
AI ActArtificial Intelligence ActEnacted · phased application; later amendments affect datesLast reviewed: 30 September 2026
A risk-based framework. Duties depend on the AI system, its intended use, and the organisation’s role (for example, provider or deployer). The Commission’s current timeline lists prohibitions and AI literacy from 2 February 2025, GPAI and governance rules from 2 August 2025, general application from 2 August 2026 subject to exceptions, high-risk Annex III rules from 2 December 2027, and embedded Annex I high-risk rules from 2 August 2028. The Commission also reports that the AI Omnibus entered into force on 27 July 2026.
Data ActEU Data ActEnacted · applies since 12 September 2025Last reviewed: 30 September 2026
Includes rules on access to data and switching between covered data-processing services, including portability and interoperability measures. Its switching provisions apply to covered services and have specific scope and conditions.
CRACyber Resilience ActEnacted · reporting from 11 September 2026; main requirements from 11 December 2027Last reviewed: 30 September 2026
Sets cybersecurity requirements for covered products with digital elements across their lifecycle, including vulnerability handling and security updates. Scope and duties depend on the product and applicable rules.
NIS2NIS2 DirectiveEnacted · national implementation and scope matterLast reviewed: 30 September 2026
Sets cybersecurity risk-management and significant-incident reporting obligations for covered essential and important entities. Coverage is not automatic for every software company; service type, size, exceptions, and national law matter.
EAAEuropean Accessibility ActEnacted · application began 28 June 2025Last reviewed: 30 September 2026
Accessibility requirements apply to specified products and services, including certain consumer services such as e-commerce. Scope rules, microenterprise service exemptions, disproportionate-burden provisions, and transition rules matter; it does not automatically cover every corporate website or application.
eIDASeIDAS / European Digital IdentityEnacted framework · implementation and service status are distinctLast reviewed: 30 September 2026
Under eIDAS, an electronic signature cannot be denied legal effect solely because it is electronic; a qualified electronic signature has the equivalent legal effect of a handwritten signature. Ordinary (often called simple), advanced, and qualified signatures are distinct levels: advanced signatures have defined identity, control, and change-detection criteria; qualified signatures also require a qualified certificate and qualified signature-creation device. The European Digital Identity framework concerns cross-border electronic identification and trust services.
Regulation sets obligations and safeguards. Europe also needs products, infrastructure, data centres, developers, AI systems, cloud capacity, semiconductor capability and open-source communities. It cannot regulate itself into technological independence; it also has to build.
Potential relevance to Epic World
Questions for future assessment.
These are potential connections only—not legal advice, a scope determination, or a statement that a product meets any requirement. Applicability depends on products and services as actually developed and offered.
DMA / Potential relevance
The DMA is included as part of the wider policy landscape, not as a claim that Epic World or its planned products are gatekeepers or subject to gatekeeper obligations.
DSA / Potential relevance
Whether any future service is an intermediary service, and what duties may apply, would depend on its actual features and role. No applicability assessment is being claimed.
AI Act / Potential relevance
Any future AI features would require assessment against the system, intended use, company role, and then-current rules and dates. This page does not assess an Epic product as compliant or in a particular risk category.
Data Act / Potential relevance
Portability and switching are relevant to our customer-control ambitions. Whether a future Epic service is covered, and what duties apply, depends on its service and circumstances; no compliance claim is made.
CRA / Potential relevance
This is flagged for future assessment of Epic Write and any future infrastructure products. Coverage and duties have not been assessed, and no product compliance claim is made.
NIS2 / Potential relevance
Potential relevance to future cloud, data-centre, or managed services is contingent on the service, entity size, exceptions, and applicable national implementation. No applicability determination is made.
EAA / Potential relevance
Any future product or service would need a scope assessment based on what it is and whom it serves. No EAA coverage or compliance assessment is being claimed.
eIDAS / Potential relevance
Epic Sign is a planned product, not a verified trust-service provider or qualified-signature service. No qualified status or handwritten-signature equivalence is claimed for Epic Sign. Any future signature feature would need its level and role established.
04 / Digital Decade
Four ambitions.
The EU’s Digital Decade programme sets a wider direction for Europe’s digital transformation towards 2030.
European Commission · Digital Decade01 / 2030
Digital skills
More people equipped to participate in, build and work within a digital economy.
European Commission · Digital Decade
Last reviewed: 30 September 2026
02 / 2030
Digital infrastructure
Resilient connectivity, semiconductors and computing capacity across Europe.
European Commission · Digital Decade
Last reviewed: 30 September 2026
03 / 2030
Digital businesses
European companies adopting cloud, AI, data analytics and other advanced tools.
European Commission · Digital Decade
Last reviewed: 30 September 2026
04 / 2030
Digital public services
Accessible public services designed for a connected society.
European Commission · Digital Decade
Last reviewed: 30 September 2026
Progress, with gaps remaining
Europe has strong industrial companies, research institutions and engineering talent, and adoption of cloud, AI and data analytics continues to grow. At the same time, the Commission identifies work still to do in areas including fibre infrastructure, semiconductor and computing capacity, advanced technology adoption by smaller businesses, and ICT skills. Meeting the 2030 ambitions will require sustained investment and coordination.
05 / The 2026 package
A policy direction, not a finished state.
On 3 June 2026, the European Commission introduced a technology sovereignty package. Its proposals and strategies are part of an evolving policy effort.
European Commission · 3 June 2026 announcementLegislative proposal
Chips Act 2.0
A proposal intended to strengthen European semiconductor capability and investment in advanced chip technologies.
European Commission · 3 June 2026 announcement
Last reviewed: 30 September 2026
Legislative proposal
Cloud and AI Development Act
A proposal to strengthen European cloud and AI infrastructure and expand computing capacity, alongside work towards a common sovereignty assessment framework.
European Commission · 3 June 2026 announcement
Last reviewed: 30 September 2026
Strategy
EU Open Source Strategy
A strategic direction supporting European open-source projects, skills, infrastructure and alternatives that can be inspected and adapted.
European Commission · 3 June 2026 announcement
Last reviewed: 30 September 2026
Roadmap
Energy digitalisation & AI
A roadmap addressing the relationship between energy systems, digitalisation and artificial intelligence.
European Commission · 3 June 2026 announcement
Last reviewed: 30 September 2026
These initiatives are not a single enacted law, and they do not create a general requirement to use European providers. Proposals, strategies and roadmaps have different legal status.
06 / The customer’s choice
More providers.
Sovereignty is not about replacing one kind of dominance with mandatory European technology. It is about meaningful options: global provider, European cloud, self-operated infrastructure, open-source tools, local software or a hybrid of them.
More capable providers can mean more innovation, stronger customer bargaining power, specialised solutions, better portability and greater resilience. Without alternatives, independence is only theoretical.
Cloud can create real value. It also brings questions of ownership, corporate control, applicable law, software origin, supply chains and whether an organisation can operate independently. A server’s physical location is only one part of the picture.
Resilience
Reduce single-provider exposure and plan for disruption.
Capability
Give European builders room to develop and compete.
Interoperability
Connect systems without surrendering future choices.
Data control
Know where information lives and how it is handled.
07 / Epic World International
Direction made practical.
We are building a European software company with a long-term ambition: give organisations more control over the everyday tools and infrastructure they depend on.
This is a direction of travel, not a claim that the ecosystem is already complete. We intend to start with software and expand carefully over time.
Epic Write
In development: a professional desktop word processor. Offline-first operation and local data control are design ambitions, not delivered or verified capabilities.
Epic NAS
Long-term planned concept for private storage infrastructure under an organisation’s control.
Epic Server
Long-term planned concept for running private organisational infrastructure and applications.
Epic VPN
Long-term planned concept for secure connections between people, devices and organisation-controlled infrastructure.
08 / What customer control means
Specific questions.
All Epic applications are currently unavailable. Epic Write is in development; the other suite products are planned. The distinctions below separate what is known today from design ambitions and decisions that are still open.
01
Offline operation
Known today
Epic Write is in development; no Epic product is currently available to use.
Ambition / pending decision
Offline-first operation is a design ambition for Epic Write, not a verified capability.
02
File export
Known today
No released product or confirmed export feature is available to verify.
Ambition / pending decision
Customer-controlled access and portability are ambitions; export behavior is not yet confirmed.
03
Supported formats
Known today
Supported file formats, compatibility, and fidelity have not been confirmed.
Ambition / pending decision
Using established formats where practical is an ambition, not a published product specification.
04
Account requirements
Known today
There are no available Epic product accounts. The website interest signup is not a product account.
Ambition / pending decision
Account requirements for future products have not been confirmed here.
05
Optional cloud features
Known today
Epic Cloud is a planned product concept; no cloud service or product settings are currently available.
Ambition / pending decision
Whether cloud features will be optional, and how they will work, remains unconfirmed.
06
Telemetry
Known today
Product telemetry behavior is not confirmed. The absence of information about website analytics does not establish how a future product will behave.
Ambition / pending decision
Telemetry collection, controls, and related settings have not been specified.
07
Access after subscription cancellation
Known today
No Epic products or subscriptions are available, so post-cancellation access behavior cannot be verified.
Ambition / pending decision
No promise of continued, perpetual, or free access after cancellation is being made; future terms and product behavior are not confirmed.
09 / Our customer-control principles
A European alternative.
These are design ambitions, not descriptions of capabilities currently available. The promise of sovereignty would ring hollow if it simply recreated dependency behind a different brand.
01
Local when possible
Work should remain useful without assuming every task needs a permanent connection.
02
European infrastructure when required
Where services are needed, choice over location and operation matters.
03
Open standards wherever practical
Established formats and interoperability should make future choices easier.
04
Cloud when it creates genuine value
Cloud can be useful; it should be a choice rather than a hidden prerequisite.
05
Control stays with the customer
Data should be portable, accessible and under the organisation’s direction.
Aim: make data export possible
Aim: use established formats
Aim: connect external systems
Aim: support customer-operated infrastructure
Aim: make provider migration easier
Aim: preserve access to customer information
Our aim is to make products customers choose to keep using—not products they cannot leave.
Local-first operation, offline capability, European infrastructure, open standards and data portability are design ambitions—not verified certifications or a claim that any capability is already available.
A shared undertaking / 10
Europe will build its digital future
No government programme or company can do this alone. Progress needs developers, businesses, researchers and infrastructure providers working across the technology stack. Epic World International intends to contribute—starting with software, and expanding into infrastructure over time.
Epic World International is an independent company. This page describes our perspective and ambitions; it is not endorsed by or affiliated with the European Union or any EU institution. Nothing here is legal advice. Refer to official sources and qualified advisers for legal interpretation.
European Commission sources