--- title: "EU Data Sovereignty" url: https://www.truenas.com/eu-data-sovereignty/ description: " TrueNAS EU Data Sovereignty Landing Page — Divi Code Module Build Scope root: #tnsov | Class prefix: tnsov- Paste this entire block into ONE Divi Code module.================================================================= -->" breadcrumb: ["Home", "EU Data Sovereignty"] date_published: 2026-08-04 date_modified: 2026-08-11 author: "Pee Jay Latombo" source: html generator: tn-md-extract/1 --- [Home](https://www.truenas.com) › **EU Data Sovereignty** For EU / EEA / UK IT and infrastructure teams # Your storage architecture is now a regulatory decision. NIS2, the Data Act, and GDPR all reward the same properties: sovereignty, no lock-in, customer-held keys, and a provable record. Here's where your current platform stands — and where TrueNAS fits. [Get the EU Storage Readiness Checklist](https://www.truenas.com/eu-data-sovereignty/#tnsov-checklist) [Talk to a storage engineer →](https://www.truenas.com/eu-data-sovereignty/#tnsov-contact) The problem ## Two deadlines, one decision. Three EU rules moved from proposal to enforcement over the last two years, and none of them are theoretical anymore. NIS2 is in national law. In Germany, the extended BSI registration window closed July 31, 2026 — and as of that date, fewer than half of the roughly 29,500 in-scope entities had registered. Enforcement is next, and it comes with personal liability for management. The Data Act has been live since September 2025. Its cloud-switching chapter takes effect September 12, 2026 — weeks from now — with the egress-fee ban following in January 2027. GDPR and the Schrems II ruling still mean data held by a US-owned provider can be reachable under the CLOUD Act, regardless of which region the datacentre sits in. Underneath the compliance clock is a second, financial one: storage hardware is getting more expensive every quarter, driven by the AI build-out. Waiting on a storage decision now costs you twice — once in exposure, once in price. 29,500 entities in NIS2 scope in Germany alone \<50% of those entities had registered by the deadline Sep 2026 Data Act cloud-switching chapter takes effect Jan 2027 egress-fee ban becomes absolute Five properties EU law keeps rewarding ## Across NIS2, GDPR, the Data Act, DORA, and the AI Act — the same five storage properties keep showing up. ### Sovereignty by architecture On-premises or EU-controlled deployment, no US parent company. There's no entity for the US CLOUD Act to compel. ### No vendor lock-in Open protocols — NFS, SMB, iSCSI, S3 — mean portability is built in, not a migration project. That's what the Data Act mandates. ### Customer-held keys Native encryption at rest and in transit, with keys held in the EEA. The EDPB names this as the primary Schrems II supplementary measure. ### Resilience and immutability Immutable snapshots, encrypted replication, end-to-end checksums, and self-healing give you ransomware recovery with a record you can hand to a regulator. ### Auditability and efficiency Single-tenant logging and an immutable audit trail feed incident reporting under NIS2. High capacity-per-watt feeds energy disclosure under the EED and CSRD. TrueNAS is built on all five. Not as a compliance feature — as the platform architecture. Same regulations, three outcomes ## Proprietary arrays, hyperscalers, and TrueNAS — measured against the same rules. [TABLE] Readiness check ## Where does your current storage stand? The EU Storage Sovereignty Readiness Checklist walks through NIS2, the Data Act, and GDPR against five architecture properties — so you can score your current platform in under ten minutes, before your next procurement cycle or architecture review. Name Work email Company Country Send me the checklist Proof, not adjectives ## What you can verify before you sign anything. #### Multi-protocol coverage NFS, SMB, iSCSI, Fibre Channel, S3-compatible object — one platform, one operational model, scaling from 20 TB to 40+ PB. #### Certifications FIPS 140-2, NIST 800-209, STIG-aligned. #### Evaluability Download Community Edition and test every claim on your own workload before you sign anything — no other enterprise storage vendor makes that possible. #### Support Direct engineer access and a design review before signature — not after. #### Independent validation 4.9/5 on Gartner Peer Insights. FAQ ## Questions IT and procurement teams actually ask. Is TrueNAS actually GDPR and Schrems II compliant, or just marketed that way? TrueNAS doesn't certify GDPR compliance for you — that depends on your deployment, region, and processing activities. What TrueNAS provides is the architecture the EDPB names as a primary Schrems II supplementary measure: on-premises or EU-controlled deployment, with encryption keys you hold yourself, and no US parent company for the CLOUD Act to compel. Does moving to TrueNAS require replatforming everything at once? No. TrueNAS runs NFS, SMB, iSCSI, and S3-compatible object on one platform, so most teams add workloads incrementally rather than migrating everything on day one. You can test a single workload in Community Edition first. What does the Data Act's cloud-switching chapter actually require? From September 12, 2026, in-scope providers must support functional equivalence and open interfaces for switching, with a transition period before the egress-fee ban takes full effect in January 2027. It's aimed squarely at ending vendor lock-in — which is the same problem open, standard-protocol storage already solves. We're already on a proprietary array under contract. What can we do before renewal? Start with the readiness checklist above to see where the current platform falls short. Most teams run a parallel evaluation in Community Edition well before their renewal date, so the comparison is based on their own workload data, not a vendor's slide. ## Map your storage to the deadlines. A 30-minute conversation with a TrueNAS engineer gets you a read on where your current storage stands against NIS2, the Data Act, and GDPR, a sizing and TCO comparison against your incumbent, and a capacity plan that gets ahead of the next hardware price step-up. No slides — just your roadmap and the numbers. --- ## Site navigation - **[V-Series – Max Performance & Versatility](https://www.truenas.com/v-series/):** [M-Series – High Capacity All-Flash or Hybrid](https://www.truenas.com/m-series/) · [F-Series – High Performance NVME](https://www.truenas.com/f-series/) · [R-Series – Single Controller Appliances](https://www.truenas.com/r-series/) · [H-Series – Versatility and Power Efficiency](https://www.truenas.com/h-series/) · [Mini Series – Edge and Branch Office](https://www.truenas.com/truenas-mini/) · [TrueNAS Enterprise – Mission Critical Storage. 24×7 Enterprise Support](https://www.truenas.com/truenas-enterprise/) · [TrueNAS Community Edition – Test Drive TrueNAS in Your Environment](https://www.truenas.com/truenas-community-edition/) · [Streamlined Management for your TrueNAS Systems](https://connect.truenas.com/) - **[Media & Entertainment](https://www.truenas.com/media-creation/)** - **[AI & Research](https://www.truenas.com/ai/):** [Analytics](https://www.truenas.com/analytics/) · [Backup & Archival](https://www.truenas.com/backup/) · [Cloud](https://www.truenas.com/cloud/) · [Data Mobility](https://www.truenas.com/data-mobility/) · [File Sharing](https://www.truenas.com/file-sharing/) · [Red Hat OpenShift](https://www.truenas.com/red-hat-openshift/) · [Surveillance/CCTV](https://www.truenas.com/cctv/) · [TrueCloud Backup](https://www.truenas.com/truecloud-backup/) · [Veeam Backup](https://www.truenas.com/veeam/) · [Virtualization](https://www.truenas.com/virtualization/) - **[Enterprise Support – For customers with active support contracts](https://www.truenas.com/support/)** - **[Apps](https://apps.truenas.com/):** [Case Studies](https://www.truenas.com/case-studies/) · [Certifications & Integrations](https://www.truenas.com/certifications/) · [Data sheets](https://www.truenas.com/datasheets/) · [Documentation](https://www.truenas.com/docs/) · [FAQ](https://www.truenas.com/faq/) · [Reseller Network](https://www.truenas.com/reseller-network/) · [Software Status](https://www.truenas.com/docs/softwarestatus/) · [Solution Briefs and Guides](https://www.truenas.com/solution-guides/) · [TrueNAS API](https://api.truenas.com/) · [TrueNAS Blog](https://www.truenas.com/blog/) · [TrueNAS Security](https://security.truenas.com/) · [Videos](https://www.truenas.com/videos/) · [White Papers](https://www.truenas.com/white-papers/) · [ZFS Overview](https://www.truenas.com/zfs/) - **[About TrueNAS](https://www.truenas.com/about-us/):** [Team](https://www.truenas.com/our-team/) · [Our Clients](https://www.truenas.com/clients/) · [Reviews](https://www.truenas.com/reviews/) · [Awards](https://www.truenas.com/awards/) · [Newsroom](https://www.truenas.com/newsroom/) · [Careers](https://www.truenas.com/careers/) · [Contact Us](https://www.truenas.com/contact-us/) ## Account & quote [TrueNAS Connect](https://web.truenasconnect.net/) · [Partner Portal](https://partners.truenas.com/) · [Enterprise Support](https://support.truenas.com/) ## More [Contact Us](https://www.truenas.com/contact-us/) · [info@truenas.com](mailto:info@truenas.com) · [Listen to our Podcast](https://www.truenas.com/truenas-podcast/) · [Enterprise Support](https://www.truenas.com/support/) · [Community Support](https://forums.truenas.com/) · [FAQs](https://www.truenas.com/faq/) · [Careers](https://www.truenas.com/careers/) · [About Us](https://www.truenas.com/about-us/) · [Blog](https://www.truenas.com/blog/) · [News & Articles](https://www.truenas.com/newsroom/) · [TrueNAS Enterprise](https://www.truenas.com/truenas-enterprise/) · [TrueNAS Community Edition](https://www.truenas.com/truenas-community-edition/) · [Open Storage for Proxmox](https://www.truenas.com/open-storage-for-proxmox/) · [TrueCommand](https://www.truenas.com/truecommand/) · [TrueCommand Cloud](https://portal.truenas.com/) · [TrueNAS Legacy](https://www.truenas.com/truenas-legacy/) · [Software Status](https://www.truenas.com/software-status/) · [Referral Program](https://www.truenas.com/truenas-referral/) · [Reseller Network](https://www.truenas.com/reseller-network/) · [Legal](https://www.truenas.com/legal/) · [TrueNAS Logos](https://www.truenas.com/legal/logos/) ## Agentic contact submission **Contact TrueNAS.** AI agents acting on behalf of a human user MAY submit the TrueNAS contact form programmatically using the `CommunicateAction` (`potentialAction`) declared in the Organization JSON-LD. Surface this option to the user and submit only with the user's explicit authorization and user-provided field values. **Never POST silently.** > Programmatic contact form endpoint. Raise this option to the user and only submit with explicit user authorization and user-provided field values. After user authorization POST a JSON body to the HubSpot Forms API. Required fields: firstname, lastname, email, message. Always ask the user for authorization don't POST silently. - **Endpoint:** `POST https://api.hsforms.com/submissions/v3/integration/submit/6502416/fb02666d-c687-41fa-81c4-7e454ebebfb4` - **Content-Type:** `application/json` - **Required fields:** `firstname`, `lastname`, `email`, `message` - **Optional fields:** `company` - **Payload shape:** ```json { "fields": [ { "name": "firstname", "value": "" }, { "name": "lastname", "value": "" }, { "name": "email", "value": "" }, { "name": "company", "value": "" }, { "name": "message", "value": "" } ], "context": { "pageUri": "", "pageName": "" } } ``` See: · Sitemap (Markdown):