Ironstack
SOVEREIGN INFRASTRUCTURE · THE FIRST STEP
The Sovereignty Audit is an investigation of your infrastructure: what runs where, what it really costs, what you could reclaim, and where GDPR and AI expose you. You get a written report that stays useful whatever you decide next. €850 fixed, excl. btw, and fully credited against a migration signed within 60 days.
I · THE PROBLEM
Ask a small company where its data lives and you rarely get an answer; you get a pause. Somewhere between Google, Microsoft, the CRM, the invoicing tool, a former employee’s Dropbox, and whatever the marketing agency signed up for, the map was lost. Nobody decided that; it accumulated.
The same is true of the costs. Each subscription looked small when someone added it. Together they are a four- or five-figure annual line that nobody owns, growing with every seat and every price increase. And the GDPR processor register, if it exists, was last touched when someone needed it for a client questionnaire.
You cannot fix what you cannot see, and you should not sign a migration proposal, mine or anyone’s, without seeing it first. That is what the audit is for.
II · WHAT IT IS, CONCRETELY
The audit is phase one of the five-phase method, sold on its own for €850 fixed, excl. btw. Sign a migration within 60 days and the full €850 is credited against it. It runs one to two weeks for a typical small company. Your time investment is a kickoff conversation and a walkthrough; the digging is mine.
The report · what you hold afterwards
Written in plain language · yours to keep
The report is written to stay useful even if we never work together again. That is the design requirement, and it keeps me honest: if your current setup is fine, the report says so. If only one system is worth moving, it says that. If a migration makes sense, it comes with an exact timeline and the fixed numbers for the proposal, so nothing that follows is a guess.
See the full price register for how the audit fits with everything else.
III · A FAIR MATCH
IV · WHERE IT SITS
Everything at Ironstack starts from knowing what is true. The audit is that start. If the findings point to a fresh build, the Stack follows; if they point to moving an existing environment, Migration does, both executed through the five-phase method and both ending in Managed Sovereignty, where I stay responsible for what we built.
And if the findings point to a single quick win instead, an automation, a replaced tool, a cancelled subscription, that is a fine outcome too. The audit is the low-risk first step precisely because it does not commit you to anything.
One to two weeks for a typical small company, depending on how scattered the environment is. Most of your time investment is a kickoff conversation and a walkthrough of what you use; I do the digging.
A written report: an inventory of your systems and data flows, a cost baseline, your GDPR and AI exposure, and a prioritized roadmap with quick wins. It is written in plain language and it is yours to keep, whatever you decide next.
No. The report has to stay useful even if we never work together again; that is the design requirement. If your current setup is honestly fine, the report says so. If only part of it is worth moving, the report says that too.
€850 fixed, excl. btw, and it does not move. If you sign a migration within 60 days, the full €850 is credited against it, so looking first costs you nothing extra.
Read access where it exists, and a walkthrough where it does not. I do not need admin rights to your production systems to map them, and anything you share is covered by the agreement and never leaves my own self-hosted systems.
Yes. The biggest AI risk in most companies today is employees pasting client data into free chatbots. The audit maps which tools are in use, sanctioned or not, and what data flows through them.
Tell me what runs where and what bothers you about it. You will get a straight answer. Sometimes the honest answer is that you do not need me.