estøkad

— blog

Estøkad — the perspective.

Company perspective on the regulatory landscape, engineering posts on the trade-offs we picked, and product writing as features land. Cadence target: monthly. Honestly maintained — when there isn't something useful to say, we don't fill the gap with filler.

  1. Why Estøkad exists

    Three forces are converging in EU regulated tech procurement: DORA reaching enforcement, per-country residency moving from preference to requirement, and the existing CMS options built for a different jurisdiction.

    Read →
  2. Sovereign-by-design — the term, the practice

    Sovereign cloud has become marketing shorthand. Sovereign-by-design is the architectural choice that makes the sovereignty contractual rather than aspirational. What it means and why we picked it as the brand.

    Read →
  3. DORA, one year in — what supervisors actually asked for

    A year after DORA came into force, the questions supervisors actually asked were not the questions vendors had prepared for. A reading of the first enforcement signals and what they imply for the next renewal cycle.

    Read →
  4. What we learned briefing twelve European banks

    Field notes from a season spent in front of CIO and compliance teams across Belgium, France, Germany, and Luxembourg. What they asked, what they pushed back on, what changed our roadmap.

    Read →
  5. Per-country residency vs EU residency — a procurement note

    “EU region” used to satisfy the residency box on the procurement form. It increasingly does not. A note on the language shift, where it came from, and what it means for vendor selection in 2025.

    Read →
  6. DORA day one — what changed for European CMS buyers

    The Digital Operational Resilience Act applied in scope from 17 January 2025. A field note on what shifted in procurement that week, what didn’t, and what the first supervisor questions looked like.

    Read →