estøkad

— solutions · government

The CMS for European government.

Ministries, regional authorities, agencies. Public-sector buyers have the strongest jurisdictional preference of any segment we serve — and the strongest reason to insist on EU vendor sovereignty. Estøkad meets that preference structurally: the legal entity, the infrastructure, and the engineering all sit inside the EU jurisdiction perimeter.

— the regulators in scope

What you're held to.

FrameworkWhat it requires
NIS2Network and Information Security Directive 2 — public sector entities classified as essential services need demonstrable supply-chain controls.
eIDASElectronic Identification + Trust Services. Citizen-portal content must integrate with national IdPs (itsme, FranceConnect, Verimi).
GDPR Art. 25Data protection by design + default. Per-country residency as the platform default rather than a configuration step.
EU Web Accessibility Directive2016/2102. Public-sector websites + apps must meet WCAG 2.1 AA. Editor surfaces should make accessible authoring the default.

— the workflows

What ships through Estøkad.

Ministerial sites

Multi-locale per official EU language. Approval workflow with department-specific custom roles. Audit-chained publish for legal traceability.

Citizen portals

Service-page templates with structured fields. Visual edit overlay for civil servants without engineering background.

FOI handling

Versioned response templates with custom roles per FOI desk. Audit chain captures every revision; exit-plan export at end of mandate.

Multi-jurisdiction sites

Federal + regional + municipal layers via spaces. Cross-space references for shared content; per-space residency in the customer's country of choice.

— why Estøkad fits

The wedge for this industry.

For government buyers the wedge is straightforward. The vendor must be EU-domiciled. The infrastructure must be EU-domiciled. The data must stay in the country chosen at signup. The exit plan must be a contractual right, not a vendor-discretionary favour. Each of these is a hard requirement; Estøkad treats each as the default.

Multi-language workflow is structural for European government work. Estøkad's multi-locale module ships per-locale publish state — you publish the French translation while the Dutch is still in review. Per-space configuration lets a federal authority and a regional authority each run their own locale set without cross-contamination.

EU national IdPs — itsme (Belgium), Verimi (Germany), FranceConnect (France) — are configurable per-workspace. SAML/SCIM module covers federation with directory services where the IdP isn't a national one.

— how to start

The path to production.

Government customers typically start on the Sovereign preset (€4,299/mo) which bundles platform + SAML/SCIM + advanced RBAC + DORA pack + 7-year audit retention + premium SLA + Belgium residency. Sovereign-cloud hosting (€1,299/mo) is an additional module for buyers requiring a customer-dedicated region.

For multi-jurisdiction deployments — federal + regional ministries — the cross- space orchestration module (€299/mo) plus multi-space (€399/mo per additional space) is the typical shape. Each authority gets its own space with its own content types, RBAC, and approval policies; cross-space references handle shared content like national branding or pan-government glossaries.