UK and EU Data Sovereignty
UK Owned. UK & EU Location. UK & EU Laws.
Choose UK or EU hosting.
100% European supply chain. Free from US Cloud Act.
One Jurisdiction. Full accountability.
What is Data Sovereignty?
Data sovereignty goes beyond where information is stored. It is about keeping control of sensitive data throughout its life: where it is processed, how it travels, who can access it, what technology it runs on and which laws apply to it.
A UK or EU data centre gives reassurance about residency. But if the supply chain, the provider, its parent company or its investors are based elsewhere, foreign law can follow the data.
At DOQEX, the company, the infrastructure, the operations and the people all sit within UK or EU jurisdiction. The software is written in-house, by human beings using open-source tools. There must be no surprises to the laws which apply to your data.
Sovereignty in Four Questions
Where is it stored?
In the UK, London by default, or in the EU if you choose. Our server nodes are built by us from bare metal upwards. We can tell you the rack, floor and postcode. The same applies to backups..
How does it travel?
Every message and file passes through your DOQEX service according to your policies. Data is encrypted in transit and at rest, every step is logged and auditable.
Who can reach it?
Only the people you authorise, using the authentication you choose. Access can be restricted, revoked and audited at any time.
Which laws apply?
UK law, and EU law for EU-hosted services. DOQEX is a UK company with no US parent, subsidiary, investors or operations, so it isn't subject to US law, including the CLOUD Act.
Sovereignty Without Sacrificing Convenience
UK or EU Data Residency
All data is held in the UK, in London by default. EU hosting is available in the Netherlands and Germany with other locations upon request. You decide, and your data stays there; including backups.
Infrastructure We Control
No hyperscale cloud and no rented US platforms. We build, own and operate our own server nodes from bare metal in UK and EU data centres. You know exactly where your data lives.
Independent. No foreign owners.
DOQEX is independent and 100% privately owned in the UK. There’s no parent company, no private equity and no foreign investors. No one outside UK jurisdiction can direct our decisions or demand access to your data.
Certified Assurance
ISO 27001, 27017, 27018 and Cyber Essentials certified. Independent proof that data protection and information security are at the heart of everything we do.
No US Dependencies
DOQEX production, operations and administration run entirely on UK-based services and open-source software we host and control. There is no reliance on Microsoft, AWS, Google or any commercial US platform to deliver your service.
Your Data Never Touches AI
DOQEX products contain no AI. Customer data is never processed by, shared with or used to train any AI model.
Find out with only 2 button steps!
“DOQEX was selected as a cost-effective solution that both met Benenden’s secure data sharing requirements whilst completely preserving our brand identity.”
Andrew Radi, Group CIO
Tell Me More
Storage Is Only Half the Story
Residency isn’t sovereignty.
A UK data centre tells you where data rests. It doesn’t tell you who owns the provider, which laws they must obey, or where data goes on its journey.
Any US-owned provider even if they host and have an office in London is still subject to US law, including the CLOUD Act, which can compel disclosure of data wherever it is stored.
DOQEX has no such exposure and neither should you.
No AI access to your data.
Many platforms now route content through AI services for summaries, classification or search, often to providers in other jurisdictions.
DOQEX doesn’t. No AI feature, integration or third-party model ever sees your data.
Secure Your Supply Chain
Simpler due diligence.
Many “UK” services are a chain: a UK reseller running a US platform on a US cloud, with support staff abroad. Every link adds another jurisdiction to assess. With DOQEX there’s one supplier, one jurisdiction and one point of accountability. We own the software, the servers and the service. Every third-party service we use to deliver it is either UK-based and UK-owned, or open-source software we run ourselves.
Every supplier is a risk.
Cloud services, software vendors and partners all create new routes for sensitive information. Strong internal controls count for little if you lose visibility the moment data is shared externally.
A single-jurisdiction supply chain means a shorter supplier questionnaire, a simpler DPIA and no international transfer assessments for the core service. Your procurement and information governance teams will notice the difference.
Local partners across the EU.
EU customers can work with our independent, wholly EU-owned distribution partners. Each one is vetted and trained by DOQEX. Your service still runs on DOQEX infrastructure, in your chosen EU location with both the distributor and DOQEX for support.
Policies based on sender, domain and recipient group mean you decide how each type of data is handled, and you can show auditors that you did.
Questions for Any Provider
Where is it processed?
Ask every provider this question. Ours is simple: in the UK or EU, on hardware we build and operate.
Who owns you?
Ask whether any parent company, investor or subsidiary is outside the UK or EU. DOQEX’s answer is simple: no.
Who supports it?
Ask where the support teams are located and whether they can reach your data. DOQEX support is delivered by DOQEX, from the UK, by real human beings.
Data That Doesn't Wander
Data stays put.
Attachments become secure download links hosted on your UK or EU gateway. The files themselves don’t get copied into recipients’ mailboxes, which may sit anywhere in the world.
Nothing lingers.
Compulsory expiry means shared data doesn’t sit in inboxes indefinitely, outside your control and possibly outside the UK or EU.
Every copy of a file in someone else’s mailbox is a copy you no longer control. Expiry policies keep your data footprint small and accountable.
Make informed decisions about your data.
Digital Sovereignty now belongs alongside security, functionality, cost and usability when you choose a provider.
Talk to us about where your data lives, how it travels and which laws apply.
FAQ
All data is located within the UK, in London by default. We can also offer locations in Cambridge and the EU, including the Netherlands, Germany and Belgium. DOQEX server nodes are built by us from bare metal upwards. We can guarantee exactly where your data resides, down to the rack number, floor number and postcode. The same applies to backups. Your data never leaves your chosen jurisdiction.
No. These laws apply to organisations owned by US entities and are therefore under US jurisdiction. DOQEX has no US ownership, presence or operations, and isn’t subject to US law. We operate under UK law, and EU law for EU-hosted services.
DOQEX Limited is independent and privately owned in the UK, with no parent company and no external investors. In the EU, we work through independent, wholly EU-owned distribution partners that we vet.
Yes. EU-hosted services stay on DOQEX infrastructure in the EU. The UK has an EU adequacy decision, which recognises UK data protection law as equivalent to the GDPR.
All data is located within the UK. London by default.
We can also offer locations in Cambridge and the EU including The Netherlands, Germany and Belgium.
DOQEX server nodes are built by us from bare metal upwards. We can guarantee exactly where your data resides, down to the rack number, floor number and postcode. The same applies to backups.
You decide.
As part of our on-boarding process, we will configure TTLs for messages, attachments, metadata, audit trail and backup data.
All data TTLs are under admin and policy control.
No. The DOQEX platform, and the systems we use to operate and administer it, don’t depend on any US service. We use Microsoft products only to test interoperability and to write setup guides for customer administrators. They play no part in delivering or managing your service.
Yes. Most of our customers use Microsoft 365 or Exchange, and DOQEX works seamlessly with them. What changes is where your protected content lives. Messages and attachments sent through DOQEX are processed and stored on our UK or EU infrastructure, not in your M365 tenant or your recipients’ mailboxes. Your existing reliance on US platforms isn’t made any worse, and the sensitive data you exchange moves out of their reach.
We do. The DOQEX plugin for Outlook, Word, Excel and PowerPoint is written and owned by DOQEX. It connects your Office apps to your DOQEX service and doesn’t route content through any third-party service.
Not in our products, and never with customer data. Our AI policy limits AI to internal development work, where AI agents are confined to segregated virtual machines. These have no access to customer platforms, internal infrastructure or internal networks.
Every service involved in delivering DOQEX is either UK-based and UK-owned, or open-source software we host and operate ourselves. There are no US or offshore sub-processors. A full list is available on request.
Feature List
Hover over any feature to learn more about it.
Admin
UK Data Residency and Sovereignty
UK, London by default, or in the EU if you choose. Our server nodes are built by us from bare metal upwards. We can tell you the rack, floor and postcode.
EU Data Residency and Sovereignty
Germany by default, or in another EU location if you choose. Our server nodes are built by us from bare metal upwards. We can tell you the rack, floor and address code.
Encryption At Rest
Any stored data is encrypted using three stages.
Encryption In Transit
Any moving data between points is encrypted using three stages.
Encryption in Memory
All data is queued in encrypted memory vaults.
Attachments redirect to Project Workspaces
DOQEX securely brokers your business workflows, fully supporting destination endpoints.
Attachments redirect to Alternate File Store (FTP, SMB/CIFS, S3, OneDrive etc)
DOQEX securely brokers your business workflows, fully supporting destination endpoints across major platforms.
Attachments redirect to DLP Engine
Attachments can be passed for inspection and compliance against data loss policies.
Attachment Workflow Control
Download, Discard, View only, Watermark.
Attachments may automatically be discarded or marked as view only preventing recipients downloading files. File viewing may be watermarked with audit trail data for extra security.
Restrict Reply & Forward Lists
By default recipients are prevented from doing anything except replying to the original sender. Administrators can configure reply lists to enable responses to shared addresses and teams.
Email Recall
Recall emails by clicking a button from the email in their sent items folder. Administrators, Team managers, and service desk teams can recall email on users behalf.
Evidence quality Audit Trail
Every action on data by users or the system is securely logged in an indelible audit trail.
Audit Trail Reporting
Comprehensive range of audit trail reports. Customisable reports, schedulable reports, digest reports.
Authentication (Multi-factor, Email, Q&A, SMS)
Choose an authentication option for recipients appropriate to their capabilities and the sensitivity of the data. Options include multi-factor auth, SMS tokens, single and multi-use direct login links.
Single Sign On
Multiple SSO options available incl. SAML2, OpenID, Okta
Direct Login Links
Simplifies the login process. No passwords required but usage and expiring is still controlled.
Geofencing
Geofencing creates a virtual boundary (using IP addresses or ranges) to permit or deny sensitive data or content transferring out of or into your organisation from an unauthorised destination.
Data Loss Prevention (DLP)*
Data Loss Prevention engine is a comprehensive policy driven tool to help prevent data exfiltration and data loss.
DLP Triggers
DLP engine contains pre-built triggers for credit card numbers, NI numbers, Keywords, phrases, sentiment etc.
Smarthost Configuration
Configure alternative hosts for return, outbound and bounce scenarios. Configure smarthost ports, hosts, authentication and security controls.
Domain Specific Email Routing
Route mail to different policies based upon domain.
Domain Whitelisting
Restrict message routing based upon authorised domain sources.
Unlimited Storage Capacity
We operate an unlimited storage policy which is subject to fair usage policy. Security should not be rationed.
Message Retention (days) TTL
The default email storage period is 365 days, but can be changed according to your policies.
Large File Transfer
Bypasses mail client file size limitations to send files securely to the cloud.
Sender-Based Routing
DOQEX mail gateway allows full control over mail rules based upon individual senders and sender domains.
Encryption Certified
DOQEX uses the FIPS 140-2 approved encryption algorithm, Advanced Encryption Standard (AES).
Encryption Standard (default)
AES-256 encryption is extremely secure. It is the most secure encryption algorithm available today and is used extensively in government and military applications
International Standard Certification
ISO 27001. The world's best-known standard for information security management systems (ISMS).
Malware & content protection
Documents are scanned upon upload for malicious activity to ensure compromised accounts are not able to send weaponized attachments.
Attachment Limits
There is no attachment limit, but your storage will be subject to our fair usage policy.
Watermarking – embedded security fingerprint
Help protect data exfiltration by unauthorised devices and safeguard against screenshots and image capture. The watermark security fingerprint is configurable and can include timestamp, agent strings, IP and email address, host details and custom notices.
Discrete Recipient Policy
Along with granular recipient routing processing rules each rule can segregate recipients into discrete divisions. This enables alternate auth, download rights and other settings to be applied for each rule.
Opt-in/Opt-out Encryption
Admin can define defaults for user cohorts.
Message Modification
Inspect messages for keywords/triggers and enable substitutions.
EULA Templates & Enforcement
Define & present your terms of use and rules at the point of use. Define different terms for each user cohort. Enforce and report against usage.
Outlook Plugin
Seamless integration with Microsoft Office 365 email via an Outlook Plug-in.
User
Email Client Support
DOQEX provides a frictionless service that does not require a plugin and will therefore work with any email client and infrastructure.
Policy-Based Routing
Applying security by policy allows users to forget about security settings and just get on with their work.
Attachments conversion to Secure Links
Automatically convert email attachments to secure, traceable download links. Configure the link text (in any language) and decide on the placement position.
Email Attachment Recall
Users and administrators have the ability to revoke email attachments.
Read Notifications
Automatically convert email attachments to secure, traceable download links. Configure the link text (in any language) and decide on the placement position.
Role-based Reporting
All users have pre-packaged repports available, including DPO/GDPR, SARs, Project Managers and users.
Upload Request Automation
Automatically create secure upload links based on policy triggers. Requests are automatically embedded within emails, admins configure link format, text and location.
General
No US Cloud Act exposure
DOQEX services are configurable with branding, corporate styling etc.
White labelling
DOQEX services are configurable with branding, corporate styling etc.
Private labelling
A DOQEX service is private and the ultimate in a trusted service. Every element is configurable with multiple identities. Every communication element from Email to SMS is templated and configurable. DOQEX has no ego.
Managed Service
We look after and monitor your day to day administration of the service, making adds, moves and changes as requested. Plus providing audits and reporting.