2026 Q3 → 2027 Q4
Level 1 — OS Sovereignty
AOSP fork + LYDOS overlay. No Google Mobile Services. Fairphone 6 / Murena Two devices.
- Capital
- €3–5 M
- Dependencies
- ARM ISA, Qualcomm/MediaTek modem, AOSP upstream
Sovereign Android — for people, organisations, and nations
From OS sovereignty today to silicon sovereignty by 2030.
AOSP fork + LYDOS overlay. No Google Mobile Services. Fairphone 6 / Murena Two devices.
RISC-V SoC, open modem, our own PCB. EU Chips Act co-funded.
Lithography + EDA + fab + packaging. Government-consortium model.
Single codebase, jurisdiction-aware compliance.
| Region | Regulator | Breach notification within | Data localisation required | Key escrow required | Status |
|---|---|---|---|---|---|
| TürkiyeTR | KVKK + BTK | 72 h | Yes | No | Live |
| DeutschlandDE | BfDI (DSGVO) + BSI | 72 h | No | No | Live |
| FranceFR | CNIL (RGPD) + ANSSI | 72 h | No | No | Live |
| NederlandNL | Autoriteit Persoonsgegevens + AIVD | 72 h | No | No | Live |
| United KingdomGB | ICO (UK GDPR) + NCSC | 72 h | No | No | Live |
| المملكة العربية السعوديةSA | SDAIA (PDPL) + NCA | 72 h | Yes | No | Live |
| الإمارات العربية المتحدةAE | UAE Data Office (PDPL) + NESA | 72 h | Yes | No | Live |
| 日本JP | PPC (APPI) + NICT | 720 h | No | No | Phase 2 — 2027 |
| भारतIN | DPB (DPDP Act 2023) + STQC | 72 h | Yes | No | Phase 2 — 2027 |
| BrasilBR | ANPD (LGPD) + ANATEL | 48 h | No | No | Phase 3 — 2028 |
| United StatesUS | FTC + CCPA (CA) + state-level | — | No | No | Phase 3 — 2028 |
| 中国CN | CAC (PIPL) + MIIT | 24 h | Yes | Yes⚠ | Under review |
Source: lib/regions.ts + docs/ROADMAP_3LEVEL_SOVEREIGNTY_2026_06_20.md. Regulator and breach window values reflect the regime's statutory text (GDPR Art. 33 — 72h; KVKK m.12 — 72h; PIPL Art. 57 — 24h). Single source of truth: jurisdiction config file under version control.