Connect
Sign up to receive our monthly newsletter.
Inquiries
Have a question? Contact us here.
Job Opportunities
Learn about job openings.
Digital Public Goods Alliance - 2026
Sign up to receive our monthly newsletter.
Have a question? Contact us here.
Learn about job openings.
Eurosky Accounts (Eurosky PDS, Eurosky Portal)
Sovereign, EU-hosted identity and data hosting for the AT Protocol: a Personal Data Server that holds each user's account and data, plus Portal, the account-creation and management interface. One account works across hundreds of apps and can move to any provider.
Owner
Stichting Modal / Eurosky
Type
backend, API, web
Licence
Apache-2.0, MIT
Last evaluated
07.10.2026
Origin country
Netherlands
contact
team@eurosky.techRelease date
-
DPG since
07.10.2026
The following repositories were submitted by the solution and included in our evaluation. Any repositories, add-ons, features not included in here were not reviewed by us.
N/A
N/A
Italian, Dutch, Czech, Japanese, Portuguese, Greek, Swedish, French, Korean, Polish, German, Spanish, Hungarian, Romanian, English
The Eurosky Identity Platform (PDS and Portal) hosts approximately 30,000 accounts for people across the European Union and beyond, and one Eurosky account can be used with the hundreds of application…
* This information is self-reported and updated annually
The Eurosky Identity Platform is one system made of two core components: the Eurosky Personal Data Server (PDS), which hosts each user's identity, credentials and data on sovereign, EU-based infrastructure, and Portal, the account-creation and management interface through which people create, access and manage that account. A supporting component, EU-HAUL, lets people move an existing account onto (or off) the platform. SDG 16 – Peace, Justice and Strong Institutions (Target 16.10: public access to information and protection of fundamental freedoms). The PDS gives people a standards-based home for their social identity and data that no single company controls. Because identity, data and applications are separated by the AT Protocol, a user's account, followers and content are not held hostage by any one app or provider: the user can move to another PDS at any time and keep their identity, their social graph and their content. Portal makes this control practical for non-technical people by giving them a place to create the account, see which applications have access to it, and manage their data. EU-HAUL demonstrates that this freedom is real rather than theoretical: more than 15,000 completed account migrations have been carried out with it. Together the components reduce the ability of any single gatekeeper to silence, deplatform or lock in users, which protects freedom of expression and access to information online. SDG 9 – Industry, Innovation and Infrastructure (Targets 9.1 and 9.c: reliable, resilient infrastructure and increased access to ICT). The platform is open, interoperable public infrastructure: one Eurosky account works across hundreds of independent applications built on the AT Protocol, so developers can build new services without rebuilding identity, hosting and moderation from scratch, and users can adopt those services without creating new accounts. It is hosted entirely on EU-based providers, which gives European users and institutions a resilient alternative to dependence on closed, single-vendor, non-European systems. Portal lowers the technical barrier to running and managing an account on this open infrastructure, and the whole stack is released under open licences so that other organisations, including public bodies, can deploy the same platform themselves. Eurosky also provides white-labelled PDS and Portal solutions for other organizations.
Optional features are off by default or not active: Plausible analytics, Sentry (a commented-out example) and SendGrid (only the default value of a configurable SMTP host).
Yes
Contributing Guidelines, Privacy by Design, CI/CD, Semantic Versioning
PII data is collected and stored but NOT distributed.
Passwords are stored as salted hashes and never in clear text; the PDS supports optional email-based two-factor authentication and app-specific passwords so that full credentials are never given to third-party apps. Portal minimises data collection (no email or password storage), holds OAuth tokens server-side only, and fetches profile data on demand rather than persisting it. All communication uses HTTPS/TLS, rate limiting is applied, and the AdonisJS framework applies standard web-security protections (CORS, security headers via Shield, protected sessions). All primary services run on EU-headquartered providers in EU data centres; technical logs are retained for 30 days; PDS databases are continuously replicated for durability. Users can delete their account at any time (com.atproto.server.deleteAccount, available through Portal and through any AT Protocol client), which removes their data from the PDS, or migrate it to another provider. Published security policies (SECURITY.md) provide a responsible-disclosure channel, dependencies are kept current via Dependabot, and the PDS tracks upstream security releases. A Data Protection Officer (dpo@eurosky.tech) and privacy contact (privacy@eurosky.tech) handle rights requests within one month.
Content is collected stored and distributed.
(1) Policies for identifying inappropriate and illegal content: The Terms of Service (https://eurosky.tech/accounts/terms/) set out an Acceptable Use policy and a "Legal compliance and restricted content" section which every user must accept before creating an account. The Acceptable Use policy prohibits using the PDS or Portal to store, possess or distribute content that is illegal under applicable law, including but not limited to: child sexually exploitative material (including material that sexually exploits or promotes the sexual exploitation of minors), unlawful pornography or otherwise indecent material; content that contains or promotes extreme acts of violence or terrorist activity, including terrorist or violent extremist propaganda; content advocating bigotry, hatred or the incitement of violence against any person or group based on race, religion, ethnicity, national origin, sex, gender identity, sexual orientation, disability or other characteristics associated with systemic discrimination or marginalisation; violations of others' privacy or rights, including sharing confidential or identifying information or intimate imagery without authorisation for the purposes of harassment, exposure, harm or exploitation; attempting unauthorised access to accounts or systems; deploying malware or deliberately disrupting service availability; and any other unlawful activity, including content that depicts, promotes or instructs on illegal activity, or that is fraudulent, defamatory, misleading, exploitative or infringes intellectual property rights. (2) Mechanisms for detecting, moderating, reporting and removing content: Moderation is performed in-house on a notice-and-action basis, consistent with the EU Digital Services Act. Anyone can report illegal content, and authorities can submit legal orders, through a dedicated channel (notices@eurosky.tech). Upon a valid notice, a legal order from a competent EU authority, or a legal obligation, the operator takes proportionate measures: restricting access to specific content, removing it from the PDS, and where necessary suspending or terminating accounts and revoking access to the PDS and Portal. Because the PDS is the authoritative host of the user's repository, takedowns at the PDS are propagated through the protocol to downstream services (including tombstone events on the event stream). The AT Protocol additionally provides open moderation and reporting tooling (the Ozone moderation service and the com.atproto.moderation report lexicons; Eurosky maintains its own fork at https://github.com/eurosky-social/ozone), and the operator can rely on interoperable, modular moderation and labelling services to meet its legal obligations without centralising control over speech.
Yes
(1) Policies and self-protection processes: The Terms of Service (https://eurosky.tech/accounts/terms/) include an Acceptable Use policy that prohibits harassment, abuse, hate speech, incitement of violence and the non-consensual sharing of private or intimate information, and a notice-and-action process lets anyone report illegal or abusive content or conduct to a dedicated channel (notices@eurosky.tech), consistent with the EU Digital Services Act. Because accounts are hosted on the AT Protocol, users benefit from the protocol's composable, user-controlled moderation tools in every compatible application: they can block and mute other accounts, subscribe to independent labelling and moderation services, and choose the feeds they see, so they can curate their own experience and shield themselves from unwanted interactions without relying on a single centralised authority. Blocks are recorded in the user's own repository on the PDS, so they travel with the account across applications and providers. Users can also change their handle, revoke application access, or migrate their whole account to another provider. For project contributors, interaction occurs through the public GitHub repositories, which provide standard reporting and access-control mechanisms, and each repository publishes a SECURITY.md policy for responsible disclosure. (2) Safety and security of underage users: The Terms of Service set a minimum age requirement: users must be at least the minimum age required to lawfully consent to the processing of their personal data in their jurisdiction (by default 16 under the GDPR). Age confirmation, together with acceptance of the Terms and Privacy Policy, is required at account creation and recorded. Content that sexually exploits or endangers minors is strictly prohibited under the Acceptable Use policy and is removed through the notice-and-action moderation process, with account suspension or termination where warranted, alongside compliance with legal obligations and valid orders from competent EU authorities. (3) GitHub code of conduct (https://github.com/eurosky-social/eurosky-portal/blob/main/CODE_OF_CONDUCT.md)
2026-10-07 15:46:02
Ricardo Torres (L2 Reviewer) submitted their review of Eurosky Identity Platform (152) and found it to be a DPG
2026-10-07 15:46:01
System unmarked Eurosky Identity Platform (14784) as a nominee
2026-10-07 15:45:55
Ricardo Torres (L2 Reviewer) edited 4. Platform Independence for Eurosky Identity Platform (14784)
2026-10-07 15:02:40
Ricardo Torres (L2 Reviewer) passed 4. Platform Independence for Eurosky Identity Platform (14784)
2026-10-07 14:54:50
Ricardo Torres (L2 Reviewer) passed 5. Documentation for Eurosky Identity Platform (14784)
2026-10-07 14:54:26
Ricardo Torres (L2 Reviewer) passed 9C. Protection from Harassment for Eurosky Identity Platform (14784)
2026-10-07 14:39:19
Ricardo Torres (L2 Reviewer) pulled Eurosky Identity Platform (14784) under review
2026-10-06 17:46:37
Bolaji Ayodeji (L1 Reviewer) submitted their review of Eurosky Identity Platform (14784)
2026-10-06 17:46:04
Bolaji Ayodeji (L1 Reviewer) edited General Information for Eurosky Identity Platform (14784)
2026-10-06 17:32:07
Bolaji Ayodeji (L1 Reviewer) passed 4. Platform Independence for Eurosky Identity Platform (14784)
2026-10-06 17:31:36
Bolaji Ayodeji (L1 Reviewer) passed 9C. Protection from Harassment for Eurosky Identity Platform (14784)
2026-10-06 17:31:34
Bolaji Ayodeji (L1 Reviewer) edited 9C. Protection from Harassment for Eurosky Identity Platform (14784)
2026-10-06 17:30:14
Bolaji Ayodeji (L1 Reviewer) passed 5. Documentation for Eurosky Identity Platform (14784)
2026-10-06 17:30:11
Bolaji Ayodeji (L1 Reviewer) edited 5. Documentation for Eurosky Identity Platform (14784)
2026-10-06 17:25:16
Bolaji Ayodeji (L1 Reviewer) pulled Eurosky Identity Platform (14784) under review
2026-10-05 08:48:08
New tag (Clarifications) added to application
2026-10-05 08:48:08
Application clarifications submitted, Application move to L1 for review again
2026-09-25 12:46:40
Ricardo Torres (L2 Reviewer) requested clarifications for Eurosky Identity Platform (14784)
2026-09-25 12:46:40
System marked Eurosky Identity Platform (14784) as a nominee
2026-09-25 12:46:29
Ricardo Torres (L2 Reviewer) require clarification on 4. Platform Independence for Eurosky Identity Platform (14784)
2026-09-25 12:45:03
Ricardo Torres (L2 Reviewer) moved Eurosky Identity Platform (14784) to under review
2026-09-15 12:18:42
Ricardo Torres (L2 Reviewer) finished consultation on 4. Platform Independence for Eurosky Identity Platform (14784)
2026-09-14 10:55:29
Ivan Perdomo (Expert) submitted their inputs on 4. Platform Independence for Eurosky Identity Platform (14784) as “input”
2026-09-14 10:54:58
Ivan Perdomo (Expert) submitted their inputs on 4. Platform Independence for Eurosky Identity Platform (14784) as “input”
2026-09-10 14:41:04
Ricardo Torres (L2 Reviewer) requested consultation on 4. Platform Independence for Eurosky Identity Platform (14784)
2026-09-10 14:40:49
Ricardo Torres (L2 Reviewer) moved Eurosky Identity Platform (14784) to under consultation
2026-09-10 14:40:28
Ricardo Torres (L2 Reviewer) passed 7. Privacy & Applicable Laws for Eurosky Identity Platform (14784)
2026-09-10 14:40:25
Ricardo Torres (L2 Reviewer) edited 7. Privacy & Applicable Laws for Eurosky Identity Platform (14784)
2026-09-10 14:39:33
Ricardo Torres (L2 Reviewer) require clarification on 7. Privacy & Applicable Laws for Eurosky Identity Platform (14784)
2026-09-10 14:38:37
Ricardo Torres (L2 Reviewer) require clarification on 5. Documentation for Eurosky Identity Platform (14784)
2026-09-10 14:34:41
Ricardo Torres (L2 Reviewer) passed Scale of Solution for Eurosky Identity Platform (14784)
2026-09-10 14:34:24
Ricardo Torres (L2 Reviewer) require clarification on 9C. Protection from Harassment for Eurosky Identity Platform (14784)
2026-09-10 14:29:59
Ricardo Torres (L2 Reviewer) passed 9B. Inappropriate & Illegal Content for Eurosky Identity Platform (14784)
2026-09-10 14:29:39
Ricardo Torres (L2 Reviewer) passed 9A. Data Privacy & Security for Eurosky Identity Platform (14784)
2026-09-10 14:29:30
Ricardo Torres (L2 Reviewer) passed 8. Standards & Best Practices for Eurosky Identity Platform (14784)
2026-09-10 14:29:21
Ricardo Torres (L2 Reviewer) passed 6. Mechanism for Extracting Data for Eurosky Identity Platform (14784)
2026-09-10 14:29:07
Ricardo Torres (L2 Reviewer) edited a note on 5. Documentation for Eurosky Identity Platform (14784)
2026-09-10 14:27:02
Ricardo Torres (L2 Reviewer) passed 3. Clear Ownership for Eurosky Identity Platform (14784)
2026-09-10 14:25:58
Ricardo Torres (L2 Reviewer) passed 2. Open Licensing for Eurosky Identity Platform (14784)
2026-09-10 14:25:56
Ricardo Torres (L2 Reviewer) edited 2. Open Licensing for Eurosky Identity Platform (14784)
2026-09-10 14:25:29
Ricardo Torres (L2 Reviewer) passed 1. SDG Relevance for Eurosky Identity Platform (14784)
2026-09-10 14:13:42
Ricardo Torres (L2 Reviewer) passed General Information for Eurosky Identity Platform (14784)
2026-09-10 14:12:29
Ricardo Torres (L2 Reviewer) pulled Eurosky Identity Platform (14784) under review
2026-09-08 14:44:39
Bolaji Ayodeji (L1 Reviewer) submitted their review of Eurosky Identity Platform (14784)
2026-09-08 14:44:30
Bolaji Ayodeji (L1 Reviewer) passed Scale of Solution for Eurosky Identity Platform (14784)
2026-09-08 14:44:13
Bolaji Ayodeji (L1 Reviewer) passed 9C. Protection from Harassment for Eurosky Identity Platform (14784)
2026-09-08 14:44:10
Bolaji Ayodeji (L1 Reviewer) passed 9B. Inappropriate & Illegal Content for Eurosky Identity Platform (14784)
2026-09-08 14:43:47
Bolaji Ayodeji (L1 Reviewer) passed 9A. Data Privacy & Security for Eurosky Identity Platform (14784)
2026-09-08 14:43:35
Bolaji Ayodeji (L1 Reviewer) passed 8. Standards & Best Practices for Eurosky Identity Platform (14784)
2026-09-08 14:43:27
Bolaji Ayodeji (L1 Reviewer) passed 7. Privacy & Applicable Laws for Eurosky Identity Platform (14784)
2026-09-08 14:42:11
Bolaji Ayodeji (L1 Reviewer) passed 6. Mechanism for Extracting Data for Eurosky Identity Platform (14784)
2026-09-08 14:41:40
Bolaji Ayodeji (L1 Reviewer) passed 5. Documentation for Eurosky Identity Platform (14784)
2026-09-08 10:57:05
Bolaji Ayodeji (L1 Reviewer) passed 4. Platform Independence for Eurosky Identity Platform (14784)
2026-09-08 10:55:42
Bolaji Ayodeji (L1 Reviewer) passed 3. Clear Ownership for Eurosky Identity Platform (14784)
2026-09-08 10:54:54
Bolaji Ayodeji (L1 Reviewer) passed 2. Open Licensing for Eurosky Identity Platform (14784)
2026-09-08 10:53:58
Bolaji Ayodeji (L1 Reviewer) passed 1. SDG Relevance for Eurosky Identity Platform (14784)
2026-09-08 10:11:13
Bolaji Ayodeji (L1 Reviewer) passed General Information for Eurosky Identity Platform (14784)
2026-09-08 10:05:49
Bolaji Ayodeji (L1 Reviewer) pulled Eurosky Identity Platform (14784) under review
2026-09-07 16:33:04
Sherif Elsayed-Ali (Applicant) submitted application for Eurosky Identity Platform (14784)
