
Merlon has launched what it describes as the first fully European‑sovereign cybersecurity stack and managed service in the Netherlands. The company went live on 6 October at the ONE Conference in The Hague and says the offering is designed for organisations where geopolitical access to data presents a national security risk.
What Merlon is offering
Merlon provides continuous detection and response (CDR) as a managed service, with ownership, control and legal jurisdiction placed entirely within Europe, the company says. It is targeting defence and intelligence organisations, national government bodies and operators of critical infrastructure including energy, transport, ports and telecoms.
Why ‘sovereignty’ matters
Merlon frames its product around the European Commission's Cloud Sovereignty Framework, which defines measurable Sovereignty Effectiveness Assurance Levels (SEAL) from SEAL‑0 (no sovereignty) up to SEAL‑4 (a fully European chain from chips to software). Many vendors claim sovereignty based on storing data inside an EU datacentre; Merlon says its stack aims to meet a stricter, framework‑level standard.
The company also notes the operational risk posed by foreign legal regimes such as the US CLOUD Act, which can compel access to data independently of where that data is hosted. That risk is particularly salient for governments, intelligence services and organisations that provide vital services to society.
Positioning and availability
Merlon presented the service at the ONE Conference in The Hague on 6 October and invited visitors and press to meet the team. The press material does not specify which SEAL level the company has achieved; Merlon says it adheres to the Cloud Sovereignty Framework but did not include a precise SEAL designation in the release.
Leadership view
Earth Grob, CEO of Merlon, said the geopolitical threat environment is growing and organisations increasingly need transparent answers about who ultimately controls their security. According to the company, Merlon provides a clear European answer to that question.
Media and interviews
Merlon offered CEO availability for interviews at the ONE Conference and afterwards on topics including how to achieve real digital sovereignty beyond data location, the risks from dependence on non‑European suppliers for critical infrastructure, and the Netherlands' role within European cybersecurity.
Background
Merlon describes itself as the first Dutch cybersecurity company to provide a fully sovereign technology framework together with continuous detection and response under European jurisdiction and control. The company focuses on customers for whom digital outages can create national or social risk.
Contact details were included in the release for press enquiries.
Source: Original press release




