About Eurtifact

Making software supply chain
compliance provable

European organisations depend on thousands of upstream software artifacts that flow through infrastructure outside EU jurisdiction. Eurtifact provides a sovereign mirror platform that ensures every artifact is scanned, signed, and auditable before it enters your environment.

Why We Exist

NIS2 is in force, and CRA reporting has applied since 11 September 2026. EU software manufacturers need to build on open source without losing the evidence their own conformity obligations, and their customers' supplier audits, now demand. But the tools for proving supply chain governance are fragmented, US-hosted, or simply don't exist.

Eurtifact replaces ad-hoc mirrors, manual scanning, and scattered compliance evidence with a single platform. Every artifact follows a controlled path from untrusted source to verified distribution, and every step is recorded in a tamper-evident audit trail.

Principles

01

Sovereignty

All infrastructure runs in EU data centres (Hetzner, Germany). No artifact data, metadata, or audit logs leave EU jurisdiction.

02

Transparency

Every action is recorded in an immutable, hash-chained audit log. Compliance is provable, not self-declared.

03

Simplicity

One platform replaces ad-hoc mirrors, manual scanning, and scattered compliance evidence. Less tooling, less risk.

Founder

Eurtifact is built and run by Yunus Yildiz, who also writes the analysis on the blog. The regulatory articles cite the Official Journal text or the regulator's own guidance they rely on, so every claim can be checked against its source.

Yunus Yildiz on LinkedIn

Company

EntityYildiz Tech
RegistrationKvK 42030302
VATNL005442435B54
LocationCapelle aan den IJssel, The Netherlands
InfrastructureHetzner Online GmbH, Nuremberg, Germany
Contactinfo@eurtifact.eu

Ready to see the platform?

See how Eurtifact provides the audit trail that NIS2 and CRA auditors need.

Request a Demo