Contracts promise. Architecture guarantees. DMCN is arranged so that the questions that keep sovereignty officers up at night — who holds the keys, who controls the namespace, who could be compelled — all have the same answer: you.
Your domain publishes its own trust anchor. We provide no DNS service and hold no zone — we are structurally incapable of impersonating your domain, or of being compelled to.
Hosting your domain takes two explicit cryptographic consents: your domain authorizes us as its operator, and our fleet accepts your domain. Either side can revoke. Neither alone is enough.
Mail is encrypted on your devices and, on a managed domain, your own administrator custodies the keys. A subpoena to us yields ciphertext we cannot open — there is no key escrow to compel.
Addresses are portable: routing re-points to a new operator without the address ever changing, and you can export your mail at any time. Leaving us is a configuration change, not a migration project.
Identity resolves per domain — like MX records, your availability depends only on your own infrastructure, never on a shared global registry that someone else's outage, government or majority could dominate.
Identity records are self-certifying and the protocol is open: if DMCN vanished tomorrow, your keys, your domain and your mail would remain yours and remain verifiable. No incumbent can say that.
Microsoft France's director of public and legal affairs, asked under oath before the French Senate whether he could guarantee that French citizens' data would never be handed to US authorities without French approval.
The International Criminal Court's chief prosecutor lost access to his Microsoft email account amid US sanctions, and the court has since moved away from the suite entirely.
Denmark's Ministry of Digitalisation announced a phase-out of Microsoft 365; Schleswig-Holstein moved ~30,000 government workstations off Microsoft, replacing Exchange and Outlook; the Dutch parliament voted to halt government migration to US clouds.
The question is no longer hypothetical. With DMCN it's also no longer interesting: a provider that holds no keys and no zone has nothing to hand over — whoever asks.