Humanitarian
NGOs, aid organizations, and humanitarian operations.
When crisis strikes, you're the ones who show up. You coordinate volunteers, locate the vulnerable, deliver aid. But your contact lists, your volunteer databases, your coordination tools — they're all on servers controlled by a foreign power. No one has physical archives anymore. If you can't organize, you can't help. Build your digital independence now, before the crisis that needs you arrives.
Exercise Total Defence 2026 (TFX26)
National total defence exercise focusing on civil-military cooperation, critical societal functions, and digital crisis management. Norway's largest exercise since the Cold War.
When Security Guarantees Crumble: What Norwegians' War Fear Reveals About Digital Dependency
Norwegian trust in NATO collapsed from 80% to 47% in three months. If we can't rely on American security guarantees, can we rely on American digital infrastructure?
When Your Values Become a Liability: Digital Sovereignty and Moral Independence
The ICC sanctions show how US digital dominance can be weaponized against organizations that stand for justice. Who's next?
Norway's Digitalisation Minister: All Organizations Need a Cloud Exit Strategy
Minister Karianne Tung urges Norwegian organizations to prepare contingency plans for US cloud providers
Totalberedskapsmeldingen 2025
Norwegian Government's comprehensive national preparedness strategy covering civil-military cooperation, digital resilience, and societal security
Software Database
Every foreign SaaS tool is a potential backdoor for extraterritorial data access. This database helps organizations identify European and open-source alternatives to reduce dependency on US Cloud Act-subject vendors and maintain data sovereignty.
Handbook on Data Protection in Humanitarian Action
The authoritative reference on data protection for humanitarian organisations, covering cloud services, biometrics, digital identity, and risk assessment frameworks
DocuWrite
Cloud document services scan your content and may share data with foreign authorities. DocuWrite runs entirely locally, ensuring sensitive documentation never leaves your infrastructure - critical for classified, legal, or confidential materials.
Humanitarian Security in an Age of Uncertainty: The Intersection of Digital and Physical Risks
Practitioner guidance on integrating digital threats into security risk management
FFI: Frivillige beredskapsorganisasjoner i totalforsvaret
Norwegian Defence Research Establishment analysis of voluntary preparedness organizations' role in total defence
Safeguarding Humanitarian Organisations from Digital Threats
ICRC analysis of how cyber operations, data breaches, and disinformation cause real-world harm to humanitarian organisations
Digitisation and Sovereignty in Humanitarian Space
Academic analysis of how digitalisation and reliance on global platforms reshape power relations, authority, and sovereignty in humanitarian operations
The Humanitarian Metadata Problem: 'Doing No Harm' in the Digital Era
Technical analysis of how metadata from telecommunications, messaging apps, cash transfers, and social media can endanger humanitarian beneficiaries and staff
CLOUD Act
US law enabling law enforcement to compel US technology companies to disclose data regardless of where it is physically stored.
EO 12333
Presidential directive authorizing US intelligence agencies to collect signals intelligence on foreign targets outside US territory.
EU-US DPF
2023 adequacy decision enabling personal data transfers from EU to certified US companies, successor to invalidated Privacy Shield.
FISA Section 702
US law authorizing warrantless surveillance of non-US persons located outside the United States for foreign intelligence purposes.
GDPR
EU regulation giving individuals control over their personal data with comprehensive rights and strong enforcement.
Investigatory Powers Act
UK law granting intelligence and law enforcement agencies broad surveillance powers including bulk data collection and equipment interference.
National Intelligence Law
Chinese law requiring all organizations and citizens to support, assist, and cooperate with state intelligence activities.
Patriot Act
Post-9/11 US law significantly expanding surveillance powers for terrorism investigations, including Section 215 business records collection.
Schrems II
Landmark 2020 CJEU ruling that invalidated EU-US Privacy Shield and imposed strict requirements for international data transfers.