Skip to main content
🇺🇸 Microsoft Corporation US jurisdiction

GitHub

World's largest platform for code hosting, version control and developer collaboration

Elevated Risk (Score: 2.41/5)

Hosting & Jurisdiction

Data Residency
🇳🇱 NL 🇸🇪 SE 🏳️ EU/EEA
Jurisdiction Exposure
🇺🇸 US
Self-Hosted No

Cloud-only. EU data residency GA since Oct 2024 on Azure (Netherlands/Sweden). Requires Enterprise Cloud with dedicated account rep. US jurisdiction still applies via Microsoft ownership.

⚠️ Jurisdiction Risk

This product is subject to foreign jurisdiction (US), which may allow foreign authorities to compel data disclosure.

Key Concerns

  • Owned by Microsoft (CLOUD Act)
  • Source code potentially accessible to US authorities
  • Actions runners in US by default

NDSI Assessment

Norwegian Digital Sovereignty Index v1.0 - Assessed 2025-12-01

Data 2/5

EU data residency GA since Oct 2024 (Azure NL/SE). Requires Enterprise Cloud with dedicated account rep.

Environment 2/5

Microsoft environmental commitments

Legal 3/5

Subject to CLOUD Act via Microsoft

Local presence 2/5

No dedicated Norwegian support

National security 3/5

Source code potentially accessible to US authorities

Operational 2/5

Cloud-only, but git is distributed

Security 2/5

Good security, 2FA, audit logs

Strategic 3/5

Owned by Microsoft since 2018

Supply chain 2/5

Part of Microsoft, Azure Actions

Technology 1/5

Git is open standard, easy migration

What You Can Do

Use GitHub Enterprise Cloud with EU data residency

Store code in Azure Netherlands/Sweden regions. GA since Oct 2024. Requires dedicated account representative.

Effort: Medium Impact: High Requires: GitHub Enterprise Cloud
Learn more →

Self-hosted runners

Run CI/CD on your own servers in Norway/EU

Effort: Medium Impact: High

Alternatives

Technical Details

Open Source No
Data Portability Full
Self-Hosted No

Sources