Skip to main content
Software

GitHub

World's largest platform for code hosting, version control and developer collaboration

🔶 Elevated Risk · Score 2.41/5
Product Details
Vendor
🇺🇸 Microsoft Corporation
HQ Country
🇺🇸 US
Risk Level
🔶 Elevated
Open Source
No
Data Portability
Full
Self-Hosted
No
Hosting & Jurisdiction
Data Residency
🇳🇱 NL 🇸🇪 SE 🏳️ EU/EEA
Jurisdiction Exposure
🇺🇸 US

Cloud-only. EU data residency GA since Oct 2024 on Azure (Netherlands/Sweden). Requires Enterprise Cloud with dedicated account rep. US jurisdiction still applies via Microsoft ownership.

NDSI Assessment
2.4 / 5.0 risk score
v1.0 · 2025-12-01

⚠️ Jurisdiction Risk

This product is subject to foreign jurisdiction (US), which may allow foreign authorities to compel data disclosure.

Key Concerns

  • Owned by Microsoft (CLOUD Act)
  • Source code potentially accessible to US authorities
  • Actions runners in US by default

NDSI Assessment Breakdown

Norwegian Digital Sovereignty Index v1.0 — Assessed 2025-12-01

Data ⚠️ 2/5

EU data residency GA since Oct 2024 (Azure NL/SE). Requires Enterprise Cloud with dedicated account rep.

Environment ⚠️ 2/5

Microsoft environmental commitments

Legal 🔶 3/5

Subject to CLOUD Act via Microsoft

Local presence ⚠️ 2/5

No dedicated Norwegian support

National security 🔶 3/5

Source code potentially accessible to US authorities

Operational ⚠️ 2/5

Cloud-only, but git is distributed

Security ⚠️ 2/5

Good security, 2FA, audit logs

Strategic 🔶 3/5

Owned by Microsoft since 2018

Supply chain ⚠️ 2/5

Part of Microsoft, Azure Actions

Technology ✅ 1/5

Git is open standard, easy migration

What You Can Do

Use GitHub Enterprise Cloud with EU data residency

Store code in Azure Netherlands/Sweden regions. GA since Oct 2024. Requires dedicated account representative.

Effort: Medium Impact: High Requires: GitHub Enterprise Cloud

Self-hosted runners

Run CI/CD on your own servers in Norway/EU

Effort: Medium Impact: High

Use Areas

Dev