Skip to main content
🇺🇸 Google LLC (Alphabet Inc.) US jurisdiction

Google Workspace

Cloud productivity and collaboration suite including Gmail, Drive, Docs, Meet and more

Elevated Risk (Score: 2.32/5)

Hosting & Jurisdiction

Data Residency
🏳️ EU/EEA
Jurisdiction Exposure
🇺🇸 US
Self-Hosted No

Cloud-only. EU data regions available. No Norwegian datacenter.

⚠️ Jurisdiction Risk

This product is subject to foreign jurisdiction (US), which may allow foreign authorities to compel data disclosure.

Key Concerns

  • Subject to US CLOUD Act and FISA
  • Data may be used for AI/advertising purposes
  • No Norwegian datacenter

NDSI Assessment

Norwegian Digital Sovereignty Index v1.0 - Assessed 2025-12-19

Data 2/5

EU data regions available, encryption at rest

Environment 1/5

Carbon neutral since 2007

Legal 3/5

Subject to CLOUD Act and FISA

Local presence 2/5

No Norway datacenter, EU regions available

National security 3/5

US jurisdiction, data used for AI training concerns

Operational 2/5

Cloud-only, Google infrastructure

Security 1/5

ISO 27001, SOC 2, strong security

Strategic 3/5

US company, dominant in consumer market, growing in enterprise

Supply chain 2/5

Google Cloud infrastructure

Technology 2/5

Web-based, good export options

What You Can Do

Select EU data region

Configure data storage to EU regions

Effort: Low Impact: Medium

Enable Client-side encryption

Encrypt sensitive data before it reaches Google servers

Effort: High Impact: High Requires: Enterprise Plus

Alternatives

Technical Details

Open Source No
Data Portability Full
Self-Hosted No

Sources