Microsoft 365
Cloud-based productivity suite including Word, Excel, PowerPoint, Outlook and collaboration tools
- Vendor
- 🇺🇸 Microsoft Corporation
- HQ Country
- 🇺🇸 US
- Risk Level
- 🔶 Elevated
- Open Source
- No
- Data Portability
- Partial
- Self-Hosted
- No
SaaS on Azure with Norway datacenter option. EU Data Boundary available but does not eliminate CLOUD Act exposure.
⚠️ Jurisdiction Risk
This product is subject to foreign jurisdiction (US), which may allow foreign authorities to compel data disclosure.
Key Concerns
- Subject to US CLOUD Act despite EU Data Boundary
- Strong vendor lock-in to Microsoft ecosystem
- Dominant position creates strategic dependency
NDSI Assessment Breakdown
Norwegian Digital Sovereignty Index v1.0 — Assessed 2025-12-19
Norway datacenter regions available. Customer Key encryption option
Microsoft carbon-negative commitment
Subject to CLOUD Act. EU Data Boundary available but legal exposure remains
Norway datacenter, strong partner network
Widely used in Norwegian public/private sector
Cloud-only for most features, Microsoft infrastructure required
ISO 27001, SOC 2, extensive security features
US headquarters, dominant market position globally
Dependent on Azure infrastructure
Proprietary formats, strong ecosystem lock-in
What You Can Do
Enable EU Data Boundary
Configure to store and process data within EU/EEA using Norway datacenter
Implement Customer Key
Use your own encryption keys via Azure Key Vault
Use Open Document Formats
Save documents in ODF format to reduce lock-in