Skip to main content
🇺🇸 Salesforce, Inc. US jurisdiction

Salesforce

World's leading CRM platform for sales, service and marketing

Significant Risk (Score: 2.68/5)

Hosting & Jurisdiction

Data Residency
🏳️ EU/EEA
Jurisdiction Exposure
🇺🇸 US
Self-Hosted No

Cloud-only. Hyperforce offers EU data residency but US jurisdiction still applies.

⚠️ Jurisdiction Risk

This product is subject to foreign jurisdiction (US), which may allow foreign authorities to compel data disclosure.

Key Concerns

  • Subject to US CLOUD Act
  • Extremely high vendor dependency
  • Complex and expensive migration away
  • Extensive data collection

NDSI Assessment

Norwegian Digital Sovereignty Index v1.0 - Assessed 2025-12-01

Data 2/5

EU data storage available, Hyperforce for regional control

Environment 2/5

Climate commitments, but high energy usage

Legal 3/5

Subject to CLOUD Act, extensive data collection

Local presence 2/5

Partners available but limited Norwegian presence

National security 2/5

Customer data potentially accessible to US authorities

Operational 3/5

No self-hosting, completely cloud-dependent

Security 2/5

Good security, but complex compliance

Strategic 3/5

US headquarters, dominant market position

Supply chain 3/5

Complex supply chain, many acquisitions

Technology 3/5

Highly proprietary, high lock-in

What You Can Do

Use Hyperforce on EU region

Deploy on Hyperforce with EU data residency for better data control

Effort: Medium Impact: Medium

Implement Platform Encryption

Encrypt sensitive fields with your own keys

Effort: High Impact: Medium Requires: Shield Platform Encryption

Alternatives

Technical Details

Open Source No
Data Portability Partial
Self-Hosted No

Sources