ServiceNow
Cloud-based IT service management (ITSM) and workflow automation platform used for incident, problem, and change management
- Vendor
- 🇺🇸 ServiceNow, Inc.
- HQ Country
- 🇺🇸 US
- Risk Level
- 🔶 Elevated
- Open Source
- No
- Data Portability
- Partial
- Self-Hosted
- No
Cloud-only. EU data centers available. Customer-managed encryption keys supported. US jurisdiction applies.
⚠️ Jurisdiction Risk
This product is subject to foreign jurisdiction (US), which may allow foreign authorities to compel data disclosure.
Key Concerns
- Subject to US CLOUD Act
- Contains sensitive IT infrastructure and incident data
- High lock-in due to customization and integrations
- Cloud-only platform
NDSI Assessment Breakdown
Norwegian Digital Sovereignty Index v1.0 — Assessed 2025-12-19
EU data centers available, customer-managed encryption keys
Sustainability commitments
Subject to CLOUD Act
Partners like Sopra Steria in Norway
Contains sensitive IT infrastructure data and incident logs
Cloud-only, but high SLA guarantees
ISO 27001, SOC 2, FedRAMP, strong security controls
US company, dominant in enterprise ITSM
ServiceNow infrastructure, Azure partnerships
Proprietary platform, extensive customization creates lock-in
What You Can Do
Select EU data center
Configure instance in EU region
Enable Customer-Managed Encryption Keys
Use your own encryption keys for data at rest
Use Norwegian implementation partner
Work with partners like Sopra Steria for local support