Skip to content
Independently verified · Quarterly re-audit
EU VETTED

SaaS made in Norway

In short

Norway has a notable SaaS base across accounting and collaboration: Fiken, Conta, Visma eAccounting and PowerOffice Go in accounting; Jottacloud in storage; Pexip and Whereby in video conferencing; Signicat in digital identity and e-signature; and Runbox in private email. These are all companies headquartered in Norway — an EEA member, not an EU member — and origin is only one signal: ownership, hosting region and CLOUD Act exposure are recorded separately on each listing.

The products on this page are SaaS companies headquartered or incorporated in Norway. Norway is an EEA member rather than an EU member, so the GDPR applies in Norwegian law, but the practical evaluation is the same as for any vendor on EU Vetted: origin is deliberately kept separate from two other signals you should weigh alongside it — where the service actually hosts data, and its exposure to the US CLOUD Act. A Norwegian company that routes data through a US service can re-introduce exposure, so we record ownership, hosting region and CLOUD Act exposure as distinct fields on every listing. Fiken, for instance, hosts in Norway (CLOUD Act exposure: Material). The Norwegian catalog is strongest in accounting (Fiken, Conta, Visma eAccounting, PowerOffice Go), video conferencing (Pexip, Whereby), digital identity (Signicat) and storage (Jottacloud).

Accounting

Cloud & hosting

CRM

Email marketing

E-signature

File sharing

Headless CMS

Helpdesk

Payments

Private email

Video conferencing

VPN

FAQ

Frequently asked questions

Is Norway in the EU, and does that affect data protection?
Norway is not an EU member but is part of the EEA, so the GDPR applies in Norwegian law. For buyers, the practical signals are the same as for any EU vendor: ownership, where data is hosted, the sub-processor chain and a published DPA. We record these separately on each Norwegian listing rather than relying on EU-vs-EEA labels.
Are Norwegian SaaS companies automatically hosted in Norway?
No — company origin and hosting region are independent signals, which is why we record them separately. Several Norwegian vendors host domestically: Fiken hosts in Norway, for example. But a Norwegian-headquartered company can still place data with a sub-processor elsewhere — PowerOffice Go, for instance, hosts in Netherlands. Check the hosting region and sub-processor list on each listing.
Does a Norwegian company mean no US CLOUD Act exposure?
Not by itself. CLOUD Act reach follows corporate control and the sub-processor chain, not just where the head office sits. A Norwegian-controlled vendor with no US services in the data path has a structurally weaker exposure profile, whereas a Norwegian firm with US ownership or a US service in the path can remain exposed — Fiken, for example, is recorded as CLOUD Act exposure: Material. Each listing shows the exposure we assessed alongside the ownership signal.