PowerOffice Go
A single roll-up of ownership and CLOUD Act exposure.
-
EU-Sovereign EU/EEA/Switzerland-owned and -operated, with no identified CLOUD Act exposure.
-
EU-Based EU-operated, with at most minor or transient US exposure.
-
EU-Hosted This listing EU hosting available, but a US parent or hyperscaler sub-processor creates material exposure.
-
US-Linked Operated by a US-incorporated entity, directly subject to US jurisdiction.
Norwegian cloud accounting/ERP for SMBs & accounting firms (Bodø, est. 1998); 75% Visma-owned, runs on Microsoft Azure EU.
PowerOffice Go offers EU hosting in the Netherlands, but a US parent or sub-processor leaves material CLOUD Act exposure. It is listed under Accounting.
Assessment notes
PowerOffice AS (Bodø, Norway, founded 1998) publishes a free public DPA + a transparent Visma trust-centre sub-processor list and is ISO 27001 certified (plus ISAE 3402 Type II attestation), but production runs on Microsoft Azure (EU/EEA, Netherlands region), a US-owned hyperscaler holding data at rest plus Twilio/SendGrid (US) for email, and the company is 75% owned by Visma since 2019 (Visma itself is Hg-majority with TPG US-PE co-investor); the US sub-processors at rest + US-PE ownership chain cap it at 3/5 with material CLOUD Act exposure despite the otherwise clean Norwegian operating posture.
Findings
- CLOUD Act
- CLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
-
None EU operator, no US parent, no US sub-processors of note.
-
Minor A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material This listing US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
-
- Ownership
- Ownership
Where ultimate control over the operating company sits.
-
EU-owned EU-incorporated and EU-controlled; no significant US ownership.
-
EU HQ, US-funded This listing EU-headquartered but US venture- or PE-controlled.
-
EU subsidiary, US parent European operating company owned by a US parent company.
-
US-owned The operating company itself is US-headquartered.
-
Other A non-EU jurisdiction. Swiss/EEA-owned vendors count as European here; the UK and others do not.
-
- Sub-processors
- — not disclosed
Verified signals
-
EU / adequacy hosting: Yes
-
EU / adequacy operator: Yes
-
No US CLOUD Act exposure: No
-
Public DPA: Yes
-
Sub-processors disclosed: Yes
-
Open-source clients: No
-
Third-party certification: Yes
Jump to
About PowerOffice Go
PowerOffice Go (operated by PowerOffice AS, Bodø, Norway, founded 1998) is one of Norway's leading cloud accounting and light-ERP platforms, used by 100,000+ businesses and 250,000+ users and consistently top-ranked for customer satisfaction in Norwegian accounting software (2020–2025). It is built modularly: accounting + invoicing, payroll, travel/expense, time registration, holiday/absence, so a freelancer can start on one module and an accounting firm can run hundreds of clients from a single console (500+ partner agencies). The product is developed, run and supported entirely from Bodø, the DPA is genuinely public (Appendix 2 of the standard service terms), and security posture is solid: ISO 27001, ISAE 3402 Type II, role-based access, 2FA, hashed passwords, delivered via the Visma Cloud Delivery Model. The procurement caveats are ownership and infrastructure, not the product. PowerOffice was acquired to a 75% majority by Visma in 2019 (the founder sold for NOK 2.4 billion), placing it inside the Visma group whose own cap table is Hg Capital (UK PE) majority with TPG (US PE) as a material co-investor. And production hosting is Microsoft Azure in an EU/EEA (Netherlands) region: EEA at rest, but a US-owned hyperscaler, with Twilio/SendGrid (US) handling email. So: a Norwegian local hero on paper, but with a US-PE ownership chain and a US-owned cloud substrate underneath. Norwegian Bookkeeping Act storage obligations are met via EEA hosting; the data is not exported outside the EEA without SCCs/controller approval.
Sub-processor map · not disclosed
Frameworks & certifications
Capability matrix
Table 1Capabilities of PowerOffice Go
Integration & access
Compliance & governance
Pricing & tiers
Public documents
Alternatives in this category
-
Norway · €9/moEU-HostedCLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
-
None EU operator, no US parent, no US sub-processors of note.
-
Minor A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material This listing US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
Public DPA: Yes Sub-processors: Yes Open source: No -
-
Norway · €20/moEU-HostedCLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
-
None EU operator, no US parent, no US sub-processors of note.
-
Minor A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material This listing US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
Public DPA: Yes Sub-processors: Yes Open source: No -
-
Germany · €7.90/moEU-HostedCLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
-
None EU operator, no US parent, no US sub-processors of note.
-
Minor A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material This listing US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
Public DPA: Yes Sub-processors: Yes Open source: No -
| Product | Sovereignty | CLOUD Act | Signals | From |
|---|---|---|---|---|
Conta
Norway
|
EU-Hosted | CLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
|
Public DPA: Yes
Sub-processors: Yes
Open source: No
|
€9/mo |
Fiken
Norway
|
EU-Hosted | CLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
|
Public DPA: Yes
Sub-processors: Yes
Open source: No
|
€20/mo |
Lexware
Germany
|
EU-Hosted | CLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
|
Public DPA: Yes
Sub-processors: Yes
Open source: No
|
€7.90/mo |