{"id":2511,"date":"2026-08-31T09:54:58","date_gmt":"2026-08-31T07:54:58","guid":{"rendered":"https:\/\/norskinteraktiv.no\/?p=2511"},"modified":"2026-08-31T10:03:11","modified_gmt":"2026-08-31T08:03:11","slug":"if-you-want-data-sovereignty-then-it-is-not-enough-for-the-data-to-be-in-the-eu","status":"publish","type":"post","link":"https:\/\/norskinteraktiv.no\/en\/onsker-dere-datasuverenitet-da-er-det-ikke-nok-at-dataene-ligger-i-eu\/","title":{"rendered":"Do you want data sovereignty? Then it is not enough for the data to be in the EU"},"content":{"rendered":"<section id=\"text-block_ee20043fa17114e063cec7887dc326f6\" class=\"text alignfull\">\n\t<div class=\"text-container\">\n\t\t<div class=\"text-inner-container\">\n\t\t\t\t\t\t\t<p>When you develop digital courses, you do not just upload text, images and video. You also put business-critical knowledge, internal routines, personal data, participant data and intellectual property into the supplier's system.<\/p>\n<p>The question is therefore not just where the data is stored, but who has control over it and to which country's legislation the supplier is subject.<\/p>\n<h2>EU hosting is not the same as European data sovereignty<\/h2>\n<p>Articulate is an American company. Although Articulate offers regional storage in Europe, the company is still subject to US legislation.<\/p>\n<p>In <a href=\"https:\/\/www.articulate.com\/trust\/regional-data-hosting\/\">Articulates own Regional Data Hosting Policy<\/a> it states that certain forms of storage and processing may take place outside the selected region, including in the USA. Articulate also writes:<\/p>\n<blockquote><p>\u201cwe make no warranty that Regional Data Hosting will meet your data localisation requirements.\u201d<\/p><\/blockquote>\n<p>Furthermore, Articulate specifies:<\/p>\n<blockquote><p>\u201cRegional Data Hosting does not apply to the Exclusions\u201d<\/p><\/blockquote>\n<p>The exceptions include, amongst other things, customer support, security incidents, integrations, usage data and sub-contractors. Articulates' sub-contractors may therefore gain access to or process customer data outside the selected region.<\/p>\n<p>That doesn't necessarily mean Articulate is breaching the GDPR. It means that European storage alone does not provide full European control over the data.<\/p>\n<h2>Can course data be requested for disclosure?<\/h2>\n<p>\u00abSeized\u00bb is a strong word. Legally, it is more precise to say that data can be requested for disclosure through a valid official order.<\/p>\n<p>The US CLOUD Act clarifies that companies subject to US jurisdiction can be ordered to disclose data they control \u2013 regardless of which country the data is physically stored in. This is described by <a href=\"https:\/\/www.justice.gov\/archives\/opa\/pr\/justice-department-announces-publication-white-paper-cloud-act\">the US Department of Justice<\/a>.<\/p>\n<p><strong>This does not mean that the US authorities are free to retrieve all courses in Articulate.<\/strong> A requirement must have a legal basis. But that means storage in a European data centre does not necessarily remove US jurisdiction.<\/p>\n<p>Thus, a business can own its course content on paper, while a foreign supplier still has technical access and is subject to the laws of another country.<\/p>\n<h2>Data sovereignty is about more than GDPR<\/h2>\n<p>GDPR compliance is important, but true data sovereignty also encompasses:<\/p>\n<ul>\n<li>which country the supplier is resident in<\/li>\n<li>which jurisdiction the supplier is subject to<\/li>\n<li>where data is stored, processed and backed up<\/li>\n<li>which subcontractors can gain access<\/li>\n<li>who controls encryption keys and system access<\/li>\n<li>whether content and data can easily be migrated to another solution<\/li>\n<\/ul>\n<p>European Commission's <a href=\"https:\/\/commission.europa.eu\/news-and-media\/news\/sovereign-cloud-framework-explained-2026-06-01_en\">Cloud Sovereignty Framework<\/a> highlights precisely legal jurisdiction, data control, supply chains and technological independence as central parts of digital sovereignty.<\/p>\n<h2>MentorKit Suite \u2013 developed and controlled in Norway<\/h2>\n<p>MentorKit Suite is a Norwegian-developed and Norwegian-owned alternative for businesses that want greater control over courses, participant data and technology choices.<\/p>\n<p>With MentorKit you can develop, manage and deliver digital courses in one unified solution. The platform is developed by Norsk Interaktiv AS, and all data used by the customer on <a href=\"https:\/\/mentorkit.com\/about\/\">MentorKit<\/a> stored in Norway under Norwegian control and legislation.<\/p>\n<p>MentorKit Suite provides, among other things:<\/p>\n<ul>\n<li>Norwegian supplier under Norwegian and European legislation<\/li>\n<li>storage of customer data in Norway<\/li>\n<li>control over your own course content and your own data<\/li>\n<li>support for open standards such as SCORM and xAPI<\/li>\n<li>less supplier lock-in<\/li>\n<li>possibility of Norwegian cloud operation or self-hosting with MentorKit Suite Pro<\/li>\n<li>Norwegian support from people who know the solution<\/li>\n<\/ul>\n<p>No serious supplier can promise that data will never be subject to a lawful government order. The difference lies in which jurisdiction applies, how many international supplier tiers are involved, and how much control the organisation itself retains.<\/p>\n<h2>Who controls your knowledge?<\/h2>\n<p>Course content can contain some of the business's most important assets: professional expertise, working methods, safety procedures, certification requirements and internal knowledge.<\/p>\n<p>Therefore, the choice of course platform should be about more than just features and price.<\/p>\n<p>If you wish to break away from your dependence on American software and achieve greater data sovereignty, the MentorKit Suite is a Norwegian alternative where control, transparency and ownership are central.<\/p>\n<p><strong>Would you like a walkthrough of how courses and data can be migrated from Articulate to MentorKit Suite? Get in touch with us for a no-obligation chat.<\/strong><\/p>\n\t\t\t\t\t<\/div>\n\t<\/div>\n<\/section>","protected":false},"excerpt":{"rendered":"","protected":false},"author":7,"featured_media":2512,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"inline_featured_image":false,"footnotes":""},"categories":[4],"tags":[],"class_list":["post-2511","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-nyheter"],"acf":[],"_links":{"self":[{"href":"https:\/\/norskinteraktiv.no\/en\/wp-json\/wp\/v2\/posts\/2511","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/norskinteraktiv.no\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/norskinteraktiv.no\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/norskinteraktiv.no\/en\/wp-json\/wp\/v2\/users\/7"}],"replies":[{"embeddable":true,"href":"https:\/\/norskinteraktiv.no\/en\/wp-json\/wp\/v2\/comments?post=2511"}],"version-history":[{"count":4,"href":"https:\/\/norskinteraktiv.no\/en\/wp-json\/wp\/v2\/posts\/2511\/revisions"}],"predecessor-version":[{"id":2517,"href":"https:\/\/norskinteraktiv.no\/en\/wp-json\/wp\/v2\/posts\/2511\/revisions\/2517"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/norskinteraktiv.no\/en\/wp-json\/wp\/v2\/media\/2512"}],"wp:attachment":[{"href":"https:\/\/norskinteraktiv.no\/en\/wp-json\/wp\/v2\/media?parent=2511"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/norskinteraktiv.no\/en\/wp-json\/wp\/v2\/categories?post=2511"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/norskinteraktiv.no\/en\/wp-json\/wp\/v2\/tags?post=2511"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}