Skip to main content
GitHub logo

GitHub

Verified

“US-incorporated, Microsoft-owned, now absorbed into Microsoft itself.”

Operating HQ
🇺🇸 San Francisco, USA
where it's run
Legal domicile
🇺🇸 Delaware, USA
where it's incorporated
Owner
Microsoft (Nasdaq: MSFT)
Developers
150M+
Employees
~5,600
Revenue
>$1B ARR
13/100
Sovereign: Not
Control ↑
10
Data →
15

13 = midpoint of Control 10 & Data 15

ConfidenceHigh (90%)

Sovereignty Quadrant

Control ↑ who owns & governs the company  ·  Data → where your data lives. Every dot is a company — click to open it.

Where your data lives → Who controls the company → 8 companies · fully non-EU (0/0) TikTok — Data 32, Control 24 Google — Data 16, Control 14 Youtube — Data 14, Control 16 Ionos — Data 90, Control 90 Disneyplus — Data 16, Control 12 Telegram — Data 34, Control 14 Carrefour — Data 100, Control 32 Corriere — Data 100, Control 100 Microsoft — Data 26, Control 14 X — Data 14, Control 16 Amazon — Data 14, Control 10 Amazon — Data 66, Control 0 Bild — Data 100, Control 100 Reddit — Data 14, Control 10 Netflix — Data 24, Control 20 LinkedIn — Data 14, Control 16 Reuters — Data 26, Control 0 Pinterest — Data 12, Control 12 Discord — Data 16, Control 20 AliExpress — Data 18, Control 12 Twitch — Data 18, Control 16 Samsung — Data 62, Control 4 Canva — Data 24, Control 20 Spotify — Data 30, Control 68 Apple — Data 16, Control 16 Uber — Data 16, Control 16 Salesforce — Data 20, Control 14 Deepl — Data 70, Control 78 Airbnb — Data 18, Control 18 Notion — Data 22, Control 16 Shopify — Data 18, Control 18 Mastercard — Data 36, Control 16 Dropbox — Data 14, Control 10 HubSpot — Data 24, Control 10 Stripe — Data 30, Control 30 Zalando — Data 52, Control 88 Figma — Data 18, Control 10 SAP SE — Data 68, Control 78 Atlassian — Data 18, Control 18 Proton — Data 72, Control 54 Miro — Data 100, Control 44 Klarna — Data 44, Control 42 Ecosia — Data 60, Control 92 Zoom — Data 20, Control 14 Adyen — Data 84, Control 84 GitLab — Data 26, Control 14 Slack — Data 14, Control 20 Hetzner — Data 84, Control 96 Deezer — Data 62, Control 66 Typeform — Data 100, Control 52 OVHcloud — Data 82, Control 94 Tutanota — Data 100, Control 100 BlaBlaCar — Data 54, Control 76 Qwant — Data 56, Control 88 Bitwarden — Data 28, Control 20 Contentful — Data 34, Control 48 Personio — Data 34, Control 58 Ikea — Data 34, Control 100 Meta Platforms — Data 18, Control 10 Whatsapp — Data 14, Control 12 Instagram — Data 28, Control 22 Avast — Data 60, Control 0 Paypal — Data 24, Control 32 Kaspersky — Data 56, Control 0 15 10 GitHub
GitHub — verified peers — automated estimate (0–50 pillars, normalized)

Every number below traces to 14 sourced facts across 8 independent sources, last verified 2026-06-12. 3 open questions hold confidence at 90% — they lower confidence, never the score.

Control ↑

Who legally and economically controls the company

10/100
7 facts · 5 sources · high confidence
Legal & Jurisdiction
14

GitHub, Inc. is incorporated in Delaware and headquartered in San Francisco; the operating entity is wholly US-based with no EU parent. EU law reaches it only as a foreign data importer via SCCs, not as a domestic entity.

Why 14? 4 sourced facts · click to expand
Delaware corporation

GitHub, Inc. is a Delaware corporation with its registered office in Wilmington, Delaware (LEI 6354003LMZZAKOPXLX69).

GLEIF / Bloomberg LEI record · as of 2026

Microsoft subsidiary since 2018

Microsoft acquired GitHub for $7.5 billion in stock, with GitHub operating as a Microsoft subsidiary; the deal closed in October 2018.

Microsoft News (official) · as of 2018-06-04

HQ San Francisco, USA

GitHub is headquartered in San Francisco, California, United States.

Wikipedia (GitHub) · as of 2026

EU reaches it only via SCCs

GitHub relies on EU Standard Contractual Clauses (Decision 2021/914) and the Data Privacy Framework to transfer EU personal data to the US, indicating it operates as a foreign data importer rather than an EU-domiciled controller.

GitHub General Privacy Statement (GitHub Docs) · as of 2026

Control & Ownership
6

GitHub is 100% owned and voting-controlled by Microsoft Corporation, a US public company; its financials roll into Microsoft's Intelligent Cloud segment and there is no separate listing or any EU economic interest.

Why 6? 3 sourced facts · click to expand
100% Microsoft-owned

GitHub is wholly owned by Microsoft Corporation, a US company listed on Nasdaq (MSFT), giving 100% voting and economic control to a US parent.

Microsoft News (official) · as of 2018-06-04

Rolled into MSFT Intelligent Cloud

GitHub's financials are reported as part of Microsoft's Intelligent Cloud segment.

Microsoft News (official) · as of 2018-06-04

Absorbed into Microsoft CoreAI, no CEO

In August 2025 CEO Thomas Dohmke announced his departure and Microsoft folded GitHub into its CoreAI division, with GitHub leadership reporting into Microsoft executives and no plan to name a standalone CEO.

GeekWire · as of 2025-08-11

Data →

Where your data lives and who can reach it

15/100
7 facts · 6 sources · mixed confidence
Data & Infrastructure
14

Default user data lives in US data centers (Northern Virginia) and GitHub is migrating fully to Microsoft Azure; the only EU option is Azure EU regions on a US hyperscaler, enterprise-only, and still exposed to the US CLOUD Act.

Why 14? 4 sourced facts · click to expand
US data centers, moving to Azure

GitHub's existing hardware footprint is concentrated in Northern Virginia data centers, and it is migrating its core systems fully to Microsoft Azure, targeting completion within 24 months.

The New Stack · as of 2025-10

EU residency = Azure EU regions

GitHub Enterprise Cloud EU data residency runs on Microsoft Azure, with data in Azure regions in France, Sweden, Germany, the Netherlands and (from May 2026) Norway and Switzerland.

GitHub Changelog · as of 2026-03-31

EU residency enterprise-only; default = US

EU data residency is available only to enterprise customers on ghe.com; default github.com personal data is routinely transferred to and processed in the United States.

GitHub Enterprise Cloud Docs / Privacy Statement · as of 2026

CLOUD Act exposure on all data

As a US-domiciled provider, Microsoft/Azure data is reachable under the US CLOUD Act regardless of physical location, and Microsoft has admitted it cannot guarantee EU data sovereignty.

The Register · as of 2025-07-25

Operations & People
16

Operations are US-centered: San Francisco HQ, leadership reporting into Microsoft in the US, and financials reported in USD within a US parent, despite a globally distributed remote workforce.

Why 16? 3 sourced facts · click to expand
SF HQ, ~5,600 employees

GitHub is headquartered in San Francisco and employs roughly 5,600 people across a globally distributed (remote-friendly) workforce.

Wikipedia (GitHub) · as of 2026

Leadership reports into Microsoft (US)

GitHub leadership now reports into Microsoft executives in the US (CoreAI division and the Microsoft developer/AI platform organizations), removing independent operational control.

GeekWire · as of 2025-08-11

150M+ developers, US-based corp

GitHub serves more than 150 million developers worldwide (milestone reached May 2025), but its corporate and reporting base remains in the US.

Wikipedia (GitHub) · as of 2025-05

Aligned to the EU Commission’s official Cloud Sovereignty Framework (SEAL, Jun 2026) →

What we don’t know 3 open questions — they lower confidence, never the score
  • ?

    What share of GitHub's total revenue and data volume now sits in EU Azure regions versus the US?

    Microsoft does not break out GitHub geographically; the real EU footprint of data and money is unverifiable, so infra/ops scores rely on default-US behavior.

  • ?

    How far along is the full migration of core github.com systems to Azure, and will any of it land in EU regions by default?

    If the migration keeps default data in US Azure regions (likely), EU exposure is unchanged; an EU-default would modestly improve the infra picture.

  • ?

    Exact current headcount and EU-resident share of GitHub's workforce.

    Employee figures (~5,600) are from secondary sources and the EU share is unknown, adding uncertainty to the operations score.

EU Cloud Sovereignty Framework lens

The EU Cloud Sovereignty Framework (EUCS / SEAL) certifies cloud service providers, not developer platforms; the rows below are an analogous mapping for orientation, not a certification or formal assessment.

Strategic

Strategically owned and now operationally absorbed by Microsoft (US); folded into the CoreAI division in 2025 with no independent leadership.

weak

Legal & jurisdictional

Delaware-incorporated, US-headquartered; subject to US law and the CLOUD Act. EU law applies only via SCCs/DPF as a foreign importer.

weak

Data & AI

Default user data processed in the US; EU data residency exists but is Azure-based, enterprise-only, and CLOUD Act-exposed. AI (Copilot) is tied to Microsoft/OpenAI stack.

weak

Operational

Run from San Francisco with leadership reporting into Microsoft US executives; no autonomous EU operating control.

weak

Supply chain

Core infrastructure supply chain is Microsoft Azure (US hyperscaler); migration deepens dependency on a single US provider.

weak

Technological

Increasingly bound to Microsoft Azure and Microsoft's AI platform; minimal technological independence from the US parent.

weak

Security & compliance

Holds ISO 27001 and SOC 2 and offers EU data residency aligned to Microsoft's EU Data Boundary, but compliance does not remove US jurisdictional reach.

moderate

Environmental sustainability

No GitHub-specific environmental disclosure found; would inherit Microsoft Azure's datacenter sustainability commitments.

not assessed
EU alternatives
🇩🇪 Codeberg (Forgejo) codeberg.org EU-controlled

Non-profit (Codeberg e.V.) based in Berlin running open-source Forgejo on EU infrastructure; fully EU-governed Git hosting.

🇺🇸 GitLab gitlab.com not an EU alternative

US (Delaware) public company, Nasdaq-listed and hosted on Google Cloud; self-managed GitLab can run on EU infra but the SaaS is US-controlled.

🇪🇺 Gitea / self-hosted Forgejo gitea.com with caveats

Open-source self-hostable forge; sovereign only if you run it on EU-controlled infrastructure (Gitea Ltd. itself is not EU-based).

How the method works

Methodology v2 (provisional): the score is the midpoint of two axes — Control (who owns and governs the company) and Data (where your data lives and who can reach it). Each axis is scored only on verified evidence; unknowns reduce confidence, never the score. Every input below is sourced; the weights and judgments are open to challenge.

Spotted an error? Every claim is sourced — challenge it and we correct the record.
  • 2026-06-12 — Initial golden profile, authored from primary sources (human + AI review).

Report Incorrect Data

Found an error in this company's profile? Help us improve our data by submitting a correction.

Required so we can follow up if needed. We won't share your email.

Verified 2026-06-12 · Human + AI joint review (sources independently checked) · Methodology