Servicenow
Verified“US enterprise-workflow giant, EU offices but US control.”
- Listing
- NYSE: NOW
- FY2025 revenue
- ~$13.3B
- Employees
- ~29,000
- EU data centers
- Yes (paired)
19 = midpoint of Control 13 & Data 25
Sovereignty Quadrant
Control ↑ who owns & governs the company · Data → where your data lives. Every dot is a company — click to open it.
Every number below traces to 12 sourced facts across 11 independent sources, last verified 2026-06-12. 3 open questions hold confidence at 88% — they lower confidence, never the score.
Control ↑
Who legally and economically controls the company
Legal & Jurisdiction
15
Reincorporated in Delaware in 2012; principal executive offices in Santa Clara, California. The controlling legal entity is US, fully subject to US law. EU law (GDPR/DORA) reaches its EU subsidiaries and processing activities, but ultimate corporate control and enforceability sit in the United States, not the EU.
Why 15? 3 sourced facts · click to expand
Incorporation state
ServiceNow Form S-1 / 10-K (SEC EDGAR) · as of 2020-02
Principal executive offices
ServiceNow 10-K (SEC EDGAR) · as of 2022-02
EU operating subsidiaries exist (e.g. ServiceNow UK Ltd, Staines-upon-Thames)
LEI Lookup (ServiceNow UK Limited) · as of 2026-06
Control & Ownership
10
Publicly traded on NYSE (NOW), S&P 100/500 component. ~90%+ of shares held by institutions, dominated by US asset managers Vanguard, BlackRock and State Street. Voting control and economic majority are overwhelmingly US-based; no meaningful EU ownership stake.
Why 10? 3 sourced facts · click to expand
Institutional ownership is dominated by US asset managers
Fintel institutional ownership · as of 2026-06
5-for-1 stock split executed Dec 2025 (explains ~$102 split-adjusted price)
ServiceNow Newsroom · as of 2025-12
Data →
Where your data lives and who can reach it
Data & Infrastructure
25
ServiceNow runs its own multi-instance data centers in geographic pairs, including EU pairs (Dublin/Amsterdam, Frankfurt/Düsseldorf), and offers an opt-in CLOUD Act-protected sovereign deployment on Germany's STACKIT (Schwarz Group). These are genuine positives. But the operator/controller is the US parent, AI workloads run on Microsoft Azure, and the default platform is exposed to the US CLOUD Act. EU data residency is available but the controlling infrastructure entity is US — analogous to 'EU region on a foreign-controlled provider' rather than EU-owned infra.
Why 25? 3 sourced facts · click to expand
Operates own EU data center pairs
Data Center Locations directory · as of 2026-06
Uses Microsoft Azure for AI Platform / GPU workloads
Microsoft Customer Stories · as of 2026-06
Opt-in EU sovereign deployment on STACKIT (data in Germany, CLOUD Act-protected) exists but is a partner offering, not the default
STACKIT / Deloitte sovereign cloud · as of 2026-06
Operations & People
25
HQ and executive leadership (CEO Bill McDermott, CFO Gina Mastantuono, Chairman/founder Fred Luddy) are US-based; reporting currency is USD. ServiceNow has a substantial EU/EMEA workforce (UK 1,000+, Amsterdam, etc.) and an EMEA hub in Staines-upon-Thames, but the company is operationally and managerially US-centered.
Why 25? 3 sourced facts · click to expand
Headquarters and leadership are US-based
Wikipedia · as of 2026-06
FY2025 revenue and workforce scale
Wikipedia / ServiceNow FY2025 results · as of 2026-01
EMEA operational hub and EU workforce
Dun & Bradstreet / LinkedIn · as of 2026-06
Aligned to the EU Commission’s official Cloud Sovereignty Framework (SEAL, Jun 2026) →
What we don’t know
3 open questions — they lower confidence, never the score
- ?
What share of EU customers actually use the STACKIT sovereign deployment versus the default ServiceNow Cloud?
If sovereign uptake is negligible (likely), the default US-controlled posture dominates the real-world data-residency picture; the infra score reflects the default.
- ?
Exact corporate structure of EU subsidiaries and whether any EU entity acts as data controller (vs processor) for EU customer data.
Affects how directly EU law binds the operating entity vs. only the US parent; would refine the legal score.
- ?
Precise current institutional ownership percentages and any cross-holdings post the Dec 2025 5-for-1 split.
Ownership score assumes US-dominated holdings; large non-US sovereign-fund stakes (e.g. Norges Bank) are minor but not fully quantified here.
EU Cloud Sovereignty Framework lens
SEAL targets cloud/hosting providers; ServiceNow is a SaaS workflow vendor, so this is an analogous sovereignty mapping, not a certification.
Strategic
US-headquartered, US-controlled strategic direction; EU is a market and operations region, not a control center.
Legal & jurisdictional
Delaware-incorporated US parent; subject to US law and the CLOUD Act. GDPR/DORA reach only via EU subsidiaries and SCCs.
Data & AI
Real EU data centers and an opt-in CLOUD Act-protected STACKIT sovereign option; but default platform runs under US control with Azure for AI.
Operational
Substantial EU/EMEA workforce and offices (UK, Amsterdam), but executive leadership and operational center are in the US.
Supply chain
Core dependencies (Microsoft Azure, US-based engineering and management) are non-EU; STACKIT mitigates only for opt-in customers.
Technological
Proprietary platform IP owned and developed by the US parent; no EU technological control.
Security & compliance
Strong certifications (ISO 27001, SOC 2/C5 via sovereign partner, DORA-readiness); but compliance does not change US jurisdictional control of the default platform.
Environmental sustainability
Not researched for this profile; ServiceNow publishes ESG reporting but it was outside the sovereignty scope here.
EU alternatives
EU-headquartered and EU-incorporated enterprise software leader, but listed on NYSE too and heavily reliant on US hyperscalers; stronger jurisdictionally than ServiceNow, not a pure sovereign play.
German-listed ITSM / IT service management and workflow vendor; EU-incorporated, EU-controlled and EU-operated — a closer like-for-like sovereign alternative for ITSM workloads.
French-incorporated and EU-operated IT services group offering service-management tooling; EU jurisdiction and control, though financially troubled and less of a packaged-platform match.
How the method works
Methodology v2 (provisional): the score is the midpoint of two axes — Control (who owns and governs the company) and Data (where your data lives and who can reach it). Each axis is scored only on verified evidence; unknowns reduce confidence, never the score. Every input below is sourced; the weights and judgments are open to challenge.
Spotted an error? Every claim is sourced — challenge it and we correct the record.
- 2026-06-12 — Initial golden profile, authored from primary sources (human + AI review).
Report Incorrect Data
Found an error in this company's profile? Help us improve our data by submitting a correction.
Verified 2026-06-12 · Human + AI joint review (sources independently checked) · Methodology