Notes on business management software (ERP and CRM: sales, accounting, stock, HR and so on) for small and medium-sized organisations. With these tools, sovereignty questions come down to who hosts your business records, where, and whether you could run the software yourself. This page currently covers Odoo.
How we describe providers
We summarise what each provider is, where it is based and who owns it, what it says about sovereignty, and what you should check yourself. Claims are labelled [law], [government statement], [press report] or [vendor claim], and vendor claims are written as “X says…”. These are notes, not endorsements or rankings.
On the US CLOUD Act: the law lets US authorities require providers subject to US jurisdiction to disclose data in their “possession, custody, or control”, wherever it is stored [law]. A non-US company with no US presence is generally outside its direct reach. Exposure can still come through US subsidiaries or offices, a US parent company, US sub-processors, and your own choices (for example, picking a US region or a US-owned host). So the jurisdiction of the company usually matters more than where the data sits. We don’t describe any provider as “immune”.
Facts were checked against providers’ own pages, filings or reliable reporting on the date below. Figures and ownership change. If you spot an error, please tell me.
Last checked: 28 September 2026.
