A friend of mine works as IT person for a German government agency, a small one. They used a company that did the same at Sitecore, switching to cloud hosted models. Now, they say that you can have all the data stored on a serve in Germany, which is a requirement as it's sensitive data. The department was about to sign that deal, when my friend had them read the fine print - all data would be processed through AWS in the US. Stored on a German server, but the active cache was in the US.
He got them to switch to an open source alternative. Which he tailors to their needs so well that the department is telling other department about it.