It's a very interesting trade off one faces. On the one hand I'm very concerned with hosting anything in the cloud, especially with U.S. based companies because

It's a very interesting trade off one faces. On the one hand I'm very concerned with hosting anything in the cloud, especially with U.S. based companies because +3-letter agency here+ (especially for ERP software). But on the other hand the realistic view has to be that my self hosted stack is likely way more insecure than any cloud stack even if I made a conscious afford to keep everything secure (and that's probably also true for companies with a decent number of dedicated IT security experts) so 3-letter agancy would have an easier time getting to the data if they wanted.