FWIW, this may also mean avoiding US companies altogether -- the CLOUD act (hey, I don't come up with these names...) requires them to surrender data to US auth

FWIW, this may also mean avoiding US companies altogether -- the CLOUD act (hey, I don't come up with these names...) requires them to surrender data to US authorities on subpoena, even if it's hosted on facilities they own outside US territorial boundaries. https://en.wikipedia.org/wiki/CLOUD_Act https://en.wikipedia.org/wiki/CLOUD_Act