It's not about "attackers". In the UK, we have data protection and financial services regulations to adhere to which clearly state where the data must reside.

It's not about "attackers". In the UK, we have data protection and financial services regulations to adhere to which clearly state where the data must reside. That means we legally can't keep our data offshore in certain industry sectors and applications. Some "cloudy" providers help us with geographical affinity (Azure and AWS for example) but Google Docs is a big bag of mud with everything stored "somewhere" so it's useless.