Depends on the terms and guarantees, and so far both o365 and especially google workspaces have been reluctant to offer proof that there is no way for the US he

Depends on the terms and guarantees, and so far both o365 and especially google workspaces have been reluctant to offer proof that there is no way for the US headquarter to access data stored on Europeans citizens. MS had a German cloud region operated in a way that was designed to look independent of the US Headquarter but somehow that got rolled back into the global azure operations structure after a few years. And while there is talk about trying something similar again but nobody can tell if that will be accepted as separate enough or how long it will be before those boundaries are crossed anyway. For public funded institutions depending on any kind of user accept as a prereq for any service is extremely problematic so none of the workaround that have been used by businesses to bypass the lack of a valid "safe harbour agreement" so any solution put in place have to be designed in a way that don't require any "consent to data transfer"