The CLOUD Act doesn't care which EU region you picked

Here's an uncomfortable fact for anyone running IT at a law firm or accountancy practice: choosing the EU data region in Microsoft 365 or Google Workspace does not change which country's courts can compel disclosure of your data. That's not a config setting you can fix. It's jurisdiction, and it follows the company, not the server rack.

If you're the person who gets asked "where does our data actually sit, and under which law" by a partner or a client's privacy officer, this one's for you.

The problem: location vs jurisdiction

Microsoft Corporation and Google LLC are US entities. Doesn't matter if the disk is in Dublin or Frankfurt.…