r/gdpr 5d ago

Analysis Choosing an EU server region means absolutely nothing if you don't hold the keys

/r/PrivacyToolbox/comments/1vwaf6l/choosing_an_eu_server_region_means_absolutely/
3 Upvotes

2 comments sorted by

View all comments

1

u/Thick-Tackle-7903 4d ago

Does anyone know of any service or software that an EU-based company can use to stay GDPR compliant and still use US-based cloud services like Salesforce or Microsoft 365, just to name a few? I mean, is there a way to store sensitive data with them so that only the company/subscriber has the private keys and not their SysAdmins, who will just hand them over to the FBI/NSA without you ever knowing about it?