Comment by q-base

I think it depends on how you read the Schrems II ruling and how you read Hetzners words.

Any of the big cloud providers can claim that they comply with EU legislation, but they also have to comply with US-legislation and if 3-letter agency wants to have some data from one of their subsidiaries in EU, then they can/will decide which contract to breach.

I read Hetzners statements as being that they can no longer guarantee that they will not be forced to do the same - but that can be my reading of their statement that is wrong.

If I already had them as hosting-partner for a solution that fell under Schrems II, I would have them confirm this, to be sure.