Comment by Terr_

> stored exclusively in

Now I'm thinking about legal/contractual rules that might force that kind of geographic risk.

I mean, logically you could have the Allowable Location send pre-encrypted backups to anywhere in the world, except (A) laws and regulations aren't always logical and (B) you still have the problem of keeping the decryption keys somewhere safe without leaving the key jurisdiction.