Comment by traceroute66

> For my companies purposes US contract law is risk mitigating enough.

Where I work, its quite the opposite.

US exposure is deemed a risk in itself. CLOUD act, PATRIOT act and then the general political situation in the US.

We and many others I know have been working hard to minimize US exposure to the maximum extent possible because the US risk has gone from theoretical to actual.