An EU server isn't enough. Those EU servers should be operated and maintained by an EU subsidy that licenses the tech from the US company. In other words, even if the US company wanted the data served by the EU company, they couldn't get to it.
It would be quite funny to reply to an NSA request by saying "Oh yeah, I have that data and can access it but its on a server in the EU. I can get it, but I won't."
I genuinely don't know how they would proceed, but it'd be interesting to watch.
Member states have spy agencies, but they also signed treaties to join the EU. Having your spy agency violate international treaties isn’t something most governments allow.
If the company or individual is in a country, expect they can be compelled to hand over everything in their possession by a court order (or it can be siezed).
If the information is stored in a country, expect that the owner of the information can be compelled to hand it over by a court order (or it can be seized).
Well the EU absolutely could do the same thing. If an EU-based company had servers in the US, I would expect the EU could compel them to hand over data despite where the data is stored.
I misspoke there, I was meaning Europe and shouldn't have put EU.
Agreed, the union doesn't have any enforcement mechanism I'm aware of that would fit, but any country in Europe could do a similar thing to companies based in their borders.
Posthog has had an EU server for years. I'm not sure what you mean by this.