The very short version: it is madness to continue transferring the running of European societies and governments to American clouds. Not only is it a terrible idea given the kind of things the “King of America” keeps saying, the legal sophistry used to justify such transfers, like the nonsense lette...
Why would anyone think storing any amount of a nations data or services in a foreign country was safe. No if you want that data/service to be safe and private, then no, that would never ever be a safe option.
storing any amount of a nations data or services in a foreign country was safe. No
One of my jobs brushes up against gov stuff. Private-possum, not secret-squirrel info. They're completely explaining it away like "yeah, we see how it feels ooky, but we had someone say it's all good, so we're putting all your PII into Azure" and that's almost the statement. It's like painting a stick of dynamite green and giving it to kids to play with.
We need to ask the data sovereignty question a LOT when suits are in front of microphones.
That antivirus software you and your gov installed on every machine out there, that scans every file when it's closed, to "ensure it's not carrying a virus." That one.
Who makes it? In America, you say?
No, not Defender; but let's talk about that too. Who makes the OS and crucial apps your local council uses? Muni, Region, Federal -- all Microsoft, Splunk, Solarwinds (even after they were super-pwned), Checkpoint, Office, Azure. All American? Really?
If we put TP-Link and RedFlag Linux and Kaspersky and Huawei on do-not-buy lists for privacy and espionage concerns, tell me how we're reacting to the risky new path of the US government and its Krasnov operative.
I agree that recent events have made it unsafe to host anything on a US company's cloud server.
But I disagree that recent events are the biggest reason not to host anything on Google, AWS, or Microsoft servers. You should have gotten away from them long ago.
While I agree, open source technology hadn't yet fully matured when the NSA leaks first dropped. Something like Owncloud had only recently launched back then.
The time to develop sovereign digital infrastructure was like a decade ago. Better late than never I guess. Good news is that the only way Europe can do this is by leveraging open source, so maybe we'll see more support for that going forward.
Probably Hetzner. I'd still try for OVH as it's separate from CLOUD-act risk (by running its ovh.us as a distinct org, so avoid them but use the rest in relative safety) and it may be cheaper/better given your particular needs and tolerance.