[devopsproject]

I'd imagine it is similar to them establishing a branch in the US. The business and the citizens would be governed according to the host countries laws.

The app seems to control door access and it presumably knows email, bank information, possible gps\location data, about its users so I may not be too difficult to ID a perp.

Doubt the police would get involved for small amounts but it likely depends on the precinct.