[openplatypus]

As a US subsidiary, you still fall under FISA and therefore you fail adequate protection of Personal Data.

Encryption does not protect data at runtime. Otherwise AWS is just glorified backup storage of e2ee data.

[mox1]

On paper (aka the laws of the United State) FISA applies to things that physically reside in the US.

"The FISA Court’s only jurisdiction is “to hear applications for and grant orders approving electronic surveillance anywhere within the United States.” 50 U.S.C. § 1803 (a) (1)."