[dmoy]

I guess GP didn't provide enough info, but to me it looked like it was the underlying infra that is networked

That is I'm assuming:

1. Customers are meatspace only, never use any computer interface 2. The network access is for administration only 3. That administration is exclusively in the US

[Dylan16807]

That's the most obvious answer but if that's the case then restricting to "US" is way too wide in the general case and also too narrow if an employee takes a trip to another country and tries to check in. That simple task is fundamentally flawed to the point it's not worth worrying about.