I know this is why I use Wunderlist (Berlin), rather than RTM or Things or similar (USA) - I'm more comfortable under their local privacy obligations. (In reality I don't know how much difference it makes?)
Interesting. Amazon AWS in Europe is hosted all over Europe, e. g. Ireland etc. They should comply to EU privacy laws, but not necessarily to Germany's privacy laws. Difficult.
Like any other company operating in Europe, they're subject to punishment if they're violating EU privacy regulations. That US law obliges them to do so is no defence.
Sure, they are between a rock and a hard place in that respect. But that doesn't help you if you want to push your data somewhere out of access from the US. The company in question has to comply to the requests just as they do in the US, fine or not.
1. Is their team capable of securing their environment and releasing code that isn't vulnerable to data theft attacks?
2. Do they also store all their customers' information in Germany or is it on some US-based servers?