OVHCloud US is a different company from the rest of the world.

https://blog.ovhcloud.com/cloud-data-act/

The separation is even in the URLs, all the locales are using paths, except the US, which lives under us.ovhcloud.com. All locales use a customer console hosted at ovh.com, except the US, which has it under us.ovhcloud.com.

You can't just spin up an LLC and call it a separate company. OVHCloud is still OVHCloud US' subsidiary company.

From the FAQ page I linked:

> In accordance with our Privacy Policy, OVHcloud will comply with lawful requests from public authorities. Under the CLOUD Act, that could include data stored outside of the United States. OVHcloud will consider the availability of legal mechanisms to quash or modify requests as permitted by the CLOUD Act.

>You can't just spin up an LLC and call it a separate company.

You can actually. Becton Dickson did it and shafted loads of their employees by saying they no longer have pensions with them.

> OVHCloud is still OVHCloud US' subsidiary company.

It’s the other way around.

> From the FAQ page I linked:

Which is for the US company.

Who? You can use Hetzner and OVH proper instead of US subsidiaries. Using AWS/Azure/GC in Europe these days is pretty risky for more than one reason.

I think we'll see a lot of companies moving away from public cloud providers in the future, but I don't think it'll be because of any privacy-related concerns.

It rarely makes economic sense to deploy workloads onto the public cloud unless you have critical uptime requirements or need massive elasticity.

FISA and the Stored Communications Act as modified by the CLOUD Act don't distinguish between (i) parent company overseas + US subsidiary and (ii) parent company in US + foreign subsidiary. In both instances the US asserts personal jurisdiction, extending to wherever the data is stored geographically.

The US has no authority whatsoever over a foreign parent company. The US subsidiary also has no access to "foreign" data.

The US by and large can (and does) assert authority outside of its jurisdiction, from which another country can choose to capitulate.

Most of the time countries do, because they are all swapping data on their citizens between themselves to skirt various laws.

In the case where the US really wants something, and the country won't yield, they'll fund contras or destabilize the government (if small enough to be bullied) or impose sanctions so drastic it's effectively a soft act of war.

This is all to say that, the US has nearly unlimited authority while it stands as the world's defacto superpower.

The unfortunate truth, 300,000 years later and humans still operate on "might makes right" whether militarily, or economically.

If the violent, untrustworthy, Americans choose to go to war with their former allies over some data then that's their choice. Better than just giving these warmongers everything they want.

They can assert what they want, they have no way to enforce it.

Pretty funny you're jumping straight to warfare. This proves why Americans cannot be trusted.

In any case, it's better for me that the Americans will need to start a war with the EU to get at my data instead of just giving it to them.

We agree, I'm not saying anything is good or desirable. Just pointing out, this is how they achieve overreach: coercion.

Exoscale is a European cloud provider with no exposure to the CLOUD Act.

(I work there.)

Possibly only their US subsidiaries though?

I'm guessing: Russia?