Critical EU data stays in the EU and is handled by citizens of EU even if the company running the services is US based.
Using Microsoft as an example, The EU Data Boundary https://learn.microsoft.com/en-us/privacy/eudb/eu-data-boundary-learn?culture=en-us&country=us
