Your fancy view of the world is not as fancy as you think and your aggressive, disrespectful rhetoric is doing you a disservice.

The measures you've enumerated (EU zones, encryption, etc) are mitigations for working with a potentially compromised vendor and should be done anyway. Not using the vendor is such a blindingly obvious countermeasure that one has to be either unprofessional or have a hidden interest to dismiss out of hand.

> there is such a huge separation in access and rigour around governance that there is no way anyone within Amazon can simply login and see your data even if unencrypted.

I personally choose not to believe a company which puts on its board of directors a well-known perjurer [1].

[1] https://www.theguardian.com/commentisfree/2013/sep/25/nsa-re...

Don't forget the mass surveillance of his old job. Even if he didn't lie, you might want to think of hiring him for your cloud services.

Which companies do you believe?

We were talking about Amazon here, that discussion probably merits another thread. But yes, I do believe more in companies that don’t bring in ex-government crooks on their board of directors.

>Your data will stay in Germany unless you specifically decide to move it elsewhere.

Prove it

Also, what happens if you find a leak? Or that it has been moved somewhere else?

They say "We are sorry", give you some free credit, and that's it ?

No, that won't happen.

"Sorry not sorry" and no credit.

How do you prove that a german company does not have secret data sharing agreements? Think cryptoAG.

I think its much more likely that an American company with a former NSA head as a board member is much more likely to have an agreement like that, personally.

The arrangements brought to light through amongst others the Snowdon files did involve extremely few people at huge companies. We are talking a literal hand full, not '25.000'. Are you really suggesting there are no three letter acronym operators embedded into the large US tech companies? Modern US systemic tech industrial espionage was brought to light as far back as Echelon. so deriding people who are cautious about it as 'flat earthers' seems disingenuous.

> You think that 25,000+ employees that work at AWS have somehow been silenced into some grand conspiracy?

You seem to suggest that every single employee that works at AWS is aware of everything that goes on with the company.

Isn't just possible that despite of what we know about the architecture, this might not be the whole truth and concerns about involuntary inter region transfers might just be warranted?

Your innocence is quite charming, specially in a post-snowden world

My bigger worry would be continued data access. So even if the data is in Germany, access to it is still controlled by an US entity, which can be forced by the US government to shut off access. Given that the current administration seems to enact embargos on a whim, this doesn't seem too unlikely.

In my limited experience, Germans are more sensitive to personal privacy than other Europeans, even the rest of the world. To non-Germans they might seem paranoid. Maybe we can all learn from their historical mistake.

The problem I see with the DIY-attitude is that security is easy to get wrong and is moving target. The other opinion here is "keep it in the country". If someone really wants your data, the locale won't save you. And yet, if there is a breach, I could see an foreign company like AWS trying to hush it, where a German company would make a bigger fuss (diplomatic issue).

Hmm, mumble mumble mirrored switch port in the exchange mumble mumble mumble...