In the first case I would set up a "append only" system where you cannot delete anything, just append information. This could simply be a incremental backup system.

Have it managed by someone outside your country, you would just be a user.

In that case if they grab everything they cannot delete what you have there, and the cannot access it as administrator either.

If you want to protect from the second case, its gets much more complicated.

You need to encrypt the systems that hold the data and make it so that the encryption key is wiped from the systems if they are in a panic state. This can go as far as you want: no more Internet (the machine was disconnected), or the trigger on the door of your basement starts a countdown of a few seconds you can only stop by logging in - otherwise the system shuts down (or better, cuts the power).

An extra complication is if you fear that you can be forced to provide decryption keys. In such a case you could either go for dynamic keys that are provided to you by someone else outside your country, though a process that ensures that you are safe.