The US CLOUD Act explicitly asserts jurisdiction over data controlled by US companies regardless of the physical server location. So relying on AWS Frankfurt doesn't actually protect the data from US warrants if the provider is a US entity.