EU data residency isn't about where the server sits

The question isn't where the server sits. It's which jurisdiction the parent company falls under.

EU-hosted data from a US SaaS provider is still reachable under the CLOUD Act and FISA Section 702. The "Frankfurt data center" checkbox addresses the symptom, not the cause.

This was the starting point for building Cadensa — and what I wrote about on Dev.to. The article covers the technical decisions that followed: why database-level multi-tenancy makes the compliance story cleaner, what "delete my account" actually requires across multiple databases, and why we store hashed emails at the global layer.

GDPR compliance isn't something you layer on after the fact. That's the point I wanted to make concrete.

https://dev.to/cadensa/why-we-built-eu-native-time-tracking-and-what-schrems-ii-has-to-do-with-it-2e7o

Curious whether others building for the EU market frame this differently — or whether prospects are even asking about it yet.