An EU region is not an EU company.
US law follows the company, not the server, and remote access from the US is still a transfer. Torii is EU-owned and EU-hosted, with a public sub-processor list.
A US provider’s EU region may keep data in Europe, but the provider remains subject to US law and EU–US transfer frameworks. Torii is a Danish company operating in the EU under EU law.
2015
The first EU–US transfer framework falls (Schrems I).
2020
Its successor falls too (Schrems II).
2023
The Data Privacy Framework is adopted.
Today
Already challenged before the EU Court of Justice.
Torii doesn’t need a transfer mechanism. Your users’ data is stored by an EU company, in the EU, under EU law. There is no bridge to defend.
US law follows the company, not the server, and remote access from the US is still a transfer. Torii is EU-owned and EU-hosted, with a public sub-processor list.
Torii is a Danish company under EU law. Compliance isn’t a feature we sell; it’s our own liability.