Hey @Malene_Raundahl, and welcome to the forum!
Just double checking if had stumbled upon these two pages:
From a quick read:
- Data storage is always in the US
- The DPA establishes Controllers and Processors of data as per GDPR estipulations
Hope these docs are helpful!