Procurement asked where your data is stored. Here is how to actually answer
“Our servers are in the EU” is not an answer to the question a compliance reviewer is asking. Here is the difference between where data sits, who owns the machine, and who can reach it.