I am curious as to how the choice of Microsoft as a provider was nevertheless made. So I made a FOIA request, which came back today:
https://www.asktheeu.org/request/security_risks_associated_to_the
The result is inconclusive: DIGIT does not have the information. "the European Commission limits its cloud services to be operated within the EU by general principle" (but then Microsoft is considered Irish 🤦♂️ ), "adheres to binding public procurement rules when contracting cloud providers", etc.
2/n
GNU social JP is a social network, courtesy of GNU social JP管理人. It runs on GNU social, version 2.0.2-dev, available under the GNU Affero General Public License.
All GNU social JP content and data are available under the Creative Commons Attribution 3.0 license.