What is the US CLOUD Act, and does it affect data stored in the EU?
It is a US law, and yes, it can reach data stored in the EU. With a warrant or similar order, US authorities can require service providers under US jurisdiction to disclose data in their possession, custody or control, even when it is stored outside the US. That is why storing data in an EU data centre does not by itself settle the question: what matters is whether the company that controls the data, or its parent, is subject to US jurisdiction. Providers can challenge some orders, and EU law limits when a European company may hand data to a foreign authority, so the result is a legal conflict rather than automatic access. Encryption with keys the provider cannot use reduces what could be disclosed. For each vendor, ask who controls the data and its keys and which companies in the chain are US-based. NetSenX is operated by a Spanish company and stores customer data in the EU, but its data processing agreement lists some US-incorporated sub-processors. If you need to rule that out entirely, the on-premises option on the Enterprise plan keeps the data on your own systems.
General information, not legal advice. National laws can add to the EU texts quoted here, for example deadlines, forms or reporting channels: check your own country's rules.