Blockquote Hi all,
call it paranoid, but I’m a little worried. EU news are more and more talking about a potential end of the data privacy framework when it comes to the current US Administration :frowning: If the EU decides that personal data are not longer “safe” when the contractor or hosting is in the US it will be a huge problem for a lot of bubble-users, incl me. A lot of US companies already have a subsidery in europe for legal reasons and at least one server in the EU. I know that its possible to get the dedicated server hosted in the EU. But the costs for that are extremly high. (compared to my current usage of 4 growth planes + workload addons). And that doesnt solve that fact, that bubble io is a US company. How do other bubble users deal with that? Wait until the EU do a decision on that? Taking in on the own risk? Migrating to an alternative platform?
I tried many other solutions, but all of them are not good as bubble. So I really want to stay with it. I’ve to be prepared as my business depends on the bubble apps. And how about them applying Cloud-Based MFA Service for better protection?

You’re definitely not alone in this concern. The uncertainty around data privacy frameworks between the EU and the US has been a recurring issue, and if another invalidation happens, it could create major challenges for businesses relying on US-based platforms like Bubble.

At the moment, many businesses are in a “wait and see” mode, but it’s smart to start evaluating contingency plans. Some options to consider:

  1. Monitor legal developments closely – The EU could introduce alternative agreements or transitional periods, giving companies time to adapt.
  2. Explore EU-based hosting – Yes, it’s more expensive, but some managed hosting providers specialize in GDPR-compliant setups, potentially lowering costs in the long run.
  3. Talk to Bubble – They may provide solutions like an EU subsidiary or region-specific hosting if demand is high enough.
  4. Assess your data exposure – If your app processes sensitive personal data, the risk is higher. If it mainly handles non-personal data, the impact may be less severe.

For now, staying informed and having a potential backup plan in place is your best bet. Many companies faced similar issues with Schrems II, and some platforms adapted accordingly. Hopefully, Bubble will too.