>very doable with <US company>

for anyone not US-based, this company is hostile and you have to assume the US government can and will force them to give access to your data.