Are you updated with the latest information - there is a new expert review in a running case at the court. Microsoft, Amazon a.s.o. are not longer compatible with GDPR (EU DSGVO), even when they are hosting the information outside the US (and inside the EU) and even if they are using a subcompany in Europe.
This will become very important, because if the court will decide in this way, i.e. office365 is not longer allowed inside the EU to be used.
Comments
https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/accountability-and-governance/data-protection-impact-assessments/