Data residency blocks a signed-off deal

You are

Enterprise account director

The business

US analytics software, yearly subscription, about €400k a year

The buyer

Chief Information Officer, with the data protection officer and works council involved

What's at stake

Your biggest deal this year. Signature is planned for quarter end.

The CIO has approved a three-year platform contract. In the final review, the data protection officer asks where customer records will be stored and processed. Your platform is hosted only in the United States, and your standard terms say nothing about European data transfer rules.

What do you do?