That's not enough if employees under US jurisdiction have access to the servers. Or indeed, if employees under US jurisdiction can order that they be given access. So it boils down to the organization structure, who has final say, and which jurisdiction that person is under - which renders even European daughter companies moot.