There are some indications that this may soon no longer be sufficient.
It is US company. Does not matter where server resides. If server is in EU but under US jurisdiction (US company) that can be (needs checking) treated as International Data Transfer.