This is the part that gets skipped and it deserves the emphasis. Check where the company is incorporated, who owns it, and whether it has a subsidiary somewhere that changes the answer. A flag on a status page is marketing.
Second thing worth checking: where the encryption keys are. A provider holding keys can be compelled regardless of geography. One that cannot read your data has a much shorter answer to give, and that is a stronger property than any location.