Yes. I've never understood this whole "don't host in the US or the NSA will spy on you"...uh, that might be true, but at least on paper there are protections.
An EU subsidiary of a US company is fully legal fair game for every 3 letter agency.
The US Cloud act requires companies to open their platform for the intelligence agencies. We are not talking about hacking, they are required by law to provide access.