"No, I cannot guarantee it." That's Microsoft's Chief Legal Officer speaking at the French Senate. This was the response when asked if he could guarantee that data on French citizens will not be transmitted to the US without French government consent. Not a leak. Not a whistleblower. A named executive, under parliamentary questioning, on the record. The reason isn't negligence. It's structural. The US CLOUD Act compels American companies to hand over data on request, regardless of where the data is stored, and regardless of what European law says about it. A data centre in Paris with a Microsoft nameplate doesn't change that. Neither does a sovereignty addendum to any enterprise agreement. The answer isn't a better contract. It's infrastructure that isn't subject to that jurisdiction in the first place.