Microsoft hands BitLocker encryption keys to authorities with warrants—about 20 requests annually. This isn't a breach. It's by design.
When keys sit in someone else's cloud, you're not in control. A third party decides who gets access, under foreign jurisdiction.
For NIS2 and GDPR compliance: Who controls your keys? Where are they stored? Which jurisdiction governs access?
European infrastructure. Your keys, your control.
