I work on software that is a project of an encrypted cloud, created to protect users privacy.
We use a javascript crypto library called SJCL.
Only the user has the decryption key. That means only the user will be able to access his files. Not even our team will be able to see what's going on in the user's space and we can’t get the user's decryption key.
Is the legislation of country where servers are located prevail over legislation of country where company is registered?
Can we launch our software in Estonia or Lithuania (servers + company)?