I have a business based in Romania and I am about to launch an iOS mobile application that will be available all over the world. The application will communicate with a backend server, which is used to process and store data, including PII (email, name, date of birth, gender, location, and maybe more in the future).
My target audience lives mainly in the US (specifically NYC), reason why I want to create the server in that region, for better performance, but I have read that storing EU data on US servers is no longer compliant with GDPR. For reference, I use DigitalOcean droplets, if you are familiar with them.
I don't want to limit the accessibility only to US users, as some European users may still sign up. Having the server hosted in EU is also not a good option, as the latency for US users would be too high, and the user base will be mainly from US.
I was thinking about how other businesses handle this situation. Having separate databases which handle PIIs from different regions is not applicable in my situation, as the application is similar to a social network and the latency problem would not be solved in this way.