You're right, I did a bit of a mic mac there.

They are still not compliant with Safe Harbor in the US. Anyway since our company is located in France, the french privacy law allow us to use a hosting located in EU (instead of a US SafeHarbor one). Heroku did the EU launch just for this.