Thanks Korgen, that is very helpful. I think that's mostly okay for 99% of the cases, but I'm still unsure about the case where you build an app for doctors/lawyers in Germany where section 203 (professional secrets) states that subcontractors must be contractually bound to secrecy. So if my app uses an LLM hosted in AWS, it sounds like we need AWS to be contractually bound to secrecy under ยง 203 StGB?