Pick a provider, like OVH or Scaleway for a S3-compatible or Swift offer.
Ensure it's replicated across regions.

Constraints

• Configure through salt-cloud or Terraform object storage.
• The backups are encrypted payload.
• Replication possibilities are limited to EEA zone (currently EU countries + Norway, Iceland, and Liechtenstein).

General privacy policy states:

Location. Your data is stored securely on Nasqueron infrastructure, hosted in datacenters in the EEA zone. Data doesn't leave the EEA zone.