I've struggled with this as well. In one case, we have a vendor that is head quartered in Australia, but all billing and contracts use their US office, and none of the services are delivered outside the US. Because the contract is with the US division of the company, I believe they must comply with all US regulations, so for all practical purposes, they are a US company.
Darrell Bateman | SVP - Chief Information Security OfficerCity BankMember FDIC | Equal Housing LenderConfidentiality Notice: This message may contain confidential and/or privileged information. If you are not the addressee or authorized to receive this for the addressee, you must not use, copy, disclose, or take any action based on this message or any information herein. If you have received this message in error, please delete this message immediately and advise the sender that you have received this message in error by reply e-mail or by calling 1-800-687-2265. Thank you for your cooperation.