Hey Josef,
I’m based in the UK. One of the sites I built for a property lawyer recently are quite happy that the site is GDPR compliant. It was checked by their governing body too (bigger lawyers). I’m quite happy that Webflow is GDPR compliant for clients and so are they.
Obviously it’s down to your own due diligence and preference. If you think you would be providing your clients with a non-GDPR compliant site then of course you wouldn’t proceed, and definitely worth letting the team know where you think it falls short, they’re always open to feedback.
However, this is an official source for GDPR and I would avoid reading topics posted by “experts” whose main aim is to scaremonger consumers into taking unnecessary steps that make them money.
I would be genuinely interested to know your source for not hosting on a US based server and what big companies it’s a no-no for and why.