Generally, if in the same country you’d have to comply. As another example though: If your server was in Canada, and some department in Alabama wanted your data, you could tell them to pound sand. Though they may put some sort of warrant out for you for failure to comply (doesn’t matter though if you never go there)

I’ve been happy with Bitwarden thus far. Used Lastpass back in the day, but migrated over when the renewal prices started creeping up.

Same. I know it’s more work than caddy etc, but I’ve been doing it for eons now so it’s muscle memory at this point.