In which country are the data centers hosting Nephele located, and what are the export control law ramifications?

The data centers are located in the US. Export control laws are per those that apply to Orion. Specifically:

The encryption software used by Orion is not subject to export control laws per U.S. Department of Commerce Bureau of Industry and Security’s Export Administration Regulations publication “Commerce Control List Category 5 – Information Security” published March 5, 2003. Per the applicable ECCN 5D992, Orion is exempt because of its use of encryption exclusively for the purpose of software copy protection. A license is currently required for export to Sudan, Syria and North Korea, and special steps are required for export to Cuba, Iraq and Rwanda. This list may change over time. There are no restrictions, licenses or special procedures required for you to export Agilis’s products to any other country. For further details, please click here and also see the complete description of export regulations.