Have questions about GDPR

When domain is hosted in US, company is from EU, that still managed backup will be store in US? And, if I want to use Google Analytics or Mailchimp e.g. according to GDPR legislation you need to sign a contract with the third party that states certain things. Like compliance with GDPR rules of that third party. Do you (WPMU DEV) have any such contracts prepared by any chance?