Any recommendation for data security?

Hi there,

I have these challenges:

- customers in France don't want that Non EU people access the data
- same for the opposite

I've tried to set up territories based on the account location.

BUT

- it looks like it doesn't prevent someone from USA territory to see accounts based in EU. Did I make something wrong?

- it doesn't apply to leads.

Any recommendation for me to technically implement this security?

Thanks,

Tony