Yes. Our EU data centres and internal processes follow GDPR. A Data Processing Agreement (DPA) is available on request.