EU hosting and GDPR

Privacy and data protection are a core requirement for a retro tool, where teams often share honest and sometimes sensitive feedback. That's why Retrospective Lab is deliberately built and hosted in the EU.

Data in the EU

All data — boards, accounts, team health results — is stored with EU-based hosting providers. There is no structural storage outside the EU.

GDPR compliant

Retrospective Lab is designed in line with the GDPR: data minimization, encrypted storage and connections, and clear retention periods. See also exporting or deleting your data for how you stay in control of your own data.

Subprocessors

For underlying services (such as hosting, email and payments) we only work with subprocessors that themselves operate within the EU or offer adequate guarantees.

Data processing agreement (DPA)

Working for an organization that needs a data processing agreement (DPA)? Get in touch via /contact — we're happy to send it over, including the list of subprocessors.

Want to know more about anonymity within boards? See anonymity and safety.