Yes, on all three. Client data is end-to-end encrypted at rest and in transit, stored in EU data centers, and we sign a Data Processing Agreement on request. We've been audited for KVKK and GDPR; HIPAA-compliant plans are available for US practitioners on Pro.
