Vtiger has an in-house database that is stored on servers located in Chicago. They are fully GDPR compliant and ensure that all your data stays safe by adopting a number of security measures.