Planio is and will be compliant with all applicable legislature, specifically the GDPR taking effect on may 25th 2018. There's a few favourable specifics at Planio compared to other companies:
Planio GmbH is founder-owned and based in Germany. This means we do not have external investors influencing decisions in the company, nor is our business model geared on rapid growth and an early exit. Our growth is exclusively funded from previous earnings and our strategy is centered on stable and long-term service.
Planio and all associated data is hosted on our own servers located in Germany. Part of our company philosophy is to strictly avoid the use of Cloud servers for our customer's data. The location of servers housing our customer's data is furthermore part of our ToS (section 4.4).
Our servers are hosted at 2 well-known data centres operating and certified in accordance to ISO/IEC 27001:2013, offering industry standard physical access control, redundant uplinks, fire safety, emergency power, etc.
We have collected some more information about this on our data protection web site.
If you are using Planio to manage personal data, please check with your legal advisor if you need to sign a data processing agreement. If you do, you can simply use our online tool to sign one. Annex 1 of said data processing agreement documents the technical and organisational measures Planio GmbH undertakes for the collection, processing and usage of personal customer data.