We take data privacy extremely seriously and adopt many measures to minimise the risks. GemmaCert cloud-based servers are hosted by AWS, which complies with ISO 27018, a code of practice that focuses on protection of personal data in the cloud. AWS is also compliant with the European Union’s General Data Protection Regulation (GDPR).