The GDPR framework applies to the member states of the EU and UK, EFTA (European Free Trade Association: Iceland, Switzerland, Norway, and Liechtenstein), as well as the regulations in the USA. Depending on your location there are considerable differences between the regulation. TimeMoto explicitly separates the servers in the US and the EU to conform to these differences. Please see our Data Processing Agreement, and consult your HR Manager / legal advisor, in case you are not sure about your regional regulations.