We create separate instance for every customer. Our data policy is GDPR and ISO 27001 compliant.