dgbizzQ: GDPR Update needed: EU Residency, Subprocessors, Backup Retention & Roadmap
Hello NCB Team,
I saw your other GDPR-related answers, however I still wanted to ask current status:
1] EU-only data residency: Since you mentioned that EU-only residency is not currently guaranteed, is this planned, and do you have an estimated timeline?
Subprocessors: Is the public subprocessor list now available? If not, when do you expect to publish it?
2] Backups after deletion: You mentioned a limited retention period for encrypted backups — what is the exact number of days?
3] GDPR roadmap: Which GDPR/security items are still pending, and what is the current priority/timeline for them?
Thanks!
Riya_NoCodeBackend
Jun 18, 2026A: Thank you for the follow-up questions.
1. EU-only Data Residency & Subprocessors
EU-only data residency: At present, we do not guarantee EU-only data residency. This is something we are evaluating based on customer demand and our broader infrastructure roadmap, but we do not have a committed timeline to share at this time.
Subprocessors: We are currently working on publishing a public subprocessor list to improve transparency around our service providers and infrastructure partners. While this is planned, we do not yet have a confirmed publication date.
2. Backup Retention After Deletion
When customer data is deleted, it is removed from active systems. Encrypted backups may continue to exist for a limited retention period before being automatically purged. Our current backup retention period is 7 days.
3. GDPR & Security Roadmap
Our current priorities include:
Publishing a public subprocessor list.
Improving compliance documentation and transparency resources.
Evaluating regional data residency options, including potential EU-focused hosting capabilities.
Continuing to strengthen security controls, monitoring, and operational processes.
As a small and growing platform, we prioritize initiatives based on customer demand, security impact, and available resources. While we are actively working on these areas, we do not currently have committed public timelines for all roadmap items.
We will continue to share updates as these initiatives progress.
I'm also interested, I'm a level 4 user, if you became GDPR compliant I would upgrade to level 5