CRYPTEE is fully committed to EU GDPR.<br> <br> Based on Article 25 and Recital 78, the Service fits into the category of "Data protection by design and by default", by allowing only the users themselves to hold decryption keys, and not having access to the users' unencrypted information.