Thanks for bringing this up @qsys 🙂 Let me just clarify a few things. Most importantly, Graphcool will comply with the new GDPR regulation. We currently have 3 data regions - one in EU, and two regions currently in beta (US and Japan.) You are in full control over in what region your data is stored and processed. As you mention there are other aspects to the new regulation, and as we approach May 2018 we will provide a detailed guide to how you can use Graphcool in a compliant way. If you happen to be in Berlin, come say hi at the next meetup https://www.meetup.com/graphql-berlin/