GDPR, data residency, sub-processors, retention and deletion, and the data processing agreement that governs all of it.