Hello NCB Team,

I saw your other GDPR-related answers, however I still wanted to ask current status:

1] EU-only data residency: Since you mentioned that EU-only residency is not currently guaranteed, is this planned, and do you have an estimated timeline?
Subprocessors: Is the public subprocessor list now available? If not, when do you expect to publish it?

2] Backups after deletion: You mentioned a limited retention period for encrypted backups — what is the exact number of days?

3] GDPR roadmap: Which GDPR/security items are still pending, and what is the current priority/timeline for them?

Thanks!