GDPR
Data protection rights, and how to exercise them here.
This describes how the software behaves today. It has not been reviewed by a lawyer and is not a binding policy yet. Have it reviewed before you take a paying customer.
Access and portability
Settings has an export for your own record, and a workspace-wide export for admins. Both return JSON rather than a PDF, so the data is actually usable.
Erasure
You can delete your account from Settings. Your details are removed and your work stays attributed to a deleted user, so colleagues' records remain intact.
Audit entries recording the deletion are kept. Erasing the proof that an erasure happened would defeat the purpose.
Where data is held
Workspaces on the Enterprise plan can be pinned to a region. A deployment refuses to serve a workspace held in a different region rather than quietly serving it from the wrong place.
Still outstanding
A data processing agreement and a list of sub-processors both need drafting before you sell into the EU. Neither is written yet.