Timbr is a virtual layer that does not store, move, or replicate data, so it does not create new data residency or processing obligations under GDPR. Compliance depends on the configuration of the underlying database and how your organization manages data access and governance. For specific GDPR requirements, contact us to discuss your setup.