Data privacy and security

Stub created by Claude - to be written.

Covers: GDPR and EU data handling. Note: EU-hosted infrastructure is a selling point - make it concrete here.