Hi Igor, from my understanding, if you run Phoenix fully locally and ensure that no personal data leaves your environment, your deployment can be operated in a GDPR-compliant way, but the product itself is not a certified data processor.
🔒[private user] are you able to answer in better depth?