Aunetic is ISO 27001 certified and fully GDPR compliant. EE also keeps complete audit trails. For SaaS, the data center we host in is certified to ISAE 3402 Type 2 and PCI-DSS. SaaS offers 99 percent availability, defined RPO and RTO values, and annual penetration tests. Optional add-ons include database encryption (AES-256), IP whitelisting, antivirus service, and quarterly SLA reporting to support DORA.