GoRetro is GDPR, SOC 2 Type 2 compliant and is hosted on Firebase, which is part of Google Cloud Platform. Their data is hosted in US Central.

TeamRetro, its alternative, is also Soc 2 Type 2 and GDPR compliant and can be hosted in either the US or the EU which makes it well-suited for teams with strict IT or compliance requirements. Detailed information can be found here.