Retrium has taken some measures for the security of the app and data protection. Data is stored on servers in the USA. While Retrium is also GDPR compliant under European law, you may have to sign a DPA that allows Retrium to store your company and meeting data in the US. (https://www.retrium.com/gdpr). A full overview of security, privacy and data protection measures can be found on the company’s website.
TeamRetro is Soc2 Type 2 and GDPR compliant and can be hosted in either the US or the EU. Detailed information can be found here.