Compliance narrative Detail GDPR-aligned storage locations, encryption policies, and anonymization methods.