Is On the Button GDPR Compliant?

Absolutely. On the Button follows UK data protection laws, including GDPR, and is designed to protect sensitive information.

• Encryption in transit (TLS 1.2+) and at rest (AES-256)
• UK hosting on Microsoft Azure
• Role-based access controls, multi-factor authentication, and automatic session timeouts
• Twilio used for secure SMS login prompts that do not contain personal data
• If a data breach ever occurred, we would inform you within 24 hours

Your data belongs to you, and you remain in control at all times.