Hello, I would like to build a telephone assistant for a German customer. How familiar is Vapi with the GDPR? By law, I need a a contract to protect myself in Germany, specifically regarding: Technical measures Deletion plan Access controls Storage locations (servers in the EU!)