GDPR-compliant file transfer, hosted in the EU
Send personal data without letting anyone else read it.
When you send personal data, the GDPR asks who else can read it on the way. With GCN.ONE, files are encrypted on your device before upload and the key never reaches our servers, so we hold only data we cannot read. It is stored on European infrastructure under EU law and deleted when the transfer expires.
File transfer built for the GDPR
We cannot read your files
Hosted in Europe
Records you can show
What your data protection officer will ask
An Article 28 data processing agreement is available from your account or on request. Affected users and supervisory authorities are notified within 72 hours of a breach, in line with GDPR Articles 33 and 34.
Storage limitation is built in: you set when each transfer expires, and the encrypted data is then permanently deleted. No archive, no backup, no residual copy.