# GDPR Compliance

Learn how FusionAuth approaches GDPR compliance.

> For the index of this section of the site, see [llms.txt](https://4002.18-224-161-104.sslip.io/docs/llms.txt)

FusionAuth is designed with GDPR compliance in mind, incorporating essential features to protect user data and privacy. This guide outlines the key aspects of FusionAuth's GDPR compliance and how it helps your application meet regulatory requirements.

## Core Compliance Features

FusionAuth offers several built-in features that support GDPR compliance:

### Data Protection

FusionAuth employs strict server security, firewalls, and encryption to protect hosted customer data1.

### Data Isolation

As a single-tenant solution, FusionAuth ensures:

*   User data is not co-mingled with other companies
*   Data can be hosted in specific countries as required
*   Data Retrieval and Deletion

FusionAuth provides APIs for:

*   Collecting all stored user data, including custom data
*   Deleting all user data, including behavioral data like IP addresses and login timestamps

With the appropriate license, FusionAuth provides a user accessible UI for collecting and modifying all stored user data, including custom data.

### User Data Pseudonymization

FusionAuth uses opaque tokens and complex user IDs to pseudonymize user data, making it difficult to match IDs to user data without database access.

### Password Security

FusionAuth includes:

*   Customizable password rules to ensure compliance with NIST regulations
*   Configurable password hashing algorithms, including BYO algorithm
*   Ability to upgrade hashing algorithms during user login

### Breach Notification

FusionAuth maintains a strict breach notification policy, aiming to notify customers of any breach or suspected breach within 24 hours.

## Implementation Benefits

By using FusionAuth, developers can focus on their application's core functionality while ensuring GDPR compliance for user management. FusionAuth's security-first approach and continuous updates to best practices provide a robust and flexible solution for modern authentication and access management1.

## Further Resources

For more information on GDPR compliance and its impact on development, refer to the FusionAuth [Developer's Guide to the GDPR](https://4002.18-224-161-104.sslip.io/articles/ciam/developers-guide-to-gdpr.md). This resource covers essential information for maintaining compliance and avoiding potential fines under the regulation.

Related

[Cloud User Data FusionAuth Cloud user data policies. user datagdprprivacy](https://4002.18-224-161-104.sslip.io/docs/cloud/reference/user-data.md)

[Operate Compliance Frameworks Learn how FusionAuth conforms to various compliance frameworks. compliancegdpr](https://4002.18-224-161-104.sslip.io/docs/operate/secure/compliance.md)

[APIs Search the Audit Log API API documentation for the FusionAuth Search the Audit Log API. compliance](https://4002.18-224-161-104.sslip.io/docs/apis/audit-logs/search-the-audit-log.md)

[APIs Create a Consent API API documentation for the FusionAuth Create a Consent API. gdpr](https://4002.18-224-161-104.sslip.io/docs/apis/consents/create-a-consent.md)
---

## Other pages in Reference

> For the full index of this section, see [Reference](https://4002.18-224-161-104.sslip.io/docs/llms-reference.txt).

- [API Endpoints Guarded by API Keys](https://4002.18-224-161-104.sslip.io/docs/reference/api-endpoints.md): A complete reference of all Fusionauth REST API Endpoints that leverage API Keys with their supported HTTP methods.
- [Authentication Types](https://4002.18-224-161-104.sslip.io/docs/reference/authentication-types.md): Learn about the supported types of authentication.
- [Configuration Reference](https://4002.18-224-161-104.sslip.io/docs/reference/configuration.md): Learn about the configuration options for FusionAuth.
- [Login Page Cookies](https://4002.18-224-161-104.sslip.io/docs/reference/cookies.md): Learn about the cookies set by FusionAuth.
- [Data Types](https://4002.18-224-161-104.sslip.io/docs/reference/data-types.md): Learn about the different data types used by FusionAuth.
- [Indexed Entity Fields](https://4002.18-224-161-104.sslip.io/docs/reference/entity-fields.md): Learn about the entity fields that are indexed and searchable.
- [Required Network Hostname Access](https://4002.18-224-161-104.sslip.io/docs/reference/network-hostnames.md): Learn which hostnames you must allow access to for FusionAuth to work.
- [Password-Hashing Algorithms](https://4002.18-224-161-104.sslip.io/docs/reference/password-hashes.md): This is a reference for all of the current password hashing algorithms support by FusionAuth out of the box.
- [Indexed User Fields](https://4002.18-224-161-104.sslip.io/docs/reference/user-fields.md): Learn about the user fields that are indexed and searchable.