We do not offer legal advice, but we harden WordPress to transmit and store data securely, and we can document what logs are kept and where.