Geco is designed to support organisations in meeting UK GDPR and data-protection responsibilities, but compliance is shared: the provider remains responsible for lawful processing, policies, access decisions and how staff use the system.