Josh and Kurt talk about basic security metrics and security from Santa. Is Santa GDPR compliant?