Yes. The collection of, access to, processing of, disclosure of, or retention of client scoped data that includes any such classification happens in full compliance with the GDPR.
This is reviewed and supervised by our Data Protection Officers, also see our Privacy Policy.