I looked around today and you probably cannot use pretty much any online todo-service for your business-needs if you want to follow the #GDPR. No one seems to be part of privacy shield or has its data obviously in the EU. Probably Things but they are Apple-only.