Hey buddy, firstly Botpress is GDPR compliant. I believe they store KB documents on AWS, which are encrypted when used or at rest.
They have a section on data processing on their legal page:
https://botpress.com/legal. You can find all the info you need there🙂