Yeah, I was wondering if the legal part would be the killer. Maybe someone will offer a Saas solution for it that handles all the GDPR/legal through the service.