https://samosaas.com/addressing-compliance-and-data-privacy-in-saas/