How SaaS platforms comply with global data privacy laws