I think it´s not only GDPR and the problem who would be responsible for support, technical failures and other problems. It´s most likely that large enterprises don´t want to use a SaaS because it needs time and resources to get all information from your old system into the new one and get everyone trainings with the program.