The secret is bald faced lying. The quoted price may barely cover an updated privacy policy from a lawyer. And nothing else. Not one line of code changed.

Let alone full review of every system and legal review of the DPAs you have to sign and or create with every single co and processor.