> Unsure of how you extrapolated the total number of users from my previous statements. We were a B2B SaaS where our customers each served 10,000s of end users, who also had access to our platform with their data stored within. In aggregate we’re talking 25mm+ total users in my case.

Doesn't that make you a data processor rather than a data controller - i.e. not at all your problem for your end user's end users?