Ah, shrewd move! For others reading this: your project using Scarf will bear responsibility for GDPR compliance regarding processing purposes as the controller and Scarf is just a processor like AWS (not that I buy it completely but I am sure smart folks at noyb.eu will look at this when time comes).