GRCTrail - GDPR readiness, without consultants