The $376K annual vendor cost went away once I built the deletion workflow in-house.
A deletion request touches every store that holds customer data. I could not call one complete until the relevant systems had confirmed it. The vendor workflow was expensive and put that legal obligation outside our control, so I built the replacement.
New stores and retention rules kept changing the shape of the work. I kept the business rules separate from storage so a change underneath did not mean rewriting the core decision.
The rate-limited GDPR/CCPA services now run in every production environment. They process approximately 200K PII-based requests per month while preserving data residency and protecting production performance.
| Vendor cost | $376K annually |
| Deletion service | all production environments |
| Delivery | one month |
| Vendor dependency | removed from the request path |
What I'd do differently: I would define, validate, and version the data contract on day one. The first version relied too much on one system's document shape, which made later changes harder to reason about.