Privacy & Compliance Pipeline GDPR HIPAA SOC2