What GDPR means for assembly tools, what to ask vendors, and why most platforms don't meet the standard