As you say, there is much discussion in the forum around GDPR compliance.
Also, plenty of people externalise the DB from Bubble as a means to help compliance requirements (but in my opinion, it’s not as simple as “externalise the DB to my region” and we are magic-wand compliant"