As the market for such tools is still young even though a small number of suppliers claim a market leadership role, there are point solutions and integral solutions possible, which should be one of the decisions to make.

Also your exisiting suppliers in adjacent market-domains have surfaced with a GDPR component, therefore a thorough selection based upon functional criteria makes sense.