Finding just the right way to tell management it's time to re-architect the monolith and move into infra-as-code to become agnostic is the dream.

This is a legal requirement of GDPR, no? https://gdpr-info.eu/art-20-gdpr/

I don't see anything about revenue here https://commission.europa.eu/law/law-topic/data-protection/r...

You're right, I read it a few years ago, and my knowledge is incorrect. I thought the fine was only a percentage of revenue if you're above $10M, or something along those lines.

The GDPR always applies regardless of whether a company is profitable or not. But it covers only personal data/sensible data, not "all data".