Bootstrapped Into a Corner: Kill My SaaS or Drop €50K on Compliance?

Hi Indie Hackers,

I am a Spain-based solopreneur working for 3 years now on two SaaS side-projects: QualBot, and AI thematic analysis tool, and AdriCare, a video-based seizure detection app.

Both have early traction: paying users, strong interest, and early pilots. But GDPR, MDR, and CE requirements are forcing a level of legal investment I can’t justify without external capital. And I’m bootstrapped by choice.

So I'm seriously considering pulling the plug so I can focus on my validated 5-figure MRR project: my job!

Curious: Have you built a SaaS requiring GDPR, MDR, CE compliance? What legal work actually needed a lawyer? What could you DIY? Any leaner path than dropping €50K+ in legal fees?