How did your team operationalize DSAR fulfillment under GDPR Art. 15 at scale?

We're handling ~200 DSARs/month and the manual data discovery phase is the bottleneck — mapping personal data across 15+ systems (SaaS, legacy DBs, log archives) takes 3-5 days per request, dangerously close to the Art. 12(3) one-month deadline. How did your compliance team automate or semi-automate the data discovery and redaction pipeline? Interested in practical approaches: automated data mapping tools, legal hold integrations, or hybrid workflows with counsel review gates. Jurisdiction: DE, EU, GB Context: Mid-size SaaS provider, 200+ employees, EU headquarters.