My library processes it. Or does it have to both store and process? So my SaaS analytics service that only stores and gives it back out unprocessed is ok? It's

My library processes it. Or does it have to both store and process? So my SaaS analytics service that only stores and gives it back out unprocessed is ok? It's less about specific hypotheticals and more about the general ambiguity around the risks.