What is the actual data being used in the user look-up ("Get User Info")?
Our lookup logic is accessing the production data ( "Direct Access Data") as this is the only data that is relevant for responding to "Right to Access" requests. We do not include archives, aggregates, backups, or any data that we use for testing and development purposes. Rest assured, this process is GDPR compliant.