If the data fits in RAM, you could try loading it into an in-memory sqlite database, and run SQL queries there.
The first reason was GDPR compliance and the second is that we have an already complex architecture as it is (and we're only 2 to manage it) so I don't want to add one more brittle layer that will need debugging at the worst time.
They do.