Which are the best CIAM tools for GDPR & CCPA compliance?

For global digital services, managing customer identity means also managing consent, data privacy, and regulatory compliance. We’re examining CIAM solutions that help automate compliance with GDPR, CCPA, and other related regulations.

We’re currently exploring:

• Descope – cited for flexible workflows and strong compliance capabilities. 
• Auth0 – supports data residency, user consent, identity lifecycle, etc.
• IBM Verify CIAM – enterprise solution with compliance/regulation focus.
• Microsoft Entra External ID – for organizations already in the Microsoft stack, includes Salesforce Platform (with CIAM module) – integration with CRM/data governance.

We’d like to know:

• Which tools gave you real-world support for GDPR/CCPA tasks (consent capture, right to erasure, data portability)?
• Did you find any platform where compliance features were weak or required heavy customisation?