saas m&a data security gaps