The GDPR applies to every organisation that handles EU citizens' data, regardless the company's location. 

It will especially affect companies relying on SaaS services, which, in GDPR jargon, represent “data processors”.

These companies will be obliged to collaborate only with data processors providing appropriate technical and organisational measures to meet the regulation's condition, like Claimable.