100 days to GDPR: How Box got ready