Do you know specifics they're missing?

At a glance, their Data Processing Addendum[0] seems to address GDPR, along with country-specific regulations like Swiss DPA and UK GDPR

[0] https://planetscale.com/legal/data-processing-addendum