Automatic GDPR erasure after a certain time?

Hello,

I know that Sugar can process erasure requests orginating from customers. I also know that the new data archivers can archive/delete records based on conditions. 

But we're getting requests to automatically anonymise records (contacts, leads) after some time. 

A solution would be to use SugarBPM to create a data privacy activity (type erasure request) and either process it automatically or add it to a dashboard on which a DPO could mass-process them. 

But I can't find anything in SugarBPM that would allow me to do that, either directly "erase" PII fields (I can overwrite the value with "erased" but that's not the same) or create a DP activity (not available in the related modules list). 

We could certainly develop a solution, but I'd rather use a no-code approach. 

How would you solve this? 

Cheers,

Damien