Compliance & privacy
Are the visible elements related to the obligations that apply to your site properly present and configured? We check what your site actually shows and sends from outside: required information, consent mechanisms, privacy policy, cookies and third-party flows.
Try our method for free
One page. One pillar. A real report.
Enter your website and we’ll email you a report on Compliance & privacy for your home page. Please allow at least 24 hours.
Our plans cover the 9 pillars across the pages of your whole site.
What we check
- What is written into the browser before any interaction: we load the page without clicking anything, and record what is already there.
- The consent mechanism as it works, not as it announces itself: refusing must be as simple as accepting.
- Every third-party recipient of the visit, named and classified: audience measurement, tag manager, advertising, social networks, fonts, bot protection, maps, video.
- The information French law requires you to display about the publisher, the host and the publishing director.
- The privacy policy: whether it exists, and which processing, purposes and rights it sets out.
- Heightened surveillance devices: session recording, which replays a visitor’s navigation, and browser fingerprinting, which needs no cookie.
What we find on the sites we audit
Across about 20 websites we audited between August 14, 2026 and September 24, 2026:
- 25% have a legal notice missing a required item
- 15% have a legal notice that none of the visited pages links to
Each percentage covers the sites where the point could be checked. Many were audited because a defect showed up quickly, so these figures describe our audits, not websites in general.
See also: Independence & resilience, a real online store report.
On what basis
GDPR · ePrivacy Directive · French LCEN · CNIL guidance
A finding is only worth something if it rests on an identifiable basis. Where one exists, we rely on a law, a standard or a specification, and for every point recorded the report names the page and gives the value we measured.
What it changes for you
The most common fault is also the simplest to establish from outside: trackers set before the visitor has answered anything at all. A consent banner can be perfectly worded and perfectly ineffective.
These failures are visible from any browser, to anyone: a competitor, an unhappy customer, an association. That is what sets them apart from a theoretical risk.
What this audit does not say
The scope is what your site displays and transmits. From the outside, we cannot check your internal records, processor contracts or procedures that are not publicly available: they are not examined, and the report never claims to have checked them.
For the same reason, the report is neither a conformity certificate nor legal advice. It records facts, with the page and the value we measured; what to do about them is yours to decide, with your counsel if need be.
Every limit of the examination is stated in the methodology note of your report. A point that cannot be verified is never presented as compliant.
The weight of this pillar
An overall score has to weigh what matters for your business: the 9 pillars do not carry the same weight depending on what your site is for. Here is what “compliance & privacy” represents in the overall score, under each weighting. The report always states which one produced your score.
| Type of site | Share of the overall score |
|---|---|
| Type not determined | 13% |
| Business / brochure site | 12% |
| E-commerce site | 16% |
| Application / customer portal | 13% |
| Blog / media site | 7% |
| Public-sector site | 15% |
This pillar is examined alongside the other eight in every plan, whatever the number of pages. See pricing →
Guides for this pillar
Website imprint requirements in the EU
What an EU business website must publish about who runs it, what France adds, and the flaw few people check: a legal notice no page links to.
Read the guide →EU ecommerce legal requirements, explained
What an online store selling to EU consumers must display in 2026: identity, prices, guarantee, withdrawal, dispute body, order button and reviews.
Read the guide →