Question 1

What does GetGDPRScan do?

Accepted Answer

GetGDPRScan scans your website for common GDPR risks: tracking scripts, cookie consent issues, privacy policy problems, and data handling practices. It returns a risk score and a plain-language report with specific steps to fix what it finds. See how it works to learn more about the process.

Question 2

Does GetGDPRScan guarantee GDPR compliance?

Accepted Answer

No tool can guarantee full compliance. It depends on your specific data processing. GetGDPRScan identifies the most common technical and policy risks so you can address them before a complaint or audit. Think of it as an automated first line of defence, not a legal certificate.

Question 3

How long does a scan take?

Accepted Answer

A basic scan completes in under 30 seconds. A full compliance report takes 1–3 minutes. It analyses your privacy policy, consent setup, and tracking behaviour in depth.

Question 4

Do I need technical knowledge to use GetGDPRScan?

Accepted Answer

No. Enter your URL and GetGDPRScan handles the rest. Results are written in plain language. Anyone responsible for a website can understand and act on the findings.

Question 5

What is the AI Compliance Copilot?

Accepted Answer

The AI Compliance Copilot is a built-in AI assistant included with every scan and report. Click the chat button to ask it about a specific finding, what a GDPR requirement means, or how to fix an issue. It answers in plain language and is included at no extra cost, even with a one-time scan.

Question 6

What does a GDPR scanner check?

Accepted Answer

GetGDPRScan checks whether tracking scripts (Google Analytics, Meta Pixel) load before cookie consent, whether a privacy policy is present and accessible, whether your cookie banner meets basic requirements, and whether data retention and right-to-object information is disclosed.

Question 7

Is a cookie banner required under GDPR?

Accepted Answer

If your website uses non-essential cookies or tracking (Google Analytics, Meta Pixel, etc.), GDPR and the ePrivacy Directive generally require user consent before those activate. GetGDPRScan checks whether tracking scripts fire before consent is given and whether your cookie banner meets basic requirements.

Question 8

Does the scanner access private or password-protected pages?

Accepted Answer

No. GetGDPRScan only accesses publicly accessible pages (the same pages a visitor or regulator would see). It never accesses admin areas, customer accounts, or anything behind authentication.

Question 9

Can I scan a Shopify, WooCommerce, or other SaaS website for GDPR issues?

Accepted Answer

Yes. GetGDPRScan works with any publicly accessible website regardless of platform: Shopify, WooCommerce, Webflow, WordPress, or custom-built. If the page is reachable in a browser, it can be scanned.

Question 10

How accurate are the scan results?

Accepted Answer

GetGDPRScan accurately detects what is present on publicly visible pages: scripts, banners, policy links, and consent flows. Some findings are flagged as 'potential risks' because context matters: a script may or may not process personal data depending on its configuration. The full report explains the nuance.

Question 11

What does the accessibility scanner check?

Accepted Answer

It renders your page in a real browser and checks the DOM against WCAG 2.1 AA success criteria: image alt text, heading structure, form labels, ARIA usage, color contrast, and more. Run a free accessibility check to see your results.

Question 12

Is website accessibility legally required in the EU?

Accepted Answer

Yes, for many commercial websites. The European Accessibility Act requires products and services sold to EU consumers, including e-commerce, banking, and transport, to meet WCAG 2.1 AA, enforceable since 28 June 2025. EU public-sector sites have been required to meet the same standard since 2018.

Question 13

Does an accessibility overlay widget make my site compliant?

Accepted Answer

No. Overlay widgets attempt to patch issues with JavaScript without changing the underlying markup, and don't reliably fix problems like missing form labels or broken heading structure. Genuine compliance means fixing the code itself.

Question 14

What is the Lighthouse score in the accessibility report?

Accepted Answer

The full report includes a Google Lighthouse accessibility score as a cross-check alongside our own WCAG 2.1 AA scan. The two usually track closely; if they diverge, it's a signal to look closer at that page.

Question 15

What does the website security scanner check?

Accepted Answer

It reviews your site's publicly visible security configuration: HTTPS enforcement and certificate validity, security headers, cookie flags (Secure, HttpOnly, SameSite), and email authentication records (SPF, DKIM, DMARC). Run a free security check to see your results.

Question 16

Is this a penetration test?

Accepted Answer

No. This is a configuration and best-practices check. It looks at publicly visible settings and never attempts to exploit anything, guess credentials, or access non-public systems.

Question 17

What does it mean if my site is missing a security header?

Accepted Answer

It means an extra layer of browser-side defense isn't turned on, not that your site has been compromised. Most missing headers are quick to add with a small server or CDN configuration change, and the full report gives you the exact snippet.

Question 18

Can this scan tell me if my website has been hacked?

Accepted Answer

No. That's outside the scope of a configuration check. It reviews publicly visible settings against best practices and cannot detect malware, compromised accounts, or an active breach.

Question 19

What does the EU AI Act assessment check?

Accepted Answer

You answer 21 short questions about your company, your AI usage, and your governance practices. A deterministic scoring engine evaluates your answers against EU AI Act risk factors and returns a personalised risk score, a priority action checklist, and a downloadable PDF. Start the free assessment.

Question 20

Who needs to worry about the EU AI Act?

Accepted Answer

Any business that operates in the EU or serves EU customers and uses AI tools, even standard SaaS products with AI features like ChatGPT, Microsoft Copilot, or AI-powered CRM and hiring software. You don't need to build AI yourself to have obligations as a deployer.

Question 21

When do EU AI Act obligations take effect?

Accepted Answer

Obligations depend on the AI system's risk category and roll out on a schedule set by the regulation. Obligations for deployers of high-risk AI systems take full effect from August 2026.

Question 22

Is the AI Act assessment legal advice?

Accepted Answer

No. It's informational only. The EU AI Act is complex legislation and your specific obligations depend on your exact circumstances, industry, and the AI systems you use. Consult qualified legal counsel before making compliance decisions.

Question 23

What's included in a full report?

Accepted Answer

It depends on the module. The GDPR report includes a risk score, privacy policy analysis, cookie and consent audit, and tracking script inventory. The accessibility report includes a full WCAG 2.1 AA breakdown by category plus a Google Lighthouse cross-check. The security report covers HTTPS, security headers, cookie flags, and email/DNS security in detail. Every report ranks priority actions by severity and explains them in plain language. View an example report to see what one looks like.

Question 24

Can I buy the GDPR, accessibility, and security reports together?

Accepted Answer

Yes. Each module, GDPR, accessibility, and security, is its own scan with its own report, and you can buy any one on its own. At checkout you can also add the other modules to your cart and complete a single bundled purchase instead of checking out separately for each.

Question 25

Why are some findings marked as 'potential risks'?

Accepted Answer

Not every detected script is a definitive GDPR violation. Context matters. A font library behaves differently from an advertising pixel. When GetGDPRScan cannot confirm a finding from public data alone, it flags it as a potential risk so you investigate rather than ignore it.

Question 26

Can I export reports as PDF?

Accepted Answer

PDF export is on the roadmap. Currently, reports are available online and you can use your browser's print function (File → Print → Save as PDF) to save a copy.

Question 27

How does continuous monitoring work?

Accepted Answer

Once connected, GetGDPRScan rescans your website automatically on a regular schedule. If a new tracking script appears, your cookie banner stops blocking scripts, or something else changes, you will be alerted. See monitoring plans for details.

Question 28

Will I get notified when something changes?

Accepted Answer

Yes. Monitoring plans include email alerts when GetGDPRScan detects a change that may affect your GDPR risk, such as a newly added tracker or a missing consent mechanism.

Question 29

How often are websites rescanned?

Accepted Answer

It depends on your plan. All monitoring plans include regular automated rescans. View pricing to see rescan frequency for each plan.

Question 30

Is my website data stored by GetGDPRScan?

Accepted Answer

Scan results are stored so you can review your report later. Website content is not cached beyond what is needed to generate the report. Scan data is used solely to produce and display your GDPR report.

Question 31

Does GetGDPRScan sell scan data?

Accepted Answer

No. Scan results and website data are not sold, shared with third parties for advertising, or used to build profiles.

Question 32

Does GetGDPRScan access customer databases or private data?

Accepted Answer

No. GetGDPRScan only accesses the publicly visible front end (the same pages any visitor can see). It has no access to your CMS, database, customer records, or server.

Question 33

Is GetGDPRScan a subscription?

Accepted Answer

GetGDPRScan offers both one-off reports and monthly or annual monitoring subscriptions. A single compliance report is a one-time purchase. Continuous monitoring is a subscription you can cancel anytime. View pricing for all options.

Question 34

Can I cancel my subscription anytime?

Accepted Answer

Yes. Cancel from your account dashboard at any time. You keep access until the end of your current billing period with no cancellation fees.

Question 35

What payment methods are supported?

Accepted Answer

Payments are processed by Stripe: all major credit and debit cards (Visa, Mastercard, Amex) and other methods depending on your region.

Frequently asked questions

General

GDPR scanning

Accessibility (WCAG)

Website security

EU AI Act

Full reports

Monitoring

Privacy & security

Billing