About the free scan

ComplianceMonitor.io runs a free, anonymous scan of any public website and produces a shareable report scored against the GDPR and the ePrivacy Directive. There is no account to create and nothing to install. You paste a URL on the scan page, a real browser visits the site on your behalf, and about two minutes later you have a report with a score, a list of findings, and the evidence behind each one.

The scan is built for people who have to defend a position: a DPO, in-house counsel, or the engineer they work with. Every finding names the rule it was checked against, shows the raw observation that triggered it, and suggests what to change. Nothing is hidden behind a summary.

What the scan is

The scan is a point-in-time observation of one page, captured by a Chromium browser that behaves like a first-time visitor. It records what happens before anyone touches the consent banner, then exercises the reject and accept paths and a Global Privacy Control pass, and compares the result against a fixed rule set. The rule set version is printed on every report, so two reports can be compared on equal terms.

What the scan is not

It is not continuous monitoring, it does not send alerts, and it does not keep a history of your site. It does not expose an API, a badge, or a PDF export. It does not report on CCPA. The report is an automated indicator of common GDPR and ePrivacy requirements, not a legal assessment of a specific site.

Pages in these docs

• How a scan works: the four phases the browser goes through and what is recorded in each.
• What we check: the seven finding categories, the severity levels and statuses, and the legal basis for each check.
• Reading your report: what each section of the report page means and how the score is built.
• Limits and retention: how many scans you can run, how long a report lives, and who can see it.

Not legal advice

Automated compliance indicators, not legal advice.

The checks are automated indicators of common GDPR and ePrivacy requirements. They are not a legal assessment of any specific site, and they do not replace advice from a qualified professional who knows your processing activities. Use the report as evidence to inform that conversation.