For agencies & platforms

GDPR compliance scanning, as an API

A real headless-browser scanner (Playwright) that catches pre-consent trackers, missing policy sections, and cookie violations that static banner tools miss. Embed it in your Shopify app, WordPress plugin, or client dashboard.

Runtime capture

Runs a real browser, not a static crawl. Detects trackers that fire before consent.

0–100 score + findings

Structured JSON: score, grade, per-finding evidence, GDPR article references.

Built to embed

One POST per URL. No SDK, no dependency. Return the data in your own product.

How it works

POST /v1/scan
x-api-key: cs_live_...
Content-Type: application/json

{ "url": "https://acme-saas.com" }

→ 200 OK
{
  "url": "https://acme-saas.com",
  "score": 62,
  "grade": "C",
  "findings": [
    { "ruleId": "pre-consent-tracker", "severity": "high",
      "message": "Google Analytics fired before consent" },
    { "ruleId": "missing-legal-basis", "severity": "medium",
      "message": "Privacy policy lacks lawful basis language" }
  ],
  "evidence": { "cookies": [...], "networkRequests": [...], ... }
}

Request API access

We're onboarding early partners manually. Tell us your use case and we'll send a key + rate limit within 48 hours.

Prefer a one-off PDF report instead? Run a single scan