Free GDPR website check — your privacy signals
The GDPR applies to almost every website that serves people in the EU, and fines reach €20 million or 4% of worldwide turnover. Tawsik scans your site’s public pages and shows the privacy signals a regulator — or a customer — would see, each cited to its source.
Last reviewed · 2026-07-10 · EU AI Act · Reg. (EU) 2024/1689
What the free scan checks
From your public pages alone, the scan verifies the observable GDPR and ePrivacy signals: is a privacy policy published and current? Is there a cookie consent mechanism? Is a contact — a controller or DPO — actually reachable? Is the site served securely? Every finding carries the evidence behind it, so you see exactly what we saw, not a guess.
GDPR and ePrivacy — two rulebooks, one scan
Cookie banners live under the ePrivacy rules; the consent behind them is judged under the GDPR. Tawsik maps every finding to the framework it speaks to, so your report shows GDPR coverage and ePrivacy coverage side by side — the same evidence a buyer’s procurement team would ask about.
Beyond the surface: code and documents
A website shows what you say; your code shows what you do. On Pro, Tawsik also inspects your repository — an exposed API key is a security-of-processing risk under GDPR Article 32 — and reads your actual privacy policy, then cross-checks the promises against the code. When a policy claims data protection while a secret sits in the repo, that contradiction is exactly what the report surfaces.
And if you use AI: the AI Act, in the same record
GDPR is rarely alone. If your product uses AI, the EU AI Act adds transparency and documentation duties on top — and Tawsik was built for exactly that. One scan feeds one Trust Passport covering the AI Act, GDPR and ePrivacy together, so you maintain one living source of truth instead of three audits.
Is the GDPR check really free?
Yes — the website scan is free and needs no signup. It covers the signals observable from your public pages. Code inspection, document analysis, monitoring and the verified badge are part of Pro.
Does a green result mean I am GDPR compliant?
No. The scan verifies observable signals and cites its evidence — it is a fast, honest picture of what a regulator or customer would see, not a legal determination. Tawsik guides you toward compliance; it isn’t legal advice.
What is the difference between GDPR and ePrivacy?
GDPR governs how personal data is processed; the ePrivacy rules govern the confidentiality of communications — in practice, cookies and trackers. A cookie banner is an ePrivacy requirement whose consent standard comes from the GDPR, which is why Tawsik reports them together.
See your GDPR signals — free
Enter your website address, get the evidence-cited report in minutes. No signup.
Tawsik guides you toward compliance. It isn’t legal advice.