Skip to main content
Legal & Compliance

Compliance is mandatory.
Are you compliant?

Rules and compliance belong together – just like laws and enforcement. If rules exist, they have to be followed. If regulations apply, systems have to comply. Regulations evolve. So we evolve monitoring.

The way we test

Websites come to life in the user's browser – not on the server. The server only delivers the building blocks. How a page actually looks, behaves and performs is determined in the browser. Anyone testing only on the server is checking the plan, not the result. Whether a page truly works becomes visible on the screen where it appears. That's where we look.

What we check for compliance

Four compliance areas with detailed automated checks.

GDPR & Privacy Compliance

Privacy policy present and accessible
Cookie consent blocks tracking prior to opt-in
No pre-checked consent boxes
Google Analytics, Meta Pixel, HotJar detection before consent
Third-party assets (Google Fonts, CDN) loaded without consent
HSTS active, secure cookie flags, TLS 1.3 (Art. 32)

German Legal Requirements

Impressum present and accessible (2-click rule)
Impressum completeness (name, address, contact) per TMG § 5
Privacy policy in correct language
Cookie consent mechanism (TTDSG compliance)
Withdrawal of consent mechanism accessible

BFSG / WCAG 2.1 AA Accessibility

28 WCAG 2.1 AA criteria checked automatically
Accessibility statement present (BFSG § 12)
Feedback mechanism for accessibility issues
Who BFSG affects: private sector consumer-facing websites
→ Full BFSG/WCAG details on the Accessibility page

Technical Security as Compliance

Privacy by design (Art. 25): HTTPS enforcement, secure defaults
Appropriate security measures (Art. 32): HSTS, TLS version
Secure cookie flags (Secure, HttpOnly, SameSite)
Exposed credentials: GDPR data breach liability check

What we check → Maximum consequence

Cookie consent blockingGDPR Art. 6, TTDSG § 25Up to €20M or 4% global revenue
Privacy policy contentsGDPR Art. 13, 14€5,000–€500,000 fine
Impressum completenessTMG § 5€500–€1,500 Abmahnung
WCAG 2.1 AA complianceBFSGRegulatory enforcement action
HTTPS / TLSGDPR Art. 32Data breach liability
Third-party trackersGDPR Art. 6DPA investigation + fine

What we check

Legal & Compliance

12 automated checks

Cookie Consent

Privacy Policy

Legal Notice (Impressum)

Tech Stack Disclosure

Image Licensing & AI Content

Compliance FAQ

Common questions about GDPR, BFSG, and website compliance.

    GDPR & Legal Website Compliance Check – Automated | RGate | RGate