We audit how your website actually handles visitor and customer data. The technical review maps data flows and checks contact forms, cookies and consent banners, encryption, access controls, third-party sharing and breach logs. You receive findings and a fix list.
This is a technical audit, not legal advice. Legal questions about the Data Protection Act belong to an advocate.
What the audit covers
| Check | Technical focus |
|---|---|
| Data flows | Map where visitor and customer data enters, moves through and leaves the site. |
| Forms and consent | Review contact forms, cookies and consent banners as implemented. |
| Safeguards | Check encryption, access controls and breach logs. |
| Third-party sharing | Identify analytics and integrations that receive personal data. |
| Handover | Provide plain-language findings and a prioritized fix list. |
Related technical audits
API and workflow audits review authorised APIs, webhooks, automation workflows, credential storage, least-privilege execution, data-flow hygiene and human approval checkpoints. Cybersecurity audits are scoped, permission-only assessments under written rules of engagement, with findings and a remediation roadmap. They are time-boxed, with no continuous monitoring or guarantee against attacks.
Frequently asked questions
What does a data protection site audit check?
It checks how a website handles visitor and customer data: contact forms, cookies and consent banners, encryption, access controls, third-party sharing and breach logs.
What will I receive?
You receive technical findings and a prioritized fix list. The review does not provide a legal opinion or a legal-compliance guarantee.
How is this different from a security assessment?
A data protection site audit traces how data is collected, stored and shared. A cybersecurity audit is a scoped, permission-only assessment of website, web application and API security.
Who answers legal questions?
Legal questions about the Data Protection Act belong to an advocate. This engagement covers technical checks and practical fixes only.
How engagements start
Start with a scoping call to agree the website, integrations, access permissions and delivery date before the audit begins.
Engagements begin with a fixed-scope scoping call. Clear decisions before code, and no obligation to proceed to follow-on build work.
Request a Scoping Call →Related: Web & API Security Assessment · Security Audits · All services