Web compliance & audit
Find out what's really happening across your web estate, before someone else does.
Most organisations assume their website is working as intended. Most are wrong about at least some of it.
Cookies dropping when they shouldn't. Consent banners quietly corrupting analytics data. Tracking nobody fully mapped. Policies that don't reflect what the site actually does. And compliance gaps that are one regulator, one customer, or one due diligence process away from becoming a real problem.
A web health check gives you an honest, independent picture of where you stand - technically, legally, and commercially.
Our CTO brings over a decade of full-stack development and engineering experience across global agencies and in-house technology roles at a FTSE 100 organisation. Our CEO brings the regulatory overlay; GDPR, ePrivacy, CCPA, CPRA, LGPD and beyond. Every review combines a technical crawl with human review, because automated tools alone don't catch everything that matters. Our reviews cover front-end implementation and visible site behaviour. Backend data flows and processing are out of scope - covered separately within our privacy assessment service.
Does any of this sound familiar?
>Your consent banner is live, but you're not confident it's actually working the way it should.
>Your analytics data doesn't add up, and the consent implementation might be quietly blocking more than it should.
>Cookies are dropping when they shouldn't, and it's affecting campaign performance in ways that are hard to diagnose.
>You suspect there's tracking running that nobody fully mapped - server-side, hidden trackers, unknowns inherited from a previous build.
>You need to demonstrate compliance to a regulator, investor, or major customer, and you don't have the necessary evidence yet.
>You know the web estate needs investment, but can't get board buy-in without a clear picture of what's broken and why it matters.
How we engage
Every engagement starts with the standard health check module: cookie categorisation, consent banner, cookie dropping behaviour, newsletter and marketing forms, and footer links. We combine technical crawl and human review, with additional depth and modules added by tier:
| Tier | What it adds | Delivered as |
|---|---|---|
| Snapshot | Standard module across homepage and key entry points. | Findings summary with prioritised recommendations. |
| Assessment | Standard module plus additional pages, key user journeys, and banner consistency. | Report with findings and remediation plan, presented to the team. |
| Extended review | Adds dark pattern checks, hidden and server-side tracking, fuller footer review, and sector-specific requirements. | Detailed findings report, presented to the team. |
| Deep dive | Full user journey mapping, hidden tracking, dark patterns, full footer review, sector-specific, and accessibility checks. | Comprehensive report with risk assessment and remediation roadmap, presented to leadership. |
Additional modules
- Privacy notice review
- Cookie policy review
- Accessibility statement review
- Do Not Sell/Share - California review
- Full accessibility review
- Email marketing review
- Sector-specific review (financial services, healthcare, alcohol, food)
Further modules available on request, including policy document reviews and digital transformation business case support.
You can't govern what you can't see.
Findings are used to meet compliance requirements, improve marketing data quality, build customer trust, and make the case for digital transformation investment. Compliance and commercial performance aren't in tension - done well, they reinforce each other.
Our web health check naturally leads into cookie and consent strategy, tagging, accessibility remediation, and broader web governance.