Free checklist · Built around your website
Know what needs review, what evidence to gather, and where to start. Free and private in your browser.
Start with a common setup
One click builds a complete, editable example.
Scope edit safety net
Your prior complete scope is protected in this tab until you keep or restore these edits.
The checkpoint stays only in this tab and can preserve existing packet status, evidence, owners, internal targets, and private notes while you experiment. Nothing is uploaded.
Custom check
Built from the seven answers in your dossier.
Latest committed scope change
Only the latest committed change is kept in this tab. Private decision/counsel note contents are excluded. This is an internal planning record—not legal advice, approval, or a compliance determination.
Saved baseline comparison
Next review queue
Choose an item to start. Ordered by priority and preparation—not legal urgency or a compliance score.
Every current packet is marked Ready for review. That still means assembled for qualified review—not approved, lawful, or compliant.
Your preparation
Ready for review means the evidence is traceable—not approved, lawful, or compliant.
Evidence to collect
One derived brief groups missing and needs-recheck evidence by packet. It does not copy private notes, reviewer-return contents, handoff locators, or historical snapshots.
Every current evidence prompt has a traceable receipt recorded for its current packet and source basis. Qualified review and real-product verification may still be required.
Implementation areas
Packets can span more than one workstream. Select an area to filter your plan; priorities stay unchanged.
All implementation workstreams are shown.
Focused review
Packet 1 of 1. Focus mode changes only the visible workspace, not the plan or exports.
Ordered checklist
No actions are in this view.
These assumptions are part of the result—not fine print. Change an answer when one is wrong.
Share without private notes
Build a Markdown brief for counsel, a responsible owner, or an unassigned-work review. Notes are excluded by design.
Contains scope, assumptions, action progress, owners, internal target dates, questions, and official sources. Private note contents are never included.
Revisit when things change
Use answer-driven change triggers and a local calendar for current internal targets plus the source-register review checkpoint.
Calendar entries are internal planning reminders, not statutory, contractual, or legal deadlines. Owner labels may be included; private notes are excluded.
Method, not magic
The result connects what you said to the work it surfaces. It never invents a universal legality score, writes a policy from guesses, or claims that a named law definitely applies.
Product, business base, audience reach, data, revenue, features, and existing material define the planning scope.
Every item exposes its reason, next action, assumptions, and source boundary. Jurisdiction-specific facts still require qualified review.
Official starting points
Results attach relevant primary materials where they help. Each entry exposes its jurisdiction, review date, current-status label, and scope. Register revision 2026-09-04.1 was reviewed 4 September 2026 and is scheduled for review by 2026-12-03. No source list determines applicability or replaces review of the real product.
California, US
California privacy rights and business obligations
Canada
Federal private-sector privacy framework and applicability context
EU / EEA
GDPR applicability, organisational principles, individual rights, retention, and security basics
European Union
Article 50 transparency duties for certain AI interactions and generated content
The Commission FAQ explains the adopted Article 50 guidelines and their application from 2 August 2026.
European Union
Covered online services, user protections, platform duties, proportional obligations, and enforcement
Use this as an implementation starting point; Regulation (EU) 2022/2065 remains the binding statutory text.
Technical standard
Accessibility principles and conformance references
United Kingdom
Design principles for online services likely to be accessed by children
The ICO states this guidance is under review following the Data (Use and Access) Act 2025.
United Kingdom
Cookies, SDKs, pixels, storage, consent, and preference controls
United States
Online negative-option disclosures, express consent, and simple mechanisms to stop recurring charges
Codified at 15 U.S.C. §8403. State automatic-renewal laws and other federal rules may add requirements.
United States
Published decision vacating the FTC’s 2024 amended Negative Option Rule
The assessment does not treat the vacated 2024 amended rule as current authority.
United States
ADA web-accessibility context for public entities and public accommodations
United States
Commercial email identification and opt-out practices
United States
Notice and removal workflow for covered platforms handling nonconsensual intimate imagery
United States
Children’s online privacy planning and parental-consent workflow
United States
Endorsements, reviews, affiliates, sponsorships, and material connections
United States
Practical data-security and vendor-control principles