Start free — no credit card required

Your data protection compliance,
managed in one place.

Upload a policy for a €5 review — every required disclosure checked individually, with the exact wording quoted as evidence and a corrected draft. Or start free: policies, RoPA, DPIA and website audits. GDPR, UK GDPR and CCPA/CPRA.

Review my policy — €5 Start the platform free
See a sample review report first

GDPR · UK GDPR · CCPA/CPRA checked natively — Singapore, Brazil and Canada against a labelled GDPR benchmark. 11 languages · Data stored in the EU (Frankfurt) · AI-assisted, not legal advice.

“I would pay €5. I'd personally use the tool to show external benchmarking as an additional audit.”
— Danielle Truong, Data & Privacy Specialist

Upload & Review

A structured, multi-stage AI compliance review — not just a prompt to a chatbot.

Any AI chatbot

One-off prompts — no memory, no structure, no continuity

✗ Stateless — every session starts from zero, no memory of past reviews
✗ Truncates long documents — loses critical clauses in long policies
✗ Generic advice — same output regardless of your jurisdiction or industry
✗ No statutory citations — cannot tell you which Article or code section actually fails
✗ No structured output — cannot share with clients, regulators or your DPO
✗ No corrected draft — you get advice, not a rewritten policy you can actually use
✗ Ends with "I am not a lawyer" — recommendations only, nothing actionable

TickGDPR Upload & Review

A structured multi-stage compliance review — not just a prompt

✓Reads the whole document — long policies reviewed clause by clause, nothing truncated
✓Jurisdiction-specific — your country's framework, applied with your regulator's enforcement lens
✓Statutory citations — every finding tied to the exact Article or code section it fails
✓Corrected policy included — a complete Word draft with the fixes written in, placeholders for your specifics
✓Professional PDF report — scored, structured, ready to share with clients or your DPO
✓Honest scoring — open critical issues are named in the verdict at every band, never hidden
Upload & Review — check a single policy for €5

Instant AI compliance score, a detailed findings report, and a corrected policy (Word) with the fixes drafted in.

No subscription required · 11 languages · Files auto-erased in 90 days · €10 minimum top-up

Review a Policy — €5

How it works

From upload to corrected policy in about five minutes.

1

Sign up & top up

Create a free account and add €10 of review credit — €5 per review, credits never expire.

2

Upload your policy

PDF, DOCX or TXT, up to 15,000 words — in any of 11 languages.

3

AI reviews it

Checked against your jurisdiction’s framework, with your regulator’s enforcement lens.

4

Get the results

Compliance score, findings report (PDF) and a corrected policy (Word) with fixes drafted in.

🇩🇪 Germany — BfDI 🇪🇸 Spain — AEPD 🇫🇷 France — CNIL 🇬🇧 UK — ICO 🇮🇪 Ireland — DPC 🇮🇹 Italy — Garante 🇱🇻 Latvia — DVI 🇺🇸 California — CPPA 🇸🇬 Singapore — GDPR benchmark 🇧🇷 Brazil — GDPR benchmark 🇨🇦 Canada — GDPR benchmark 🌐 11 languages

What you get

A detailed, actionable compliance report with specific findings and corrected clauses.

Compliance Report
privacy_policy.pdf · Ireland — DPC · e-commerce
39%
At Risk
7
🔴 Critical
6
🟡 Recommended
0
🔵 Advisory
5
✅ Pass
CRITICAL
DPO contact details
Art. 13(1)(b) — Policy references Spanish legislation but operates under Latvian jurisdiction. Legally incoherent.
RECOMMENDED
Retention periods
Art. 13(2)(a) — "As long as necessary" without specific timeframes. DPC requires concrete durations.
PASS
Right to lodge a complaint
Art. 13(2)(d) — Supervisory authority correctly identified with contact details provided.
CRITICAL
Legal basis for each processing purpose not specified...
CRITICAL
Third-country transfer safeguards missing...

+ 15 more findings with corrected clauses

Get started free →
34
Requirement checks — GDPR (18) & CCPA/CPRA (16)
14
Jurisdictions supported
11
Languages supported
~5min
Upload to corrected policy

Platform Features

One AI review engine — buy it standalone for €5 a policy, or get it bundled with everything else below as a subscription.

Also standalone — Upload & Review, €5

Multi-Jurisdiction AI Reviews

Native GDPR (18 checks) and California CCPA/CPRA (16 checks) today; Singapore, Brazil and Canada reviewed against a clearly labelled GDPR benchmark; more native frameworks on the roadmap. Every finding is tied to the exact Article or code section it fails.

What it covers

  • — Clause-by-clause review, nothing truncated
  • — Jurisdiction-specific framework and regulator lens
  • — Statutory citations on every finding
Also standalone — Upload & Review, €5

Corrected Policy & Reports

Every review returns an honestly-scored verdict, a professional PDF & HTML report, and a complete corrected policy (Word) with the fixes drafted in — ready for your specifics.

What it covers

  • — Honest scoring — open criticals named at every band
  • — PDF & HTML reports, shareable with clients or your DPO
  • — Corrected policy (DOCX) with fixes drafted clause-by-clause
Platform plans — Free included

Core Policies

Generate a Privacy Policy, Cookie Policy and Terms of Use from guided questionnaires — unlimited documents, from the Free plan up.

What it covers

  • — Privacy Policy tailored to your data flows
  • — Cookie Policy synced to your consent setup
  • — Unlimited regeneration as your business changes
Platform plans

Data Processing Agreements

Generate DPAs for your vendors and sub-processors, built to match the processors you actually use.

What it covers

  • — DPA generation
  • — Sub-processor list management
  • — Transfer safeguards where applicable
Subscription plans

Records of Processing Activities

Maintain your record as a living document, not a one-time spreadsheet — export-ready whenever a regulator asks.

What it covers

  • — Structured processing-activity entries
  • — Legal basis and retention tracking
  • — Scales from Starter to unlimited
Subscription plans

Data Protection Impact Assessments

Run a structured DPIA when you launch something new, with guided risk scoring instead of a blank document.

What it covers

  • — Guided risk identification and scoring
  • — Mitigation tracking per risk
  • — Versioned history as the assessment evolves
Subscription plans

Cookie & Consent Audit

An automated pass over your live site checking cookie behaviour and consent-banner logic against what your policies declare.

What it covers

  • — Cookies set before and after consent
  • — Consent-banner logic and default states
  • — Third-party tracking scripts
Subscription plans

Data Flow & Storage Audit

A technical review of your backend data flows — surfacing gaps between declared processing and what your systems actually do.

What it covers

  • — Data collection points and storage locations
  • — Third-country transfer exposure
  • — Gap report vs. declared policies
Subscription plans

Cross-Doc Consistency & Alerts

AI flags contradictions between your Privacy Policy, Cookie Policy and DPA — and flags dependent documents when one changes.

What it covers

  • — Contradiction detection across your document set
  • — Change alerts on dependent documents
Every plan, Free included

EU AI Act Governance

AI-system inventory and governance duties under the EU AI Act — the newest compliance obligation, included at every tier.

What it covers

  • — AI-system inventory and risk classification
  • — Governance duties mapped to your obligations

Simple, transparent pricing

Start free. Upgrade when you need more.

Every subscription begins with a free account — paid tiers are opening soon, and you'll upgrade in-app the moment they launch, keeping everything you've built. Prefer a one-off check instead? Upload & Review is pay-as-you-go at €5 per review, no subscription.

AVAILABLE NOW
Free
€0
forever
  • ✓ 1 website
  • ✓ 1 workspaceSeparate compliance environments — e.g. distinct companies or clients — each with its own documents, RoPA and websites.
  • ✓ Unlimited documents — Privacy & Cookie Policy
  • ✓ AI reviews — pay as you go (€5)
  • ✓ RoPA — 3 entriesRecord of Processing Activities: the register of what personal data you process and why. Required under GDPR Article 30.
  • ✕ DPIAData Protection Impact Assessment: a structured risk review required before high-risk processing like profiling or large-scale monitoring.
  • ✓ Website audits — €5 eachAutomated scan of your live site: cookie banner behaviour, policy links, SSL, trackers — returns a 0–100 compliance score with fixes.
  • ✕ Cross-doc reviewAI checks your privacy policy, ToS and cookie policy against each other and flags contradictions between them.
  • ✓ PDF & HTML export
  • ✓ Standard support
  • ✓ EU AI Act governance — included on every plan
  • ✕ Corporate assets
  • ✕ Consent, processors, playbooks & data mapping
Start Free
COMING SOON
Starter
€39
/month
  • ✓ 2 websites
  • ✓ 1 workspaceSeparate compliance environments — e.g. distinct companies or clients — each with its own documents, RoPA and websites.
  • ✓ Unlimited documents — all types
  • ✓ AI reviews — €5 each
  • ✓ RoPA — 15 entriesRecord of Processing Activities: the register of what personal data you process and why. Required under GDPR Article 30.
  • ✕ DPIAData Protection Impact Assessment: a structured risk review required before high-risk processing like profiling or large-scale monitoring.
  • ✓ Website audits — €5 eachAutomated scan of your live site: cookie banner behaviour, policy links, SSL, trackers — returns a 0–100 compliance score with fixes.
  • ✓ Cross-doc reviewAI checks your privacy policy, ToS and cookie policy against each other and flags contradictions between them.
  • ✓ PDF & HTML export
  • ✓ Standard support
  • ✓ EU AI Act governance — included on every plan
  • ✕ Corporate assets
  • ✓ Consent, processors, playbooks & data mapping — CMP, DPAs, DSR & breaches
Coming Soon
COMING SOON
Professional
€79
/month
  • ✓ 10 websites
  • ✓ 2 workspacesSeparate compliance environments — e.g. distinct companies or clients — each with its own documents, RoPA and websites.
  • ✓ Unlimited documents — all types
  • ✓ AI reviews — €5 each
  • ✓ Unlimited RoPARecord of Processing Activities: the register of what personal data you process and why. Required under GDPR Article 30.
  • ✓ Unlimited DPIAData Protection Impact Assessment: a structured risk review required before high-risk processing like profiling or large-scale monitoring.
  • ✓ Website audits — €5 eachAutomated scan of your live site: cookie banner behaviour, policy links, SSL, trackers — returns a 0–100 compliance score with fixes.
  • ✓ Cross-doc reviewAI checks your privacy policy, ToS and cookie policy against each other and flags contradictions between them.
  • ✓ PDF & HTML export
  • ✓ Standard support
  • ✓ EU AI Act governance — included on every plan
  • ✓ Corporate assets — facilities, systems, departments
  • ✓ Consent, processors, playbooks & data mapping — CMP, DPAs, DSR & breaches
Coming Soon
COMING SOON
DPO Pro
€119
/month
  • ✓ 10 websites per workspace (pooled)
  • ✓ 3 workspaces+€25/mo per extra workspaceSeparate compliance environments — e.g. distinct companies or clients — each with its own documents, RoPA and websites.
  • ✓ Unlimited documents — all types
  • ✓ AI reviews — €5 each
  • ✓ Unlimited RoPARecord of Processing Activities: the register of what personal data you process and why. Required under GDPR Article 30.
  • ✓ Unlimited DPIAData Protection Impact Assessment: a structured risk review required before high-risk processing like profiling or large-scale monitoring.
  • ✓ Website audits — €5 eachAutomated scan of your live site: cookie banner behaviour, policy links, SSL, trackers — returns a 0–100 compliance score with fixes.
  • ✓ Cross-doc reviewAI checks your privacy policy, ToS and cookie policy against each other and flags contradictions between them.
  • ✓ PDF & HTML export
  • ✓ Priority support
  • ✓ EU AI Act governance — included on every plan
  • ✓ Corporate assets — facilities, systems, departments
  • ✓ Consent, processors, playbooks & data mapping — CMP, DPAs, DSR & breaches
Coming Soon

AI document reviews: €5 each from your prepaid wallet — top up from €10, credits never expire, unused credit refundable on request.

Modules marked ✕ stay visible in the app with a lock so you can see the full toolkit — upgrade any time to unlock them. EU AI Act governance is included on every plan.

Frequently asked questions

No. TickGDPR is an AI-assisted compliance tool, not a law firm. Findings and corrected clauses are AI-generated and should be reviewed by a qualified DPO or privacy lawyer before implementing. We identify gaps — you make the final compliance decisions.
Text-based PDF, Microsoft Word (.docx), and plain text (.txt) files, up to 15 MB and 15,000 words per document. Scanned or image-based PDFs aren't supported — if your policy only exists as a scan, copy the text into a .docx or .txt file and upload that. Right now you can upload Privacy Policies; support for Cookie Policies and Terms of Service is coming soon.
Typically 60–90 seconds for a standard privacy policy. Longer documents may take up to 3 minutes. Website audits complete in under 2 minutes.
Yes — your uploaded documents and their review reports are stored securely in EU (Frankfurt) infrastructure. During analysis, your document's text is processed by our AI sub-processor (Anthropic) to produce the review — see our sub-processor list for details. On the Upload & Review plan, uploads and reports are kept for 90 days from upload and then erased automatically; deleting them yourself always takes precedence — you can permanently erase any upload, its extracted text and all its reports at any time. On subscription plans, your documents are kept until you delete them.
ROPA (Records of Processing Activities) is required under GDPR Art. 30 for most organisations. It documents what personal data you collect, why, how long you keep it and who you share it with. TickGDPR provides a structured ROPA builder with PDF export, version history and snapshots.
A DPIA (Data Protection Impact Assessment) is required under GDPR Art. 35 when processing is likely to result in high risk to individuals — for example, large-scale profiling, processing sensitive data, or using new technologies. TickGDPR provides a structured DPIA builder with risk matrix, mitigation tracking and PDF export.
The Website Audit scans your live website for GDPR frontend compliance — cookie consent banners, privacy policy links, contact forms, data collection indicators, HTTPS, and more. It runs 18+ structural checks plus an AI deep analysis, producing a scored report with specific remediation steps.
Cross-Document Review analyses all your documents together — Privacy Policy, Cookie Policy, DPA and Terms of Service — and identifies contradictions, inconsistencies and gaps between them. For example, if your Privacy Policy mentions a retention period that conflicts with your DPA, it will flag it. Available on Professional and DPO Pro plans.
Each plan includes a monthly allowance of AI reviews. Credits are consumed based on document length — short documents use 1 credit, longer documents use up to 4. If you run out of monthly credits you can buy top-up packs (5, 10 or 20 credits) that never expire and carry over month to month.
Yes. Each website gets its own set of documents, ROPA entries, DPIA assessments and compliance score. The Starter plan supports 3 websites, Professional supports 10, and DPO Pro supports unlimited websites — ideal for agencies and DPOs managing multiple clients.
TickGDPR runs automatic consistency reviews in the background: when a document on one of your assets changes, related documents are re-checked and you're notified of any findings — so you know exactly what needs updating without tracking dependencies yourself. You'll also get a reminder when you add a processor without a Data Processing Agreement in place, and account notices for important billing and subscription events. Notifications are available on Starter plans and above.

Ready to get compliant?

Start free. Upgrade when you need more. No credit card required.

Get started free →

We use cookies

We use essential cookies to keep you logged in, and optional analytics cookies to improve the platform. Read our Privacy Policy and Cookie Policy for details.

Cookie preferences

Choose which cookies you allow. Essential cookies cannot be disabled as the platform requires them to function.

Essential

Authentication, security, session management. Always active.

Analytics

Help us understand how the platform is used so we can improve it. No personal data sold.

Marketing

Used for relevant product updates and offers. We don't share your data with third-party advertisers.