Seqlense GDPR watches the websites of all your clients, every page and every subdomain. It ranks what needs your attention with a score you can explain, has the fixes verified by a scan, and keeps a dated record of what ran, when.
Free plan, no card. Scan data stored in the EU.
Illustration with fictitious clients
Marketing adds a tag, an agency installs a plugin, a theme update loads a font from a third-party server. Nobody tells the DPO, and the register describes a site that no longer exists.
A tag manager loads an ad pixel on the checkout page only. It is not in the register, not in the cookie policy, and fires before consent.
A font served from fonts.googleapis.com sends every visitor's IP address to Google, the case the Munich court ruled on in 2022.
The agency says the tracker is gone. Six weeks later it is back after a deployment, and no one looked again.
Findings are ranked by a score you can defend in front of a client or a supervisory authority. Each point has a written reason; what cannot be assessed is shown at zero, never guessed.
Every finding is a task with an owner, a due date and a history. When someone marks it fixed, Seqlense scans the pages where the third party ran.
hotjar.comDue 28 NovThe owner of a task can be outside your firm and outside your client: their web agency or developer. They receive a personal link to that one task, with what to remove and where.
You have been asked to remove a third party that is loaded without being declared in the organization's register.
Point Seqlense to a site's cookie policy. It lists the vendors and cookies the page names, each with a quote from the page, and compares them with the latest scan.
Every scan is kept with its date. Pick a day and see the site as it was: which third parties and cookies ran, on which host, according to which scan. What changed between two scans is listed host by host.
Add the client's domain: its subdomains are listed, and you choose the pages that matter, such as checkout, contact and account.
The first scan gives the list of third parties and cookies, ranked by risk, with the request behind each one.
Assign each finding to the client's team or agency, with a due date. Fixes are verified by a scan.
Scheduled scans and alerts catch what the next deployment brings, and the history keeps the proof.
Scan data is stored on servers in the European Union. Every provider is listed with its role and location on the subprocessors page.
AI helps name unknown third parties and read cookie policies. It never decides alone, and its results are marked as AI, never presented as verified.
We load your clients' public pages ourselves, the way a visitor would. Cookie values are never stored, and we receive nothing about real visitors.
As many as you need. Each client website is a project with all its subdomains, and every project appears in the portfolio view ranked by risk.
Usage is counted per scan. For a firm with a portfolio of clients we agree terms together: talk to us.
Today your firm works in its own workspace, and your clients' teams or agencies receive personal links to the tasks assigned to them. Read-only access for clients is on our roadmap.
Scans load each page as a first-time visitor who has not answered the banner, so what runs before consent is what you see. Clicking "accept" and "refuse" and auditing the banner itself are in development.
This website and the guides are in English, German and French. The application is in English today.
Scan data is stored in the EU. The full list of providers, their role and their location is on the subprocessors page. Scan data is deleted after a retention period, six months by default.
In 20 minutes we scan one of your clients' sites live and walk you through the findings, the score and the remediation.