Findings report
Observed fact, quoted text, risk, severity — for every point.
Digital conformity audit
Are your website and data processing compliant? We check.
A technical audit grounded in the exact text of Law 09-08, its decree and the CNDP's deliberations. Every finding cites the article behind it, the risk and the corrective action — no needless jargon.
What we check
- 01
Hosting
Where the site, database and backups really are.
- 02
Forms
Fields collected, proportionality, data destination, opposition checkbox.
- 03
Information notices
Identity, purposes, recipients, rights, CNDP receipt reference.
- 04
CNDP receipt
Declaration filed and displayed on collection media.
- 05
Cookies and trackers
Cookies before consent, durations, advertising trackers, prior information (D-939-2025).
- 06
Newsletters and marketing
Checkbox, unsubscribe, prior consent (D-940-2025, art. 10).
- 07
Cross-border transfers
Analytics, fonts, videos, CRM, emailing: every outbound flow identified.
- 08
Security
HTTPS, headers, exposed versions, reachable configuration files.
- 09
Processors
Providers identified and expected contractual clauses.
- 10
Commercial disclosures
If selling at a distance: identity, trade register, capital, tax ID, reachable terms (Law 31-08).
- 11
Exercise of rights
Contact point, deadlines, access, rectification and opposition procedure.
- 12
AI processing
Automated decisions, impact assessment, sensitive data in your AI tools.
What you receive
Remediation plan
Actions by priority, effort estimate, relevant CNDP forms.
Ready-to-use templates
Information notice, processor clause, cookie banner if needed.
Re-check
After your fixes, a second point-by-point pass.
How long does it take?
A showcase site is audited in a few days; a platform with accounts, payment and a newsletter in one to two weeks. Send us the site address.