# gdprdparopakit report: https://demo-saas.example/

> Demo report on a fictional sample site.

**Score:** 31/100 · Scanned 2026-10-27T03:14:15.633Z

4 of 6 checks need attention (1 high priority).

- [x] **Third-party services identified** (low): 5 third-party domains, 4 matched to a known vendor.
- [ ] **Consent banner detected** (high): No consent platform detected, but 1 advertising service(s) load.
- [x] **Privacy notice linked** (high): https://demo-saas.example/privacy
- [ ] **DPA available to customers** (medium): No DPA link found.
- [ ] **Subprocessor list published** (medium): No subprocessor page found.
- [ ] **Privacy notice covers controller, legal basis, retention, transfers, rights and contact** (medium): controller: yes, legal_basis: yes, retention: not found, transfers: not found, rights: yes, dpo: not found

---
Technical inventory only, not legal advice: it shows what your public pages load and say. Your lawyer or DPO decides lawful bases, retention and transfer mechanisms. Read-only, up to 4 page requests.