What is Compliance Studio for?
A website that collects data, sets cookies or sells online has to follow several sets of rules: GDPR, cookie consent, legal notice, consumer law, accessibility. Compliance Studio asks you the right questions, section by section, then computes a 6-axis score, spots what is missing and ranks the actions by priority, with the reference article for each one.
It also prepares 7 documents filled in with your answers (legal notice, privacy policy, cookie policy, withdrawal form, accessibility statement, breach procedure, record of processing) and a client report with your client's branding.
The rules adapt to the country (Ireland, France, Belgium, Luxembourg, other EU countries), the legal status (sole trader, company, non-profit), the size of the organisation and whether the site sells to consumers.
What the tool does not do
With the other Yok-Kod tools
- Website Studio builds a site with a legal notice and privacy page: check it here afterwards;
- SEO Audit Studio checks the technical side of a live page (HTTPS, tags);
- Freelance Proposal Generator turns the action plan into a proposal for your client;
- Newsletter Studio and Email Sequence Studio for mailings that respect the consent checked in section 8.
Who is it for?
Online shops
Cookie banner, terms of sale, withdrawal and online-sales obligations.
Web agencies
A deliverable compliance audit, with a report in the client's branding.
Web freelancers
Check a site before handing it over, documents included.
Freelancers
Know where your website stands, without jargon.
Non-profits
Members, donations, newsletter: solid GDPR basics.
Blogs and media
Analytics, advertising, social media and consent.
The steps, one by one
Discover the tool with the demo
🎁 Demo button: every section is filled in with a fictitious online shop. Browse the tabs on the right to see what the tool detects. Pro members can start from one of the 3 templates (online shop, business website, blog) in 📋 Templates.
Describe the site
Section 1: name, address, activity, legal status, country, type of site, audience, size and whether the site collects data or sells online. These answers decide which rules apply: for example, terms of sale and withdrawal are only assessed if the site sells.
Fill in the sections that apply to you
For each multiple-choice question, answer Yes, Partial or No, or leave “Not filled in” if you don't know: an unanswered question is not counted, it neither raises nor lowers the score. You can fill in the sections in any order.
Follow the action plan
The dashboard shows the alerts, the key indicators and the actions ranked as high, medium or to plan. The 📊 Audit tab gathers them all, with your own findings and plan (section 17).
Get the documents and the report
📄 Documents tab: pick a document, complete the passages highlighted “To complete” by filling in the matching fields, then download it (with a watermark in the discovery version). 📋 Client report tab: set the logo, colour and sections in section 18, then print to PDF.
The 6-axis score
| Axis | What counts |
|---|---|
| 🍪 Cookies | Banner, rejecting as easy as accepting, blocking before consent, proof and withdrawal of consent, wording of the text; emails and newsletter for a quarter |
| 🔒 Data | Privacy policy (35%), record of processing (20%), data subject rights, transfers outside the EU and processors (15% each) |
| 📜 Legal notice | Required items depending on your status and country: publisher, registration, contact, editor, host… |
| 📄 Terms and withdrawal | Required and recommended clauses, e-commerce checks, right of withdrawal (only if the site sells) |
| ♿ Accessibility | Audit, statement and WCAG criteria assessed |
| 🛡️ Security | 10 measures (HTTPS, passwords, backups, access…); breach procedure for a quarter |
The overall score is the average of the axes rated. An axis with no answer shows “n/a” (not rated) instead of a misleading 0%.
The cookie banner
In section 3, list your cookie purposes (one per line, with their type) and paste your banner text. The tool:
- separates exempt cookies (running the site, some strictly configured audience measurement) from those that need consent (advertising, social media, standard analytics…);
- flags wording that is not valid consent, such as “by continuing to browse, you accept…”, and a text that does not mention the option to reject;
- shows a preview of the banner depending on whether “Reject all” is at the same level as “Accept all”.
If the site only uses exempt cookies, the tool does not ask for a banner.
Accessibility
In section 9, assess 20 key WCAG 2.1 criteria (text alternatives, contrast, keyboard navigation, visible focus, page language, form labels, error messages…). Test each criterion on a few typical pages; leave “—” if you don't know. The ♿ tab gives a score per principle (perceivable, operable, understandable, robust) and lists failing criteria first.
Since 28 June 2025, the European Accessibility Act requires many consumer services, including online shops, to be accessible; micro-enterprises providing services are exempt. Public bodies have their own obligations. Enter the size in section 1 so the tool knows whether the obligation applies to you.
The 7 documents
| Document | Filled in with |
|---|---|
| 📜 Legal notice | Publisher, registration, editor, host (sections 1, 2 and 5) |
| 🔒 Privacy policy | Controller, data, legal bases, retention, recipients, transfers, rights, contact (sections 2, 4, 14 to 16) |
| 🍪 Cookie policy | Purposes, consent, banner text (section 3) |
| ↩️ Withdrawal form | Period, refund, return costs, exceptions (section 7) — if the site sells |
| ♿ Accessibility statement | Compliance status, failing criteria, contact (section 9) |
| 🛡️ Breach procedure | 72-hour steps, person in charge, authority to notify (sections 10 and 13) |
| 📋 Record of processing | One line per processing activity (section 11) |
Anything missing is highlighted “To complete”: fill in the matching field and the passage disappears. Each document is complete in the discovery version as in Pro, in HTML, Markdown and PDF; in the discovery version, its exports carry a “Discovery version” watermark.
The client report
In section 18: client name, logo, main colour, tone, sections to include, introduction, conclusion, next steps and contact. The report covers the score, the analysis per axis and the action plan. Print it to PDF (“Save as PDF” in the print window) or export it as HTML or Markdown.
Input formats
Some fields take one line per item, with columns separated by |:
- Cookie purposes:
name | type | description, typesessential,analytics-exempt,analytics,marketing,social,functional; - Record of processing:
processing | legal basis | data | retention | recipients; - Processors:
name | service | country | agreement signed (yes/no) | contact; - Breach history:
date | type | people affected | notified | status; - Action plan: one action per line, ending with “(high)”, “(medium)” or “(low)” to set its priority.
Exports
The report, the documents, the breach procedure and the documents ZIP are open to everyone; in the discovery version they carry a “Discovery version · Made with Yok-Kod” watermark (at the end of the document and at the bottom of each printed page) and the ZIP leaves out the data files. Pro removes the watermark. Data exports (CSV record, CSV, Notion, Airtable, JSON) are for Pro.
- Full ZIP: report, 7 documents in HTML and Markdown, record, data;
- Client report as PDF, HTML or Markdown;
- GDPR record (Pro) as a spreadsheet (CSV, opens in Excel, LibreOffice or Google Sheets);
- Breach procedure in Markdown;
- Notion (checkable actions), Airtable, CSV and JSON (project backup, to re-import): Pro.
AI (optional, Pro)
With your own key (Agnes, OpenAI, Claude, Mistral, Groq, Gemini, DeepSeek, OpenRouter or a compatible service), the assistant can run an overall audit, suggest compliant cookie banner texts, review your privacy policy, draft a terms-of-sale outline, an accessibility plan, a 30/60/90-day plan, write the report texts and review the report before sending. It only sees the data of the open project and its answers are leads to check.
Your key stays in your browser; it is never stored on our servers. The rest of the tool works without AI.
Where is my data?
Your projects are saved in your browser, automatically. The server receives your answers while it computes the score and generates the documents, without keeping them. The discovery version keeps 1 project; Pro keeps 30 and can back them up as JSON.
Discovery version or Pro?
| Discovery (free) | Pro | |
|---|---|---|
| Data entry, demo, 6-axis score, cookie banner analysis, WCAG criteria, every tab | ✓ | ✓ |
| Action plan priorities | The first 3 | All of them |
| The 7 documents and the client report, in full | ✓ | ✓ |
| PDF, HTML, Markdown, breach procedure and documents ZIP exports | With a “Discovery version” watermark | No watermark |
| Data exports (CSV record, CSV, Notion, Airtable, JSON) and JSON import | — | ✓ |
| Saved projects | 1 only | Up to 30 |
| 3 industry templates | — | ✓ |
| AI with your own key (Agnes, OpenAI, Claude, Mistral, Groq, Gemini…) | — | ✓ |
Compliance Studio Pro costs €29, paid once. It is also included in the Business Pack (€99) and in Full Access (€179).
Common problems
- An axis shows “n/a”.
- No question on this axis has an answer. Answer Yes, Partial or No to at least one question in the matching section.
- The terms axis is not rated.
- Terms of sale and withdrawal are only assessed if the site sells online: check the “Sells online” answer in section 1.
- A document still shows “To complete”.
- The counter above the preview shows how many passages are missing. Each one matches an empty field: fill it in and the preview updates.
- My cookies are not classified as I expect.
- Check the type on each line (second column). An unknown type is treated as requiring consent, to be safe.
- The AI says “invalid key”.
- Check that the selected provider matches your key, then test it again. Free keys are limited to a few requests per minute.
- I can't find my project.
- Check that you are using the same computer, the same browser and the same account.
Another question? Write to us, we reply quickly. See the Pro price →