Frequently asked questions

No. StackPatrol is the technical map your DPO needs before the legal review. It surfaces the third-party services your website loads and where those vendors are based, so legal analysis starts from facts. We don't give legal advice or certify compliance.

BuiltWith is a sales-intelligence tool focused on identifying technology stacks for B2B prospecting. StackPatrol is built for digital sovereignty: it classifies vendors by ownership region (US, EU, China, etc.), explains the jurisdictional picture, and suggests European alternatives. No signup required, and we don't sell the data.

Scanning is completely free and unlimited. No account, no credit card needed. Any scan loads your front page and one additional internal page using a real browser. You get a full vendor report, EU Independence Score and EU alternatives instantly.

Scanning is always free for everyone. Pro (€39/month) adds a personal dashboard with full scan history, plus automatic weekly monitoring: a durable timeline of when each vendor first appeared and disappeared, privacy- and cookie-policy change tracking, and email alerts when your stack changes between scans. Monitor up to 5 sites on Pro, 10 on Agency Starter (€89/month), 30 on Agency (€149/month) or 100 on Agency Pro (€299/month).

Every monitored scan feeds a durable per-site history: when each vendor was first and last seen, whether it loaded before or after consent, and a timeline of vendor additions, removals and score changes. On the same run we also find and fingerprint your privacy policy, cookie policy, DPA and terms — even when they're hosted on a parent-company domain — track the date each says it was last updated, and detect when the content actually changes. If vendors change but a policy stays frozen, the alert flags a possible documentation gap. You can export the full timeline to CSV or JSON.

It's the single most decision-relevant signal for a DPO: which advertising, analytics and tracking vendors fire on the very first page load, before the visitor answers the cookie banner. StackPatrol records the no-interaction load, filters it to genuine tracking categories, and separates first-party services from third-party ones so the headline count reflects only third-party trackers. It's a technical observation of what loaded, not a legal assessment.

A first draft of your Art. 30 records, built from the scan: every external recipient we observed, grouped by whether data leaves the EEA (within EEA, covered by an adequacy mechanism, or no adequacy / unknown) and whether it fired before or after consent. An exposure matrix shows the shape at a glance, and paid plans can export the full recipient list to CSV. It's a fact-based overview to help you prioritise — not a GDPR risk rating — so confirm each recipient's purpose and legal basis with your DPO.

The paid PDF (€79, one-time) crawls up to 20 pages across your site and delivers a complete vendor audit as a formatted PDF. Useful as documentation for DPOs, dev teams or clients. Order it from any scan results page after running a free scan.

It starts at 100. Each non-EU vendor reduces the score by a base jurisdiction risk (e.g. 8 for US, 14 for China) multiplied by how sensitive the vendor's category is. A tag manager scores higher than a font. A separate ratio penalty applies when non-EU vendors dominate the stack. Unmatched domains reduce the score further. The score card shows the full breakdown.

Yes. Scan results are saved so you can share a link to your report. If you're signed in, scans are also saved to your personal dashboard. We don't use the data for advertising or sell it to third parties.