# WebseitenWächter - EU Digital Compliance Analysis Tool

> Automated compliance analysis for German and EU businesses. We provide a real-time Compliance Dashboard checking EAA (Accessibility), CRA (Security), AI Act, DSA, GDPR, and more with professional PDF reporting.

## What We Do

WebseitenWächter helps European businesses identify compliance risks across multiple regulations before they lead to legal issues. Our serverless architecture allows for deep, real-time analysis of entire domains, providing a "TÜV meets Deloitte" style risk assessment.

### Key Benefits
- **Multi-Regulation Support**: One-stop-shop for EAA, CRA, GDPR, AI Act, and DSA.
- **Real-Time Dashboard**: Live progress tracking and technical audit logs.
- **Authoritative Reporting**: Professional PDF exports with risk levels and prioritized fix recommendations.
- **Transparency**: We clearly distinguish between automated findings and manual requirements.
- **Fast Analysis**: Hybrid serverless workers (Static & Browser-based) for speed and thoroughness.

## Our Services

### Free Compliance Audit (€0)
Get an instant overview of your website's compliance status across 11 key "quick-win" checks.

**What's Included:**
- EAA: Images alt text, heading hierarchy, language tags, duplicate IDs.
- CRA: security.txt presence, required fields, and encryption.
- Omnibus: Review policy links and personalized pricing disclosures.
- DACH: VSBG/ODR platform link detection.
- AI Act: AI-generated text marker detection.
- Real-time Dashboard access during the scan.

### Compliance Shield Monitoring (€24/month)
Continuous monitoring for ongoing compliance assurance and change detection.

**What's Included:**
- Daily automated scans of all 52+ compliance checkpoints.
- "TÜV Style" PDF Report downloads with management summaries.
- Email alerts for compliance regressions.
- History tracking and change logs.

### Agency Portfolio Package (€99/month)
Scalable compliance management for agencies.

**What's Included:**
- Monitor up to 10 websites.
- Centralized multi-site dashboard.
- API access for CI/CD integration.
- Priority support and white-label reporting options.

## Regulation Coverage (Phase 1 & 2)

### 1. EAA (Accessibility)
- Core WCAG indicators (Alt text, headings, contrast).
- Complex image descriptions and video synchronization checks.

### 2. CRA / NIS2 (Security)
- security.txt standards.
- TLS 1.2+ validation and HSTS headers.

### 3. AI Act (Transparency)
- Chatbot disclosure detection.
- AI content marker validation.

### 4. GDPR / TDDDG (Privacy)
- Google Fonts (local vs remote).
- Cookie banner technical validity (reject buttons, visual parity).
- GPC (Global Privacy Control) signal respect.

### 5. DSA (Digital Services Act)
- Marketplace trader transparency.
- Dark pattern detection (countdown resets, scarcity persistence).

## What We DON'T Do (Transparency)

❌ **Not a Legal Advice Service**: Results are technical indicators, not legal certificates.
❌ **Not a Lawyer Substitute**: Always consult a qualified attorney for final legal certainty.
❌ **Not 100% Manual Audit**: Some WCAG requirements require human judgment (e.g., semantic meaning).

## Common Questions (FAQ)

### What is the "TÜV Style" Report?
It's a professional PDF export designed for management and technical teams, providing a clear risk score (0-100), risk levels (Low/Medium/High), and a prioritized action plan.

### Does this cover the BFSG 2025?
Yes, our EAA module is specifically designed to address the technical requirements of the Barrierefreiheitsstärkungsgesetz (BFSG).

### Which industries need this most?
- E-commerce / Online shops (Omnibus & DSA focus).
- Tech Companies & SaaS (AI Act & CRA focus).
- Professional Services (GDPR & EAA focus).

## Target Audience

- **German SMBs** needing to navigate the new EU regulatory landscape.
- **Startups** building AI or marketplace products.
- **Agencies** offering compliance-as-a-service to clients.
- **DPOs (Data Protection Officers)** needing technical validation tools.

## Technical Details

- **Analysis Method**: Server-side using Node.js + Express
- **Checks**: Automated pattern matching + HTML parsing
- **Speed**: ~30-60 seconds per website
- **Privacy**: No cookies, no tracking, no data storage (free plan)
- **Availability**: 99.9% uptime on Google Cloud Run

## Use Cases

### Use Case 1: First-Time Website Owner
"I just launched my online shop. Is it compliant?"
→ Run free analysis → Fix critical issues (SSL, Impressum) → Upgrade to monitoring

### Use Case 2: Received an Abmahnung
"I got an expensive lawyer letter about my Cookie Banner"
→ Identify all potential issues → Fix comprehensively → Monitor to prevent recurrence

### Use Case 3: Agency Onboarding
"We're taking over 8 client websites. What's their compliance status?"
→ Use Agency Package → Scan all 8 sites → Present compliance report to clients → Ongoing monitoring

## About the Company

**Provider**: Value Unbound Solutions  
**Location**: Im Gehölz 31, 15827 Blankenfelde-Mahlow, Deutschland  
**Contact**: info@valueunbound.com | +49 162 7469145  
**Founded**: 2024  
**Focus**: Compliance automation for German SMBs  

## Legal Disclaimer

WebseitenWächter provides automated technical analysis based on publicly available criteria and best practices. The results do not constitute legal advice and do not replace consultation with a qualified attorney. We assume no liability for the completeness or accuracy of automated checks.

## Additional Resources

- Website: https://webseitenwachter.de
- Blog/Ratgeber: https://webseitenwachter.de/ratgeber
- Free Analysis: https://webseitenwachter.de/barrierefrei-check
- Pricing: https://webseitenwachter.de/pricing
- FAQ: https://webseitenwachter.de/faq

## Knowledge Base & Topics

Deep-dive technical compliance guides available on our platform:

### 1. Accessibility (EAA / BFSG)
- The Barrierefreiheitsstärkungsgesetz (BFSG) 2025: Compliance Guide
- WCAG 2.1 vs 2.2 Differences for E-Commerce
- Checklists for accessible web design (Contrast, ARIA, Keyboard Nav)

### 2. Privacy & Data (GDPR / TDDDG)
- Consent Management 2025: Legitimate Interest vs. Explicit Consent
- Server-Side Tracking for Data Minimization
- Google Fonts & Local Hosting Requirements

### 3. Security (CRA / NIS2)
- Cyber Resilience Act for Software/SaaS
- RFC 9116 (security.txt) Implementation Guide

### 4. Transparency (AI Act / DSA)
- Chatbot Labeling Obligations (AI Act Art. 50)
- Deepfake Watermarking Requirements
- Dark Patterns in UI Design (DSA Prohibition)

### 5. E-Commerce (Omnibus / PAngV)
- Price Indication Ordinance: Handling 'Strike-Through' Prices
- Fake Review Prevention & Verification Duties
- Checkout Button Labeling ('Buy' vs 'Order')