# Rizoma GDPR Scanner

> Free automated GDPR compliance scanner for any website. Detects CMP configuration, third-party vendor tracking, consent signals, Google Consent Mode v2, cookie policy compliance, and generates detailed reports with compliance scores.

## Product

- **URL**: https://gdpr-scan.rizoma-tech.com
- **Company**: Rizoma Technologies GmbH, Potsdam, Germany
- **Free tier**: Unlimited standard scans
- **Premium**: AI-powered expert analysis (Claude/Gemini)

## What It Checks

1. **Consent Management Platform (CMP)**: Detects 14+ CMPs (Usercentrics, Cookiebot, OneTrust, CookieYes, Borlabs, etc.)
2. **Third-party vendors**: Identifies marketing, analytics, and functional scripts loading before/after consent
3. **Google Consent Mode v2**: Validates all 4 required parameters (ad_storage, ad_user_data, ad_personalization, analytics_storage)
4. **Post-consent analysis**: Clicks "Accept All" and measures which vendors load only after consent
5. **Cookie policy**: Scrapes and analyzes cookie policies, compares declared vs detected cookies
6. **Privacy policy detection**: Checks common paths, page links, and .well-known
7. **Compliance score**: 0-10 scale based on P0/P1/P2 issues

## How It Works

- HTML source analysis for script tags, tracking pixels, consent-blocked scripts
- Playwright Chromium headless browser for runtime network capture
- CMP vendor list enrichment (Usercentrics API integration)
- Gap analysis: declared vendors vs detected vendors
- Cookie policy scraping via robots.txt, sitemap.xml, page links, LLM extraction

## riVeri Integration

Scan results feed into riVeri verifiable credentials:
- Automated VendorComplianceProfile credentials for approved vendors
- Compliance evaluation with 5 checks (CMP, consent signals, privacy policy, cookie behavior, cookie policy)
- Regression detection across periodic rescans
- Auto-revocation on critical compliance failures

## Related

- [rizomaID Platform](https://rizoma-tech.com): Parent verifiable credentials platform
- [riVeri Trust Registry](https://api.id.rizoma-tech.com/riveri/trust-registry): Public list of trusted issuers
- [Verify a Domain](https://api.id.rizoma-tech.com/riveri/verify/{domain}): Check vendor compliance status