Up to 100 websites in one niche, audited the same way, in the same period. You see which problems the sector carries, how common each one is and how serious, before anyone else does. Websites change every week, so each review is valid for four weeks from its final review. After that its findings are out of date, and it is no longer available.
How a sector review is made
Every review is commissioned, and every one runs the same way, from the preliminary review to the day it becomes available for sale. What we find on one site goes only to the business that runs it.
- Start
A review is commissioned
One niche, up to 100 websites. No business pays to be in it or left out.
- Week 1
We run the preliminary review
56 compliance checks on every site, across privacy choices, what visitors type, policies, security and accessibility, on a desktop and on a phone. Each site gets its own preliminary report.
- Week 1
Every brand hears from us
If your site is in the review, we send you its preliminary report, privately: what we found and how serious it is.
- Two weeks on
The final review
We run all 56 checks on every site again. The sector review records each site as it is that day.
- Then
The review is delivered, then becomes available for sale
The finished review is delivered first. Two weeks after that it becomes available for sale for two weeks. Each review is valid for four weeks from its final review. After that its findings are out of date, and it is no longer available.
Every brand in a review hears what we found on its own site first, privately. No business pays to be in a review, left out or described differently. Our independence commitments
56 checks across the whole digital presence, broad and deep
Not a box to tick. From the first second a page loads to long after a visitor says no, and from the promises in a privacy policy to what the code actually does. Each check looks for a problem that puts a brand at risk. That is the reason to come to us: no other provider we compared checks this much, in one place.
Broad: everything a visitor touches
The pages, the forms, the chat window, the policies and the site’s own code, on a desktop and on a phone.
- 56 checks, the same for every site
- Every risk ranked, with evidence
- A note on where each fix sits
ScopeConduct observed as a US shopper would see it, in a standard browser. Each report states exactly where and when we looked. Not a legal assessment.
- 27 checks
Privacy choices
A no that the site doesn’t honour is the problem behind many recent website privacy settlements, and exactly what plaintiffs’ firms look for.
- 6 checks
What visitors type and look for
Health details, private messages and half-typed forms reaching advertisers is the kind of problem regulators and reporters pick up first.
- 16 checks
Policies and state rules
A privacy policy is a promise. When the site does something else, or a state rule goes unmet, the policy stops protecting the brand.
- 4 checks
Security and accessibility
Secret keys left in the code and unsafe sign-ins put customers at risk. Serious accessibility gaps shut people out.
- 3 checks
On a phone
Many visitors only ever see the phone version, and problems that only show there are the easiest to miss.
From a sector review to fixes done for you
Every engagement starts with a sector review. Knowing exactly where each problem sits is most of the work; if you want help with the rest before your re-audit, this is how we work with you.
- Start here
Sector review
We audit up to 100 sites in a niche as a shopper would, and send each brand in it the preliminary report for its own site: what we found, where it sits and how serious it is.
Order a report Sector review Full Preliminary Report
Step-by-step instructions for every item in your report, written for whoever runs your site.
Details Full Preliminary ReportThe Promise-Kept Year
We keep watch over your site and send a new Full Preliminary Report whenever something changes, so a new app, tag or banner update does not quietly undo the work.
Details The Promise-Kept YearDone for you
For a year we coordinate every fix with your developer, agency and counsel, then confirm each one on a re-audit.
Details Done for you
Paying for help never changes your report or your re-audit date. Only a change to the site itself does.
Digital compliance in the news
The latest regulator actions and rule changes we follow, each summarised on our news page and linked to its source.
- LifeStance Health settles class claims over the tracking pixels on its patient booking site$3.028 millionU.S. District Court in Arizona (class action)
- European Wax Center settles class claims over the tracking on its website$5 millionFlorida Circuit Court, Hillsborough County (class action)
- California widens the right to delete to data a business got from third partiesCalifornia Privacy Protection Agency (CalPrivacy)
- TikTok settles US claims over how it collected children’s data$400 millionU.S. Department of Justice
Who our reviews are for
- Plaintiffs’ firms, who look for the problems we find.
- Reporters, who cover how brands handle their customers’ data.
- Insurers and investors, who need to know where the risk sits before they cover or back a brand.
- Retailers, marketplaces and buyers, who check a brand before they stock it or buy it.
- Consumer brands, who want to know where they rank in their niche.
Independence statement
Tolbrook is independent of the businesses it audits. Every website in a review is audited the same way, on the same criteria and in the same period. No business pays to be included, left out or described differently, and paying for any Tolbrook service never changes a review or a report. Only a change to the site itself, seen at the final review, does. What we find on a single site goes only to the business that runs it.
Tolbrook is a private company. It is not a regulator, a government agency, a standards body or a law firm. Nothing we write is legal advice or a statement about any business's legal position.
Order a report
See how a whole niche handles visitor data, on the same criteria across up to 100 sites in it.
See the reports