Meta Pixel detected
Processor missing from disclosure.Website compliance scan
See where your website and legal pages drift apart.
Normio scans public policy pages, cookies, third-party tools, and GDPR, APPI, and PIPL signals so teams know what changed, why it matters, and which document needs review.
Normio scan
public-site reviewReview
Cookie retention mismatch
Policy says 30 days. Live cookie resolves to 180.Privacy policy sections found
Retention, rights, transfers, and processors indexed.- 0
- tracking script required
- 4
- checks from one domain
- 1
- focused review feed
Compliance reviews
Start with the framework that fits your privacy review.
Each service starts from the same public-site evidence, then helps your team focus on the documentation context that matters.
European Union
GDPR readiness review
Review public privacy documentation, GDPR coverage, and third-party disclosure drift.
Explore GDPR JapanAPPI privacy review
Bring policy text and live-site evidence together for an APPI-aware review.
Explore APPI ChinaPIPL privacy review
Surface public privacy-policy drift for a more focused PIPL review with counsel.
Explore PIPLThe problem
Compliance drift is quiet until it becomes expensive.
Your stack changes
Analytics, payments, auth, support, embeds, and vendors keep moving.
Your legal pages lag
Privacy policies, cookie notices, and processor lists stay static.
The gap stays invisible
Nothing crashes. The mismatch only appears during review, audit, or complaint.
How it works
From domain to review list in four checks.
Add a domain
Start from the public website you own or manage.
Scan the surface
Normio checks policy pages, cookies, scripts, embeds, and known third parties.
Compare signals
Detected behavior is matched against privacy text and framework-related disclosures.
Review the drift
Your team gets a short list of mismatches with source, context, and owner hints.
Scan preview
A short, actionable feed instead of another noisy dashboard.
Normio groups website evidence into review work: the source, the mismatch, the likely owner, and the legal page that needs attention.
Start a scandrift
legalGoogle Analytics consent category changed
Banner labels analytics as necessary, while the policy still says optional analytics.
review
productNew data processor found
A support service loads on help pages but is not listed in public disclosure.
vendor
opsStripe terms updated
Vendor terms changed. Payment processor disclosure may need review.
Trust model
Built for background checks, not attention theater.
No ad-network behavior
Normio checks sites and documents. It is not built to profile visitors.
Framework-relevant evidence
Focus on processors, cookies, retention, transfers, rights, and policy pages.
Quiet by default
Silence is useful. Normio surfaces changes when there is something to review.
early access
Know what needs review before an audit finds it for you.
Start with one public domain. Normio will scan the visible surface and show where website behavior and legal text disagree.
FAQ
Practical answers before you point Normio at a domain.
What does Normio monitor?
Public policy pages, scripts, embeds, cookies, vendors, processors, consent categories, and the places those signals should be disclosed.
Is this legal advice?
No. Normio surfaces operational compliance drift and review evidence. Legal decisions stay with your counsel, DPO, or privacy lead.
Do I need to install a script?
Not for the first public-site scan. Normio can start from public pages, detected scripts, cookies, and policy URLs.
Who is Normio for?
SaaS teams, founders, privacy leads, agencies, and compliance operators who need to know when website reality drifts from legal text.