E-BOOK SERIES

EU Compliance for
Small Web Agencies

Practical e-books, contract clauses, and compliance checklists — built for agencies with 1–50 employees serving EU clients. No compliance team required.

See All Products Free EAA Scanner Statement Generator NIS2 · EAA · GDPR — everything in one suite
📖 5 complete e-books 📋 4 field-tested templates ⚡ 10 platform-specific guides 🛠 2 free tools

Three regulations, one problem

Since 2025, EU web agencies face three overlapping compliance requirements. Enterprise clients expect proof — and small agencies rarely have the documentation ready.

🔴 NIS2 — Cybersecurity

Enterprise clients must assess vendor security. Without a documented security policy, incident response plan, and contract clauses, your agency looks like a liability.

📋 GDPR — Data Protection

Every agency handling client data needs a Data Processing Agreement (DPA). Clients increasingly demand it as a condition of engagement.

⚡ EAA — Accessibility

Public-facing websites must carry an accessibility statement and meet WCAG 2.1 AA standards. Agencies serving EU enterprises need to demonstrate compliance.

E-Books

Complete guides you can read, apply, and hand to clients. Available in EPUB format for Kindle, Apple Books, and any e-reader.

BEST SELLER
NIS2 Compliance for Small Web Agencies — book cover

NIS2 Compliance for
Small Web Agencies

Complete 40+ page guide covering scope assessment, security measures, incident reporting, contract clauses, and a 30-day compliance checklist. Written for agencies with 1–50 employees.

📖 7 chapters + 3 appendices 📄 EPUB (Kindle-ready) ✅ 30-day checklist included
What's inside:
  • Does NIS2 apply to your agency? — The scope test
  • 10 essential security measures (Article 21) — plain English
  • Incident reporting — 24h early warning template
  • Supply chain security — what clients will ask
  • Contract clauses every agency needs (5 ready-to-use)
  • 30-day compliance checklist (day by day)
  • Sample policies: security policy, incident response plan
$12.99 70% royalty — $9.09 per sale

Ready for Amazon KDP

NEW
EAA Compliance Checklist for WordPress Sites — book cover

EAA Compliance Checklist
for WordPress Sites

10-point accessibility checklist covering color contrast, alt text, heading hierarchy, keyboard navigation, screen readers, forms, links, multimedia, zoom, and accessibility statements. With a 14-day fix plan.

📖 25+ pages ♿ 10-point checklist 📅 14-day fix plan
What's inside:
  • Is your site in scope? — EAA applicability guide
  • 10-point compliance checklist (with testing tools)
  • Testing tools comparison — all free
  • 14-day fix plan — day by day
  • Making EAA compliance a revenue stream
  • Sample accessibility statement template
  • Quick reference card (printable)
$9.99 70% royalty — $6.99 per sale

Ready for Amazon KDP

NEW
GDPR Compliance for Small Web Agencies — book cover

GDPR Compliance for
Small Web Agencies

Complete guide covering controller/processor roles, DPAs, records of processing, incident response, data subject rights, and a 14-day action plan. Written for agencies with 1–50 employees.

📖 8 chapters + 3 appendices 📄 EPUB (Kindle-ready) ✅ 14-day action plan
What's inside:
  • Why GDPR applies to your agency — the myth that gets you in trouble
  • Controller vs processor — your two legal roles explained
  • The three documents that matter (DPA, RoPA, incident plan)
  • Security measures that actually count (baseline 12 checklist)
  • Data subject rights — handling DSARs and erasure requests
  • 14-day action plan — day by day to documented compliance
  • Core DPA clause language (ready-to-paste)
$12.99 70% royalty — $9.09 per sale

Ready for Amazon KDP

NEW
EAA Compliance for Shopify Stores — book cover

EAA Compliance for
Shopify Stores

Shopify-specific EAA guide covering product images, theme accessibility, checkout flow, and the EAA-required accessibility statement. Written for Shopify merchants selling into the EU.

📖 9 chapters + 2 appendices 🛒 Shopify-specific fixes 📋 Full compliance checklist
What's inside:
  • What the EAA means for your Shopify store
  • The 10 most common accessibility failures on Shopify
  • Fixing product images — alt text system in Shopify
  • Theme accessibility — contrast, focus, keyboard
  • Checkout and forms accessibility
  • EAA accessibility statement template for Shopify
  • Testing your store and maintaining compliance
$12.99 70% royalty — $9.09 per sale

Ready for Amazon KDP

NEW
Cookie Consent & Privacy Compliance — book cover

Cookie Consent & Privacy
Compliance

Practical guide to meeting GDPR, ePrivacy, and cookie requirements without a legal team. Covers cookie banners, consent records, privacy policies, and data subject requests.

📖 8 chapters + 2 appendices 🍪 Cookie banner templates 📄 Privacy policy structure
What's inside:
  • What the law actually requires (GDPR + ePrivacy)
  • Cookies and tracking — how to audit your site
  • Building a compliant cookie banner
  • Consent record-keeping and versioning
  • Privacy policy — what must be in it (Article 13)
  • Handling data subject requests (with templates)
  • Analytics without consent violations
  • Common compliance traps (and how to avoid them)
$9.99 70% royalty — $6.99 per sale

Ready for Amazon KDP

How compliant is your agency?

Answer 7 quick questions and get an instant readiness score — plus personalised recommendations.

Question 1 of 7

How many employees does your agency have?

Template Library

Fill-in templates and ready-to-use clauses. Fill in your details and deploy — no legal team needed. Coming soon to Gumroad.

DPA Template

Data Processing Agreement for small agencies — Article 28 GDPR compliant. Includes technical measures annex and subcontractor log.

📋 Fill-in template 🔒 Annexes A–C
$14.99 Coming to Gumroad

NIS2 Contract Clause Pack

8 ready-to-use contract clauses: security obligations, incident notification, subcontractor management, audit rights, and termination for non-compliance.

📑 8 clauses ⚖️ Paste into contracts
$12.99 Coming to Gumroad

EAA Accessibility Statement

Compliant accessibility statement template for client websites. Includes WCAG reference table, known limitations log, and maintenance checklist.

🌐 /accessibility page ♿ WCAG 2.1 AA ready
$9.99 Coming to Gumroad

Vendor Security Checklist

10 most common client security questions with model answers, plus a vendor assessment scorecard for your own subcontractors.

✅ 10 questions answered 📊 Scorecard included
$14.99 Coming to Gumroad

Who this is for

Why trust these guides?

Every guide in the series is built from field experience working with small web agencies across the EU. The content was tested against actual enterprise procurement questionnaires, NIS2 implementation guidance, and EAA enforcement decisions. Nothing here is theoretical — it all works in practice.

Frequently Asked Questions

What is NIS2 and why should a small agency care?

The EU's Network and Information Security Directive 2 requires medium/large enterprises in covered sectors to secure their supply chain. If you serve enterprise clients, they will audit your security practices — and you need documented policies to pass contract requirements.

Does the EAA apply to websites built for clients?

Yes. If a site offers a service or product to the EU public, it must meet WCAG 2.1 AA accessibility standards. This includes WooCommerce stores, booking systems, and membership sites. Enforcement is ramping up across EU member states in 2026.

Where can I buy these products?

The e-books are being published on Amazon Kindle Direct Publishing (KDP). The template library is coming to Gumroad. Both platforms handle payment processing — no subscription, no monthly fees. We'll announce launch dates here and via the notification list.

Are these guides legally reviewed?

The guides are based on publicly available EU regulations, enforcement decisions, and field experience with real agencies. They are practical tools, not legal advice. We recommend having your specific contracts reviewed by a qualified attorney.

What format are the e-books in?

Both e-books are in EPUB 3 format — compatible with Amazon Kindle, Apple Books, Google Play Books, and any standard e-reader. You can also open them with Calibre (free) on desktop.

How do I get notified when products launch?

Use the notification link at the bottom of this page. No spam — just a one-time email when the store opens.

What if I need a custom template not listed here?

The series covers the most common needs for small web agencies. If you need something specific, we may add it in a future update — the catalog is growing.

Free accessibility checks by platform

Run a free WCAG 2.1 AA scan on your site — 10 platform-specific guides with concrete fix steps:

🔍 WordPress

Check any WordPress site against 16 WCAG rules — no plugin install. Or grab our free scanner plugin.

🛍️ Shopify

EAA-ready check for stores selling into the EU.

🎨 Webflow

Verify clean markup is also accessible markup.

🧩 Wix

See how your Wix site scores in seconds.

📐 Squarespace

Beautiful template ≠ accessible site. Check yours.

🐘 Drupal

Drupal has strong foundations — custom themes break them.

📋 Joomla

Joomla 4+5 bring improvements — extensions may not.

🛒 PrestaShop

Store selling into the EU? Check themes, modules and checkout.

🖱️ Weebly

Drag-and-drop ≠ accessible. Verify your published pages.

🏬 Magento

Adobe Commerce stores need PHTML, XML and extension checks.

Compare All 10 Platforms →

From the Blog

Practical compliance guides, checklists, and action plans for small web agencies:

NIS2

Is Your Small Web Agency NIS2-Ready?

A practical guide for 2026 — scope test, supply chain requirements, 7-step action plan, and contract clauses. No compliance team needed.

📖 8 min read ✅ Free guide
Read Guide →
EAA

EAA Accessibility Checklist: 10 Steps for WordPress

Complete 10-point WCAG 2.1 AA checklist for WordPress sites. Each check takes 5 minutes. Includes free scanner and platform-specific guides.

📖 6 min read 🛠 Free scanner included
Read Guide →
EAA

How to Write an EAA Accessibility Statement

Step-by-step guide to creating an EAA-compliant accessibility statement. Covers required sections, common mistakes, and a free template. Includes our free generator tool.

📖 7 min read ✏️ Free template included
Read Guide →
GDPR

GDPR Data Processing Agreement for Web Agencies

Complete guide to DPAs — when you need one, 7 essential clauses, common mistakes, and how to get it signed without a lawyer. Updated for 2026.

📖 7 min read ✏️ Free template included
Read Guide →
NIS2

NIS2 Incident Report Checklist & Template

What your small agency needs to document when a security incident happens — 6 required sections, notification timeline, and a fill-in template for NIS2 compliance.

📖 6 min read ✏️ Free template included
Read Guide →
GDPR

Cookie Consent & GDPR Compliance for Web Agencies

Complete guide to cookie consent for small agencies — ePrivacy Directive requirements, banner compliance, consent records, cookieless analytics, and a 7-step implementation plan.

📖 8 min read 🍪 Free compliance checklist
Read Guide →
EAA

WCAG 2.2: What Changed & What It Means for Your Clients

The 9 new WCAG 2.2 success criteria explained in plain language — target size, focus visibility, accessible authentication — and a practical update plan for client sites.

📖 7 min read 🆓 Free scanner included
Read Guide →
GDPR

GDPR Fines in 2026: What the Numbers Actually Mean

€1.2 billion fined last year — but almost none of it hits small agencies. What the enforcement data really says, the two-tier penalty system, and a 15-minute risk check.

📖 7 min read 📊 2026 enforcement data
Read Guide →
EAA

EAA Enforcement in 2026: What Has Actually Happened

One year after the EAA took effect: real lawsuits, market surveillance, penalty levels across EU member states, and a 5-step action plan for small agencies.

📖 7 min read ⚖️ Enforcement data
Read Guide →
GDPR

CMP Comparison 2026: Best Cookie Consent Platforms

Cookiebot vs CookieYes vs Iubenda vs Osano vs Complianz — side-by-side comparison of pricing, features, Google Consent Mode v2, and EAA accessibility. Practical recommendations for small agencies.

📖 8 min read 🍪 8 platforms compared
Read Guide →
EAA

Accessibility Overlays & the EAA: Why "One Line of Code" Is Not Compliance

The FTC fined accessiBe $1M — and 20-25% of US accessibility lawsuits hit sites with overlays installed. What the data shows, what the European Commission says, and the remediation workflow that actually works.

📖 8 min read ⚖️ 2026 regulator positions
Read Guide →
EAA & PRICING

What Does an Accessibility Audit Cost in 2026?

Quotes range from $0 to $30,000 — and both can be legitimate. Real 2026 price tiers, what drives audit cost, what the EAA requires, and how to package accessibility work for clients at €900-€2,500.

📖 8 min read 💶 Real 2026 price data
Read Guide →
NIS2 & SECURITY

NIS2 Supply Chain Security for Web Agencies

Article 21 makes vendor risk a legal duty. How to map your supply chain, assess vendors with a simple register, write the right contract clauses, and cut your attack surface in a week.

📖 8 min read 🔗 Vendor checklist included
Read Guide →
GDPR + NIS2

GDPR vs NIS2: What Overlaps — and What Doesn't

Two EU frameworks, one small agency. Where they overlap, where they diverge, and how to satisfy both with a single set of documents instead of two compliance programmes.

📖 9 min read 🔗 Combined document plan
Read Guide →
TOOLS

Accessibility Scanning from the Command Line

Free CLI scanner for WCAG 2.2 / EAA issues — 16 rules, contrast computation, JSON output, and a --fail-on flag for CI. Python and Node.js, zero dependencies.

📖 6 min read ⌨️ Free CLI included
Read Guide →

Get notified when products launch

No spam. No newsletters. Just a one-time email when the store opens and products are available for purchase.

Send a quick email to mads@mahope.dk with subject "Notify me" — or click the button below to open a pre-filled message.

Send Notification Request

Your email goes directly to us. No storage, no tracking, no mailing list.