Practical e-books, contract clauses, and compliance checklists — built for agencies with 1–50 employees serving EU clients. No compliance team required.
Since 2025, EU web agencies face three overlapping compliance requirements. Enterprise clients expect proof — and small agencies rarely have the documentation ready.
Enterprise clients must assess vendor security. Without a documented security policy, incident response plan, and contract clauses, your agency looks like a liability.
Every agency handling client data needs a Data Processing Agreement (DPA). Clients increasingly demand it as a condition of engagement.
Public-facing websites must carry an accessibility statement and meet WCAG 2.1 AA standards. Agencies serving EU enterprises need to demonstrate compliance.
Complete guides you can read, apply, and hand to clients. Available in EPUB format for Kindle, Apple Books, and any e-reader.
Complete 40+ page guide covering scope assessment, security measures, incident reporting, contract clauses, and a 30-day compliance checklist. Written for agencies with 1–50 employees.
10-point accessibility checklist covering color contrast, alt text, heading hierarchy, keyboard navigation, screen readers, forms, links, multimedia, zoom, and accessibility statements. With a 14-day fix plan.
Complete guide covering controller/processor roles, DPAs, records of processing, incident response, data subject rights, and a 14-day action plan. Written for agencies with 1–50 employees.
Shopify-specific EAA guide covering product images, theme accessibility, checkout flow, and the EAA-required accessibility statement. Written for Shopify merchants selling into the EU.
Practical guide to meeting GDPR, ePrivacy, and cookie requirements without a legal team. Covers cookie banners, consent records, privacy policies, and data subject requests.
A complete practical guide to building and publishing your first Chrome extension — from blank folder to the Chrome Web Store in 3 hours. Manifest V3, popups, context menus, service workers, options pages, and publishing, step by step.
Answer 7 quick questions and get an instant readiness score — plus personalised recommendations.
How many employees does your agency have?
Fill-in templates and ready-to-use clauses. Fill in your details and deploy — no legal team needed. Coming soon to Gumroad.
Data Processing Agreement for small agencies — Article 28 GDPR compliant. Includes technical measures annex and subcontractor log.
8 ready-to-use contract clauses: security obligations, incident notification, subcontractor management, audit rights, and termination for non-compliance.
Compliant accessibility statement template for client websites. Includes WCAG reference table, known limitations log, and maintenance checklist.
10 most common client security questions with model answers, plus a vendor assessment scorecard for your own subcontractors.
The EU's Network and Information Security Directive 2 requires medium/large enterprises in covered sectors to secure their supply chain. If you serve enterprise clients, they will audit your security practices — and you need documented policies to pass contract requirements.
Yes. If a site offers a service or product to the EU public, it must meet WCAG 2.1 AA accessibility standards. This includes WooCommerce stores, booking systems, and membership sites. Enforcement is ramping up across EU member states in 2026.
The e-books are being published on Amazon Kindle Direct Publishing (KDP). The template library is coming to Gumroad. Both platforms handle payment processing — no subscription, no monthly fees. We'll announce launch dates here and via the notification list.
The guides are based on publicly available EU regulations and published enforcement decisions. They are practical tools, not legal advice. We recommend having your specific contracts reviewed by a qualified attorney.
All five e-books are in EPUB 3 format — compatible with Amazon Kindle, Apple Books, Google Play Books, and any standard e-reader. You can also open them with Calibre (free) on desktop.
The series covers the most common needs for small web agencies. If you need something specific, we may add it in a future update — the catalog is growing.
Run a free WCAG 2.1 AA scan on your site — 10 platform-specific guides with concrete fix steps:
Check any WordPress site against 16 WCAG rules — no plugin install. Or grab our free scanner plugin.
EAA-ready check for stores selling into the EU.
Verify clean markup is also accessible markup.
See how your Wix site scores in seconds.
Beautiful template ≠ accessible site. Check yours.
Drupal has strong foundations — custom themes break them.
Joomla 4+5 bring improvements — extensions may not.
Store selling into the EU? Check themes, modules and checkout.
Drag-and-drop ≠ accessible. Verify your published pages.
Adobe Commerce stores need PHTML, XML and extension checks.
Newsletter or paid publication for EU readers? Verify your theme.
Public-sector favourite — check BITV/EN 301 549 basics free.
Your templates decide accessibility. See what they emit.
Razor views and editor content — scan the rendered result.
Practical compliance guides, checklists, and action plans for small web agencies:
Printable checklist covering every Article 21 measure — risk, incidents, supply chain, documentation. Print as PDF with Ctrl/Cmd+P.
June 2025 has passed. What regulators enforce in 2026, who is exempt, per-country fines, and what to do today if you're non-compliant.
Cookie consent, processors, forms, retention and data subject rights — everything a compliant site needs beyond the banner.
WAVE vs axe vs Lighthouse vs screen readers — what each actually catches, and a testing workflow that holds up to audit.
A practical guide for 2026 — scope test, supply chain requirements, 7-step action plan, and contract clauses. No compliance team needed.
Complete 10-point WCAG 2.1 AA checklist for WordPress sites. Each check takes 5 minutes. Includes free scanner and platform-specific guides.
Step-by-step guide to creating an EAA-compliant accessibility statement. Covers required sections, common mistakes, and a free template. Includes our free generator tool.
Complete guide to DPAs — when you need one, 7 essential clauses, common mistakes, and how to get it signed without a lawyer. Updated for 2026.
What your small agency needs to document when a security incident happens — 6 required sections, notification timeline, and a fill-in template for NIS2 compliance.
Complete guide to cookie consent for small agencies — ePrivacy Directive requirements, banner compliance, consent records, cookieless analytics, and a 7-step implementation plan.
The 9 new WCAG 2.2 success criteria explained in plain language — target size, focus visibility, accessible authentication — and a practical update plan for client sites.
€1.2 billion fined last year — but almost none of it hits small agencies. What the enforcement data really says, the two-tier penalty system, and a 15-minute risk check.
One year after the EAA took effect: real lawsuits, market surveillance, penalty levels across EU member states, and a 5-step action plan for small agencies.
Cookiebot vs CookieYes vs Iubenda vs Osano vs Complianz — side-by-side comparison of pricing, features, Google Consent Mode v2, and EAA accessibility. Practical recommendations for small agencies.
The FTC fined accessiBe $1M — and 20-25% of US accessibility lawsuits hit sites with overlays installed. What the data shows, what the European Commission says, and the remediation workflow that actually works.
Quotes range from $0 to $30,000 — and both can be legitimate. Real 2026 price tiers, what drives audit cost, what the EAA requires, and how to package accessibility work for clients at €900-€2,500.
Article 21 makes vendor risk a legal duty. How to map your supply chain, assess vendors with a simple register, write the right contract clauses, and cut your attack surface in a week.
Two EU frameworks, one small agency. Where they overlap, where they diverge, and how to satisfy both with a single set of documents instead of two compliance programmes.
A practical compliance workflow for agencies running TYPO3 sites for German public-sector clients and EU businesses covered by the EAA — editor fixes, template pitfalls, testing loop.
Theme settings, Liquid fixes, app audits and checkout checks that bring a Shopify store up to WCAG 2.1 AA — most without touching code.
Where Webflow builds actually fail WCAG — div-soup headings, interaction traps, gradient contrast — and the Designer workflow that fixes them.
Theme fixes, Koenig content habits, and membership-flow checks that bring a Ghost site up to WCAG 2.2 AA — without rebuilding it.
What core already does well, where contributed modules break compliance — and the Views, form and content fixes that close the gap.
What you can and cannot fix inside Squarespace — site styles, alt text at scale, heading structure and the code-injection points that matter.
What you can fix in the Wix Editor — alt text, heading tags, contrast, hover-only menus — and how agencies audit Wix builds against WCAG 2.1 AA.
Where Magento and Adobe Commerce stores fail WCAG — layered navigation, checkout, extensions — and the theme-level remediation that gets EU shops compliant.
Where PrestaShop stores fail WCAG — product legends, filter modules, checkout — and the back-office and theme fixes that get EU merchants compliant.
Template overrides, editor habits and extension checks that bring a Joomla site up to WCAG 2.1 AA — for German public-sector clients and EAA-covered businesses.
Both platforms must meet the European Accessibility Act. Where each fails WCAG 2.1 AA, how their fix workflows differ, and what compliance costs on either stack.
One law, two very different architectures. Where WordPress and Wix sites fail WCAG 2.1 AA under the EAA — and what remediation looks like on each.
Two visual builders, one legal obligation. Where Webflow and Squarespace sites fail WCAG 2.1 AA — and what fixing looks like on each.
The two open-source CMSs EU public sector trusts most. Core baselines, extension risk, BITV duties — and which stack remediates faster.
Free CLI scanner for WCAG 2.2 / EAA issues — 16 rules, contrast computation, JSON output, and a --fail-on flag for CI. Python and Node.js, zero dependencies.
Hvad koster en WCAG-audit i 2026? Reelle prisintervaller fra gratis scanning til fuld manuel audit — og hvordan bureauet selv prissætter arbejdet.
Læs guiden →Dataansvarlig eller databehandler? DBA-pligter, cookies, hosting, 72-timers-reglen — plus en 5-trins tjekliste for bureauer.
Læs guiden →Generator, scanner og kontrasttjek til den erklæring, Den Europæiske Accessibilitetslov kræver — hvad dækker de, og hvad gør du med resultatet?
Læs guiden →Hvad håndhæves der i 2026, hvem er undtaget, hvor store er bøderne — og den hurtigste vej til dokumenteret overensstemmelse.
Læs guiden →Controller or processor? DPA obligations, cookies, hosting, the 72-hour rule — plus a 5-step checklist for agencies.
Read the guide →Dataansvarlig eller databehandler? DBA-pligten, cookies, hosting, 72-timers-reglen — og en 5-trins tjekliste for bureauet.
Læs guiden →Hvem er omfattet, de 10 sikkerhedskrav, 24/72-timers incident-pligten, leverandørkæden — og en 5-trins plan for små bureauer.
Læs guiden →Hvornår kræves samtykke, EDPB's banner-krav, CNIL-bøderne, Consent Mode v2 — og 5 trin til en korrekt løsning på klient-sites.
Læs guiden →Sømål i Frankrig, markedsovervågning i Sverige og Holland, bøder fra €40.000 til €900.000 — og 5-trins planen for små webbureauer.
Læs guiden →FTC-sag, søgsmålsdata, EAA-positionen — og hvad der faktisk virker for små webbureauer i stedet for overlay-widgets.
Læs guiden →De 9 nye successkriterier, hvad der blev fjernet, og hvordan små webbureauer opdaterer klient-sites til den nye standard.
Læs guiden →Artikel 21(2)(d), vendor assessment, kontraktklausuler og en 5-trins plan til at reducere leverandørrisiko — skrevet til små bureauer.
Læs guiden →Hvornår er du databehandler? Artikel 28's ni obligatoriske elementer, underbehandlere, test-data og en skabelon-struktur du kan bruge i dag.
Læs guiden →Bøde-trappen i artikel 83, reelle eksempler fra Danmark og EU, og de fem fejl der faktisk udløser sanktioner for små virksomheder.
Læs guiden →Gratis CLI-scanner til WCAG 2.2 / EAA: 16+ regler, kontrastberegning, JSON-output og CI-integration — guide på dansk.
Læs guiden →Meta-tags, Open Graph, JSON-LD, overskrifter, alt-tekster og security headers — sådan tjekker du det gratis på to minutter.
Læs guiden →Privacy notice, DPA and RoPA generators — what each produces, when a template is enough, and where you still need a lawyer.
Read Guide →A 12-question scope self-assessment, readiness guides and incident checklists — is your company in scope, and what to do about it.
Read Guide →Den danske udgave af vores NIS2-toolguide: selvvurdering af omfang, klar-til-brug guider og incident-tjeklister — gratis og uden tilmelding.
Læs guiden →One SVG or PNG in, every favicon size plus favicon.ico and an HTML head snippet out — right in your terminal. No upload, no waiting, your logo never leaves your machine.
Get it free →Meta tags, Open Graph, JSON-LD, headings, alt text and security headers — paste a URL, get a scored report in seconds. Runs in the browser, no install, no signup.
Try it free →Paste over-formatted text and copy it back as clean Markdown or plain text. Runs entirely in your browser — no upload, no install, no signup.
Try it free →Copy any selection as clean Markdown in any browser with one drag to your bookmarks bar. No extension, no signup, works everywhere — including Safari, Edge and Firefox.
Get the bookmarklet →Clipboard HTML meets a Markdown vault — and junk wins. Three ways to paste clean text or proper Markdown into Obsidian, including the free Clean Copy plugin.
Read Guide →Why pasted web text arrives with broken formatting — and which Chrome extensions copy your selection as Markdown or clean text, including the free, open-source Clean Copy.
Read Guide →Four ways to copy text without formatting junk — paste shortcuts, clipboard managers, and the Clean Copy extension that fixes it at the source. Updated for 2026.
Read Guide →Ctrl+Shift+V, PureText, clipboard managers, and Clean Copy — ranked by convenience. Plus a real workflow that eliminates formatting problems without changing your paste habits.
Read Guide →AI answers paste into Word and Google Docs full of asterisks and hash marks. Three fixes compared — including a free clipboard converter.
Read Guide →Paste raw HTML, get clean Markdown instantly. A free in-browser converter — nothing is uploaded, unlimited use, no account.
Open the Converter →Pasted tables arrive as one merged column? Three fixes ranked by reliability — including converting any web table to clean Markdown with the free Clean Copy extension.
Read Guide →No spam. No newsletters. Just a one-time email when the store opens and products are available for purchase.