E-BOOK SERIES

EU Compliance for
Small Web Agencies

Practical e-books, contract clauses, and compliance checklists — built for agencies with 1–50 employees serving EU clients. No compliance team required.

See All Products Free EAA Scanner Statement Generator NIS2 · EAA · GDPR — everything in one suite
📖 5 complete e-books 📋 4 field-tested templates ⚡ 10 platform-specific guides 🛠 2 free tools

Three regulations, one problem

Since 2025, EU web agencies face three overlapping compliance requirements. Enterprise clients expect proof — and small agencies rarely have the documentation ready.

🔴 NIS2 — Cybersecurity

Enterprise clients must assess vendor security. Without a documented security policy, incident response plan, and contract clauses, your agency looks like a liability.

📋 GDPR — Data Protection

Every agency handling client data needs a Data Processing Agreement (DPA). Clients increasingly demand it as a condition of engagement.

⚡ EAA — Accessibility

Public-facing websites must carry an accessibility statement and meet WCAG 2.1 AA standards. Agencies serving EU enterprises need to demonstrate compliance.

E-Books

Complete guides you can read, apply, and hand to clients. Available in EPUB format for Kindle, Apple Books, and any e-reader.

BEST SELLER
NIS2 Compliance for Small Web Agencies — book cover

NIS2 Compliance for
Small Web Agencies

Complete 40+ page guide covering scope assessment, security measures, incident reporting, contract clauses, and a 30-day compliance checklist. Written for agencies with 1–50 employees.

📖 7 chapters + 3 appendices 📄 EPUB (Kindle-ready) ✅ 30-day checklist included
What's inside:
  • Does NIS2 apply to your agency? — The scope test
  • 10 essential security measures (Article 21) — plain English
  • Incident reporting — 24h early warning template
  • Supply chain security — what clients will ask
  • Contract clauses every agency needs (5 ready-to-use)
  • 30-day compliance checklist (day by day)
  • Sample policies: security policy, incident response plan
$12.99 70% royalty — ~$9 per sale

Ready for Amazon KDP

NEW
EAA Compliance Checklist for WordPress Sites — book cover

EAA Compliance Checklist
for WordPress Sites

10-point accessibility checklist covering color contrast, alt text, heading hierarchy, keyboard navigation, screen readers, forms, links, multimedia, zoom, and accessibility statements. With a 14-day fix plan.

📖 25+ pages ♿ 10-point checklist 📅 14-day fix plan
What's inside:
  • Is your site in scope? — EAA applicability guide
  • 10-point compliance checklist (with testing tools)
  • Testing tools comparison — all free
  • 14-day fix plan — day by day
  • Making EAA compliance a revenue stream
  • Sample accessibility statement template
  • Quick reference card (printable)
$9.99 70% royalty — ~$7 per sale

Ready for Amazon KDP

NEW
GDPR Compliance for Small Web Agencies — book cover

GDPR Compliance for
Small Web Agencies

Complete guide covering controller/processor roles, DPAs, records of processing, incident response, data subject rights, and a 14-day action plan. Written for agencies with 1–50 employees.

📖 8 chapters + 3 appendices 📄 EPUB (Kindle-ready) ✅ 14-day action plan
What's inside:
  • Why GDPR applies to your agency — the myth that gets you in trouble
  • Controller vs processor — your two legal roles explained
  • The three documents that matter (DPA, RoPA, incident plan)
  • Security measures that actually count (baseline 12 checklist)
  • Data subject rights — handling DSARs and erasure requests
  • 14-day action plan — day by day to documented compliance
  • Core DPA clause language (ready-to-paste)
$12.99 70% royalty — ~$9 per sale

Ready for Amazon KDP

NEW
EAA Compliance for Shopify Stores — book cover

EAA Compliance for
Shopify Stores

Shopify-specific EAA guide covering product images, theme accessibility, checkout flow, and the EAA-required accessibility statement. Written for Shopify merchants selling into the EU.

📖 9 chapters + 2 appendices 🛒 Shopify-specific fixes 📋 Full compliance checklist
What's inside:
  • What the EAA means for your Shopify store
  • The 10 most common accessibility failures on Shopify
  • Fixing product images — alt text system in Shopify
  • Theme accessibility — contrast, focus, keyboard
  • Checkout and forms accessibility
  • EAA accessibility statement template for Shopify
  • Testing your store and maintaining compliance
$12.99 70% royalty — ~$9 per sale

Ready for Amazon KDP

NEW
Cookie Consent & Privacy Compliance — book cover

Cookie Consent & Privacy
Compliance

Practical guide to meeting GDPR, ePrivacy, and cookie requirements without a legal team. Covers cookie banners, consent records, privacy policies, and data subject requests.

📖 8 chapters + 2 appendices 🍪 Cookie banner templates 📄 Privacy policy structure
What's inside:
  • What the law actually requires (GDPR + ePrivacy)
  • Cookies and tracking — how to audit your site
  • Building a compliant cookie banner
  • Consent record-keeping and versioning
  • Privacy policy — what must be in it (Articles 13–14)
  • Handling data subject requests (with templates)
  • Analytics without consent violations
  • Common compliance traps (and how to avoid them)
$9.99 70% royalty — ~$7 per sale

Ready for Amazon KDP

How compliant is your agency?

Answer 7 quick questions and get an instant readiness score — plus personalised recommendations.

Question 1 of 7

How many employees does your agency have?

Template Library

Fill-in templates and ready-to-use clauses. Fill in your details and deploy — no legal team needed. Coming soon to Gumroad.

DPA Template

Data Processing Agreement for small agencies — Article 28 GDPR compliant. Includes technical measures annex and subcontractor log.

📋 Fill-in template 🔒 Annexes A–C
$14.99 Coming to Gumroad

NIS2 Contract Clause Pack

8 ready-to-use contract clauses: security obligations, incident notification, subcontractor management, audit rights, and termination for non-compliance.

📑 8 clauses ⚖️ Paste into contracts
$12.99 Coming to Gumroad

EAA Accessibility Statement

Compliant accessibility statement template for client websites. Includes WCAG reference table, known limitations log, and maintenance checklist.

🌐 /accessibility page ♿ WCAG 2.1 AA ready
$9.99 Coming to Gumroad

Vendor Security Checklist

10 most common client security questions with model answers, plus a vendor assessment scorecard for your own subcontractors.

✅ 10 questions answered 📊 Scorecard included
$14.99 Coming to Gumroad

Who this is for

Why trust these guides?

Every guide in the series is built from EU primary sources — the NIS2 directive text, the European Accessibility Act, and GDPR articles with their official guidance — cross-checked against real enterprise procurement questionnaires and published enforcement decisions. Each claim links back to the regulation or enforcement data it comes from. Nothing here is theoretical; every checklist has been applied to real sites.

Frequently Asked Questions

What is NIS2 and why should a small agency care?

The EU's Network and Information Security Directive 2 requires medium/large enterprises in covered sectors to secure their supply chain. If you serve enterprise clients, they will audit your security practices — and you need documented policies to pass contract requirements.

Does the EAA apply to websites built for clients?

Yes. If a site offers a service or product to the EU public, it must meet WCAG 2.1 AA accessibility standards. This includes WooCommerce stores, booking systems, and membership sites. Enforcement is ramping up across EU member states in 2026.

Where can I buy these products?

The e-books are being published on Amazon Kindle Direct Publishing (KDP). The template library is coming to Gumroad. Both platforms handle payment processing — no subscription, no monthly fees. We'll announce launch dates here and via the notification list.

Are these guides legally reviewed?

The guides are based on publicly available EU regulations and published enforcement decisions. They are practical tools, not legal advice. We recommend having your specific contracts reviewed by a qualified attorney.

What format are the e-books in?

Both e-books are in EPUB 3 format — compatible with Amazon Kindle, Apple Books, Google Play Books, and any standard e-reader. You can also open them with Calibre (free) on desktop.

What if I need a custom template not listed here?

The series covers the most common needs for small web agencies. If you need something specific, we may add it in a future update — the catalog is growing.

Free accessibility checks by platform

Run a free WCAG 2.1 AA scan on your site — 10 platform-specific guides with concrete fix steps:

🔍 WordPress

Check any WordPress site against 16 WCAG rules — no plugin install. Or grab our free scanner plugin.

🛍️ Shopify

EAA-ready check for stores selling into the EU.

🎨 Webflow

Verify clean markup is also accessible markup.

🧩 Wix

See how your Wix site scores in seconds.

📐 Squarespace

Beautiful template ≠ accessible site. Check yours.

🐘 Drupal

Drupal has strong foundations — custom themes break them.

📋 Joomla

Joomla 4+5 bring improvements — extensions may not.

🛒 PrestaShop

Store selling into the EU? Check themes, modules and checkout.

🖱️ Weebly

Drag-and-drop ≠ accessible. Verify your published pages.

🏬 Magento

Adobe Commerce stores need PHTML, XML and extension checks.

📰 Ghost

Newsletter or paid publication for EU readers? Verify your theme.

🏢 TYPO3

Public-sector favourite — check BITV/EN 301 549 basics free.

🛠️ Craft CMS

Your templates decide accessibility. See what they emit.

🌐 Umbraco

Razor views and editor content — scan the rendered result.

All 15 Platform Guides → Compare All Platforms →

From the Blog

Practical compliance guides, checklists, and action plans for small web agencies:

NIS2

Is Your Small Web Agency NIS2-Ready?

A practical guide for 2026 — scope test, supply chain requirements, 7-step action plan, and contract clauses. No compliance team needed.

📖 8 min read ✅ Free guide
EAA

EAA Accessibility Checklist: 10 Steps for WordPress

Complete 10-point WCAG 2.1 AA checklist for WordPress sites. Each check takes 5 minutes. Includes free scanner and platform-specific guides.

📖 6 min read 🛠 Free scanner included
EAA

How to Write an EAA Accessibility Statement

Step-by-step guide to creating an EAA-compliant accessibility statement. Covers required sections, common mistakes, and a free template. Includes our free generator tool.

📖 7 min read ✏️ Free template included
GDPR

GDPR Data Processing Agreement for Web Agencies

Complete guide to DPAs — when you need one, 7 essential clauses, common mistakes, and how to get it signed without a lawyer. Updated for 2026.

📖 7 min read ✏️ Free template included
NIS2

NIS2 Incident Report Checklist & Template

What your small agency needs to document when a security incident happens — 6 required sections, notification timeline, and a fill-in template for NIS2 compliance.

📖 6 min read ✏️ Free template included
GDPR

Cookie Consent & GDPR Compliance for Web Agencies

Complete guide to cookie consent for small agencies — ePrivacy Directive requirements, banner compliance, consent records, cookieless analytics, and a 7-step implementation plan.

📖 8 min read 🍪 Free compliance checklist
EAA

WCAG 2.2: What Changed & What It Means for Your Clients

The 9 new WCAG 2.2 success criteria explained in plain language — target size, focus visibility, accessible authentication — and a practical update plan for client sites.

📖 7 min read 🆓 Free scanner included
GDPR

GDPR Fines in 2026: What the Numbers Actually Mean

€1.2 billion fined last year — but almost none of it hits small agencies. What the enforcement data really says, the two-tier penalty system, and a 15-minute risk check.

📖 7 min read 📊 2026 enforcement data
EAA

EAA Enforcement in 2026: What Has Actually Happened

One year after the EAA took effect: real lawsuits, market surveillance, penalty levels across EU member states, and a 5-step action plan for small agencies.

📖 7 min read ⚖️ Enforcement data
GDPR

CMP Comparison 2026: Best Cookie Consent Platforms

Cookiebot vs CookieYes vs Iubenda vs Osano vs Complianz — side-by-side comparison of pricing, features, Google Consent Mode v2, and EAA accessibility. Practical recommendations for small agencies.

📖 8 min read 🍪 8 platforms compared
EAA

Accessibility Overlays & the EAA: Why "One Line of Code" Is Not Compliance

The FTC fined accessiBe $1M — and 20-25% of US accessibility lawsuits hit sites with overlays installed. What the data shows, what the European Commission says, and the remediation workflow that actually works.

📖 8 min read ⚖️ 2026 regulator positions
EAA & PRICING

What Does an Accessibility Audit Cost in 2026?

Quotes range from $0 to $30,000 — and both can be legitimate. Real 2026 price tiers, what drives audit cost, what the EAA requires, and how to package accessibility work for clients at €900-€2,500.

📖 8 min read 💶 Real 2026 price data
NIS2 & SECURITY

NIS2 Supply Chain Security for Web Agencies

Article 21 makes vendor risk a legal duty. How to map your supply chain, assess vendors with a simple register, write the right contract clauses, and cut your attack surface in a week.

📖 8 min read 🔗 Vendor checklist included
GDPR + NIS2

GDPR vs NIS2: What Overlaps — and What Doesn't

Two EU frameworks, one small agency. Where they overlap, where they diverge, and how to satisfy both with a single set of documents instead of two compliance programmes.

📖 9 min read 🔗 Combined document plan
TYPO3 & BITV

TYPO3 Accessibility: Meeting BITV 2.0 and EN 301 549

A practical compliance workflow for agencies running TYPO3 sites for German public-sector clients and EU businesses covered by the EAA — editor fixes, template pitfalls, testing loop.

📖 7 min read 🇩🇪 BITV / BFSG focus
SHOPIFY & EAA

Shopify Accessibility: Getting Your Store EAA-Compliant

Theme settings, Liquid fixes, app audits and checkout checks that bring a Shopify store up to WCAG 2.1 AA — most without touching code.

📖 7 min read 🛒 E-commerce focus
WEBFLOW & EAA

Webflow Accessibility: A Practical EAA Audit Guide

Where Webflow builds actually fail WCAG — div-soup headings, interaction traps, gradient contrast — and the Designer workflow that fixes them.

📖 6 min read 🎨 Agency focus
GHOST & EAA

Ghost Accessibility: Making Publications EAA-Compliant

Theme fixes, Koenig content habits, and membership-flow checks that bring a Ghost site up to WCAG 2.2 AA — without rebuilding it.

📖 6 min read 📰 Publisher focus
DRUPAL & EAA

Drupal Accessibility: Meeting WCAG 2.1 AA and the EAA

What core already does well, where contributed modules break compliance — and the Views, form and content fixes that close the gap.

📖 7 min read 🏛️ Agency & public sector
SQUARESPACE & EAA

Squarespace Accessibility: An EAA Compliance Guide

What you can and cannot fix inside Squarespace — site styles, alt text at scale, heading structure and the code-injection points that matter.

📖 6 min read 🧱 Template focus
WIX & EAA

Wix Accessibility: An EAA Compliance Guide

What you can fix in the Wix Editor — alt text, heading tags, contrast, hover-only menus — and how agencies audit Wix builds against WCAG 2.1 AA.

📖 6 min read 🧱 Small-business focus
MAGENTO & EAA

Magento Accessibility: EAA Compliance for Your Store

Where Magento and Adobe Commerce stores fail WCAG — layered navigation, checkout, extensions — and the theme-level remediation that gets EU shops compliant.

📖 7 min read 🛒 E-commerce focus
PRESTASHOP & EAA

PrestaShop Accessibility: EAA Compliance for Your Store

Where PrestaShop stores fail WCAG — product legends, filter modules, checkout — and the back-office and theme fixes that get EU merchants compliant.

📖 6 min read 🛒 E-commerce focus
JOOMLA & BITV

Joomla Accessibility: Meeting BITV 2.0 and EN 301 549

Template overrides, editor habits and extension checks that bring a Joomla site up to WCAG 2.1 AA — for German public-sector clients and EAA-covered businesses.

📖 7 min read 🏛️ Public-sector focus
COMPARISON · EAA

PrestaShop vs Shopify: Accessibility Compared

Both platforms must meet the European Accessibility Act. Where each fails WCAG 2.1 AA, how their fix workflows differ, and what compliance costs on either stack.

📖 7 min read ⚖️ E-commerce focus
COMPARISON · EAA

WordPress vs Wix: Accessibility Compared

One law, two very different architectures. Where WordPress and Wix sites fail WCAG 2.1 AA under the EAA — and what remediation looks like on each.

📖 7 min read ⚖️ Platform choice
COMPARISON · EAA

Webflow vs Squarespace: Accessibility Compared

Two visual builders, one legal obligation. Where Webflow and Squarespace sites fail WCAG 2.1 AA — and what fixing looks like on each.

📖 7 min read ⚖️ Builder choice
COMPARISON · BITV/EAA

Drupal vs TYPO3: Accessibility Compared

The two open-source CMSs EU public sector trusts most. Core baselines, extension risk, BITV duties — and which stack remediates faster.

📖 7 min read 🏛️ Public-sector focus
TOOLS

Accessibility Scanning from the Command Line

Free CLI scanner for WCAG 2.2 / EAA issues — 16 rules, contrast computation, JSON output, and a --fail-on flag for CI. Python and Node.js, zero dependencies.

📖 6 min read ⌨️ Free CLI included

Get notified when products launch

No spam. No newsletters. Just a one-time email when the store opens and products are available for purchase.

Send a quick email to mads@mahope.dk with subject "Notify me" — or click the button below to open a pre-filled message.

Send Notification Request

Your email goes directly to us. No storage, no tracking, no mailing list.