Question 1

Does Audulate make me GDPR compliant?

Accepted Answer

Audulate gives you the tools, evidence, and guidance to achieve and demonstrate GDPR compliance — but compliance itself is your responsibility. We make it dramatically easier by surfacing gaps, automating workflows, and generating audit-ready evidence.

Question 2

Does Audulate cover SOC 2 and ISO 27001, or just GDPR?

Accepted Answer

All six are live in one workspace: GDPR, UK GDPR, PECR, ISO 27001, SOC 2 and India's DPDP (Digital Personal Data Protection Act 2023). ISO 27001 ships with the full Annex A and ISMS clauses on a Statement of Applicability — we auto-derive evidence for the technical controls we can observe via website, cloud and code scans (and your connected identity, HR, device and security tools), give you attestation surfaces for the organisational controls we can’t see, and generate a one-click auditor package. SOC 2 maps the same evidence to the Trust Services Criteria. We’re deliberately honest about what is automated versus attested — we don’t claim to auto-check controls we can’t actually observe.

Question 3

How long does setup take?

Accepted Answer

Most teams are up and running in under 5 minutes. Add your website and invite your team, then activate the frameworks you need — GDPR and India's DPDP are available on every plan (including Free), and Starter and up unlock UK GDPR, PECR, ISO 27001 and SOC 2 as well. The GDPR module suite (RoPA, DPIA, DSRs, breach & vendor registers) is ready to use, and your first website scan runs immediately. From there you build out your Statement of Applicability and risk register, and on Pro you connect your identity, HR, device and security tools so control evidence collects itself. Optional: connect a GitHub repo for code & PR scanning, and add page hints under Settings → Websites so the scanner knows exactly where your privacy, cookie and DSR pages live. No code changes required.

Question 4

Do you store my website data?

Accepted Answer

We store scan results, findings, and evidence records in our EU-hosted database. We do not store full copies of your web pages. Scan data is retained according to your plan's retention window and is deleted when you close your account.

Question 5

What happens when a regulation changes?

Accepted Answer

Our Regulation Watcher monitors official sources — EDPB, ICO, FTC, HHS, IAPP and PCI SSC. When a relevant change occurs, we update our rule engine and notify tenants who have that framework enabled, with a plain-language summary and recommended actions.

Question 6

Can I use this without a dedicated DPO?

Accepted Answer

Absolutely. Audulate is designed to be usable by developers, product managers, and founders — not just legal experts. It bundles the DPO toolkit — RoPA (Art. 30), DSR handling, DPIA workflows, breach response, a vendor/processor register, and cookie & consent management — so the operational work a DPO would run lives in the product. The AI layer then explains every finding and gap in plain language with step-by-step remediation.

Question 7

Is there an AI assistant, and is my data safe with it?

Accepted Answer

Yes — the Compliance Copilot is a built-in chat assistant (Pro and Enterprise). Ask it about your posture — "which DPIAs are overdue?", "what's my ISO 27001 readiness?", "where do I maintain our RoPA?" — and it answers from your own workspace data, or explains a regulation in plain language. It is strictly read-only: it can report and explain, but never create, edit, delete, or trigger anything, and it only ever sees your own tenant's data — never another organisation's. Credentials and secrets are never exposed to it, it runs on an enterprise AI provider that does not train on your inputs, and usage is capped per workspace. Full detail is in our Privacy Policy.

Question 8

Is my data processed in the EU?

Accepted Answer

Your core data is stored in the EU — our database, queue and worker run in Frankfurt. A few sub-processors are US-based (our hosting on Vercel, AI providers OpenAI and Anthropic, payments via Stripe, email via Resend, and the GitHub code integration); those transfers are covered by the EU Standard Contractual Clauses. The full, current list is in our DPA. Our own compliance posture is available on request.

Question 9

How does GitHub PR scanning work?

Accepted Answer

You install our GitHub App on your repository. On every pull request, we analyse the diff for GDPR-relevant patterns: PII leaks, insecure logging, hardcoded secrets, and missing consent checks. Findings are posted as PR comments so developers can fix issues before merging.

Question 10

Do you support mobile apps (iOS / Android)?

Accepted Answer

Yes, for the parts that matter most today. Your mobile source code (Swift, Kotlin, React Native, Flutter) goes through the same PR scanner as your backend — PII leaks, insecure logging, hardcoded secrets, missing consent gating. Your privacy policy is analysed via the URL on your App Store / Play Store listing (Art. 13/14 completeness, DSR contact, ICO registration). And the GDPR operating system — RoPA, DSRs, vendor DPAs, breach response, cookies & consent — is framework-agnostic, so it works the same whether you ship a website or an app. What is not yet supported: static analysis of the compiled .apk / .ipa, and scraping of App Store Data Safety / Privacy Nutrition Labels — both on our roadmap. Tell us if you need them and we will prioritise.

Question 11

How often does the scanner run?

Accepted Answer

Free plans run manual scans only — you trigger them yourself. Starter and Pro plans include weekly automatic scans (every Monday at 09:00 UTC). Enterprise plans scan daily. You can always trigger a manual scan on any plan. Scan history and findings are retained for 30 days (Free), 90 days (Starter), 12 months (Pro), or 2 years (Enterprise).

Question 12

What support is included?

Accepted Answer

Free plans get community support via our documentation and GitHub Discussions. Starter and Pro plans include email support with a 24-hour SLA. Enterprise plans get a dedicated Customer Success Manager and a contractual SLA.

Start free.
Scale when you're ready.

Simple, transparent pricing.

Free

Starter

Pro

Enterprise

Questions? Answered.

Your compliance changes
every time you ship.

Start free.Scale when you're ready.