Enter a company name, tax ID or registration number, website and country of incorporation. Esquseo examines the public record and returns a structured read on which data-protection laws apply, where the organization participates in cross-border frameworks, and what security certifications it states.
Point Dock at a website you own. It reads one public page from the outside, the way a browser does, and returns a prioritised list of privacy and security drawbacks with a fix for each — plus a first-draft privacy policy built from what it actually found on the page.
Dock looks at what your page actually loads and sets: third-party scripts and trackers, forms and the personal data they ask for, cookies and consent signals, links to your legal pages, and the security headers your server sends.
Findings arrive ordered from high to low severity, each marked as privacy or security, with why it matters and a concrete fix. The technical facts behind every finding are shown alongside, so you can check the reasoning yourself.
A first-draft privacy policy tailored to the trackers, forms, processors and embeds Dock detected, with bracketed placeholders wherever you still need to confirm a detail. Download the review and the draft as Word documents.
One review costs 2 credits from the balance you already use for assessments and the Explorer — so the two free credits on sign-up cover your first review. If a review fails, the credits come back automatically. Results stay on your account for 24 hours.
A separate instrument for large-scale due diligence. Where the standard assessment gives you a triage read, Enterprise produces the paperwork a transfer decision actually rests on — researched with a more capable model, saved to your account, and exportable as working documents.
Name, registration number, country and website in — and out comes a researched assessment with a privacy posture score, a transfer risk registry scored by likelihood and impact, and a data processing agreement drafted on the correct SCC module with Annexes I, II and III populated.
Add your own organization and describe the transfer — controller to controller, controller to processor, processor to controller or processor to processor. Enterprise assesses the scenario against the destination country’s government access regime and returns a Transfer Impact Assessment following the EDPB six-step method.
Assessments and DPAs export as Word documents. Risk registers and TIAs export as Excel workbooks you actually work in: dropdowns, live formulas, and inherent-versus-residual risk heat maps that shift as your mitigations are recorded.
Enterprise is provided under a separate agreement with DUB SERVICES LLC. Every result is saved to your account history and downloadable again at any time. Anyone can sign in to preview the interface and read the full tutorial before deciding.
Two additions this month: a second research instrument on the same account and credit balance, and a choice of appearance for the whole service.
Look up any country’s current data protection law, supervisory authority, data subject rights, penalty regime, and EU adequacy status — verified against fresh public sources at the moment you ask. One account, one balance: the same credits (including your two free ones) work on assessments and law lookups alike.
Choose how Esquseo looks: Default, Cosmic, Marine, Sakura, or Mountain. Pick once from the palette button in the corner and your choice follows you across the app, the Explorer, and the store. Every theme keeps the content exactly as readable — the scenery changes, the work doesn’t.
Optional · set only if you choose oneEach assessment is grounded against authoritative sources and labelled by confidence — verified lookups against official registries, and indicative judgments for nuanced legal questions.
Which data-protection regimes reach the organization — GDPR territorial scope, UK GDPR, CCPA/CPRA, LGPD, PIPL, Québec Law 25, Swiss FADP and more — reasoned from establishment, targeting and processing signals.
Indicative · for triageWhether the organization appears on the official DPF participant list — checked directly against the authoritative registry, not inferred.
Verified · official registryParticipation in the Cross-Border Privacy Rules system — matched against the certified-organization lists maintained by the framework.
Verified · official registryPublicly stated security and privacy certifications — ISO 27001 / 27701, PCI DSS, SOC 2, TrustArc and equivalents — surfaced from the organization's own disclosures and trust pages.
As publicly statedTell Esquseo who you're assessing.
Esquseo reads the public record, then checks framework participation against official registries before forming a view.
You receive a structured assessment — each finding sourced, dated and labelled by confidence, ready to attach to your due diligence.
Sign in with a single email link — no password. Top up with credits when you're ready to run more, or move to Enterprise when the work calls for documents rather than indicators.