EVB-IT Cloud — Service Description

Provider: NLTS Global Analytics s.r.o., Malá 43/6, 301 00 Pilsen, CZ
Service: forensicprivacy.io — Forensic GDPR/Privacy Scanner (SaaS)
As of: April 2026

§ 1 Subject Matter

(1) The subject of this service description is the SaaS provision of a forensic website analysis service via the platform forensicprivacy.io (hereinafter “Service”).

(2) The Service performs automated privacy and security audits in accordance with GDPR, TDDDG, and the ePrivacy Directive.

(3) All reports can be provided with court-ready Ed25519 signatures and SHA-256 content hashes.

§ 2 Scope of Services

The Service comprises the following analysis tiers and functions:

a) Light Scan (free)

Security headers check, TLS/SSL verification, DNS analysis, cookie analysis, fake shop check, blacklist matching.

b) Basic Scan

All Light Scan features, plus: third-party tracker detection, GeoIP third-country transfers, GDPR article matrix (Art. 5–45 GDPR, § 25 TDDDG, CJEU references).

c) Deep Scan

All Basic Scan features, plus: Headless Chromium 6-phase analysis, pre/post-consent comparison, CMP driver control, reject leak test (separate browser session).

d) Dark Pattern Analysis

Analysis according to Gray+Mathur+EDPB framework, including business context assessment and false-positive calibration.

e) AI Expert Opinion (optional)

Privacy policy analysis, automated tracker classification and expert assessment via Claude API. Includes privacy policy completeness check (14 mandatory disclosures per Art. 13 GDPR) and compliance reconciliation (privacy policy ↔ CMP ↔ reality).

f) Report Formats

HTML (signed), PDF, DOCX — each with cryptographic signature and QR verification.

g) API Access

REST API for batch scans and automated integration into existing systems.

§ 3 Provisioning

(1) The Service is provided cloud-based and accessible via https://forensicprivacy.io.

(2) No installation at the client premises is required. Access is browser-based.

§ 4 Service Level

Availability, response times, and maintenance windows are governed by a separate SLA agreement: forensicprivacy.io/sla.

§ 5 Data Protection & Security

(1) Details on commissioned data processing are set out in the DPA: forensicprivacy.io/avv. Technical and organizational measures are documented at: forensicprivacy.io/tom.

(2) Encryption: All connections are secured with TLS 1.3. HSTS is enabled.

(3) Report integrity: Ed25519 signature and SHA-256 content hash ensure the tamper-proof nature of all reports.

(4) Server location: EU (Frankfurt am Main, Germany).

§ 6 Subcontractors

A current list of deployed subcontractors is available at: forensicprivacy.io/subunternehmer.

§ 7 Pricing Model

(1) Single use: Billing per scan performed. Current pricing at forensicprivacy.io/pricing.

(2) Monthly quotas: Scan packages with volume discounts.

(3) Public sector clients: Payment on invoice (Net-30) available.

(4) The client’s file reference/case number is displayed on all reports and invoices.

§ 8 Contract Duration

(1) Single scans: One-time service. The contract is fulfilled upon delivery of the report.

(2) Quotas/Monitoring: Minimum term 1 month, thereafter cancellable monthly at month-end.

(3) For public sector clients: Framework agreements under EVB-IT Cloud are available.

§ 9 Client Cooperation Obligations

(1) The client provides the URLs to be audited.

(2) The client designates a contact person for queries.

(3) The client assigns a file reference/case number as needed for inclusion on reports and invoices.

§ 10 Liability

(1) The Service does not constitute legal advice. The automatically generated assessments and recommendations serve as technical documentation and expert foundation.

(2) The provider’s liability is governed by the general terms and conditions: forensicprivacy.io/agb.

§ 11 Final Provisions

(1) In the event of conflicts between this service description and the EVB-IT Cloud contract terms, the EVB-IT Cloud contract terms shall prevail.

(2) Czech law shall apply. The place of jurisdiction is Pilsen, CZ.