Dembri Site Scan free
See which trackers your homepage loads and whether your privacy policy names them.
You give a web address. No account.
Data protection records for UAE companies
Know your privacy gaps before your customers do.
Dembri reads your website, code and documents, and shows where they differ from your privacy policy. A named reviewer approves each report.
- Free
- No account
- Read only
1tracker your policy does not name.
01 / 04
Fictional example.
What the product holds today
- 89UAE data protection law articles, each with its sourceCounted from the data protection library
- 67services we recognise in code, hosting settings and policy pagesCounted from the vendor library
- 6kinds of source, read onlyCounted from the connectors
- 6service providers, each named in our privacy noticeCounted from our privacy notice
Collecting evidence
Dembri reads what your product actually does.
Website, policy and code are read, never changed. Excerpts are redacted before any AI model sees them.
- Proposing findingsEach finding quotes its evidence and cites the law.
- Human reviewNothing is final until a named reviewer approves it.
privacy-records run · yourcompany.ae
- ConnectorReading yourcompany.ae: pages, headers, cookies
- ConnectorPrivacy policy found at /privacy
- RedactionEmails, phone numbers and IDs in excerpts redacted
- ObserverGoogle Analytics loads on the homepage
- Coverage2 pages not read: built by JavaScript
- MapperProcessing activities and AI systems mapped
- Data protection reviewProposed: tracker not named in the policy · Art. 29
- AI systems reviewProposed: no first use AI notice · Reg. 10.2.2(a)
- Code ProofPossible contradiction: email sent to HubSpot · for the reviewer
- ReportRecord of processing and findings report drafted
- ReviewerPending
- YouAccept, fix or dispute each finding
How we work
Your policy is a promise. Your code is the proof.
We put the two side by side, word for word. When they differ, a person decides what happens next.
What you say
Privacy policy
Section 4, published page
“We do not share your email with marketing services.”
What your code does
Your code
crm/sync.ts, line 42
await hubspot.contacts.create({
email: user.email,
plan: user.plan
})Possible contradictionShown to your reviewer as a possible contradiction to check. It is not a finding.Fictional example
Four rules we work by
We say only what the evidence shows.
When we cannot tell, we write “not evidenced” or ask you.
We tell you what we did not see.
The report states what each scan could not read, such as pages built by JavaScript and files over the size cap.
People decide. We draft.
You declare the facts. A named reviewer approves. The product never approves its own output.
We take the minimum.
Connectors only read. We redact evidence before any AI model sees it. Your evidence is stored in Germany; the AI providers are in the USA.
How this server handles data · Privacy and cookies · DIFC Regulation 10 checklist
Watch the walkthrough
Narrated with an AI voice. Captions available.
Products
Six tools. One record.
Start with the free Site Scan. The other five work from one shared record.
Code Proof
Check your privacy policy promises against your code. Each result goes to your reviewer as a possible contradiction.
You give read only repository access.
Records
Get your record of processing and DPIA drafted from evidence.
You declare the facts and answer plain questions.
AI Register
List your AI systems the way DIFC Regulation 10 asks.
You declare your systems. Each run compares them with the evidence.
Trust Pack
Answer buyer questionnaires from your records.
You upload the questionnaire and approve the answers.
Notice Fix
Get suggested text for what your privacy notice is missing, written from your records.
A reviewer approves each change.
Example rows are fictional.
Getting started
Where to start
1Scan your websiteUnder a minute · free
See trackers your privacy policy does not name. No account needed.
2Connect your sourcesAfter we invite you
Add your website and the documents you select. Add read only code access if you want Code Proof.
3Answer plain questionsIn the app
Declare your facts and answer what the evidence could not settle. We may suggest an answer. You decide.
4Get your records, reviewedWithin 10 working days
Within 10 working days of complete evidence. An independent reviewer checks the findings before you see them. Reports stay drafts until a named reviewer approves them.
Live today
Built for UAE data protection law
DIFC Data Protection LawLive
DIFC Regulation 10Live
UAE PDPLLive
We list only laws that are live in the product.
Pricing
A fixed fee for a set scope
The founding pilot covers your website, your privacy policy, the documents you select and up to one code repository.
Site Scan
Free
What is included
- Your homepage and privacy policy
- Trackers your policy does not name
- No account. We do not keep the address or the results.
Founding pilot
Fixed fee
Quoted before you commit. For the first five companies, until 31 December 2026.
What is included
- A draft record of processing
- A findings report with evidence quotes and citations of the law that applies to you
- Findings checked by an independent reviewer before you see them
- Delivered within 10 working days of complete evidence
- One pilot at a time. If another pilot is in progress, we give you the start date before you pay.
Ongoing
Quoted separately
After the pilot, ongoing monitoring is quoted separately.
What is included
- A monthly re-scan of your sources
- An email after each re-scan with new findings and what changed
- Your decisions carried into each new version
Start with your website.
Free. Under a minute. No account.
Scan your websiteGet started
Request a review
Tell us your company and website. We reply by email with the next steps before anything is charged.
Request a reviewDembri Technologies Ltd · DIFC, DubaiA draft for your review, not legal advice. Not a compliance guarantee. It does not act as your Data Protection Officer.