How it works
No technical knowledge required. No installation. No account needed to start.
Answer 31 questions
About your devices, accounts, data storage, backups, and habits. Plain language — no jargon. Takes about 10 minutes.
Get your score and gaps
An overall security score, breakdown by domain, GDPR exposure flags, and a prioritised list of what to fix first.
Follow your action plan
Step-by-step fixes for each gap — with effort estimates and GDPR article references. At your own pace.
What you get
Not a generic checklist. A personalised report based on your actual practices — with specific fixes, effort estimates, and GDPR references.
Who it's for
If you work alone or in a small practice and handle personal data — you have GDPR obligations. Even without an IT department.
Lawyer / Notary
Client confidentiality, legal hold, GDPR compliance for case files
Therapist / Psychologist
Session notes, sensitive personal data, GDPR Art. 9 obligations
Accountant / Financial advisor
Financial records, client data retention, regulatory compliance
GP / Healthcare professional
Medical records, NIS2 obligations, health data protection
Insurance / Financial services
Financial data, regulatory obligations, client confidentiality
Architect / Designer
Client project data, personal information, contract documentation
IT & Tech Consultant
Client databases, data processor obligations, DPA agreements and breach notification duties
Marketing & HR Freelancer
Subscriber lists, candidate CVs, consent management and data processing agreements
Coach / Tutor / Creative
Client bookings, imagery consent, contact data and professional email obligations
If you handle client names, contact details, or any personal information — you have GDPR obligations. Even if you don't process ID numbers or medical records.
WHY NOT JUST USE AN AI TOOL?
Ask any AI assistant about GDPR and you'll get a generic list. Useful once. Gone the next day. No memory, no follow-up, nothing your clients can verify.
It remembers.
Your score history, what you resolved, what decayed — stored across every reassessment. You can see exactly how your posture changed over time.
It watches.
When GDPR guidance changes for your profession or your country, you get an alert. Not every update — only the ones that affect your practice.
It proves.
The trust badge links to a live public page any client or regulator can check. It only displays while your monitoring is active. When you stop reassessing, it goes dark. No AI tool produces something a third party can verify.
It's yours.
Profession-specific questions, country-specific DPA and national law, a score calibrated to your actual practice — not generic advice for anyone.
DATA & PRIVACY
Stored in the EU
All data is stored on EU servers in Ireland (AWS eu-west-1). Your assessment results never leave European jurisdiction.
No account required to start
Complete your assessment anonymously. Create a free account only if you want to save your results and track progress.
Built under GDPR
Postura is built and operated under GDPR by Reliance Hive srl, a Romanian company. We practise what we assess.
TRUST BADGE
Professionals with a score above 70 can display a verified Postura seal on their website, email signature, and LinkedIn profile.
Unlike a certificate or a self-declaration, the badge is live. It links to a public verification page showing your last assessment date, your profession, and your active status.
When your monitoring lapses — when you stop reassessing every 90 days — the badge stops displaying. Automatically. Your clients don't need to take your word for it. The badge speaks for itself.
Start your assessment →Pricing
The assessment, your score, and your action plan are always free. Upgrade to activate your trust badge and get ongoing alerts.
Without an account
forever
Free account
forever
Paid account
€8.25/month · 2 months free
FAQ
10 minutes. No account required. Free.
Begin your assessment →