Visible on the site
What the technical review can observe.
- Where the browser submits form data and which hosts load.
- Observable hosting location and active client-side integrations.
- Differences between the declared and rendered flow.
Outside the scan
Where manual review is required.
- First recording in CRM, mail, backup systems, and server-side relays.
- Applicability to the particular processing and data subjects.
- The complete processor and cross-border transfer chain.
Next step
Keep evidence separate from decisions.
Document the route from collection to every system, then confirm technical location and legal applicability separately.
Sources
Review forms against primary sources.
Tell us what the site needs.
A goal, the current difficulty, and an optional website address are enough. Do not send passwords, keys, or private exports.