Visible on the site
What the technical review can observe.
- Public form purposes, field categories, and recipients.
- Domains, endpoints, and observable security controls.
- Mismatches that need clarification before filing.
Outside the scan
Where manual review is required.
- All processing outside the website.
- Applicable exceptions and the final duty assessment.
- Whether an existing notification and internal documents remain current.
Next step
Keep evidence separate from decisions.
Compare the full processing context with current law and the current form on the official Roskomnadzor portal.
Sources
Review forms against primary sources.
Tell us what the site needs.
A goal, the current difficulty, and an optional website address are enough. Do not send passwords, keys, or private exports.