ITMR Compliance & Legal Checker
Go-live Legal Launch Board
Check whether a digital project looks legally ready to launch: SaaS, website, app, platform, online shop, AI product, cloud service or data-driven business model. The board classifies typical launch risks, prioritises next measures and creates a copyable short overview for your inquiry.
Orientation
How the Go-live Legal Launch Board works
Define the project profile
The board distinguishes typical launch constellations such as SaaS, shop, platform, AI product, app, website or connected product.
Assess the time window
A go-live today, this week or after a launch has already happened usually creates different pressure to act than a plannable release.
Capture risk signals
Data protection, tracking, terms and conditions, checkout, AI, Data Act, DSA, NIS2, CRA, BFSG, claims, IP and incident processes are queried in a structured way.
Calculate the launch gate
Your answers, urgency and critical blockers result in a risk level from low to critical.
Prepare measures
You receive prioritised measures, typical documents and a short overview that you can copy for an inquiry to ITMR.
What this check does
Initial legal orientation before publication, scaling or relaunch
The Go-live Legal Launch Board helps companies, start-ups, agencies, platform operators, SaaS/cloud providers, e-commerce teams and decision-makers spot typical legal obstacles to launch early. The check does not replace an individual review, but shows which topics should usually be clarified, or at least consciously documented, before a launch.
Scope of the launch board
It covers typical interfaces of digital business models: IT contracts, terms and conditions, data protection, DPAs, tracking, information duties, AI governance, Data Act, DSA, NIS2, Cyber Resilience Act, BFSG, consumer law, product safety, advertising law, IP rights and litigation readiness.
When the check is particularly relevant
The check is useful before a product launch, relaunch, app release, shop launch, platform launch, use of new AI features, marketing campaigns, investor due diligence, customer audits, or when a project is already live and legal documents need to catch up.
Limits of the assessment
The evaluation is based on your information and cannot replace specific legal advice. Whether a duty actually applies depends on the individual case, business model, contractual situation, user base, data processing, technical implementation and current decisions of authorities or courts.
Select topics
Which topics affect your launch?
Select the topics that play a role in the project. This selection is also included in the short overview.
Interactive questionnaire
Check launch readiness
Result
Calculating launch risk
—The evaluation appears once you complete the questionnaire.
Calculating priority.
Why this assessment?
Prioritised measures
Typical documents
Copyable short overview for your inquiry
The text is generated from your answers and can be used for a structured inquiry to ITMR.
Matrix
Typical go-live risks, deadlines and measures
| Topic | Typical launch risk | Orientation | Useful measure |
|---|---|---|---|
| Data protection / tracking | Unclear legal bases, missing DPAs/TOMs, unreviewed cookies, third-country transfers. | Ongoing duty; data breaches can trigger notification and information duties. | Review data flows, consent, DPAs, sub-processors, TOMs and breach process. |
| Checkout / consumer law | Faulty button solution, price information, withdrawal, subscription or cancellation button processes. | Usually critical for launch in B2C journeys. | Audit the order journey with screenshots, legal texts, prices and cancellation process. |
| AI / AI Act | Unclear role, risk class, transparency, AI literacy, data protection or vendor contracts. | Staggered duties; use and provider role must be reviewed case by case. | Create an AI inventory, role/risk memo, usage policy, training and vendor review. |
| Data Act / CRA / Security | Data access, cloud switching, product security, SBOM, updates or vulnerability process unclear. | Particularly relevant for connected products, cloud, software and digital elements. | Prepare a data inventory, security by design, SBOM, update and incident process. |
| DSA / platform | Missing notice-and-action processes, moderation rules, ranking or trader transparency. | Depends on role for intermediary services, hosting, platforms and marketplaces. | Review DSA role analysis, reporting channels, complaints process and moderation in the terms. |
| BFSG / accessibility | Untested key user journeys, forms, checkout, app or accessibility statement. | Relevant for certain digital services and products. | Plan scope, WCAG/EN 301 549 mapping, accessibility statement and regression testing. |
| Advertising / IP / reputation | Unsubstantiated claims, missing chains of rights, trade mark risks, reviews or urgent deadline matters. | Can escalate quickly before and after go-live. | Prepare a claim dossier, chains of rights, trade mark/domain check and litigation playbook. |
Useful next steps
Related ITMR checkers and entry points
Contact
Have your go-live legally assessed
If your result is elevated, high or critical, a structured review before publication, contract signing, scaling or campaign launch can help reduce avoidable risks. Send ITMR the short overview, relevant documents and the planned go-live date.
Note: The Go-live Legal Launch Board offers a structured initial orientation. It does not replace legal advice or a technical review of the individual case. Legal requirements may depend on the business model, target group, contractual situation, specific implementation, data processing, product design and current practice of authorities or courts. How we support founders and product teams before launch is described in our start-up advice; for website and data protection, it is also worth looking at Website data protection review.