getsorted.

Is your business compliant?

Answer around 12 questions. Get a personalised report across 27 UK regulations, based on ICO and GOV.UK guidance. Free, no account, your answers are never stored.

Check your business → See everything we check

3 minutes  ·  No sign-up  ·  No data stored

42,181
fixed penalty notices issued by The Pensions Regulator for auto-enrolment failures.
£4.2m
fine issued by the CMA in April 2026, the first enforcement case under the DMCCA's new consumer protection powers.
18 Nov 2026
deadline for existing directors to verify their identity with Companies House.
Find your exact date →

Sources: TPR enforcement bulletins (Jan-Dec 2024, latest published), CMA v AA Driving School/BSM (April 2026), Companies House transition plan.

§ 01 · How it works

Three minutes, from question to report.

01

Answer around 12 questions

Plain yes or no questions about your business. No jargon, no account, your answers are never stored.

02

We map you to the law

Your answers are checked against 27 UK regulations using published ICO and GOV.UK guidance.

03

Read your report

A clear report sorted by what needs action, what is worth checking, and what looks good.

§ 02 · What we check

The full index. Twenty-three regulations, in plain English.

Data & privacy

ICO Registration
Most businesses handling personal data must register with the ICO and pay an annual fee.
High
UK GDPR: Privacy Notice
If you collect personal data you likely need a privacy notice explaining how you use it.
High
PECR: Cookie Consent
Websites using analytics or advertising cookies need a compliant consent banner.
High
PECR: Email Marketing
Marketing emails to individuals generally need clear opt-in consent.
High
UK GDPR: Data Processor Contracts
Using tools like Mailchimp or Stripe means you likely need a data processing contract.
Medium
UK GDPR: CCTV
Cameras that capture identifiable people bring data protection duties and signage.
Medium
UK GDPR: Data Breach Response
Certain personal data breaches must be reported to the ICO within 72 hours.
High
UK GDPR: Individual Rights
People can ask what data you hold and request its deletion, and you must respond.
Medium

Selling & consumers

Consumer Contracts & Rights
Selling to the public brings cancellation rights and clear pre-sale information duties.
High
E-Commerce Regulations 2002
Trading online means you must display set business information on your site.
Medium
PCI DSS: Payment Card Security
Taking card payments carries security standards set by the card industry.
High
DMCCA 2024: Customer Reviews
Fake or misleading reviews are banned, with the CMA now able to fine directly.
Medium
DMCCA 2024: Drip Pricing
Prices shown must include unavoidable fees up front.
Medium
DMCCA 2024: Subscription Contracts
New rules on reminders and easy cancellation are due to arrive.
Medium

Company & filings

Companies Act: Business Disclosures
Your company details must appear on your website, emails and documents.
Medium
ECCT Act: Director Identity Verification
Directors must verify their identity with Companies House.
High

Employment

Employers' Liability Insurance
Employing anyone means you must hold employers' liability insurance.
High
Pension Auto-Enrolment
Employers must enrol eligible staff into a workplace pension.
High
Employment Rights Act 2025
New employment law provisions are rolling out from 2026.
Medium
Health & Safety at Work
Businesses with staff or premises have health and safety duties.
High

Tax & accessibility

Making Tax Digital for Income Tax
Sole traders over the income threshold must file quarterly with compatible software.
Medium
Equality Act: Web Accessibility
Services provided to the public should be reasonably accessible, including online.
Medium
European Accessibility Act 2025
Selling certain products or services into the EU brings accessibility requirements.
Medium
§ 03 · For partners

Building a formation platform?

Embed the compliance report at the moment of incorporation, when it matters most to a new company. One API call returns a report you can show under your own brand. We keep the 27 regulations current so you do not have to.

Read the API docs →   Talk to us
§ 04 · Questions

Fair questions, straight answers.

Is this legal advice?

No. getsorted gives guidance based on published ICO, GOV.UK and other authoritative sources. It helps you see what likely applies to your business. For anything that affects your legal position, speak to a qualified solicitor.

Do you store my answers?

No. Your answers are used to generate the report and are then discarded. If you ask us to email you the report, we use your email address to send it and then discard it unless you opt into updates separately. See our privacy policy for the full detail.

How current is this?

Every regulation we cover carries a review date. We track changes from GOV.UK, legislation.gov.uk and the regulators, and update the guidance on a regular cycle. Where a rule is not yet in force, we say so rather than telling you that you are already in breach.

Who is behind this?

getsorted is a product of XGR Labs Ltd, registered in England and Wales, company number 17107452.

How do you make money?

Some actions in your report link to partner services, such as insurance or software, and we may earn a commission if you buy through them. Those links never change your results. The diagnosis is produced before any commercial link is considered.