# getsorted.today

> Free UK compliance checker for micro-businesses. Answer around 12 yes/no questions and get a report across UK regulations: ICO registration, GDPR, employers' liability, pensions, consumer law and more. Guidance based on ICO and GOV.UK sources, not legal advice. A product of XGR Labs Ltd.

## Tools

- [Compliance checker](https://www.getsorted.today/checker/): interactive check, free, no account, nothing stored
- [MCP server](https://www.getsorted.today/mcp/): run compliance checks from Claude, Cursor or any MCP client. Endpoint: https://api.getsorted.today/mcp (streamable HTTP, no auth)
- [REST API](https://www.getsorted.today/api/): partner API documentation. OpenAPI spec: https://api.getsorted.today/api/openapi.json

## Guides

- [What business details must you display?](https://www.getsorted.today/guides/companies_act_disclosures/): Limited companies must display their registered name, company number, and registered office address on all business correspondence including websites, emails, and invoices. This is a legal requirement regardless of business size.
- [Do you need terms and conditions on your website?](https://www.getsorted.today/guides/consumer_contracts/): Selling online to consumers likely requires compliant terms of sale, pre-contract information, and a 14-day cancellation right. These are statutory minimums, contract terms cannot remove them. A general website terms of use page is sensible but not legally required, it is the terms of sale and pre-contract information that the law mandates.
- [UK GDPR: Data Processor Contracts: does it apply to you?](https://www.getsorted.today/guides/data_processor_contracts/): You likely need a Data Processing Agreement with each third-party tool that handles personal data (e.g. Mailchimp, Google Analytics, Stripe, Shopify). Many providers offer a standard DPA, check your account settings or terms.
- [DMCCA 2024: Customer Reviews: does it apply to you?](https://www.getsorted.today/guides/dmcca_customer_reviews/): The DMCCA 2024 (in force April 2025) prohibits fake or misleading customer reviews. If you display reviews on your website or ask customers to leave reviews, you must have reasonable processes to ensure they are genuine.
- [DMCCA 2024: Drip Pricing: does it apply to you?](https://www.getsorted.today/guides/dmcca_drip_pricing/): The DMCCA 2024 (in force April 2025) prohibits drip pricing, adding mandatory fees (e.g. booking fees, service charges) only at checkout that should have been included in the advertised price. Review your pricing display.
- [DMCCA 2024: Subscription Contracts: does it apply to you?](https://www.getsorted.today/guides/dmcca_subscriptions/): The DMCCA 2024 subscription contracts regime is expected to come into force Autumn 2026. If you offer consumer subscriptions, you will need a simple cancellation mechanism, reminder notices before renewal, and a cooling-off period. Prepare now.
- [European Accessibility Act 2025: does it apply to you?](https://www.getsorted.today/guides/eaa_2025/): The EAA came into force 28 June 2025 and may apply if you sell digital products or services to customers in the EU. Micro-businesses (under 10 employees AND under €2M revenue) are exempt in most member states. Verify whether your business exceeds these thresholds.
- [Do directors need to verify their identity?](https://www.getsorted.today/guides/ecct_director_id/): Director Identity Verification became mandatory on 18 November 2025. All new directors must verify at appointment. Existing directors must verify when their company next files a Confirmation Statement. Failure risks a fine of up to £5,000 per director.
- [E-Commerce Regulations 2002: does it apply to you?](https://www.getsorted.today/guides/ecommerce_regulations/): Selling online to consumers likely requires you to display specific business information on your website, including a geographic address (not just a PO box), email address, and clear identification of any commercial communications.
- [Do you need employers' liability insurance?](https://www.getsorted.today/guides/employers_liability/): Employers' Liability insurance is compulsory if you employ anyone, including part-time and casual workers. Cover must be at least £5 million. Failure to hold valid insurance risks fines of up to £2,500 per day.
- [Do staff need a written statement of employment terms?](https://www.getsorted.today/guides/employment_particulars/): Everyone you employ, including workers and part-timers, has a day-one right to a written statement of their main employment terms. Check that every person on your team has one, and that it covers all the required particulars, not just pay and hours.
- [Employment Rights Act 2025: does it apply to you?](https://www.getsorted.today/guides/employment_rights_2025/): The Employment Rights Act 2025 is introducing new day-one rights for employees rolling out through 2026, including parental and paternity leave from the first day of employment. Existing employment contracts may need reviewing to ensure compliance.
- [Equality Act 2010: Web Accessibility: does it apply to you?](https://www.getsorted.today/guides/equality_act_accessibility/): The Equality Act 2010 likely requires your website to be accessible to disabled users. While there is no specific technical standard mandated for private businesses, courts use WCAG 2.1 AA as the benchmark. An inaccessible website could constitute discrimination.
- [UK GDPR: CCTV: does it apply to you?](https://www.getsorted.today/guides/gdpr_cctv/): CCTV footage constitutes personal data under UK GDPR. You likely need clear signage, a retention policy, access controls, and a reference to CCTV in your privacy notice.
- [UK GDPR: Data Breach Response: does it apply to you?](https://www.getsorted.today/guides/gdpr_data_breach/): If you suffer a data breach (e.g. a hack, accidental disclosure, or lost device), you may need to report it to the ICO within 72 hours. You should document a basic response procedure before a breach happens, not after.
- [UK GDPR: Individual Rights & Complaints: does it apply to you?](https://www.getsorted.today/guides/gdpr_individual_rights/): Anyone whose data you hold can submit a Subject Access Request (SAR). You must respond within 30 days, for free. Ensure you have a process, even informally, to handle these requests.
- [Do you need a privacy notice?](https://www.getsorted.today/guides/gdpr_privacy_notice/): A privacy notice is likely required on your website. It must explain what personal data you collect, why, how long you keep it, and people's rights over it.
- [Health & Safety at Work: does it apply to you?](https://www.getsorted.today/guides/health_and_safety/): Employers have a legal duty to ensure the health, safety, and welfare of employees. This requires a risk assessment, written health and safety policy (if 5+ employees), and in many cases registration with relevant authorities.
- [Do you need to register with the ICO?](https://www.getsorted.today/guides/ico_registration/): Most businesses that process personal data must register with the ICO and pay an annual fee of £52. Failure to register is a criminal offence with fines up to £4,350.
- [Does Making Tax Digital apply to you?](https://www.getsorted.today/guides/making_tax_digital/): Sole traders and landlords with qualifying income over £50,000 must use Making Tax Digital-compatible software and file quarterly updates from 6 April 2026. The threshold drops to £30,000 in April 2027. Check whether your income exceeds the current threshold.
- [PCI DSS: Payment Card Security: does it apply to you?](https://www.getsorted.today/guides/pci_dss/): Any business that accepts card payments must comply with PCI DSS. If you use a hosted payment provider (Stripe, Square, PayPal), your scope is minimal, but you still need to complete an annual Self-Assessment Questionnaire via your acquirer.
- [Do you need a cookie consent banner?](https://www.getsorted.today/guides/pecr_cookie_consent/): Websites using analytics, advertising, or any non-essential cookies likely need a compliant consent mechanism. The ICO has updated its storage and access technologies guidance, implied consent is not sufficient.
- [Do you need consent to send marketing emails?](https://www.getsorted.today/guides/pecr_email_marketing/): Opt-in consent is likely required before sending marketing emails to individuals. Soft opt-in may apply for existing customers if you're promoting similar products. Bought-in lists are almost always non-compliant. Emails to corporate addresses (B2B) sit outside the consent rule, but sole traders and partnerships count as individuals under PECR, so cold outreach to them still needs consent.
- [Do you need to set up a workplace pension?](https://www.getsorted.today/guides/pension_auto_enrolment/): If you employ anyone aged 18–74 earning above the lower earnings threshold, you must auto-enrol them into a qualifying workplace pension and make minimum contributions. From April 2026, the age threshold drops to 18 and the lower earnings limit is removed.
- [Do you need to check employees' right to work?](https://www.getsorted.today/guides/right_to_work/): Every employer must check that each employee has the right to work in the UK before employment starts, including British citizens. Penalties apply per worker, and checking correctly before day one gives you a statutory excuse against a civil penalty. Make sure you have a consistent process and keep records.
- [Do you have to pass on 100% of tips to staff?](https://www.getsorted.today/guides/tips_act/): In force since 1 October 2024, if your workers receive tips, gratuities or service charges more than occasionally, you must pass them on in full, allocate them fairly, keep a written policy, and hold records for three years. If tips never feature in your business, this does not affect you.
- [Do you need to register for VAT?](https://www.getsorted.today/guides/vat_registration/): You likely need to register for VAT. Registration is mandatory once VAT-taxable turnover passes £90,000 in any rolling 12-month period, or as soon as you expect to pass it within the next 30 days. Once registered you must charge VAT, file returns digitally under Making Tax Digital, and can reclaim VAT on purchases.