About us

Your digital presence holds promises. We make sure you keep them.

Tolbrook is an independent digital compliance auditor for consumer brands. We check that what your website does still matches what your policies promise, from the first second a page loads to long after a visitor says no.

Watch: What Tolbrook does

Read the transcript

Your website makes promises to every shopper. Your privacy policy says what you collect, who you share it with, and how people can say no. Tolbrook checks that your website keeps those promises.

The trouble is, websites change all the time. A new app. A new tag. A new campaign. Each one can send shopper data to outside companies, long after anyone remembers adding it. Regulators and plaintiffs’ firms now look for exactly that gap.

So first, we find it. We go through your site the way a real shopper would, on a laptop and on a phone. We say yes, and we say no. We open the booking and checkout pages, and type made-up details into the forms, without ever sending them.

All the while, we record which outside services receive data, and what they get, like the page a shopper is reading, or what they typed. Then we hold it up against what your policy promises. Every finding comes with the evidence.

Second, we help you fix it. You get the exact fix for each risk your site carries today, most urgent first. From a setting nobody switched on, to policy wording that no longer fits, to a tag that should have gone years ago.

Third, we watch it. A fix only lasts until the next change. So with The Promise-Kept Year, we check again every week, as your site changes. A gap you closed stays closed.

We’re independent, and we’re not a law firm. We don’t give legal advice, and paying us never changes what we find. Your lawyer writes the promises. We check your website keeps them.

That’s Tolbrook. From the first second a page loads, to long after a shopper says no. And we review whole sectors the same way, naming no business, so you can see where your market stands.

Read our sector reviews at tolbrook.com/reports.

Find it. Fix it. Watch it.

What is Tolbrook?

Tolbrook is an independent digital compliance auditor for consumer brands. We check that what a brand’s website does still matches what its policies promise, and we keep checking as the site changes.

Why do websites break their own promises?

Tools pile up. An app here, an integration there, a tag added for a campaign that ended long ago. Each one keeps running long after anyone remembers it. Nobody meant it, but regulators and plaintiffs’ firms now look for exactly that gap, between what a brand promises and what its website does.

What does Tolbrook check?

56 checks on every site, the way a visitor would see it, on a desktop and on a phone. They cover five categories: privacy choices, what visitors type and look for, policies and state rules, security and accessibility, and the phone version. No other provider we compared checks this much, in one place, and every finding comes with the evidence.

See everything one audit checks

What do I get?

The exact fix for each risk you carry today, most urgent first: the setting nobody switched on, the policy that no longer matches the site, the tracker that should have gone years ago.

What happens after the fix?

We keep watching. Websites change every week: a new app, a new tag, a new campaign, a new integration. We keep checking, so a gap you have closed stays closed and your policies keep telling the truth. Find it. Fix it. Watch it.

Who does Tolbrook work with?

Brands whose customers are people, not data points. Brands that would rather earn loyalty than harvest it, and believe a shopper’s “no” should mean no.

Is Tolbrook a law firm?

No. We do not give legal advice. Your lawyer writes the promises; we check your website keeps them, and keep checking as it changes. Paying us never changes what a report says, and what we find stays between you and us.

Order a report Our independence commitments