When you launch a Shake scan from your Axeptio administration or from our website, you receive an audit report in PDF format.
This report lists all services/providers detected on the sample of pages that Shake analyzed on your site, sorted by purpose/category. For each service, the report indicates:
The name of the service and the company that develops it
A brief description of the service
An indication of whether consent is necessary or not, depending on whether the service is strictly necessary or not to our knowledge (see note below)
The status of the service, which indicates whether the service is properly or poorly configured
Shake helps you identify which services must be subject to consent or not. Shake relies on a database created and maintained by Axeptio, which lists a large number of services and providers used on websites. It helps you identify which services must be subject to consent or not. This database is updated regularly, but the compliance of your site remains your responsibility. We therefore recommend that you systematically verify these elements and update your configurations accordingly.
Understanding the status of detected services
To assess the compliance of a service, it is necessary to check when the services are loaded: are they loaded before the visitor has interacted with your banner (and therefore before they explicitly gave their consent) or after?
Shake follows the following logic for each detected service:
Was the service detected before or after consent?
If it is detected after consent, then it appears as properly configured 🟢
If it is detected before consent:
If the service can be configured to be exempt from consent, then it appears as a provider whose configuration may be specific 🟡
Otherwise:
If the service is not subject to consent, it appears as properly configured 🟢
If the service is subject to consent, it appears as poorly configured 🔴
Compliance objective: an all-green report. As you will understand: for your site to be considered compliant, all your services must be properly configured. In short, you want a report with as much green as possible!
Let us now review the different statuses a service can have.
🟢 Properly configured provider
Shake detected that the service was only loaded after the visitor gave their consent, or that it is exempt from consent.
✅ Perfect: you have nothing more to do for this service!
🟡 Provider whose configuration may be specific
Shake detected that the service was loaded before the visitor gave their consent and that it can be configured to be exempt from consent.
✅ Have you configured the service so that it is exempt from consent? If so, then perfect, you have nothing more to do and you can ignore the warning!
🛑 If you have not configured the service to be exempt from consent (intentionally or not), this constitutes non-compliance and you are required to remedy it by adapting your configuration! Continue reading the next section to learn how to correct the situation.
🔴 Poorly configured provider
Shake detected that the service was loaded before the visitor gave their consent, when it is not exempt from consent.
🛑 This constitutes non-compliance and you are required to remedy it by adapting your configuration! Continue reading the next section to learn how to correct the situation.
❓ Unknown provider
Unknown providers are listed at the end of the report and, as a precaution, are displayed as "poorly configured". This does not necessarily mean that they collect personal data, but you must verify their nature and consent status.
Shake detected that the service was loaded before the visitor gave their consent, but we do not know whether it must be subject to consent because it is not referenced in our database.
✅ You recognize the service and are certain that it does not require consent? If so, then perfect, you have nothing more to do and you can ignore the warning!
🛑 If the service must be subject to consent, this constitutes non-compliance and you are required to remedy it by adapting your configuration! Continue reading the next section to learn how to correct the situation.
⚠️ If you are unsure whether the service must be subject to consent, it is your responsibility to verify this by contacting the service's support. We observe, however, that the majority of services listed in unknown providers are often functional, but in case of doubt, do not make assumptions!
Services appear as poorly configured in your report? Consult Correcting non-compliance detected by Shake to learn how to remedy the situation.