Compliance
Help with EU website duties, built in.
What Kaleta does by default for privacy, accessibility, whistleblowing, the imprint and AI transparency. It gives you the tools and the templates – not legal advice. Every document it prepares is a template for you to review.
Privacy (GDPR)
Personal data, handled in one place.
Record of processing.
A record in the style of GDPR Article 30, assembled from what the site is set up to do: forms and their fields, enquiries and their retention, the newsletter, statistics and connected services. Print it in Settings → Privacy and cookies, or ask Claude for it.
Personal data requests.
Enter an e-mail address once to see what the site keeps about it – enquiries, the subscription, queued e-mails, testimonial requests and bookings. Give the person a JSON file, or erase it all in one step.
Retention periods.
By default, enquiries are deleted or anonymised after 24 months and cookie consent records after 36 – you can change both. Unconfirmed newsletter sign-ups go after 30 days, the change log after 180 days and the firewall log after 30.
Cookie consent.
The cookie bar is part of Kaleta, not a third-party service, and appears only when there is something to consent to. Analytics and marketing codes wait for consent, and consents are logged without the IP address.
Statistics without cookies.
The built-in statistics count visits with a hash that changes every day. The IP address is never stored and no cookie is set, so the statistics alone never bring up the cookie bar.
Privacy policy template.
The installation creates a hidden draft privacy policy that follows what the site has switched on and fills in your company details. Complete the gaps and check it before you publish.
Accessibility
Checked while you build, not after a complaint.
Accessibility statement.
Filled from the site audit with the standard (EN 301 549 / WCAG 2.1 AA), the known barriers, the contact and the date. Settings → Privacy and cookies creates it as a hidden draft page for you to review.
Checks before publishing.
The builder warns about buttons without a link, images without a description, skipped heading levels and low text contrast. The site audit adds vague link texts, tables without header cells and frames without a title.
Contrast in the design system.
As you choose colours, the design system shows the contrast of every pair – 4.5 : 1 for text, 3 : 1 for the focus ring – in light and in dark mode.
Tested starter sites.
Every change to Kaleta runs axe-core on key pages of the three starter sites, on desktop and phone, in light and dark mode. Any WCAG A or AA violation it detects fails the test.
Whistleblowing channel.
An optional module for the EU Whistleblower Directive (2019/1937): an encrypted report form, anonymous if the reporter wishes, that only the people you choose can read. It reminds you of the 7-day and 3-month deadlines.
Imprint and company details.
Fill in Business details once – register entry, representative, company and VAT IDs. The Imprint page template lists every detail of the operator, and the same data feeds the footer and search engines.
AI transparency
A person stays in charge.
- Drafts first – Claude saves pages, site parts and news as drafts and publishes only when a person tells it to. A drafts-only connection never publishes.
- Every change has a reason – each change Claude makes is recorded in the change log with its connection and the reason Claude gave. A change that cannot be recorded is not made.
- Kept from Claude – whistleblowing reports are never available over the connection.
- The exception: the Writing assistant – it stays off until an administrator switches it on and adds their own key for Anthropic, OpenAI, Google or Mistral. Text then goes to that provider when someone clicks an assistant button – and, only if the administrator also turns on sorting of enquiries by the assistant, the text of each new enquiry.
Your part
What stays your responsibility.
- The legal texts – the privacy policy, the record of processing, the accessibility statement and the imprint are templates. Check them against the law that applies to you; Kaleta gives no legal advice.
- Your content – automatic checks find only part of the barriers. Texts, images, documents and videos you add still need a person’s review.
- Your choices – retention periods, the cookie bar and any third-party code or embeds you add are yours to set and to explain to visitors.
- Your processes – someone has to answer personal data requests and handle reports within the deadlines of your national law.
Start with the tools in place
Kaleta is free and open source. Download it, or see how we handle security, updates and your data.