Skip to main content
Back to Home
Optional regulatory layer

Jurisdiction-Aware Compliance

An optional readiness layer that sits beside your security report. It reads public technical signals for a region you choose and turns them into a plain readiness snapshot. It never changes your security score, never creates findings, and never decides that a law applies to you. The first live region is Israel.

Per domain, opt-in

Enabled by you on a single verified domain at a time. Never automatic, never from your IP, VPN, or hosting location.

Technical signals only

Reads only what is publicly observable. It is not legal advice, not a compliance determination, not a certification.

Separate from your score

Does not affect your security score, grade, severity counts, or public badge. Never shown on public reports.

Israel · live now

Israeli Privacy Readiness

Israel's Privacy Protection Law was significantly amended by Amendment 13 ("Tikun 13"). This package checks the public, technical part of that picture and produces a Tikun 13 Technical Readiness Score alongside an assessment-coverage figure, so you always know how much of the package could be judged from the outside.

Tikun 13 Technical Readiness Score

X / 100

Observed divided by assessed signals. Not-assessed items are excluded from the score.

Assessment coverage

X %

How much of the package could be assessed from the public surface. Shown separately, always.

Three honest states

Observed

The completed public checks returned the expected technical signal.

Needs attention

Completed public checks returned a potentially relevant gap.

Not assessed

The check was blocked, inconclusive, client-rendered, or depends on internal facts. This is not a failure or evidence of non-compliance.

What it checks

Eight signals. The last three normally stay Not Assessed, because they depend on internal facts a public scan cannot see - and the score never penalizes you for what it could not check.

Publicly assessable

Public privacy notice

Whether a reachable privacy notice is published.

Publicly assessable

Tracking and consent signal

Tracker and consent signatures detected in the returned HTML.

Publicly assessable

Transport and cookie protection

TLS and cookie protection on the public surface.

Publicly assessable

Public data-exposure signals

Publicly observable data-exposure indicators.

Publicly assessable

Public Section 11 notice content

Five derived elements checked in the public privacy notice. Placement at collection points requires contextual review.

Internal

Database registration or notification duties

Depends on internal facts a public scan cannot see.

Internal

Privacy Protection Officer requirement

Depends on internal facts a public scan cannot see.

Internal

Internal privacy governance and data lifecycle

Depends on internal facts a public scan cannot see.

Free

  • Tikun 13 Technical Readiness Score
  • Assessment coverage
  • Aggregate count of signals in each status

Paid plans add

  • Every signal, its status, and the evidence behind it
  • Links to the official Israeli regulatory sources used
  • An appendix in the PDF export when the region is enabled

Roadmap

Israel is the first live region. The same jurisdiction-aware model is built to extend to the EEA/UK and the United States, each opt-in and per domain, on the same technical-readiness basis.

Important

The Tikun 13 Technical Readiness Score covers only publicly observable technical signals and excludes Not-Assessed items. It is not a legal compliance score, legal advice, legal interpretation, certification, or a guarantee of compliance. It does not determine that any law applies to you. Some obligations depend on internal information and processes UNPWNED cannot assess. For a determination of how the Israeli Privacy Protection Law applies to your organization, consult qualified legal counsel.

Common questions

Is the Tikun 13 Technical Readiness Score a legal compliance score?

No. It measures only the public technical signals that were actually assessed. It is not a legal compliance score, legal advice, legal interpretation, certification, or a guarantee of compliance. Some obligations under Israel's Privacy Protection Law depend on internal information and processes that a public website scan cannot establish, so they are excluded from the score. Treat the result as a technical starting point, not a legal opinion.

How is the score calculated?

Only assessed signals count. The readiness score is the share of assessed signals that were observed: observed divided by (observed plus needs-attention), as a percentage. Signals marked Not Assessed are excluded from the denominator entirely. Assessment coverage - how much of the package could be evaluated from the outside - is always shown separately. A score of 100/100 at 50% coverage means every assessed signal was observed and half the package could not be checked externally. If nothing could be assessed, the score is N/A.

Does enabling this change my security score, grade, or badge?

No. This layer is completely separate from the security scan. It does not create security findings and does not affect your security score, grade, severity counts, or public badge. The same scan produces the same security result whether or not a jurisdiction is enabled.

How does a jurisdiction get enabled?

It is opt-in and per verified domain. From public signals on the site itself - an Israeli domain suffix, Hebrew content, an Israeli phone number or address, a shekel currency, or a reference to the Israeli Privacy Protection Law - the scan may suggest that Israel could be relevant. It never decides that Israeli law applies and never turns the package on automatically. You confirm or dismiss it once per domain in Regulatory Regions. Your own location, VPN, IP address, and hosting or data-center country are never used to determine jurisdiction.

What do Free and paid plans see?

Free shows the Tikun 13 Technical Readiness Score, assessment coverage, and the aggregate count of signals in each status. Paid plans add the signal-by-signal breakdown, the evidence behind each status, links to the official Israeli regulatory sources used, and an appendix in the PDF export when the jurisdiction is enabled.

Will this appear on my public report or badge?

No. Public reports and security badges never expose the jurisdiction suggestion, your saved regulatory scope, or any readiness snapshot. The readiness package is visible only to you inside your own report.

Run a scan, then choose your region

Start with a free security scan. On a verified domain you can opt into Israeli Privacy Readiness and see your Tikun 13 Technical Readiness Score - it never touches your security score.

700+ checks · under 2 minutes · no signup