Home/Privacy & compliance/GDPR Assessment
Privacy compliance
EU + UK · readiness audit

GDPR Compliance Assessment. Audit, gaps, remediation.

Any US business that collects personal data from EU or UK residents triggers GDPR / UK-GDPR obligations: lawful basis for processing, data subject rights, breach notification, DPO assessment, vendor DPAs, international transfer mechanisms (SCCs, adequacy). Penalties: 4% of global revenue or €20M. We run a 30-point readiness audit, identify gaps, and deliver a prioritized remediation plan with templates and policies.

All 50 states + DC 60-day money-back SOC 2 Type II
How it works

How we handle Conservation Easement, end-to-end.

A conservation easement is a permanent restriction on the use of land, typically donated to a qualified land trust to preserve the land's natural or open-space character.

1

Eligibility review

Land must have conservation value: scenic, ecological, historic, open-space, or recreational. We assess whether your land qualifies. Most rural and undeveloped properties do; urban properties rarely.

2

Land trust selection

Donation must be to a qualified land trust (501(c)(3)). We refer to local and national land trusts (Land Trust Alliance, The Nature Conservancy, regional trusts). They accept the easement and hold the restriction in perpetuity.

3

Engineering + appraisal

Engineering work documents the conservation value. Qualified appraisal determines diminished land value (the deduction amount). IRS scrutinizes appraisals; we use highly credentialed appraisers with conservation easement experience.

4

Legal documentation + closing

Easement document recorded with county recorder. Permanent restriction runs with the land. Donor receives appraisal-supported deduction. Coordination with attorney specializing in conservation easements.

What we'll set up for you

A clean handoff, in four steps.

You give us the basics. We handle the state, the IRS, and the compliance clock so you can focus on the business.

01 · Name + Brand

A name that's actually available.

Real-time check against the state register, USPTO trademark database, and matching domains.

02 · State filing

Filed with the Secretary of State.

We submit your Articles, pay the state fee on your behalf, and return the stamped certificate.

03 · Federal IDs

EIN + the right tax setup.

Federal Employer ID with the IRS, plus state tax accounts when your business needs them.

04 · Stay compliant

Registered Agent + deadline tracking.

Your agent on file in every state, with every renewal and annual report tracked in one calendar.

Pricing

Transparent conservation easement pricing.

Government fees pass through at cost. No upsells.

Self-serve audit

$899
Questionnaire-driven

Online questionnaire + automated gap report. Best for smaller operations with simple data flows. Excludes deliverable templates.

Get started

Audit + counsel review

$4,999
Lawyer-supervised

Standard + partner counsel review of high-risk findings (Schrems II transfers, special categories, DPIAs). Includes 2hr consultation + privileged memo.

Get started
FAQ

About the Conservation Easement Service.

Does GDPR apply to US businesses?
Yes if you process personal data of EU or UK residents in connection with offering goods or services, or monitoring their behavior. A US e-commerce site shipping to Germany is covered. A US SaaS with EU customers is covered. Mere availability of a website is generally not enough.
Do I need a Data Protection Officer (DPO)?
Required under Article 37 if: you are a public authority, your core activities require regular and systematic monitoring of data subjects on a large scale, or you process special categories of data on a large scale. Most small US businesses do not need a DPO; many mid-size do.
What is Schrems II and why does it matter?
2020 CJEU ruling invalidated the EU-US Privacy Shield. Transfers from EU to US now require SCCs + a Transfer Impact Assessment (TIA) showing US surveillance laws do not undermine EU-equivalent protection. The 2023 EU-US Data Privacy Framework (DPF) restores adequacy for certified US companies.
What are the actual penalties?
Tier 1 (administrative): up to €10M or 2% of global revenue (whichever is higher). Tier 2 (most serious - lawful basis violations, data subject rights, transfers): up to €20M or 4% of global revenue. National authorities have been imposing them since 2018, including against US firms.
How long does GDPR remediation take?
Depends on complexity. Quick fixes (privacy policy update, cookie banner): days. Medium (DPAs, data subject workflow, ROPA): 4-8 weeks. Complex (system rearchitecture, vendor renegotiation, SCC roll-out): 3-6 months. Our remediation plan sequences by risk.
Should I get certified to the EU-US Data Privacy Framework (DPF)?
Yes if you frequently receive EU personal data and want a clean transfer mechanism. Self-certify with US Commerce Department + commit to Framework principles + designate dispute resolution. Annual recertification. We help with certification application.
Why File.Business

Premium compliance, no service-fee markup.

Trust you can verify

SOC 2 Type II audited platform. 220,000+ businesses served. 60-day money-back on service fees. State fees passed through at cost with no hidden markup. Explicit AUP on restricted industries.

A compliance partner, not a transaction

Most providers go quiet after checkout. We auto-track every annual report, registered agent renewal, and license deadline across your entities. The Business OS dashboard keeps your compliance score visible year-round.

Premium experience competitors cannot match

Premium positioning, transparent pricing, no service-fee markup on state or federal filings. Premium positioning, transparent pricing, no service-fee markup on state filings.

Start your business in the next 5 minutes.

No state-fee markup. Pay only the state fee. 60-day money-back guarantee.

No state-fee markup 60-day money-back Cancel anytime
$0 + state fee Start my business