Question 1

How long does an audit take?

Accepted Answer

Most engagements deliver a full report in 10–15 business days from kickoff. Focused single-domain reviews (for example, cookies and consent only) typically complete in a week.

Question 2

Is ComplyMynt a law firm?

Accepted Answer

No. ComplyMynt performs technical and operational risk assessments and remediation engineering. Our reports are built to be handed directly to your counsel, and we work alongside outside counsel regularly.

Question 3

Do you need access to our production systems?

Accepted Answer

No. Standard audits use publicly observable surfaces plus documentation you provide. Remediation work uses scoped, least-privilege access to a repository or staging environment only when you request it.

Question 4

What do we actually receive?

Accepted Answer

An executive summary, a scored findings register with evidence, a prioritized remediation backlog written for engineers, and a live walkthrough. Retainer clients also receive quarterly trend reporting.

Question 5

Can you fix the issues you find?

Accepted Answer

Yes. Our remediation engineers deliver PR-ready changes for consent plumbing, accessibility defects, disclosure surfaces, and security headers — with regression tests where it makes sense.

Question 6

How do you handle our confidential information?

Accepted Answer

Mutual NDA by default, least-privilege access, encrypted storage, named handlers, and evidence destruction on request. See the Trust Center for full detail.

Compliance audit FAQ: straight answers before you commit.

Questions about audits, scope and confidentiality