Assuro
Checks product data for gaps in packaging EPR, GPSR, WEEE and battery information.
Two Privacy & compliance apps from European providers, side by side, point by point.
| Assuro | Pandectes GDPR Compliance | |
|---|---|---|
| Free plan | Yes | Yes |
| Built for Shopify | No | Yes |
| Privacy researched | Yes | Yes |
| DPA with source | Yes | Yes |
| Hosting with source | Yes | No |
2 Apps compared
Checks product data for gaps in packaging EPR, GPSR, WEEE and battery information.
Manage cookie consent, consent logs and customer data requests for Shopify stores.
Free up to 50 products; Starter from 39 USD/month
Free plan; Plus from 9 USD/month
AssuroVienna, Austria
PandectesKuusalu, Estonia
No reviews yet
Not documented
03/11/2026Documents checked
26/10/2026Documents checked
Stores that want to see product gaps in packaging EPR, GPSR, WEEE, batteries or textiles per sales country.
Stores with several tracking services that want to manage consent and data subject requests.
Assuro organises and flags information. It is not legal advice and does not file reports. The free plan ends at 50 products.
Automatic blocking depends on the plan. The app also asks for access to customers and order history.
The statement of 25 June 2026 names Ravid Efroni, sole proprietor in Vienna, as controller and says orders and end-customer data are not read.
Source for AssuroPublic privacy policy describes the processing of store and consent data.
Source for Pandectes GDPR CompliancePublic DPA under Art. 28 GDPR. Assuro is the processor for users' account data.
Source for AssuroThe provider describes its role as processor. Request and check the current DPA separately.
Source for Pandectes GDPR ComplianceThe database is at Neon in Frankfurt, analytics at PostHog in the EU. Vercel, Stripe and Resend may also process data outside the EU, then under standard contractual clauses.
Source for AssuroEU headquarters documented; exclusive EU hosting not confirmed here.
According to the provider, the Shopify connection only requests product access. Account data is name and email; card data stays with Stripe.
Source for AssuroThe listing names customer data, order history, web pixels and theme access, among others.
Source for Pandectes GDPR ComplianceThe DPA provides for deletion or return after the service ends, unless statutory retention applies. It names no fixed number of days.
Source for AssuroAccording to the provider, active account data is removed within 30 days of uninstalling. Clarify export beforehand.
Source for Pandectes GDPR CompliancePrices are snapshots, and a headquarters in Europe is not a GDPR seal. How I research