ConsentVeil Monitor — Order Form

Download the Order Form (PDF)

This Order Form is completed by Safe and Informed S.R.L. ("Safe & Informed") from the Customer's request and sent to the Customer for confirmation together with the Monitor Terms of Service, the Privacy Policy, the Data Processing Agreement, the Acceptable Use Policy and the Refund Policy. The contract is concluded when the Customer replies with clear acceptance and Safe & Informed confirms the Order (Terms 3.1–3.2). The Service is offered to business customers only (Terms 2.4); this form is not sent to a consumer. Where a field does not apply, write "n/a".

1. Reference and parties

Order reference (assigned by Safe & Informed; quoted in the Report, the invoice and all correspondence)
Date of this form
Customer (legal name, registration number, VAT number if any)
Customer address
Customer contact for this Order (name, role, e-mail)
Customer acts as	☐ Controller ☐ Processor for another controller (DPA 1.4)
Supplier	Safe and Informed S.R.L., Aleea Slt. Adrian Cârstea, Nr. 13, Bl. 37, Sc. 2, Et. 8, Ap. 141, Sector 3, Bucharest, Romania; Trade Register No. J2026050848009; CUI 55462821; [email protected]; telephone +40 746 447 444

2. Service ordered

Service	☐ Quick Scan (one-time) ☐ Audit (one-time) ☐ Re-scan (one-time, after an Audit; Audit order reference: ______) ☐ Monitoring (subscription, after an Audit; Audit order reference: ______)
Browsers	☐ Chromium (runs only as Playwright's bundled headless shell) ☐ WebKit ☐ Firefox (only where available, included in this Order and passing the required startup checks). Browser-channel and executable-path overrides are refused.
Locales
Viewport	☐ Desktop ☐ Mobile ☐ Both
Page coverage (every service)	the primary page in every browser-and-locale combination above; each additional page once, in the primary combination that ran (Terms 4.7 states how reports are compared)
First delivery deadline (first Report by e-mail, Terms 8.1)
Quick Scan credit (Quick Scan only)	The Quick Scan fee is credited in full against an Audit of the same website ordered within 30 days of delivery of the Quick Scan Report (Refund Policy 2.7)
Re-scan scope (Re-scan only)	The pages, browsers and locales recorded in the Audit order named above, under the same Methodology version. Additional pages or locales ordered with the Re-scan (section 5) are scanned as a separate run and reported separately, not as a before-and-after comparison. A change replacing the audited scope, or a changed Methodology version since the Audit, is quoted as a new Audit

Scope per website. One row per website; add rows as needed. Pages are full URLs under the website's registrable domain (AUP 2.4).

Website (registrable domain)	Pages to scan (full URLs)	Browsers, locales and viewport for this website, if different from above	Expected elements to keep working after a refusal (optional selectors)

3. Monitoring only

Scope	The pages, browsers and locales recorded in the Audit order named in section 2; the subscription does not widen the scope
Frequency	Weekly
Start date
Alert e-mail address (receives the alert e-mails described in Terms 4.7; an alert contains no scan evidence)
Alert conditions (fixed list; no other condition is alerted)	a test that regressed; a result that could no longer be established; a classified tracking hostname newly present in the pre-consent inventory; a change of consent platform
Comparison basis	the previous Scan of the same recorded scope under the same Methodology version; each browser-and-locale combination and each page report is compared with its same-named report of the previous Scan when its recorded engine, locale, viewport, timezone, flows and page address match, otherwise it is reported as a result that could no longer be established; where no comparable previous Scan exists no condition is evaluated and, if a completion message was requested, it says so
Also send the message "No configured alert condition was detected" after a scan that meets none of the conditions	☐ Yes ☐ No
Monthly summary delivery address (PDF by e-mail)
Minimum term	none; monthly, renewing for successive monthly periods and cancellable at any time with effect at the end of the paid period (Terms 8)

Alert e-mails do not replace the Reports due under the Order, including the monthly PDF summary. Additional underlying run Reports can be requested by e-mail.

4. Ownership verification (exactly one method per host, Terms 3.3)

One row per host named in section 2; add rows as needed. The scanner will not proceed for a host unless exactly one method has been recorded for it, and the Report names the method used.

Host	Method (tick exactly one)	Token issued (`dns_txt`, `well_known_file`)	E-mail address relied on (`domain_email`) or order reference (`written_order`)	Reference recorded in the Report
	☐ DNS TXT record on `_consentveil.<host>` ☐ Token file at `/.well-known/consentveil-verify.txt` ☐ Order sent from an address at the host's registrable domain ☐ Written order from the organisation (this accepted form)
	☐ DNS TXT record ☐ Token file ☐ Domain e-mail ☐ Written order

By signing or expressly accepting this completed form by e-mail, the Customer authorises Safe and Informed S.R.L. to perform the public-page loading, consent interactions, observations and screenshots described in the agreed Methodology on the domains and pages identified in section 2. The Customer confirms its authority to grant that permission, including any necessary client or hosting permissions, and that none of the listed websites is on a domain-exclusion request. This does not authorise access to unrelated systems, authentication or circumvention (Terms 3.4, AUP 2.2).

5. Price and payment

Service price (net, excluding VAT; Price List at the date of this form: Quick Scan EUR 149, Audit EUR 490, Re-scan EUR 190, Monitoring EUR 99 per month per website)
Included pages, browsers and locales
Extra pages (EUR 79 per page, net) / extra locales (EUR 49 per locale, net); Audit and Re-scan only, Quick Scan is one page and one locale, Monitoring keeps the Audit scope
Quick Scan credit applied (Audit ordered within 30 days of delivery of the Quick Scan Report for the same website)	☐ n/a ☐ EUR 149 deducted; Quick Scan order reference: ______; Quick Scan Report delivered on: ______
VAT applicable, or reason none is charged
Total payable (EUR)
Payment	Bank transfer against invoice, the only payment route at the date of this form (Terms 7.2). Where Safe & Informed later offers a hosted card payment link, the provider, its role, the destinations of the payment data, the payment mechanism and how to obtain its safeguards are identified before payment; Safe and Informed S.R.L. remains the seller
Invoicing	☐ On Order ☐ On delivery (one-time services); monthly in advance (Monitoring). Invoice issuer: Safe and Informed S.R.L.; transmitted through RO e-Factura where required (Terms 7.4)
Payment due date (one-time services) / payment term of each monthly invoice (Monitoring)
Price list version

No charge beyond the amounts stated above is added without the Customer's agreement.

6. Deliverables (as per service)

All services

Report (PDF) with findings, evidence, cookie and storage inventory, limitations and the methodology version, for the pages, browsers and locales recorded in section 2.

One-time services

Quick Scan: one page, Chromium, one locale; the applicable automated tests; no developer tickets, no questions by e-mail, no re-scan. The Report states that the results received a brief review only.
Audit: up to three pages, Chromium and WebKit, up to two locales; review of the results by our staff; the page-consistency check across the scanned pages; developer tickets with priorities and the acceptance criterion for each; questions by e-mail about the Report for 10 days after delivery.
Re-scan: one further Scan of the scope recorded in section 2 after the Customer's fixes; a check of each earlier Finding; a before-and-after comparison; an evidence pack with the SHA-256 of every file; a Report of resolved, persisting and new Findings; questions by e-mail for 10 days after delivery. The Customer or its developer makes the changes; we verify the result and do not modify the website. Extra pages or locales ordered with the Re-scan are a separate run with its own Report, outside the before-and-after comparison.

Monitoring

Weekly Scans of the scope in section 3, comparison with the previous comparable run, alert e-mails for the fixed conditions in section 3, a monthly PDF summary, and evidence retained for 12 months after each delivery or shorter on instruction (Privacy 10, DPA 10). Monitoring does not include a full staff review every week, fixes, or Re-scans on demand; a Re-scan or a wider scope is ordered separately.

Questions by e-mail are included in the Audit and the Re-scan only; a question under another service is answered on quotation. More than four websites, branded Reports or any other scope not listed in the Price List are quoted separately.

7. Specific acceptance (business customers)

The Customer, acting for purposes relating to its trade, business, craft or profession, confirms by ticking the box and signing or accepting this form by e-mail:

☐ "I expressly accept the business liability limitations (Terms 14), the monthly renewal and cancellation arrangement (Terms 8), the suspension and termination provisions (Terms 7.3 and 16) and the governing-law and jurisdiction provisions (Terms 20) of the attached Terms, version 20 October 2026."

8. Consumers only (not in use until Romanian documents exist)

Not applicable: this form is used for business customers only (Terms 2.4). If, after the Romanian consumer information exists, a contract with a consumer is proposed, the following statement is offered separately and only in that case: "I expressly request Safe and Informed S.R.L. to begin the service before the end of the 14-day withdrawal period. I understand that, once the service has been fully performed and the Report delivered, I lose my right of withdrawal." ☐ I agree

9. Signatures or acceptance by e-mail

Customer	Safe and Informed S.R.L.
Name, role, date, signature; or the date and sender address of the e-mail by which this completed form was expressly accepted	Name, role, date, signature; or the date of the Order confirmation e-mail

10. Attachments (versions and dates)

Document	Version / date
Terms of Service	20 October 2026
Privacy Policy	20 October 2026
Data Processing Agreement (with Annexes I–III)	20 October 2026
Acceptable Use Policy	20 October 2026
Refund Policy	20 October 2026
Methodology (https://safeandinformed.com/monitor/methodology)	version:
Price list (https://safeandinformed.com/monitor#pricing)	version:
Sub-processor list, DPA Annex III (https://www.zoho.com/privacy/sub-processors.html)	date: