TeeboStudio
Let’s talk about your project
fr
All projects

Personal product · Free tool in production · 2026

ConformeFR

A free generator of legal notices and GDPR policies for French websites, where AI stays in its place: it explains, it does not invent.

Visit site

Home page of ConformeFR
free, no sign-up
€0
Lighthouse performance, mobile
98–100
automated tests
97

Context

Every French business website must publish a legal notice and, if it collects data, a GDPR privacy policy. Many freelancers and small businesses copy a template found online, rarely suited to their situation. The tool is in French.

Challenges

  • Cover the common cases (sole trader, business site, e-commerce, small company) without promising a compliance that an automatic tool cannot guarantee.
  • Use AI without ever handing it the legal structure of the document.
  • Stay simple: no account, no payment, a document ready to paste on your site.

What was built

  • Guided flow

    A step-by-step form: the questions about personal data only appear for the privacy policy.

  • Site analysis

    You paste your site’s address: the home page is read to pre-fill contact details, company number, host and third-party services (Google Analytics, Meta pixel, YouTube videos…). Only empty fields are filled.

  • PDF and HTML, no sign-up

    The document is reviewed on screen, then downloaded as a PDF or as HTML ready to embed, for free.

  • SEO pages by business type

    Dedicated pages (sole trader, e-commerce, business site, GDPR for small companies) and blog articles.

How AI is used

The structure of the documents comes from legal templates written by hand: the AI does not touch a single clause. Claude Haiku writes the plain-language explanation of why the site processes data, and suggests a description of the business. An audit showed that this description was made up when the AI only had the company name: I changed the input data rather than the prompt. The AI now reads the site’s real home page, answers “none” if the text is not enough, and the user reviews everything. Every generated text is cleaned and escaped, and if the API does not respond, the document is generated anyway.

Bring AI into your business

Under the hood

  • End-to-end typed API (tRPC), PostgreSQL database (Neon, hosted in the EU) with Drizzle.
  • PDFs generated on the server, unit tests (Vitest) on the templates, the HTML escaping of every input field and the site analysis.
  • Reading URLs supplied by strangers is secured against SSRF: IP checked at connection time (including against DNS rebinding), redirects re-checked, time and size limited, usage limit per IP address.
  • Full audit (performance, AA accessibility in light and dark, security, legal accuracy) followed by fixes: XSS vulnerability closed, contrast corrected, unverifiable claims removed.
  • Key steps tracked without cookies: click on “Generate”, document created, download.