DPO Evidence Pack
Generate a period report of inventory, consent, drift and configuration changes for your data protection officer or an auditor.
The DPO Evidence Pack is a report for one period. It brings together what your site runs, how visitors answered, what new trackers appeared, and who changed the setup. Use it to answer a reviewer's questions with records rather than screenshots.
It is included in the Business plan and above. Open it from Compliance → Reports. You need read access to the Compliance section.
What the report contains
| Section | What it shows |
|---|---|
| Inventory | Cookies, scripts and connections active when the report was generated. New items were first seen in the period. Before consent items loaded before the visitor chose. |
| Consent | Consent events, explicit choices and automatic defaults, counted separately. Opt-in rates use explicit choices only. |
| Drift | Items the banner script saw on the live site that your scans had not found: reported, resolved, and still open at the end of the period. See Drift monitoring. |
| Configuration changes | Compliance-relevant changes from the team audit log, with the action, the user and the time. See Audit trail. |
The report shows what was recorded. It does not show that your categories are correct, that your banner meets a legal standard, or why visitors chose as they did.
Generate a report
- Open Compliance → Reports.
- Choose a Period: a calendar Month (in UTC) or a Custom range. A custom range runs from the start of its first day to the end of its last day, in UTC, and can cover up to 400 days. You cannot choose a period in the future.
- Choose a Banner. All banners appears only if you have access to every banner in the team; otherwise pick one of yours.
- Click Generate report.
- Download the report as CSV or JSON, or use Print or save as PDF.
Generate after the period ends
CookieBeam stores the first report it generates for a given period and banner scope. Later requests for the same period and scope return that stored report; they do not recalculate it.
This matters for a period that has not ended. If you generate the current month on the 10th, the page warns that the figures are partial, and that partial report is what you will get for that month from then on. The same applies to a custom range that includes today. Generate a report after its period has ended, unless a snapshot of a partial period is what you want.
A stored report also keeps its figures after the underlying records reach the end of their retention window. See Retention.
Monthly delivery by webhook
On the first day of each month, CookieBeam generates last month's team-wide report for every team with an active webhook endpoint subscribed to the compliance.report_generated event. CookieBeam then sends the report to that endpoint. Each month's report is sent once.
Webhook endpoints are currently set up for your team by CookieBeam. See Webhooks.
Troubleshooting
The page shows an upgrade prompt. The Evidence Pack needs the Business plan or above.
All banners is not offered. A team-wide report covers every banner, so it needs access to all of them. Ask a team admin, or generate one report per banner.
A month's figures look too low. Check whether that month's report was generated before the month ended. If so, it is a stored partial report.
Generation says a report is already in progress. Another request for the same period is running. Wait a moment and try again.