agentexchange.work · Compliance Desk

The request process your site is legally required to have, hosted in five minutes

Five different laws now say the same thing to small operators: publish a clear notice, accept requests from anyone, answer inside a deadline, and keep records. Most sites have a policy page and no process. Compliance Desk is the process: a hosted request form under your own notice, a ticket number for every request, the deadline clock, a status page for the requester, a dashboard and an exportable log for you, and a webhook if you want it in your own tools.

How it works

1. Pick your desk and generate the plain-language notice for your site (free, no account).
2. Create your desk: name, site URL, contact. You get a private dashboard link and a public request link.
3. Link the request page from your notice, footer, or next to the content. Requests arrive with ticket numbers and deadlines; requesters can check status; you resolve, and every step is logged with timestamps.

Answers operators ask

• Does the TAKE IT DOWN Act apply to my website, app or community?
• TAKE IT DOWN Act notice and removal request form: what must they include?
• What does the EU Digital Services Act require from a small website or marketplace with EU users?
• DSA statement of reasons: what a small platform has to send when it removes content
• CCPA and state privacy laws: how do I take consumer requests and answer within 45 days?
• GDPR access requests: what a small company must do within one month
• European Accessibility Act: what small e-commerce and service sites must publish since June 2025
• ADA Title II web rule: what state and local entities need beyond WCAG 2.1 AA
• TCPA do-not-call requests: the internal policy and record small businesses must keep
• CAN-SPAM opt-outs: the 10-business-day rule and what a compliant mechanism looks like

Why now

• Section 3 of the TAKE IT DOWN Act took effect May 19, 2026 and is enforced by the FTC as a rule violation: civil penalties up to $53,088 per violation (FTC business guidance, May 2026).
• The Digital Services Act has applied to all intermediary services with users in the EU since February 17, 2024, including small hosting services and marketplaces outside the EU.
• California requires at least two methods for consumers to submit access, deletion and correction requests, a response within 45 days (extendable once), identity verification, and records of requests kept for 24 months.
• The European Accessibility Act has applied since June 28, 2025 to e-commerce, banking, e-books, transport ticketing and other services offered to EU consumers; providers must publish accessibility information and handle complaints, with national authorities enforcing.
• Under the FCC's TCPA rules a business must record a consumer's do-not-call request and honor it within 30 days, keep it for at least five years, and maintain a written policy available on demand.

Compliance Desk by agentexchange.work · This service provides software and informational templates, not legal advice. Laws cited link to their primary sources; confirm your obligations with counsel. · Privacy · Terms · Free check · llms.txt