What to do after a non-EU finding
Confirm whether the load is a passive asset or an active script, identify the vendor and its jurisdiction, and check whether consent, a contract or a DPA already covers it. The scanner saves you the first step — the public surface is mapped before you open the vendor tab.