Skip to content
DMCC Act 2024 · New UK subscription rules expected January 2027

Seal every compliance decision as proof.

Evidencee scores your 19 DMCC controls — pre-contract, renewal notices, cancellation parity, cooling-off — hosts your cancellation page, sends Stripe and GoCardless renewal reminders, and seals each decision into a tamper-evident evidence chain you can export as one sealed bundle.

  • Free Readiness Check — no card required
  • Shopify, Stripe & GoCardless native
  • Own-website brands too
  • Subscriber emails encrypted (AES-256)
  • Cancel anytime
evidencee.com/readiness-audit

Readiness Audit

Review your DMCC compliance controls and fix any issues

0%

Compliance Readiness Score

Healthy

No manual audit run yet — score reflects live evaluation

19

Passed

0

Failed

0

Review

0

Not configured

19

Total

Search controls…
  • Pre-contract template published
  • Pre-contract terms shown at checkout
  • Sign-up auto-renewal consent captured
  • Email provider connected
  • Notice templates published
  • Notice automation enabled
  • Notice timing within ruleset requirements
  • Hosted cancellation page verified live
  • Cancellation parity baseline recorded
  • Cancellation parity result is passing
  • Cooling-off policy configured (initial purchase)
  • Protections reach the right customers
  • Cooling-off queue is clear
  • No overdue cooling-off cases
  • Compliance logging enabled
  • Evidence events recorded in last 7 days
  • No unresolved fake-review findings
  • Data retention policy confirmed
  • Evidence bundle export working

Trusted by teams building compliant subscriptions

shopify-iconstripe-logo

The Compliance Challenge

UK subscription law changed. Most businesses haven't caught up.

The Digital Markets, Competition and Consumers Act 2024 introduced strict rules for UK subscription businesses. The CMA can investigate, fine, and publicly name non-compliant operators.

The question isn't whether you need to comply — it's whether you can prove it.

Pre-contract info blocks

DMCC Act s.254–257

You must show a clear subscription summary before taking any payment. Missing, buried, or inadequate pre-contract information is an immediate breach.

Mandatory renewal notices

DMCC Act s.258–261

Advance reminder notices are required before annual and trial renewals. Timing, content, and delivery method are all regulated — and must be evidenced.

Easy cancellation right

DMCC Act s.262–264

Subscribers must be able to cancel as easily as they signed up — in one session, online. Complex or obstructive cancellation flows are a direct violation.

Total price up-front (no drip pricing)

DMCC Act · CMA price-clarity guidance

The total amount payable — including taxes, shipping, and add-on fees — must be displayed before the consumer commits. Revealing fees only at checkout is a banned practice.

No fake or incentivised reviews

DMCC Act Sch. 20 · CMA enforcement priority

Commissioning, hosting, or failing to take reasonable steps to remove fake or undisclosed-incentivised reviews is a banned practice under the DMCC unfair-commercial-practices regime — and a stated CMA enforcement priority.

Under the DMCC Act, the CMA can impose penalties of up to 10% of global annual turnover or £300,000 — whichever is higher — for breaches of consumer-protection law.

Source: Digital Markets, Competition and Consumers Act 2024 · Full enforcement guide →

How EVIDENCEE Helps

One platform. Every control. Tamper-evident proof.

EVIDENCEE plugs into the platform you already run on and sets up default DMCC rulesets and templates for you. From then on it works in the background — and every event it records is written to a SHA-256-hashed, linked evidence chain you can prove later.

STEP 01

Connect

Link your Shopify store, Stripe account, or GoCardless organisation. Evidencee registers its webhooks for you on Stripe and Shopify (on GoCardless you paste in the endpoint it gives you), and you describe your subscription model in a short guided step.

STEP 02

Configure

Set up your pre-contract template, notice schedules, hosted cancellation page, and cooling-off policy using our guided flow.

STEP 03

Run

EVIDENCEE runs in the background — sending reminders on schedule for Stripe and GoCardless brands, opening cooling-off cases, flagging parity baselines that are due a re-test, scanning your Shopify catalogue and your Stripe prices and payment links for drip pricing, and screening connected review sources for suspicious patterns.

STEP 04

Prove

Every evidence record carries a SHA-256 hash, linked to the record before it. Export the records for a subscriber, a subscription, a case or a date range as one sealed HTML bundle.

Platform capabilities

Built for the DMCC. Nothing you don't need.

Built specifically for DMCC subscription compliance — not a generic compliance tool adapted for UK law.

Platform Integrations

Built for how UK subscription businesses actually operate

Whether you're a Shopify merchant using a subscription app, a SaaS business on Stripe, or collecting recurring payments via GoCardless, EVIDENCEE connects directly — no middleware and no CSV uploads.

  • Shopify

    Shopify

    Catalogue scans · Order events

  • Stripe

    Stripe

    Subscriptions · Billing · Payment Links

  • GoCardless

    GoCardless

    Direct Debit · Mandates · Payments

See how integrations work →

No Shopify, Stripe or GoCardless? You can still add an own-website brand and record compliance by attestation — the same evidence vault and templates, with checks you confirm using your own dated proof instead of automatic monitoring.

Example Evidence Vault record: { "eventType": "CANCEL_COMPLETED", "traceId": "tr_4kJ2mNpXv8rQs", "subscriberHash": "sha256:a7f3b...", "subscriptionId": "sub_1N3kL...", "recordedAt": "2026-03-15T09:23:41Z", "payloadHash": "sha256:2d8c4e...", "platform": "SHOPIFY", "reasonSelected": "too_expensive", "integrityVerified": "true" }
SHA-256 verified · hash-chainedVALID

Built for UK subscription operators

EVIDENCEE is built for the teams who run UK subscriptions day to day — checking your DMCC controls, and keeping the evidence that you ran them.

19

Compliance controls scored

Pre-contract to data retention

5,000

Records per sealed bundle

HTML, Merkle-sealed

SHA-256

Evidence integrity

Every event hashed

3

Platform integrations

Shopify, Stripe & GoCardless

“Sarah said she loves it.”
SsarahSarah.co.uk
“Sarah said she loves it.”
SsarahSarah.co.uk
“Sarah said she loves it.”
SsarahSarah.co.uk
“Sarah said she loves it.”
SsarahSarah.co.uk
“Sarah said she loves it.”
SsarahSarah.co.uk
“Sarah said she loves it.”
SsarahSarah.co.uk
“Sarah said she loves it.”
SsarahSarah.co.uk
“Sarah said she loves it.”
SsarahSarah.co.uk
“Sarah said she loves it.”
SsarahSarah.co.uk
“Sarah said she loves it.”
SsarahSarah.co.uk
“Sarah said she loves it.”
SsarahSarah.co.uk
“Sarah said she loves it.”
SsarahSarah.co.uk
“Sarah said she loves it.”
SsarahSarah.co.uk
“Sarah said she loves it.”
SsarahSarah.co.uk
“Sarah said she loves it.”
SsarahSarah.co.uk
“Sarah said she loves it.”
SsarahSarah.co.uk

See where you stand — before the CMA does

Run a free Readiness Check and get an honest read on your DMCC readiness. No card, no sales call.

Contact us