Continuous evidence
Every scan job is timestamped and retained per your plan tier (7 days Free, 90 days Starter, 2 years Business, custom Enterprise). The audit log answers "what did we know and when".
For legal & compliance
Continuous evidence that you tested, you found, you fixed. Every scan timestamped, every finding exportable, every status change audit-trailed — and tenant data isolated at the database layer, not in app code.
You've seen this movie before
When accessibility complaints land — under EAA, ADA Title III, Section 508, or AODA — the first ask is always "show us your testing program." A point-in-time PDF doesn’t satisfy that. You need a continuous record: when was the page last scanned, what was found, who acted on it, when was it fixed.
What you get
Every scan job is timestamped and retained per your plan tier (7 days Free, 90 days Starter, 2 years Business, custom Enterprise). The audit log answers "what did we know and when".
Findings are W3C EARL JSON-LD — the standard format for accessibility evaluations. Portable, machine-readable, exportable to outside counsel without vendor lock-in.
EU customers default to Ireland. Enterprise customers can elect US, EU, or AU residency contractually. We never ship customer data outside the chosen region.
PostgreSQL Row-Level Security means a finding from org A is mathematically unable to surface in a query from org B — verified by integration tests, not policy promises. The service role never leaves the server side.
Three sub-processors: Supabase (database), Vercel (hosting), Fly.io (scanner workers). Each bound by a written DPA. Material changes notified 30 days in advance. Full list in the Privacy policy.
We do not use scan data, findings, or any content we host on your behalf to train machine-learning models — ours or anyone else’s. Stated in the Terms; enforced operationally.
“A continuous record beats a perfect one — courts care that you’re trying.”