Your page, checked for what a visitor — or a customer’s procurement team — can see from the outside: undisclosed chat widgets, a missing privacy policy, trackers with no consent tool, accessibility basics. Where a check turns on something a homepage rarely carries, we follow the page you link for it rather than guess. Then each signal is read against the law of where you operate. Deterministic checks, no AI grading your site. Signals to act on, never a verdict.
The scan reads the page you give it the way a browser would, and runs fixed checks over it. To avoid reporting something as missing when it simply lives elsewhere, it also looks at your privacy notice and legal-notice pages — your own links and the conventional addresses, honouring robots.txt. Nothing is stored unless you open the report.