Scanner Ethics and Responsible Scanning Policy

ComplyPages reviews public website transaction flows to identify visible accessibility risks and create developer-ready observations.

This policy explains how we aim to scan and review websites responsibly, safely, and respectfully.

Our goal is to help website teams improve accessibility without disrupting their systems, collecting private customer data, or performing security testing.

ComplyPages focuses on public-facing customer flows, such as:

When reviewing a website, we may:

Unless expressly agreed in writing and legally authorised, ComplyPages does not:

For public forms, ComplyPages may review visible labels, instructions, keyboard behaviour, validation behaviour, focus order, and error states where this can be done safely.

We avoid submitting forms that would:

Where form submission is necessary for a paid engagement, it must be agreed in advance and performed using safe test data or a test environment where possible.

ComplyPages may capture screenshots of public pages or selected flow states as evidence for accessibility observations.

Screenshots are used for issue documentation, reproduction context, developer-ready reports, retesting comparison, monitoring history, and quality review.

Screenshots may incidentally include public page content or publicly visible personal data. We do not use screenshot content for unrelated profiling, resale, advertising, or data enrichment.

ComplyPages aims to use reasonable review volumes and avoid unnecessary load on websites.

We do not intentionally overload, stress test, attack, or disrupt systems.

If a website owner reports that our activity is causing a problem, we will review the issue and take appropriate action.

ComplyPages is intended for safe public-page accessibility QA.

Where technically practical and consistent with the requested service, we aim to respect reasonable access controls, blocking requests, and website-owner preferences.

If you are a website owner and want to ask questions or request that ComplyPages avoid scanning your website, contact:

scan-optout@complypages.com Alternative contact: hello@complypages.com

Users requesting scans or paid reviews must have authority to request review of the relevant website, brand, flow, or digital property.

You must not use ComplyPages to scan, monitor, or report on websites where you lack appropriate authorisation, unless the activity is limited to a lawful and ethical public-page observation that does not involve misuse, harassment, security probing, or competitive abuse.

ComplyPages may refuse or stop a scan if authorisation, safety, legality, or ethics are unclear.

ComplyPages is not a security testing service. If we accidentally observe a serious security issue, exposed sensitive data, or a privacy risk during normal accessibility review, we will not exploit it.

Where appropriate and practical, we may notify the website owner or responsible contact using reasonable disclosure principles.

Many website flows include third-party platforms, such as booking engines, payment processors, ticketing systems, forms, widgets, consent banners, maps, videos, or chat tools.

ComplyPages may identify visible accessibility issues involving those components, but we do not control them and do not attempt to bypass their security or access controls.

Monitoring is limited to selected public flows and agreed checks. It is not continuous security monitoring, uptime monitoring, legal monitoring, or full accessibility certification.

ComplyPages may refuse requests that appear to involve:

This policy should be read together with:

Scanner ethics and opt-out contact: scan-optout@complypages.com General contact: hello@complypages.com

Operator: Bobook Limited, Venture Hub, 136 Capel Street, Dublin 1, D01 T2C9, Ireland.