Trust & Data Stewardship
Comply Scan Pro was built for organizations that need accessibility intelligence without data exposure. We separate what’s required to run your scans from anonymized signals used to improve scoring and produce benchmarks.
- Customer scan data (OCD)Not sold / not shared
- Benchmarks (PID)Anonymous aggregation
- Default retention18mo / 5yr / 90d
- AI trainingNo customer OCD
Data Classes
Customer-scoped data generated to run scans and deliver reports. This includes scan targets, findings, telemetry, and exported reports.
- Access-controlled per customer
- Retention-limited
- Used only to provide the requested compliance service
Anonymized, aggregated analytics used to improve detection quality and provide industry benchmarks.
- Stored using non-reversible hashed identifiers
- Contains no URLs, domains, page paths, user IDs, or scan IDs
- Used only in aggregate and cannot be used to identify a customer
Industry benchmarks
Benchmarks are computed from anonymized aggregate scoring data. We do not store or expose URLs, domains, scan IDs, or user IDs. Benchmarks are displayed only after a minimum sample size is reached.
Two data classes
Operational Compliance Data (OCD) stays in your account. Platform Intelligence Data (PID) is anonymized and aggregated.
Operational Compliance Data (OCD)
Customer-ownedThe data needed to scan, generate reports, and support auditability for your workspace.
- • Scan targets and crawl scope
- • Findings, severity, remediation context
- • Telemetry (coverage, fetch results, timing)
- • Reports and exports
- • Scan configuration (WCAG level, toggles)
Platform Intelligence Data (PID)
AnonymousAggregated signals that improve scoring quality and enable benchmarks without exposing customer sites.
- • Aggregated rule trigger rates
- • Severity distributions
- • Score bands and percentiles
- • High-level technology fingerprints
- • Industry medians and top-quartile references
Why PID exists
Benchmarks require intelligence — not your site data.
Without PID, accessibility scores are just numbers. With PID, Comply Scan Pro can provide decision-grade context — like industry medians and top-quartile benchmarks — without exposing any customer’s site content.
Data flow
From scan to report to anonymized aggregation.
Retention
Designed to minimize long-lived sensitive operational data.
AI policy
We do not train public or general-purpose AI models on customer OCD.
Comply Scan Pro does not use customer URLs, page content, findings, or reports to train public or general-purpose AI models.
Customer controls
You control scope and configuration. Your workspace data remains isolated.
- Scope: You define which URLs are scanned and how deep crawling goes.
- Standards: You select WCAG level and scan options that affect results.
- Isolation: Your operational data is access-controlled within your workspace.
FAQ
Fast answers for security review and procurement.
Do you sell customer scan data?
No. Customer Operational Compliance Data (OCD) is not sold and is not shared across customer accounts.
What’s included in PID?
PID contains anonymized, aggregated metrics like rule frequency, severity distributions, and score bands. PID excludes URLs, HTML, page paths, identifiers, and any customer-unique content.
Do you train AI on our data?
No. Comply Scan Pro does not train public or general-purpose AI models on customer OCD.
Can retention be customized?
Retention defaults are designed for auditability and procurement workflows. Enterprise plans may support retention customization by written agreement.
Ready to see this applied to your site?
Run a scan using the same privacy model described above. No account required for a preview, and no customer data is used for training or shared across workspaces.