Security
Private by construction
Your HTML, findings and evidence pack are account-bound and operator-gated, with an audit event on every consequential action.
Access
- Customer accounts are email + password with bcrypt-hashed credentials and role-based access
- The operator (admin) role is separate and gated; delivery requires operator approval
- Evidence-pack artifacts live in private storage and are only read back through authenticated routes
- API surfaces are rate-limited; the maintenance job endpoint requires a bearer secret
Integrity
Every scan records the 16-char SHA-256 prefix of the exact HTML scanned, so a result can always be tied to the surface that produced it. The evidence manifest carries the hash, the check count and the failed check names.
Reporting
Security questions: don+disclosekit@lifeofmorr.com.
The missing label is fixable this week.
Scan 3 business days. Pack 5 business days. Paste-ready disclosures in EN/DE/FR and the evidence pack your EU buyers are now asking for.