Legal

Last updated: 30 August 2026

Terms of service

1. Who we are

Exhibit A ("the Service") is operated by [REGISTERED LEGAL ENTITY NAME], a company registered in [JURISDICTION] under registration number [REGISTRATION NUMBER], holding trade licence [E-COMMERCE LICENCE NUMBER], with its registered office at [REGISTERED ADDRESS] ("we", "us").

By using the Service you agree to these terms. If you do not agree, do not use the Service.

2. What the Service does, and what it does not do

The Service performs automated static analysis of HTML and CSS that you supply, reports detected failures against WCAG 2.1 Level AA, generates suggested remediation, and produces draft documents including an accessibility statement and an evidence record.

The Service does not provide legal advice. It is a software tool. It does not create a lawyer–client relationship, and it is not a substitute for advice from a qualified lawyer in your jurisdiction.

The Service does not certify conformance and never will. Automated testing can evaluate only a subset of the WCAG success criteria. We state this prominently throughout the product. Any check that cannot be proven from the source you supply is reported separately as requiring human review and is excluded from your score. You must not represent the output of the Service as a certificate of compliance, a conformance audit, or an accessibility conformance report to any third party.

Documents generated by the Service, including the accessibility statement, are drafts based on the information you supply and the results of an automated scan. You are responsible for reviewing them for accuracy before publishing them.

3. Your responsibilities

• You confirm you are authorised to submit the page source you analyse.
• You will not use the Service to analyse a third party's website in order to identify them as a target for litigation or an unsolicited demand.
• You will not represent our output as more than it is (see clause 2).
• You are responsible for implementing the suggested changes and for testing that they work on your own site.

4. Licence

On purchase, you receive a non-exclusive, non-transferable licence to use the Service and the generated documents for the website or websites covered by your purchase. Reports and documents generated for your own sites are yours to publish, share and submit to any authority or court. You may not resell access to the Service itself except under an Agency plan.

5. Availability

The scanning engine runs entirely in your browser and does not depend on our servers being available. We do not guarantee uninterrupted availability of the website, purchasing or support functions.

6. Liability

Nothing in these terms excludes or limits liability for death or personal injury caused by negligence, for fraud or fraudulent misrepresentation, or for any liability that cannot lawfully be excluded — including, for consumers in the European Union and the United Kingdom, statutory rights that cannot be waived, and, for consumers in the United Arab Emirates, rights under Federal consumer protection law.

Subject to the paragraph above, and to the maximum extent permitted by law, our total aggregate liability arising out of or in connection with the Service is limited to the amount you paid us in the twelve months preceding the event giving rise to the claim.

We are not liable for the outcome of any legal proceeding, demand, regulatory action or settlement. The Service reports what automated analysis can demonstrate; it does not and cannot guarantee any legal result.

7. Governing law and disputes

These terms are governed by the laws of [GOVERNING LAW JURISDICTION], and the courts of [COURTS] have exclusive jurisdiction, except that: consumers resident in the European Union may bring proceedings in their country of residence and retain the protection of its mandatory consumer law; and consumers resident in the United Arab Emirates retain their rights under UAE Federal consumer protection law and may bring proceedings before the competent UAE courts.

8. Changes

We may update these terms. Material changes will be notified on this page with a revised date. Changes do not apply retroactively to a purchase already made.

Privacy policy

1. Controller

The data controller is [REGISTERED LEGAL ENTITY NAME], [REGISTERED ADDRESS]. For privacy enquiries contact [PRIVACY EMAIL]. [IF APPOINTED: DPO NAME AND CONTACT]

This policy is written to satisfy the EU General Data Protection Regulation (GDPR), the UK GDPR, and the United Arab Emirates Personal Data Protection Law (Federal Decree-Law No. 45 of 2021 and Cabinet Resolution No. 33 of 2024).

2. What we do not collect

We want to be specific, because this is the unusual part. When you run a scan:

• Your page source is processed by JavaScript in your own browser tab.
• It is not uploaded, not transmitted, not logged and not stored on any server.
• We never receive it and could not produce it if asked.
• Your scan results, exposure score and findings are likewise never transmitted to us.

This is also why the Service works on staging environments, password-protected pages and logged-in checkout flows.

3. What we do collect

Payment card details are handled directly by our payment processor, [PAYMENT PROCESSOR]. We never receive or store your full card number.

3a. Alternative-text generation

Almost everything this product does happens inside your browser, and your page source never leaves it. There is one exception, and it is opt-in every time you use it: generating draft alternative text for images. To describe an image, the image has to be looked at.

When you use that feature, and only after you tick the consent box shown beside it, the following is sent to Anthropic PBC, acting as our processor, for the sole purpose of generating the descriptions:

• the web addresses of the images that were found to have no alternative text; and
• the image files retrieved from those addresses.

Your page source is never sent — not for this feature, and not for any other. The images concerned are already published on your own public website. We retain a count of how many images you have described in the current month, in order to apply your licence allowance; we do not retain the images or the generated descriptions. Anthropic's handling of the data is governed by its commercial terms, under which it does not use the content to train its models.

If you never use the feature, nothing is ever transmitted. Our contact details for questions about this processing are at the end of this document, and our data processing agreement with this processor is available on request to [PRIVACY EMAIL].

4. Browser storage

We use your browser's local storage to remember your language and colour theme. This never leaves your device, is not a cookie, is not used for tracking, and is not shared. Because we set no advertising or analytics cookies, no consent banner is required.

5. Sharing

We share personal data only with processors necessary to run the business — payment processing, email delivery, hosting, and, where you have opted in, alternative-text generation as described in section 3a — each bound by a data processing agreement. We do not sell personal data. We do not share it for advertising.

6. International transfers

Where personal data is transferred outside the EEA, the UK or the UAE, we rely on adequacy decisions where they exist, and otherwise on Standard Contractual Clauses or equivalent safeguards. Under the UAE PDPL, cross-border transfer is permitted to jurisdictions with adequate protection or subject to appropriate contractual safeguards.

7. Your rights

You have the right to access your data, to have it corrected, to have it erased, to restrict or object to processing, and to receive it in a portable format. Under the UAE PDPL you additionally have the right to be informed about how your data is processed and to request that processing be stopped.

To exercise any right, contact [PRIVACY EMAIL]. We respond within 30 days, which is the maximum period allowed under the UAE PDPL and within the GDPR limit.

If you are unhappy with our response you may complain to your national supervisory authority. In the United Arab Emirates this is the UAE Data Office. In the European Union it is the data protection authority of your member state.

8. Security

The single largest security decision in this product is architectural: because your page source never leaves your browser, there is no database of customer website source code to breach. That remains true of every paid feature — the monitoring tier stores scores, counts and a content hash rather than the page itself, precisely so that this statement stays accurate. For the data we do hold, we apply access controls, encryption in transit, and encryption at rest with our processors.

9. Children

The Service is a business tool and is not directed at children. We do not knowingly collect personal data from anyone under 18.

Refunds and withdrawal

1. Statutory right of withdrawal (EU, EEA and UK consumers)

As a consumer you normally have 14 days to withdraw from a distance contract without giving a reason.

Because Exhibit A is digital content supplied immediately, at checkout you are asked to tick a box giving express prior consent to immediate supply and acknowledging that you thereby lose your right of withdrawal once supply has begun. This is required by the Consumer Rights Directive; without both the consent and the acknowledgement the waiver is not valid, so the checkbox is mandatory and is never pre-ticked.

If you do not wish to waive the right, do not tick the box — your access will begin after the 14-day period instead.

2. United Arab Emirates consumers

Nothing in this policy limits your rights under UAE Federal consumer protection law, including in respect of a service that does not conform to its description. Where this policy and UAE law differ, UAE law prevails for UAE consumers.

3. Our own refund promise, which is broader than the law requires

We would rather refund you than have an unhappy customer holding a document they do not trust. We refund in full, on request, in each of these cases:

• Nothing useful was found. If a scan reports no failures and a paid manual audit later demonstrates that the same automated checks were in fact failing, we refund in full.
• The product did not do what this website says. Within 30 days of purchase, tell us what you expected and did not get. If we cannot fix it, we refund.
• You bought the wrong thing. Within 14 days, if you have not downloaded the evidence record, we refund or exchange.
• A duplicate or accidental purchase. Refunded on request, no time limit.

We do not refund where the product performed as described and the remediation was simply not implemented, or where a refund is requested after an evidence record has been generated and downloaded — because that document has already been delivered and cannot be returned.

4. How to request a refund

Email [SUPPORT EMAIL] with your order reference. We respond within 5 business days and process approved refunds to the original payment method within 14 days.

5. Subscriptions

Watch and Agency plans may be cancelled at any time and continue until the end of the paid period. We do not charge a cancellation fee and we do not require notice.

Accessibility statement

This statement applies to the Exhibit A website and the Exhibit A audit tool.

1. Conformance status

We target WCAG 2.1 Level AA, the standard referenced by EN 301 549 for the European Accessibility Act, by the German BFSG, by the US Department of Justice under the ADA, and by the UAE National Digital Accessibility Policy and the Dubai Universal Design Code.

This site is substantially conformant with WCAG 2.1 Level AA. We do not claim full conformance on the basis of automated testing, because — as we say throughout the product — automated testing evaluates only a subset of the success criteria.

2. How we test

• Every page of this site is audited with the Exhibit A engine itself before release, and must return zero confirmed failures. Publishing an inaccessible page would be indefensible for a product like this.
• The site is operable throughout by keyboard alone, with a visible focus indicator on every interactive element and a skip link as the first focusable item.
• Colour pairings were checked against the 4.5:1 and 3:1 thresholds in both the light and dark themes before implementation.
• The site respects prefers-reduced-motion and prefers-color-scheme, and remains fully usable at 200% zoom and in right-to-left layout.
• The interface is available in English, German, French and Arabic, with correct language declaration and text direction in each.

3. Known limitations

We publish these rather than hide them:

• Technical remediation code samples are provided in English only, because code and file paths are language-neutral. Explanatory interface text is fully translated.
• Rule titles and explanations inside the audit tool are currently translated into English and German. French and Arabic interface users see the tool chrome in their language and rule detail in English. This is stated in the tool.
• We have not yet completed testing with every combination of screen reader and browser. If you hit a barrier, tell us and we will treat it as a defect, not a feature request.

4. Feedback

If you encounter a barrier on this site or in the tool, contact [ACCESSIBILITY EMAIL]. We aim to respond within 14 days. Please describe the page, what you were trying to do, and the assistive technology you were using if any.

5. Enforcement

If you are not satisfied with our response, you may contact the market surveillance authority responsible for accessibility in your EU member state; in Germany, the Marktüberwachungsstelle der Länder für die Barrierefreiheit von Produkten und Dienstleistungen (MLBF). In the United States you may contact the Department of Justice Civil Rights Division. In the United Arab Emirates you may contact the Telecommunications and Digital Government Regulatory Authority (TDRA).

Last updated: 30 August 2026.

Imprint

This section satisfies the German disclosure duty under § 5 DDG (formerly § 5 TMG) and the equivalent duties in other jurisdictions. It must be complete and accurate before you trade in Germany — an incomplete imprint is itself a common ground for an Abmahnung.