Terms of Use

ComplianceLayer is an automated scanning service that checks publicly accessible digital products for machine-detectable accessibility (WCAG 2.1 AA via axe-core) and privacy-surface (GDPR/DSGVO, DSA, NIS2) issues. It generates reports that name regulations, describe findings, and suggest remediation.

ComplianceLayer does not provide legal advice and does not determine legal compliance. Automated testing typically detects 30–50% of WCAG violations. Many accessibility and privacy requirements — cognitive clarity, navigation logic, alternative-text quality, the adequacy of a privacy policy — require human judgment. A high score does not mean your product is compliant with the EAA, WCAG, GDPR, DSA, NIS2, or any other rule. A low score does not necessarily mean it breaches any law.

The service is provided "as is" and "as available", without warranties of any kind, whether express or implied, including but not limited to implied warranties of merchantability, fitness for a particular purpose, or non-infringement.

We do not warrant that scan results are accurate, complete, or current. Sites change; results are point-in-time. False positives and false negatives are inherent in automated accessibility testing.

Numeric scores, severity labels, and compliance percentages are indicators based on automated checks. They do not represent a legal determination of compliance. Use them to rank what to fix first — not as evidence in a legal proceeding.

To the maximum extent permitted by law, ComplianceLayer and its operators shall not be liable for any indirect, incidental, special, consequential, or punitive damages, or any loss of profits, revenue, data, or business opportunities arising from your use of the service.

Our total aggregate liability shall not exceed the amount you paid us in the twelve (12) months preceding the claim, or €100, whichever is greater. Free-tier liability is zero.

You are responsible for:

• Ensuring your product complies with applicable laws, which may require a professional audit and legal counsel.
• Not relying solely on automated scan results as evidence of compliance or as a defence in a legal proceeding.
• Scanning only products you own or have authorisation to scan.

Scanned URLs, scan results, and email addresses provided for report access are stored on EU-hosted infrastructure in Frankfurt, Germany. We do not sell your data and we do not use it for model training. Scan results may be retained for service improvement. See our privacy notice for details.

We may update these terms. Continued use of the service after changes constitutes acceptance. Check this page periodically.

These terms are governed by the laws of the Federal Republic of Germany. The courts of Berlin have exclusive jurisdiction over any disputes.

Questions about these terms? legal@compliancelayer.eu.