Privacy and data
What we store when we test a website, how long we keep it, and what you can require. Write to post@wcagvakt.no if you need a data processing agreement.
What we store
| Type | Content | Why |
|---|---|---|
| Customer | Company name, organisation number, domains, contact person, plan | Delivering and invoicing the service |
| Users | Name, email, role, encrypted password | Signing in to the customer portal |
| Test data | Addresses we have tested, findings, screenshots of the pages, reports | The documentation you are buying |
| Log | Sign-ins, sharing and deletions with timestamps | Traceability and security |
We test only publicly available pages on domains you have registered. We do not collect personal data from the website being tested, but a screenshot may contain text that is openly visible on the page.
Who sees what
- You see your own domains and your own reports.
- We who operate the service see data in order to deliver it and to help you.
- If you share a report with a share link, everyone who has the link can see that report - until you switch the link off.
Retention period
Old test jobs are deleted automatically after 90 days. Customer data is kept for as long as the customer relationship lasts, and is deleted on request.
Your rights
You can request access, correction, deletion or export of your data. Send an email to post@wcagvakt.no and we will reply within 30 days.
Artificial intelligence
We do not use AI, and we send nothing to a language model. All 48 criteria are assessed by our own rules and by the browser we run in-house. The content of your pages and screenshots of them never leave the service, and are not shared with Google, Anthropic, OpenAI or any other model provider.
Until 30 July 2026 some judgement-based criteria also received an AI assessment, and the page content and a screenshot were then sent to the model provider. We no longer do this.