About CandidAccess

Why CandidAccess exists

Agencies care for many client websites. More and more clients ask whether their site is accessible, and what changes when a release goes out.

Automated tools can help, but they find only some barriers. We think agencies deserve a tool that is useful every week and honest about its limits, so you never have to over-promise to a client.

CandidAccess is weekly accessibility monitoring for agencies: portfolio-wide checks, history, and reports under your own name that say plainly what was and was not tested.

Honest by design

These principles shape the product and how we talk about it:

1. Say what was tested, and what was not. Every report lists the exact pages and conditions, and includes a “What was not tested” section.
2. Automated checks are not the whole story. They catch only some barriers. We point to what needs a person and assistive technology.
3. No certificates, scores or badges. Our results do not show that a site meets WCAG or any law, so we never suggest they do.
4. Never call a failure a pass. A page that did not load, was blocked or timed out is reported as such.
5. Lead with help, not fear. We do not sell with lawsuit threats.
6. You stay in control. Only pages you approve are scanned.

We hold our own product to a high bar too. We check our own pages and reports with automated tools, including keyboard focus checks, and we don’t treat that as proof of conformance.

Where your data lives

CandidAccess is hosted in EU data centers (Frankfurt, Germany), with encrypted backups in the EU.

Reports are private files, never publicly linked. They can be seen by members of your organization, plus a small number of CandidAccess operators where needed to run and support the service.

Each agency’s data is separated at the database level.

Reports expire on a set schedule. TBD: retention wording

We don’t keep full-page copies or screenshots of your clients’ sites by default. Findings and reports include short code excerpts of the affected elements so your team can locate them.

• Data export and account deletion: TBD: data export and deletion
• Data processing agreement and subprocessor list: TBD: DPA and subprocessor list

How we treat the sites we scan

• Your agency confirms it is authorized to monitor each site it adds.
• We respect robots.txt and re-check it before every scan.
• Each scan runs in an isolated, disposable browser on a separate scanner server with no access to your account data or our database.
• Content in frames from other sites is not analysed; those pages are marked as partial.

Who builds CandidAccess

TBD: founder and company name display

We are a small, independent team. We do not offer an uptime guarantee yet, and we will be clear about support times. TBD: support language and hours

Talk to us

Request early access, read the frequently asked questions or see how CandidAccess works.

TBD: launch countries and site language