Trust & Security Architecture
Read-only diagnostic scanning with zero production DOM scripts, zero customer PII retention, and transparent cloud infrastructure commitments.
Out-of-Band Read-Only Scanning
AccessiLens never requires installing an invasive third-party runtime JavaScript file inside your production SaaS app. Diagnostic crawlers inspect rendered DOM accessibility trees inside isolated, short-lived headless Chromium containers.
Zero End-User PII Collection
We do not inject visitor tracking pixels, record user sessions, or store end-user personal data. Only workspace owner authentication records and automated CSS/DOM selector diagnostic snapshots are stored.
Sub-processor List
AccessiLens relies on the following audited infrastructure providers to host our diagnostic runner, database, and billing workflows.
| Sub-processor | Purpose | Hosting Region |
|---|---|---|
| Google Cloud (Cloud Run / Firebase) | Isolated Chromium Diagnostic Compute, Auth, and Database | Europe West / Global GCP |
| Stripe | PCI-Compliant Billing & Checkout Processing | United States / Global |
Enterprise Vendor Questionnaire Readiness
Because AccessiLens runs out-of-band without shipping production script code into your app, InfoSec questionnaires usually complete in minutes.
- Data Processing Agreement (DPA) available on request
- Ephemeral headless Chromium scan execution with strict sandboxing
- HTTPS + strict Content-Security-Policy headers enforced across portal endpoints