Compliance · Module 3/5 · Moat

ADA, privacy and pixel law.
Checked on every client site.

Built for US agencies: WCAG failures mapped to ADA Title III, pre-consent trackers read through CCPA/CPRA and California's wiretap law (CIPA), video pixels through the VPPA, children's data through COPPA, dark patterns through the FTC Act, chatbots and AI content through the California, Utah and Texas AI laws. Client selling abroad? The same scan cites the EU, UK or Canadian counterpart.

Compliance scan See the checks
35
Compliance plugins
13
US laws — ADA, CCPA/CPRA, CIPA, COPPA, FTC Act, state AI laws
32
Laws in all, with the EU, UK and Canada
2
Viewports per accessibility scan (desktop + mobile)
6
Confidence levels
US first, abroad covered

13 US laws — and 19 more for clients selling abroad

Plugins aren't tied to a single law; one finding can cite a US law and its EU, UK or Canadian counterpart at once. US, EU, UK and Canada all ship today — a new jurisdiction is a JSON seed + an equivalence entry, not a plugin rewrite.

🇺🇸 United States — 13

  • ADA Title III — web accessibility
  • CCPA / CPRA
  • COPPA — 16 CFR Part 312
  • CIPA — Cal. Penal Code §630 et seq.
  • VPPA — 18 U.S.C. §2710
  • CalOPPA — Cal. B&P §22575
  • FTC Act §5
  • Virginia CDPA
  • California AB 2013 — AI training data
  • California SB 942 — AI Transparency Act
  • California SB 1001 — bot disclosure
  • Texas TRAIGA (HB 149)
  • Utah AI Policy Act (SB 149)

🇪🇺 European Union — 13

  • GDPR — Reg (EU) 2016/679
  • ePrivacy — Dir 2002/58/EC
  • European Accessibility Act — Dir (EU) 2019/882
  • Digital Services Act — Reg (EU) 2022/2065
  • AI Act — Reg (EU) 2024/1689
  • e-Commerce Directive — Dir 2000/31/EC
  • Consumer Rights Directive — Dir 2011/83/EU
  • Omnibus Directive — Dir (EU) 2019/2161
  • Empowering Consumers (green claims) — Dir (EU) 2024/825
  • Price Indication Directive — Dir 98/6/EC
  • Geo-blocking — Reg (EU) 2018/302
  • Political Advertising — Reg (EU) 2024/900
  • ODR — Reg (EU) 524/2013 (repealed; stale links flagged)

🇬🇧 United Kingdom — 4

  • UK GDPR (as amended by DUAA 2025)
  • Data Protection Act 2018
  • PECR 2003
  • Digital Markets, Competition and Consumers Act 2024

🇨🇦 Canada — 2

  • PIPEDA
  • Quebec Law 25
35 plugins

For US sites

ADAWCAG 2.2 accessibility scan in a real browser, desktop and phone width
ADAEach failing WCAG criterion mapped to ADA Title III (and the EAA for EU sites)
CIPA · VPPASession-replay recorders and ad pixels firing before consent; video pixels on pages with video
CCPATrackers and cookies set before anyone agrees
CCPAA working route for access and deletion requests (CCPA/CPRA, Virginia CDPA)
CalOPPAWhat the privacy policy actually says
COPPACollecting children's data without verifiable parental consent
COPPAAge assurance: COPPA and state age-verification laws
FTC §5Dark patterns: pre-checked boxes, false urgency, confirmshaming
FTC §5Consent-banner button prominence, read by a vision model
AI lawsChatbot self-identification (California SB 1001, Utah, Texas)
AI lawsOn-screen disclosure of AI-generated content
CA AB 2013AI training-data disclosure for GenAI developers
CA SB 942Machine-readable marking of AI-generated media (C2PA)

For clients selling into the EU, UK or Canada

The same scan runs these too; each finding names the EU, UK or Canadian law it was checked against.

EAAAccessibility statement
GDPRPrivacy, cookie, terms and data-request pages reachable from the homepage
GDPRMarketing sign-up is opt-in, not pre-ticked
GDPRProfiling switched on by default in the page source
TCFIAB TCF v2.2 consent string (static)
TCFIAB TCF v2.2 consent API (live)
EDPBPay-or-consent walls (EDPB Opinion 28/2024)
GDPRCross-border transfer safeguards (SCC, adequacy, DPF)
GDPRData protection officer contact
GDPREU representative (Art. 27)
ImprintLegal disclosure / imprint (DE, UK)
ConsumerPre-purchase information (Consumer Rights Directive)
PricingPrior-price and unit-price display (Omnibus, UK DMCC)
ReviewsReview verification claims (Omnibus, UK DMCC)
RankingSponsored results and ranking criteria (Omnibus)
GreenEnvironmental claims and their substantiation (EmpCo)
GreenEnvironmental claims in images, read by a vision model
DSAAds identifiable as ads (DSA Art. 26)
EUPolitical advertising labels (Reg 2024/900)
GeoGeo-blocking signals (Reg 2018/302)
ODRStale EU ODR platform links

13 US laws. One scan.

ADA, privacy and pixel exposure for every client site in one panel — with the EU, UK or Canadian counterpart when a client sells abroad. Every finding ships with evidence, method and limitations.

Start Compliance scan See all 5 modules