United States compliance scanner · public-site readout
Know where your site stands in about a minute.
Get a clear, plain-language compliance readout — no signup, no install.
Most of what you're liable for is the same in every state.
50
States where accessibility and breach-notification duties apply — no small-business exemption, no state you get to skip.
~20
States with a comprehensive privacy law already in force, and the count climbs every legislative session.
4
Federal regimes that apply everywhere regardless of local law — children's data, messaging consent, commercial email, and unfair-and-deceptive oversight.
Our scanner checks it all: accessibility, privacy, kids' data, messaging consent — and gives you a clear record of where you stand in every state you operate.
Every rule that touches your US site — tap to open.
Ordered by what actually bites first. Each one tells you what it is, where it applies, what it could cost, and how Nestor handles it for you.
Courts treat a public-facing website like a physical storefront: it has to be usable by people with disabilities. There's no small-business exemption, and someone doesn't have to prove they were harmed — only that a barrier existed. For a restaurant, this is the single biggest legal risk online.
Where it applies
Applies in all 50 states under federal law. New York leads every state in filings, and its state and city human rights laws allow damages the federal rule does not. California's Unruh Act adds $4,000 per violation on top.
Your exposure
Demand letters commonly arrive before any case is filed, and litigated matters run far higher once fees are counted. Restaurants are among the most targeted industries. (Those ranges are reported by industry trackers rather than set by statute.)
How Nestor handles it
Nestor scans for the machine-detectable failures — missing alt text, weak contrast, unlabeled forms — and routes everything automation can't certify to human review. Fixes are made in your real code, never a bolt-on overlay, with a timestamped audit trail.
// This page describes rules that commonly apply to a public-facing US business site. It is a starting point for review — not legal advice, and not an assessment of your own situation. Figures come from published statutes and enforcement bodies; where a range is reported rather than set by statute, we say so.
The numbers, from the statutes themselves.
Every figure below is taken from the law that sets it, and links to it — check us in one click.
No exemption, no safe harbour
The ADA reaches every public-facing site
The Justice Department's position is that the ADA reaches everything a business open to the public offers, including on the web, and it names no size threshold. Businesses are given flexibility in HOW they comply rather than a single mandated technical standard — WCAG is cited as helpful guidance, and it is the benchmark settlements and courts have converged on in practice.
Source: US Department of Justice — ADA guidance on web accessibility$500–$1,500 per text
Text-message damages are counted per message
A recipient may recover $500 for each message sent without the consent the law requires, and a court may treble that to $1,500 where the violation was willful or knowing. The right to sue is the recipient's own, which is what makes a single non-compliant campaign a class action.
Source: 47 U.S.C. § 227(b)(3)Up to $5,000 per violation
SHIELD Act — reasonable safeguards
Any business holding a New York resident's private information must keep reasonable administrative, technical and physical safeguards, wherever the business itself sits. No business is exempt, but one under 50 employees, $3M in revenue or $5M in assets may scale its safeguards to its own size and complexity. Enforced by the Attorney General, who recovers penalties of up to $5,000 per violation under § 350-d; there is no private right of action.
Source: NY General Business Law § 899-bb (penalties via § 350-d)$5,000 per violation, class-wide
Wiretapping suits over pixels and session replay
California's wiretap statute lets a plaintiff recover $5,000 per violation, or three times actual damages, whichever is greater — and says in terms that having suffered actual damages is not a prerequisite to suing. That is what turns one pixel firing on thousands of visitors into a class action.
Source: California Penal Code § 637.2Up to $1,000 per violation
Prices set from customer data carry a fixed sentence
Since 10 November 2025, a price set using a customer's personal data has to carry one exact sentence, clearly and conspicuously, near and at the same time as the price itself. The wording is prescribed, so an edited version is a defect rather than a variation.
Source: NY General Business Law § 349-aUp to $250,000 for botched notice
Failing to notify
A court may impose the greater of $5,000, or up to $20 for each failed notification — capped at $250,000. That sits on top of the safeguards exposure.
Source: NY General Business Law § 899-aa// Statutory maximums and per-violation amounts, not predictions about any business. What a court or regulator does in a given case depends on the facts. This is a starting point for review, not legal advice.
Your customer data, kept where it belongs.
// Handled for you
Requests, done
When a customer asks what data you hold — or wants it deleted — it gets done, and old data clears out on schedule. You don't have to remember any of it.
// Stays put
In-region hosting
Your customers' information lives on servers in the region you choose, with immutable audit logs showing where it's been the whole time.
// One snippet
One line of code
Nothing to rebuild, nothing to migrate. One snippet on your site and the compliance layer is running.
On-Site SEO Optimization
A one-time technical pass over your existing website. Nestor analyzes every page, then fixes what it finds — oversized images, missing tags, broken heading structure — and hands you a plain-language report of what changed and why.
// Add-on · Any package
Fix what's already there.
Most sites carry years of accumulated weight: full-resolution photos served as thumbnails, images with no alt text, headings tagged in the wrong order. It's invisible to you and obvious to a search engine. We run the same checks search engines use to grade your pages, apply the fixes, and document the before and after.
$750one-time
Per site, up to 10 pages. Larger sites quoted on page count.
Optional continuous monitoring — $99/month.
What's included
Page-by-page analysis
Every page scanned for performance, accessibility, best practices and SEO signals.
Image metadata
Descriptive alt text and meta tags written for every image on every page.
Page metadata
Titles, descriptions and structured data reviewed and brought up to standard.
Image optimization
Oversized photos compressed and resized into properly sized, modern-format thumbnails.
Element tag correction
Heading order and semantic HTML fixed so your structure reads correctly.
Prioritized recommendations
A plain-language report of every finding, what was fixed, and what's left.
On-site SEO improves how search engines read and rank your site. It does not guarantee a specific ranking or traffic outcome — results depend on your market and competition.