ConformTrail ConformTrail — website compliance evidence and monitoring

Free scan

How many patterns are on your public pages?

Type the address of a website you are responsible for. We load the home page and at most 2 more public pages of the same site and tell you how many patterns our detectors observed, and of which kind. The count is free; the report with the page, the date, the screenshot and the wording of the rule is the paid part.

The address

A public website, for example https://example.com. No IP addresses, no ports, no pages behind a login.
Read the method first

3 scans per minute and 20 per day from one address. This is not legal advice.

What the answer says, and what it does not

What you see

  • The number of patterns our detectors observed
  • Which kinds they were
  • The date of the scan
  • How many pages we loaded

What you do not see

  • Which single pattern sits where
  • The page it was observed on
  • The text that was displayed, and the element it sits in
  • The screenshot and the wording of the rule

Those are the report. There is no other way to them.

What we keep

  • The domain you entered and the number of findings, as one log line
  • No findings, no screenshots, no pages, no record of the site
  • Nothing about you: no address, no email, no account

The result page is not stored and not shown to anyone else.

How the site is loaded

  • At most 3 pages: the home page and up to 2 pages whose address carries one of our keywords.
  • robots.txt first. A path you disallow is not fetched.
  • At most one request per second, and never more than 45 seconds in total.
  • Only GET. No form is submitted, no login is attempted, nothing is uploaded.
  • Our crawler identifies itself as ConformTrailBot/1.0 (+https://conformtrail.com/bot) — see the crawler page.

What is looked for

  • D1 — a testimonial or review widget without an adjacent disclosure
  • D2 — a rating or rating logo without date, period, rater or compensation
  • D3 — performance figures or hypothetical/backtested returns on a public page
  • D4 — a website statement that the firm has no conflicts of interest
  • D6 — the page claims FINRA membership and carries no BrokerCheck reference

One detector of the paid report is missing here: Form CRS on the website applies only to firms whose filing says they are SEC-registered with retail clients, and a self-service scan has no filing to read. Whether a statement on a page is adequate is a judgement for the supervisor; we report the pattern the supervisor described. This is not legal advice.