ScriptProof
Plain-English, no fine print

Terms & privacy

Plain-English summary. The full terms will be published before general availability.

What ScriptProof is

ScriptProof is a monitoring and evidence tool. It is not a Qualified Security Assessor (QSA) service and does not certify PCI DSS compliance. Consult your acquirer or a QSA for validation requirements.

What we store

  • Your account details: name, email, password hash.
  • Monitoring data for sites you verify: page URLs, script URLs and content hashes, HTTP response headers, and change history.
  • We never request, process, or store cardholder data. Ever.

Your responsibilities

  • Only add domains you own or are authorized to monitor.
  • Review and act on alerts; ScriptProof detects changes, it does not remediate them.

Data deletion

Deleting a site removes its scans, inventory, and change history. Deleting your account removes your organization and all associated data.