The seal

Every commissioned check includes the seal — at no extra charge, but not without a condition. It is only issued when the check leaves nothing serious open. A mark everybody gets says nothing.

When it is issued

• No finding at critical or high severity. If something remains open, you get the list of what stands in the way instead of the seal — and a re-check once it is fixed.
• From a commissioned run, not from the free self-check. That one covers the home page only and passively; no statement about a whole site can rest on it.
• One domain per seal. It applies to the site that was checked, not to a company.
• Six months, with the expiry date visible on the mark itself. A seal without a date eventually asserts something false.

Three shapes, light and dark

You receive six files and pick what suits your site. Each shape here on a light and on a dark background:

Light and dark are two separate files. The snippet supplied switches between them with <picture>, following your reader's setting.

The file sits on your server

That is not a formality, it is the point. A seal embedded as an image from our server would trigger a request to us on every visit to your page — a third-party call transferring your visitors' IP addresses. That is precisely the kind of finding we raise in our checks. A mark for a well-kept site must not turn its bearer into a data protection problem.

So you place six small files alongside your own images and insert the snippet. The files load nothing: no font, no script, no external address.

The record

The seal links to a page on our side confirming four facts: the address checked, the date, the validity and the scope. That page works from today's date — once the seal expires it says “expired” instead of “valid”, with nobody having to intervene. It names no findings: what was found on your site is nobody's business but yours.

If an engagement ends, or something serious surfaces later, we withdraw the seal. The record page then says exactly that — it does not disappear, because anyone holding the link should learn that it no longer applies rather than run into a dead end.

What it does not say

• It is not a clean bill of health. A defined catalogue is checked; anything outside it, behind a login or in the application code, is not covered.
• It is not a declaration of conformity and not a mark under any standard. For a statement on accessibility to EN 301 549 you need a manual assessment.
• It says nothing about the state today. That is why it expires, and why renewing it means a new check rather than a button.

And if you see one somewhere

Check it: the link leads to the record page with the identifier. If something looks wrong to you, write to abuse@conct.de. We will look into it and withdraw the seal if it no longer holds.