Compliance - https://www.bombas.com BeaverCheck Audit

F

Language & i18n

Action

Missing <html lang>

FIX

Missing <html lang>

<html lang> attribute is missing

The lang attribute on <html> is required for screen readers and WCAG 3.1.1 compliance.

No Content-Language HTTP header

Language signals are consistent

Page Language ——Content-Language Header ——Consistent Yes

The lang attribute on <html> is required for screen readers and WCAG 3.1.1 compliance.

Why this matters

Without a lang attribute, screen readers mispronounce every word on the page.

Learn more ▾

An HTML element without lang="..." causes screen readers to fall back to the user's default voice — a French page read in English sounds like nonsense. Setting lang on the <html> element is a one-character fix that lets every assistive tool pronounce content correctly.

Source: W3C WCAG 2.1

C

Legal Page Ecosystem

Action

3 of 7 expected legal pages detected

REVIEW

3 of 7 expected legal pages detected

Privacy Policy detected

Found at /pages/privacy-policy.

Got: /pages/privacy-policy

Terms of Service detected

Found at https://bombas.com/pages/bombas-terms-and-conditions-of-use.

Got: https://bombas.com/pages/bombas-terms-and-conditions-of-use

Cookie Policy not detected

No link matching common Cookie Policy URL patterns or link text was found. Most websites are expected to have a Cookie Policy, especially those collecting user data.

Accessibility Statement detected

Found at https://bombas.com/pages/accessibility.

Got: https://bombas.com/pages/accessibility

DMCA / Copyright Notice not detected

No link matching common DMCA / Copyright Notice URL patterns or link text was found. Most websites are expected to have a DMCA / Copyright Notice, especially those collecting user data.

Refund / Returns Policy not detected

No link matching common Refund / Returns Policy URL patterns or link text was found. Most websites are expected to have a Refund / Returns Policy, especially those collecting user data.

Acceptable Use Policy not detected

No link matching common Acceptable Use Policy URL patterns or link text was found. Most websites are expected to have a Acceptable Use Policy, especially those collecting user data.

Privacy Policy/pages/privacy-policy

Terms of Servicehttps://bombas.com/pages/bombas-terms-and-conditio…

Cookie PolicyNot found

Accessibility Statementhttps://bombas.com/pages/accessibility

DMCA / Copyright NoticeNot found

Refund / Returns PolicyNot found

Acceptable Use PolicyNot found

3 of 7 common legal pages detected

C

Copyright Notice

Action

No copyright notice detected

REVIEW

No copyright notice detected

No copyright notice detected in the page content. While not legally required in most jurisdictions (copyright exists automatically), a notice is standard practice and signals site ownership.

Copyright Notice Not Detected

Copyright exists automatically — a notice is standard practice but not legally required.

C

Compliance Badges

Action

0 compliance badge(s) detected

REVIEW

0 compliance badge(s) detected

No compliance badges detected

No recognized compliance certification badges or seals were found. This is common — many sites do not display compliance badges.

SOC 2

ISO 27001

PCI DSS

GDPR Certified

HIPAA Compliant

Better Business Bureau

TRUSTe / TrustArc

Privacy Shield

McAfee SECURE / TrustedSite

Norton Secured

Badge detection is based on image alt text, link URLs, and page content. Detection does not verify that certifications are current or valid.

A+

WCAG Compliance

No testable criteria

PASS

No testable criteria

Level A

Level AA

0

Passed

0

Failed

0

Partial

0

Manual review

0

Not tested

Key accessibility barriers

Links with unclear purpose

1 link(s) have empty or generic text

Screen reader users navigating by link list

Automated testing covers ~30–40% of WCAG criteria. Manual review is recommended for full conformance.

Full WCAG 2.1 AA compliance checklist — paste into a client deliverable or ticket

A+

Cookie Consent & Privacy

OneTrust detected, privacy policy found

PASS

OneTrust detected, privacy policy found

Privacy policy link found

Got: https://shop.bombas.com/pages/privacy-webform

No terms of service link detected

Consent banner detected (OneTrust)

Got: script URL: onetrust.com

This is an automated check, not legal advice

BeaverCheck detects technical indicators of consent management. This does not constitute a legal compliance assessment. Consult a privacy professional for GDPR/CCPA compliance.

Consent Banner Detected (OneTrust) Privacy Policy https://shop.bombas.com/pages/privacy-webform Terms of Service —

No cookies set before user interaction.

This is an automated check, not legal advice. Consult a privacy professional for GDPR/CCPA compliance.

BeaverCheck detects technical indicators of consent management. This does not constitute a legal compliance assessment. Consult a privacy professional for GDPR/CCPA compliance.

Why this matters

Disclaimer: legal-page checks identify presence/absence; consult counsel for legal sufficiency.

A+

Readability & Typography

Font sizes and tap targets checked

PASS

Font sizes and tap targets checked

A+

Viewport Configuration

Viewport properly configured

PASS

Viewport properly configured

Viewport meta tag is present

width=device-width is set

User zooming is allowed

Viewport Configuration Good

Content

initial-scale=1.0, width=device-width

width=device-width

Responsive layout enabled

initial-scale=1

Correct initial zoom level

User zooming allowed

Accessibility-friendly — users can zoom

Regulatory Indicators

3 regulatory indicator(s) detected

INFO

3 regulatory indicator(s) detected

This is a technical scan, not a legal assessment

BeaverCheck detects technical indicators that may suggest regulatory relevance. This is not a compliance audit and should not be relied upon for legal decisions. Consult qualified legal counsel for compliance assessments.

GDPR indicators detected (strong confidence)

Indicators suggesting GDPR may be relevant: Consent management platform detected: onetrust.com; Consent management platform detected: cookielaw.org; Privacy policy page found. EU General Data Protection Regulation — governs collection and processing of personal data of EU residents.

Got: 3 indicators: Consent management platform detected: onetrust.com, Consent management platform detected: cookielaw.org, P…

CCPA indicators detected (strong confidence)

Indicators suggesting CCPA may be relevant: Text mentions: do not sell; Link text: Do Not Sell or Share My Personal Information/Your Privacy Choices. California Consumer Privacy Act — gives California residents rights over their personal data.

Got: 2 indicators: Text mentions: do not sell, Link text: Do Not Sell or Share My Personal Information/Your Privacy Choices

ADA indicators detected (moderate confidence)

Indicators suggesting ADA may be relevant: Accessibility statement page found. Americans with Disabilities Act / Section 508 — requires digital accessibility for people with disabilities.

Got: 1 indicators: Accessibility statement page found

This is a technical scan, not a legal assessment.

BeaverCheck detects technical indicators that may suggest regulatory relevance. This should not be relied upon for legal decisions. Consult qualified legal counsel.

GDPR Strong

EU General Data Protection Regulation — governs collection and processing of personal data of EU residents.

Indicators detected

Consent management platform detected: onetrust.com
Consent management platform detected: cookielaw.org
Privacy policy page found

CCPA Strong

California Consumer Privacy Act — gives California residents rights over their personal data.

Indicators detected

Text mentions: do not sell
Link text: Do Not Sell or Share My Personal Information/Your Privacy Choices

ADA Moderate

Americans with Disabilities Act / Section 508 — requires digital accessibility for people with disabilities.

Indicators detected

Accessibility statement page found

Third-Party Data Sharing

0 third-party service(s) detected

INFO

0 third-party service(s) detected

Data inventory for transparency purposes

This inventory identifies third-party services that receive data from your site visitors. Under regulations like GDPR (Article 30), maintaining records of data processing activities is commonly considered a best practice. This automated scan provides a starting point — it may not capture all data flows.

No recognized third-party data-sharing services detected

This page does not appear to load external tracking, analytics, or advertising scripts.

No recognized data-sharing services detected.

This inventory identifies services receiving visitor data.

Under regulations like GDPR Article 30, maintaining records of data processing is commonly considered a best practice. This scan provides a starting point.

Readability Scores

1469 words, Flesch-Kincaid grade 14.8

INFO

Readability Analysis (Flesch-Kincaid)

Grade Level

14.8

Grade 15 (college+)

Reading Ease

50

Difficult

Words

1469

Sentences

43