Terms, DPA and attributions

The paperwork, in the same plain words as the product

Three documents a procurement or security reviewer will ask for. The conformance clause sits in the terms, not in a footnote.

Last reviewed

Terms v4 and attributions reviewed 2 September 2026. DPA v3 published 12 June 2026, countersigned within one working day.

Ask a legal question

Attributions and licences

reviewed 2 Sep 2026

What we build on, under which licence, and where we deliberately stay on the safe side of the boundary.

1

axe-core

The automated rule engine is axe-core by Deque Systems, used as a dependency under the Mozilla Public License 2.0. Source files are not modified; we wrap the engine and inject it through a browser automation layer. The “axe” trademark is not used in our product name or in our marketing material.

2

EN 301 549 v3.2.1

Published free of charge by ETSI as a referenced standard. We reference clause numbers and write our own plain-language summaries. Clause text is never reproduced verbatim in the product or in generated reports.

3

WCAG 2.2

Published by the W3C as a referenced standard. Success criterion numbers and short titles are used as references under the W3C document licence. Full criterion text stays with the W3C and is linked, not copied.

4

Browser automation

Playwright (Apache 2.0) drives a headless Chromium instance for page loading, screenshots and rule injection.

6

Typeface and interface

Interface type is licensed for web use by Sekiz B.V.. Icons and illustrations in the product are original geometric shapes; no third-party icon set is redistributed.

If you believe an attribution is missing or wrong, write to support@conforma.eu and we will correct it.