Scan record linking policy
Last updated 1 November 2026
A Plainsight scan record says that Plainsight carried out security scans of a named store or app, within a stated scope, on the dates shown. It does not show results. It does not mean that no issues were found or that any were fixed, that the store or app is secure now, or that it is safe to shop with or install. It is not a certification, rating or endorsement by Plainsight or Shopify.
What you can say
Link the words “Scanned by Plainsight” directly to your current record on records.plainsightsecure.com, so visitors can read what it means and what it doesn’t. You may add the date of a scan shown in your record, for example “Scanned by Plainsight on 31 October 2026”. Use that scan date, not the date the page was published or updated.
Plain text links using this wording are permitted while your record is published.
What you can’t say
Do not describe your store, app or record as certified, approved, verified, secured or protected by Plainsight, or as proof of safe shopping. Do not say or suggest that no issues were found, that issues were fixed, or that Shopify endorses the record. Do not describe any part of your business beyond the scope the record lists.
Do not present the record as a seal, shield, padlock, tick or similar badge, and do not use our logo as a mark of approval. Do not alter the record, frame it inside another page or place it beside wording or graphics that suggest approval or protection. Any other use of our name or branding needs written permission.
Dates and changes
A record is historical. Each date shows when a scan finished, not what it found, and nothing is implied for other dates. A page update is not a new scan. If your record is replaced, update your link to the new record. If it is withdrawn, remove the link and stop referring to it. Withdrawal is a publication decision, not a finding about your security.
What stays private
A record is published only with approval from an authorised representative of the business. Findings, issue counts, individual check results, vulnerability details, credentials, source code and customer data are never published. Your private findings report is separate from the public record.
Corrections and misuse
Contact daniel@glotomati.com with the record URL and the correction or misuse you want reviewed. We may correct a record, ask for misleading references to be changed, or withdraw a record while we review its accuracy or use. The assessment agreement governs the work, testing authorisation and any further publication conditions.