Every scan shows everything we find: every tracker, every page, and the exact fix steps, with nothing locked. The paid plan is what happens next: we verify the fix with a re-scan, issue a dated clean certificate for your compliance file, and keep watching every week.
The full findings and fix steps for your highest-risk public pages. No signup.
Your vendor fixes it. We prove it landed, and keep watch.
The same fix-verify-watch loop across every clinic you manage, under your brand.
Prefer a single engagement with an invoice? The full evidence packet, once.
The findings aren't a secret. Your web vendor can see the same trackers in a browser console. What you can't do yourself is prove they're gone: a dated re-scan by an independent scanner, a clean-scan certificate for your compliance file, and weekly watching so it stays that way. Information is free; the proof is the product. The one-time audit is the same idea in a single engagement: you are paying for the full-site, dated, exportable evidence packet on an invoice, not for us to unlock anything.
No third-party analytics or advertising trackers, and you're welcome to scan us. We do record the minimum first-party events needed to run the service: that a report link was opened, a file downloaded, or a checkout started. No cookies, no cross-site anything, and nothing shared with anyone.
No. Scans cover public pages only, loaded in a real browser the way a visitor would see them. No logins, no patient records, and nothing to install.
No. You get dated technical evidence and fix instructions to review with your privacy officer, compliance lead, or counsel.
Then you have dated evidence of that, which is exactly what a compliance file needs. Monitoring turns a clean scan into a certificate, and keeps certifying every week it stays clean.
Usually your web vendor or marketing agency. The fix list in every report is written so you can forward it as a work order. If they push back or have questions, put us on the thread and we'll handle the technical back-and-forth. When they're done, run the verification re-scan and see for yourself.
Often not. The next marketing campaign can add new trackers, tag managers can re-inject removed ones, and site or plugin updates can bring them back. Removing the pixel does not remove the process that installed it. Weekly re-scans exist so that if it happens, you find out with a dated record instead of a surprise.
The practice still needs to know and document what its public website sends, even when an agency built and runs it. You own the review decision; your agency usually owns the technical fix. Agencies that manage multiple clinics can run this whole loop under their own brand on the agency plan.
Monitoring and agency plans cancel anytime from the dashboard, with no lock-in and no call required. The one-time audit has a 7-day guarantee: not useful, reply to your report email and we refund it in full.
Every scan is stored with its date, evidence, and outcome, so you can show what you knew, what you fixed, and when. The verification re-scan and clean-scan certificate give your compliance file a before and an after. Clinic Pixel Audit is not legal advice and does not certify HIPAA compliance.