Configured properly. Maintained quietly.

Accessibility, privacy, consent, and HIPAA capable intake are part of the platform from launch. We implement the tooling using established platforms, verify it, and keep it current as standards evolve.

We are a technical practice, not a law firm. We do not provide legal advice or guarantee legal compliance.

What is covered

Three areas, handled inside the plan.

Accessibility

Sites are designed and built to align with WCAG 2.2 AA. Automated checks run on every change, scheduled scans look for regressions, and a visitor-facing accessibility widget supports preferences and remediation.

WCAG 2.2 AA aligned components and patterns
Automated checks in the release gate
Scheduled scans with documented results
Visitor-facing accessibility controls

Privacy and consent

Privacy notices, cookie disclosures, and consent banners are implemented through an established policy platform that updates as laws evolve. We integrate the tooling, configure it, and verify it stays active.

Privacy, terms, cookie, EULA, and disclaimer embeds
Consent banner with regional configuration
Policies that update as laws change
Configuration and verification handled in the plan

HIPAA capable intake

For healthcare practices on the Practice plan, intake forms and CRM are configured on a HIPAA capable foundation. We sign a BAA and tighten access controls so patient data flows through a defensible setup.

Signed Business Associate Agreement
Intake on a HIPAA capable CRM
Enhanced access controls and audit trail
Configuration documented for review

Available on Practice plan

How it stays true

Posture is verified continuously, not annually.

Configured at launch

Accessibility patterns, consent tooling, and policies go live with the site, not after. The configuration is documented for your records.

Verified on every release

The release gate runs accessibility checks before any change ships. Scheduled scans monitor the live site for regressions.

Maintained as standards shift

Policy embeds update as laws change. Accessibility targets follow the standard. Issues that surface flow through normal updates inside the plan.

Healthcare practices

HIPAA capable intake, included on Practice.

For healthcare practices, we sign a Business Associate Agreement and configure intake on a HIPAA capable CRM with the access controls and audit trail your practice needs. Patients get a smooth digital front door without the operational drag.

Signed BAA when applicable
Intake on a HIPAA capable CRM
Enhanced access controls
Audit trail for documented oversight
Patient facing flows engineered for accessibility

See the Practice plan

Where responsibility sits

Vector implements and maintains the technical configuration, tooling, and monitoring. Policy language is generated based on your inputs and should be reviewed by counsel. Compliance is a posture maintained over time, not a single event.

Common questions

Are you a law firm? Do you provide legal advice?

No. Vector is a technical practice. We implement and maintain accessibility and privacy tooling, configure consent flows, and document the configuration. Policy content and legal interpretation should be reviewed and approved by your attorney.

Do you guarantee compliance?

No service can guarantee legal compliance or immunity from litigation. What we provide is a defensible technical configuration, ongoing monitoring, and documented evidence of effort. The combination materially reduces exposure but does not eliminate it.

Where do the policies actually live?

Policies are generated and maintained inside Termageddon based on a questionnaire about your business. We embed the live policy into your site, so when laws or platforms change, the policy updates without a redeploy on your end.

What happens when accessibility standards change?

The release gate runs accessibility checks against the current target standard. When the standard moves, our build configuration updates with it. Scheduled scans surface regressions, and remediation flows through normal updates inside your plan.

Can you support our existing accessibility or policy tools?

Often, yes. The standard plan supports an established set of tools so we can automate updates and reporting. If you already have tools in place, we will review them and confirm what we can support cleanly. Custom configurations may need a separate scope.

What is in scope and what is not?

In scope: configuration, monitoring, ongoing maintenance, and documentation of the technical posture. Out of scope: legal advice, formal third party audits, paid certification, and policy language drafting beyond the standard Termageddon questionnaire.

Let us show you what your front office could look like.

A 30 minute working demo. We walk through how the platform would map to your business, what we would build first, and what changes for your team on day one.

Request a Demo Or see what is included

No sales pitch, just a working sessionFocused on your goals