Compliance Report

Accessibility — WCAG 2.2 Level AA

• Keyboard navigation across all interactive elements with visible focus states.
• Skip-to-content link present on every page.
• Semantic HTML with correct landmark roles and heading hierarchy.
• Color contrast: 4.5:1+ for body text, 3:1+ for large text and UI components.
• Alt text on every meaningful image; decorative images marked.
• prefers-reduced-motion respected for animations.
• Automated axe-core, Lighthouse, and pa11y scans on every deploy.

Privacy — CCPA / CPRA Aligned

• No sale of personal information. No cross-context behavioral advertising.
• Google Analytics 4 in measurement-only configuration (Google Signals OFF, advertising features OFF).
• Global Privacy Control (GPC) signal honored — auto opt-out for browsers sending GPC.
• Do Not Sell or Share page available with clear opt-out instructions.
• 45-day response SLA on privacy requests.

Security — Header Baseline

• Strict-Transport-Security with max-age=63072000; includeSubDomains; preload.
• Content-Security-Policy with explicit allowlist (no unsafe-inline for marketing scripts beyond GA4/GTM).
• X-Frame-Options: SAMEORIGIN, X-Content-Type-Options: nosniff.
• Referrer-Policy: strict-origin-when-cross-origin.
• Permissions-Policy denying camera, microphone, geolocation, payment, and USB by default.
• Cross-Origin-Opener-Policy: same-origin.
• TLS 1.2+ only; weak ciphers disabled.

Consent — Mode v2

• Google Consent Mode v2 wired with analytics default-granted (CCPA opt-out model) and advertising default-denied.
• Cookie banner discloses analytics use and offers opt-out.
• User can change preferences anytime via Cookie Settings.
• GPC signal auto-downgrades analytics consent to denied for that browser.

How to Verify

You can verify these claims yourself:

• Lighthouse in Chrome DevTools (or PageSpeed Insights) for accessibility, best practices, and performance scores.
• Security headers at securityheaders.com.
• SSL configuration at SSL Labs.

Reporting Concerns

If you spot an accessibility, privacy, or security gap on focusedunow.com, please email admin@focusedunow.com or use our contact form. We acknowledge reports within two business days.