Q: How does the scan work on my site?

A: Here is a breakdown of methods we use to scan website content:

About Data Hosting & Security

Google Cloud Platform is the hosting environment for Web Governance services.

Web Governance scans your public-facing websites and does not access or store any confidential data. The only data that Web Governance stores (that may not be publicly accessible) are the names and email addresses of our customer's users, which we do not make publicly available. All data and backups collected will be kept for at least 30 days before being permanently deleted if and when the client exits, except logs.

Public website scans are done by both known and unknown crawlers every day. Google, Bing, and other search engines, as well as completely unknown companies, crawl websites to gather information and monitor performance. What Web Governance does is similar, and has no detectable effect on website performance.

Unless otherwise agreed upon, the location of customer data is based on which Web Governance branch your contract is with. This means that customer data for USA offices and subsidiaries is processed and stored within the USA, customer data for AU offices and subsidiaries is processed and stored within AU, and customer data for EU and UK offices and subsidiaries is processed and stored within the EU.

Login credentials (name, email, one-way hashed password, and data-location ID) are stored centrally in our login service, which resides in the EU.

How does the scan work?

Web Governance scans by using a combination of dynamic discovery using a breadth-first approach and XML sitemap if it is explicitly supplied or discovered through robots.txt.

What is required from an implementation perspective?

As long as it is online, nothing needs to be installed or added to your current infrastructure for the scan to work on your website. The Statistics and pages are prioritized by the number of views and have a script that can you can add to your Google Tag Manager. See Google Tag Manager/Monsido for instructions on how to set this up.

If you opt to do a scan on password-protected or otherwise restricted web pages or documents, and if this is permitted by the contract you signed with Acquia, you must make sure that the information in these web pages and documents is not confidential. We cannot guarantee the same level of security as you can. See Scan Password Protected and Internal Only Pages for more information on how to set this up.

IP Addresses that we use:

Additional Resources

For more information about the topics covered in this chapter, see also:

Web Governance Data Hosting and Security.