Every shield we issue comes from this published checklist. Nothing is decided on taste — if a site meets the standard it earns the shield, and if it slips, the shield is withdrawn.
Safe Site
Is it built and run honestly and securely?
Encrypted connection on every page, with strict transport security.
A content security policy that limits which scripts may run.
Protection against being framed or disguised by another site.
No hidden redirect chains or cloaked destinations.
Third-party scripts and trackers declared and justified.
A named operator with a working contact route.
No Scams
Can you spend money, or share details, without being tricked?
Prices, totals, renewal dates and fees stated before payment.
Cancelling a subscription takes no more steps than starting one.
No fake countdowns, invented stock levels or pressure wording.
Refund and returns terms published and honoured in test cases.
No look-alike or disguised-character domains imitating a brand.
Sign-in and payment fields never served insecurely.
Accessibility Safe
Can everyone actually use it?
WCAG 2.2 AA as the baseline; AAA contrast rewarded at Honors level.
Full task completion with a screen reader (NVDA, JAWS, VoiceOver, TalkBack).
Every task completable with the keyboard alone, with no focus traps.
Page language declared, headings ordered, landmarks present.
Images carry meaningful text alternatives; decoration is marked as such.
Zoom to 200% without loss of content or function.
Captions and transcripts on all spoken media.
Sensitivity Safe
Is it calm, predictable and safe for sensitive visitors?
Nothing plays sound or video automatically.
No flashing, strobing or rapid-motion content; reduce-motion respected.
Content warnings before distressing, graphic or adult material.
No interrupting pop-ups, exit-intent guilt prompts or shaming wording.
Plain language available for key tasks and legal terms.
Moderation policy against hate, harassment and pile-on behaviour, applied in practice.
What each shield requires
Baseline Verified
Passed the online application plus the App Salute Trust AI baseline audit: valid security, no scam signals, honest terms.
Application form complete and the submitted address confirmed as yours.
AI baseline audit scores 70 or more with no failed Safe Site check.
No open scam, billing or privacy concerns filed against you.
PlusSocial Standard
AI baseline plus a human reviewer confirming accessibility and sensitivity-safe behaviour against PlusSocial guidelines.
Everything in Baseline Verified.
A human reviewer signs off Accessibility Safe and Sensitivity Safe.
Combined score of 80 or more, with no failed check in any pillar.
Website ownership verified by page tag or DNS record.
Member Audited Honors
Audited by App Salute Trust auditors together with PlusSocial members, including lived-experience testing across multiple conditions.
Everything in PlusSocial Standard.
Lived-experience testing by members across at least three access needs.
Combined score of 90 or more, plus published member reviews.
Re-audited on a rolling basis; the shield is withdrawn if standards slip.
How an audit runs
You apply online and confirm you control the address.
Our automated baseline audit checks the four pillars and scores them.
A human reviewer re-tests anything the machine flagged, plus access and sensitivity.
Members with relevant lived experience test real tasks and publish their findings.
A shield is issued, and every finding is published on your record.
Anyone can report a concern at any time; confirmed breaches suspend the shield pending re-audit.