Defense lawyers give letter recipients the same first instruction: document what your site actually does before you change anything. The Defense File is that documentation — a timestamped capture of your site’s real network behavior, with a fact-check of the trackers the letter names, packaged to forward to your attorney and insurance carrier.
The scan starts immediately and usually finishes within a few minutes. Your Defense File — report, fact-check, and the downloadable evidence package — goes to the email you entered at checkout. The link stays valid for 365 days.
If it hasn’t arrived within an hour, check spam, then write to reports@cipascanner.com.
$299 one-time
Demand letters typically ask for a response in 14–30 days, and insurers often require written notice within a limited window — defense commentary treats missing either clock as the worst-documented option. A dated capture made now records the state of the site while both windows are still open.
If you remove a tracker after the letter, a dated before/after record is what shows when the change happened. Defense counsel explicitly recommend keeping timestamped records proving when trackers were remediated. Fixing the site first, with nothing preserved, erases the “before.”
Some letters allege trackers that never transmitted anything. The fact-check documents what this capture actually observed for each named tracker — in both directions, because accuracy is the point.
What the letter is worth, whether to respond, whether to settle — those are legal judgments we never make. The Defense File exists so the attorney you retain starts with evidence instead of guesswork. For background on the letters themselves, start with the demand-letter guide.
Defense counsel consistently instruct letter recipients to document the current state of the site before changing anything. If you remove a tracker after the letter, a dated before/after record is what shows when the change happened — fixing the site first, with nothing preserved, erases the "before." A preservation duty can also attach once litigation is threatened; ask your attorney.
A full three-pass capture of the site the letter names (pre-consent, with Global Privacy Control signalled, and with the reject flow exercised where a banner offers one), a fact-check of each tracker the letter names against what the scan actually observed, timestamped HAR network logs, screenshots, a machine-readable findings file, a PDF report, and a manifest with a SHA-256 checksum for every file. The report link stays valid for 365 days.
No. We report observed network behavior only. We do not review your letter, assess any claim, or advise on responding or settling — those are legal judgments for the attorney you retain. The Defense File exists so that attorney starts with evidence instead of guesswork.
Some letters allege trackers that never transmitted anything. The fact-check documents what the scan actually observed for each named tracker — in both directions. If a named tracker did not fire during the capture, the report says so, along with the honest caveat that one session documents that visit, not every configuration the site has ever served.
The capture starts the moment payment completes and usually finishes within a few minutes. The Defense File is emailed to the address you enter, with the downloadable evidence package linked from the report.
One post-remediation re-capture, included in the price. After your site has been changed, a single-use link from your delivery email runs a second dated capture and emails you the verification record with a before/after summary against the original. The two dated records together are the timestamped remediation proof defense counsel ask for.