About this plugin
Merqivio Checked performs a free local baseline scan of selected WooCommerce and WordPress settings and content signals. A shop owner may optionally connect the plugin to Merqivio to create one centrally hosted Basic verification from the current scan.
The Basic verification is a dated snapshot. Running later free local scans does not refresh the public Basic verification date. Continuous Monitoring is a separate Merqivio SaaS service designed to keep a public status current with automatic external monitoring and rechecks.
The plugin does not provide legal advice and a successful scan or verification does not guarantee compliance with all applicable law.
Free functionality
- Manual local Basic Scan
- Merqivio score
- Clear pass/review/fail findings
- WooCommerce store identity signal checks
- Privacy and terms page checks
- Return/withdrawal content signal check
- Cookie/consent plugin signal check
- Product sample checks for price, image, description and SKU completeness
- Optional one-time public Basic verification hosted by Merqivio
- Optional front-end Merqivio Checked badge, OFF by default
External Merqivio service
Creating a public Basic verification is optional and requires explicit user action and consent in the plugin screen. The local scanner itself does not contact Merqivio.
When the user chooses to create a public Basic verification, the plugin sends the following data to the Merqivio service: webshop URL, WordPress site name, optional business/shop identity fields entered by the administrator (business name, shop name, country and registration number), optional contact email and contact URL entered by the administrator, selected certificate language, scan score, eligibility state, number of critical findings, scan date/time, the listed scan check results and area summaries, plugin identifier/version, and a randomly generated site verification secret used for domain challenge-response verification.
No WooCommerce customer records, order records or payment data are required or sent by this feature.
The Merqivio service uses the submitted data to verify control of the webshop, create and host the requested public verification, and preserve its original Basic verification date. The service verifies domain control through a challenge-response request to this plugin’s public REST endpoint. The endpoint returns the site URL and an HMAC response to a supplied challenge; it does not expose the site verification secret.
Later free scans update only local scan results and do not automatically transmit refreshed results or renew the public Basic date.
Continuous Monitoring (Pro) is a separate optional paid Merqivio SaaS service. It is not required for the free local scanner or the optional Basic verification. The plugin screen may describe this optional service and link to Merqivio for purchase.
Service provider: Merqivio
com/
com/privacy/
com/voorwaarden/