When a scan runs, Revvye fetches a set of public pages from the submitted website, looks at the rendered output, and inspects the same supporting signals a non-logged-in visitor would meet: the homepage, top service pages, location pages where present, the public booking path, on-page schema, sitemap and robots, the public Open Graph and meta surface, the visible review and trust proof, and the public references that link back to the business from elsewhere on the open web. The scan is intentionally read-only. It does not submit forms, place test bookings, or attempt to reach gated pages.
The scan also runs a short visibility probe against the public behavior of the major AI crawlers and search crawlers. That is not a guarantee that a given answer engine is using your pages today. It is a check of whether your public posture would let that crawler in if it tried, plus a sanity check on the robots.txt directives, sitemap exposure, and rendering parity that decide whether a public page can be read at all. We treat that probe as one input, not a promise.
Everything Revvye uses is something you, a competitor, or a well-behaved bot could already reach. That is the intentional boundary of the product. It also means the scan can be run honestly without pretending to know anything about your private CRM, your booking platform, your payment data, or the inside of your business. That separation is part of how we keep the diagnostic legitimate.