Home / FAQs

Frequently asked questions

Short answers. For procedures, open the related documentation guides.

Getting Started

How do I start using Nektur?
Create a workspace from Sign up, confirm your email if asked, and sign in. Add a public website under Domains, then run Scanner or install the consent banner.
Do I have to verify that I control the domain?
Quick scans can run without DNS verification. Standard, Deep, and scheduled monitoring require publishing a TXT verification record from the domain page. You remain responsible for scanning only sites you are authorized to test. Scans still block localhost and private networks.
Can one website belong to two organizations?
No. Each hostname is stored once. Another organization cannot add the same host.

What does a scan actually run?
One URL starts two engines: an HTTP crawl and a browser crawl. Nektur does not run separate customer engines labeled HIPAA, advertising-policy, FTC, website-security, or accessibility as independent products.
What is the difference between Quick, Standard, and Deep?
Quick observes the page before a consent choice. Standard also tries reject, accept, and withdraw in fresh browser contexts. Deep adds up to two more pages on the same site, still before a choice. Standard is the default.
Why did Scanner reuse an older result?
A completed scan is reused only when the URL, depth, scanner version, and domain-rule context match, and it finished inside the reuse window (30 minutes unless changed). A quick scan is never reused as a standard or deep scan. Check Force new scan to ignore the window.
Does weekly monitoring run on its own?
No. Monitoring stores a daily or weekly cadence, and an administrator still starts the due check while signed in.

What do Pass, Fail, Inconclusive, Not tested, and Error mean?
Pass means the scenario completed and, for reject or withdraw, no new optional tracker was observed after a verified rejection where applicable. Fail means optional tracking was observed before a choice, or after a verified rejection or withdrawal. Inconclusive means a control was clicked but the consent state was not verified. Not tested means the control was not found or the depth skipped the scenario. Error means the scenario stopped.
Does an existing cookie count as new tracking?
No. Findings use the difference after the page loads or after the choice. An unchanged cookie is not reported as newly created.
Is a consent finding a legal conclusion?
No. Results are technical observations. Jurisdiction is not decided, and the scan does not decide whether a site is a HIPAA covered entity.

Does the banner block every tracker before consent?
With auto-block on, certain third-party script, frame, and image addresses can be held until configuration loads and categories are allowed. First-party hosts, essential hosts, and hosts with no rule are not blocked. Some request types are outside this path. Auto-block does not guarantee every technology waits.
Can I use the banner without running a scan?
Yes. Install the script from Consent Banner. The scanner and the banner are separate.
What does a consent log prove?
It records the choice the banner stored for your organization, including the region and categories. It is not a full capture of network traffic.

Can Nektur complete a privacy request by itself?
No. It stores the intake, the deadline, and the task list. A person updates the tasks and closes the request. Nektur does not automatically delete data from your external systems.
What does identity verified mean?
It means an administrator typed a note and marked the request verified. An optional email challenge can assist, but the verified mark remains a staff decision—not automatic government-ID proof.
Can Ask Nek close a request or delete data?
No. DSAR assistance can suggest steps. It is blocked from verifying identity, releasing records, deleting data, denying a request, or closing it.

Can I choose the AI model?
No. Model and provider selection stay on the server. AI Settings lets an administrator turn features on or off. Usage consumes AI credits from your plan and purchases.
Which AI provider does Nektur use?
Nektur uses the OpenAI API. Responses can be inaccurate. Review consequential recommendations. API training defaults follow OpenAI’s API terms unless a customer opts into sharing.

Where do I manage payment methods and invoices?
Organization administrators open Billing in the workspace and use Stripe Checkout / Customer Portal flows exposed there. Compare plans on the public Pricing page.

Is Nektur SOC 2 or HIPAA certified?
The Hive does not claim SOC 2, ISO 27001, HITRUST, or HIPAA certification. See Privacy, Security & Trust articles for implemented controls described accurately.