Using Webflow? Start with ScrollAccess for Webflow: Setup and User Guide for installation, Designer connection, supported fixes, publishing, verification, and removal.
ScrollAccess is a website accessibility platform for website owners, developers, designers, teams, and agencies. It combines automated accessibility scanning, WCAG-related issue insights, AI-powered guidance, a customizable visitor accessibility toolbar, reports, manual review workflows, and multi-website management.
This guide reflects the current ScrollAccess functionality, including Webflow and generic website connections, per-website toolbar preferences, website translation, managed AI assistance, reporting, agencies, and client access.
Note: ScrollAccess helps identify and manage accessibility work. Automated testing and AI guidance do not guarantee legal compliance and do not replace appropriate manual testing.
This guide covers the Webflow Designer app, its connection to your ScrollAccess account, and the optional visitor toolbar. Start at the ScrollAccess dashboard. A ScrollAccess account and a Webflow account with access to the website are required. Features and usage limits depend on your ScrollAccess plan.
Workflow: install and authorize → connect the Designer app → scan Designer elements → review → apply a supported change → rescan in Designer → publish separately. Use Undo when needed.
Webflow authorization connects site access to your ScrollAccess account. It is separate from the Designer key used to sign in to the extension. Never copy an OAuth callback URL containing temporary authorization parameters as an installation link.
The Designer key is kept only in memory while the app instance is open. Reopening or reloading the app requires connecting again. Reuse a valid key you securely retained, or generate a replacement in the dashboard and revoke obsolete keys. Reconnecting the Designer does not require repeating Webflow OAuth unless authorization has been revoked or otherwise needs renewal.
Before your first scan in a connected session, review the disclosure about site identifiers, page URL and limited finding content sent to ScrollAccess, and the configured scan-retention period. You may cancel without sending scan content. Scan content is not sent to an AI provider merely by scanning. The Privacy Policy is linked inside the extension.
Designer scans inspect a snapshot of supported API-provided elements, including current Designer edits. Checks cover image alt text, heading structure and link/button names. Forms and authentication controls, CMS collections and shared component internals are excluded. Document language and title need manual review. Visual contrast, focus behavior, motion, dynamic content, keyboard interactions, and assistive-technology behavior need rendered-page or manual testing. A scan score is an internal indicator, not accessibility certification.
Supported changes include image alternative text, heading levels, and accessible labels where the finding can be reliably matched to an editable Webflow element. The available controls depend on the finding and element.
If a unique element cannot be matched, the app displays an explanation or guided manual steps. Edit the element manually in Webflow and run a fresh Designer scan. API findings target the exact Designer element ID; historical findings may require a fresh scan. Saved scans alone do not authorize applying changes: use a fresh scan to establish the current page and element context.
Use Undo in the fix-verification area while the applied change is available. Up to 50 minimal fix records are held only in memory during the current app session, for at most one hour. They are cleared on Designer disconnect or reload; old browser-stored fix records are removed. Undo attempts to restore the value recorded before the change. If the element or value has since changed and restoration cannot be verified, review the message and correct the element manually in Webflow rather than overwriting unrelated work.
Undo changes the Designer state. If you already published the change, publish again after Undo to update the live page. Keep your own review record and use Webflow's normal editing and backup tools for work beyond the app's available Undo controls.
Applying a Designer fix does not immediately change a saved scan score. A new Designer scan is needed to update saved results; publishing is a separate step that makes edits visible to visitors. Disappearing findings do not prove complete accessibility or legal compliance.
Before your first AI request in a connected session, review the disclosure about selected issue context or text sent to ScrollAccess and its configured third-party AI provider, ScrollAccess retention and provider retention differences. Only fields needed for the selected tool are sent. Cancel if you do not want to share this information. Avoid secrets or unnecessary personal information.
AI assistance is included in eligible ScrollAccess plans, subject to the plan's feature and usage limits. Webflow customers do not need their own AI provider account or API key, and do not need access to WordPress administration. The provider connection is managed by ScrollAccess; customers do not receive a separate provider bill for this managed AI feature.
Generated HTML and CSS are suggestions and are not automatically inserted into your site. Where a supported Designer fix is available, review and explicitly apply it, then rescan in Designer and publish separately. If AI is unavailable or a limit is reached, check your plan and usage in Billing or contact ScrollAccess support. Do not enter passwords, private keys, or other sensitive information into AI prompts.
Website translation is a separate optional toolbar feature. Its provider-key requirements and third-party usage charges are explained in Translation API Key; those requirements do not apply to managed AI suggestions.
Install the current backend and Designer build, and reapply managed published scripts after a runtime update. Publishing is a separate Webflow action. Versioned runtime files are not modified in place.
Sign-in and password reset: requesting a reset link does not create a session. Reset links are verified before the password can change; after a successful reset, sign in with the new password. Dashboard and authentication pages must be excluded from hosting, CDN and LiteSpeed caches. A cached dashboard shell is not evidence of an authenticated account; protected API requests require a valid session or an authorized Designer key.
Webflow versus other platforms: Webflow toolbar/cookie installation is managed from Websites through the Custom Code API. Copy non-Webflow embed code is a separate setup method for other platforms, not a Webflow fallback. Remove older manual snippets before managed installation to avoid duplicates; uninstall cannot remove manually pasted code.
Translation authorization: default-language and browser-language settings do not authorize sending page content. The first visitor language change asks permission before translation; only an authorized saved preference can be reused. For managed Webflow installations, mark public static containers with the custom attribute data-scrollaccess-translate-public="true". Leave account, form, checkout, personalized and sensitive content unmarked. The runtime also excludes private regions and common sensitive text patterns.
Cookie discovery and consent records: optional discovery starts only after Analytics consent, and reports names/hosts rather than cookie values or full URLs. Discovery expires after 30 days without updates. Consent audit references are created only after a visitor chooses an option; audit history uses the configured 1–365 day retention. Update your privacy notice before enabling either feature. Nonmodal banners do not take initial focus. Where a reload is needed after revocation or changes in another tab, a notice offers a Reload button rather than silently discarding work.
Optional scripts: global DOM insertion interception has been retired. Keep optional markup inert until consent and use reviewed first-party vendor files with the matching SHA integrity value. Configured arbitrary external URLs are rejected. Remove other apps' parser-loaded tags and duplicate integrations before enabling the controlled loader.
CSP and dependencies: the runtimes support nonce-authorized style elements and approved first-party assets. A restrictive policy must authorize the document's nonce or exact style hashes; do not add broad unsafe-inline exceptions. Recompute hashes when runtime/configuration bytes change. Dyslexia CSS and its licensed font are self-hosted. Google's optional mutable gtag loader cannot use stable SRI; enable it only with the required visitor consent, disclosed vendor dependency and specific CSP destinations. Ask your site administrator to test the actual published page with its policy enforced. Allow only the first-party runtime, API, stylesheet and font origin https://scrollaccess.com and any explicitly enabled vendor destinations. A nonce attribute alone does not authorize a style unless the response policy permits the same nonce.
The cookie banner is separate from the visitor accessibility toolbar. On Webflow, install it through the supported Custom Code API, without pasting a new executable embed manually.
Dashboard site removal and Disconnect all clean up managed cookie-banner and toolbar code before dropping authorization. Designer Disconnect only ends the Designer session. Webflow uninstall removes app-owned code; publish affected sites to update live pages. Manually pasted code still needs manual removal.
Optional services must not already run through other tags, integrations or tag managers. Remove duplicate tags and use configured consent-aware services. Google denied defaults must run before measurement tags. The banner cannot block requests made before it loads or guarantee legal compliance.
Banner configuration is fetched from ScrollAccess. Optional discovery starts only after Analytics consent and reports observed cookie names and script hosts, without cookie values or full URLs. Discovery expires after 30 days without updates. Consent-history references are created only after a visitor chooses an option. Optional consent history stores choices, timestamps, configuration version and a hashed consent reference for the configured retention period (1–365 days); this module does not record IP addresses or user agents. Update the site's privacy notice before enabling these options. Non-Webflow websites retain the separate embed installation workflow.
The toolbar adds JavaScript and styling to your published website through Webflow's Custom Code API. Its code runs in visitors' browsers to provide accessibility preference controls and optional translation. It is separate from the Designer scanner and does not repair the site's underlying markup.
Configure toolbar preferences in ScrollAccess. Configuration, license eligibility and optional translation use ScrollAccess HTTPS services. A Webflow plan and site role supporting custom code are required. Toolbar availability depends on your active ScrollAccess plan.
Disconnecting or uninstalling does not undo content changes you already applied or automatically erase all saved scans and reports. See the Privacy Policy for retention and deletion requests. Reverse content changes separately if needed.
Contact support@scrollaccess.com with the site URL, steps, and displayed error. Do not send credentials in support messages.
A typical ScrollAccess setup follows these steps:
ScrollAccess is designed around an ongoing accessibility workflow rather than a one-time check.
Create your ScrollAccess account and sign in to the dashboard. Your account stores website connections, toolbar preferences, report preferences, agency access, and usage entitlements.
In account settings you can manage your profile name, dashboard language, appearance, timezone, and scheduled report preferences where enabled.
ScrollAccess supports Webflow authorization and a generic website connection flow for other platforms.
Note: Each hostname uses a website/plan slot, including pending websites. The exact hostname must be verified; www and other subdomains may require their own verification. The platform must support custom code for the toolbar embed.
For a non-Webflow website, ScrollAccess provides two ownership verification methods:
<head>, publish the site, then choose
Verify meta tag.
After verification, ScrollAccess can provide the toolbar embed snippet and scanning access when allowed by your active plan and website selection.
Note: Public HTML scanning does not execute page scripts or inspect login-protected content. Dynamic interactions and screen-reader behavior require manual review.
The dashboard is the central workspace for websites, scans, AI assistance, reports, manual review, billing, agency features, client access, and settings. Use the website selector wherever available to make sure you are working with the intended website.
Webflow scans read supported elements on the current page through the Designer API, including unpublished Designer edits. Use the Webflow scanning instructions; dashboard URL, full-site crawling, and sitemap scanning are not available for Webflow websites. For non-Webflow websites, automated scans inspect publicly retrievable HTML. Scan results are stored so you can revisit findings and compare changes over time.
Note: A failed page can stop a scan run and partial results may not be saved. Automated scanning cannot detect every accessibility barrier.
Scan results organize detected accessibility findings so they can be reviewed rather than treated as an automatic compliance decision.
ScrollAccess maps supported automated findings to relevant WCAG information and can provide additional standards guidance. Use this information to understand why a finding matters and what should be reviewed.
Note: A WCAG reference in a scan result does not mean automated testing has fully evaluated that success criterion. Some criteria require human judgment, interaction testing, assistive technology testing, or content review.
Use scan history to revisit earlier runs, review score trends and issue categories, and compare selected scans. Comparisons help show whether automated findings increased, decreased, or changed after website updates.
Use comparisons as progress evidence, not as a substitute for manual accessibility testing.
The AI Assistant helps explain accessibility findings and generate practical suggestions. It does not edit or publish changes to the customer website.
Note: Always review AI output before applying it. AI suggestions can be incomplete or inappropriate for the specific page context.
AI assistance is included in eligible ScrollAccess plans and is subject to plan usage limits. ScrollAccess manages the provider connection. Webflow customers do not need an AI provider account, provider API key, or WordPress administrator access, and do not receive a separate provider bill for managed AI assistance.
Connect your Designer app, choose an available AI action or tool, provide the requested context, and review the generated suggestion. For step-by-step instructions, see AI assistance in the Webflow guide. Check Billing for your plan's AI allowances or contact support if the service is unavailable.
Website translation has separate provider-key and billing requirements; see Translation API Key.
Available AI surfaces depend on the issue type and your plan. The current AI feature catalog includes alt text generation, WCAG explanation, accessible button and link suggestions, heading and form-label guidance, issue explanations, HTML/CSS fix suggestions, color replacement suggestions, and the general assistant.
Alt text: provide enough page/image context for the suggestion to be useful. Decorative images may require an empty alt attribute rather than descriptive text. Review every generated value before publishing.
The ScrollAccess toolbar gives website visitors optional controls for adjusting how content is displayed or experienced. Toolbar configuration can be scoped to an individual connected website.
The toolbar complements accessibility work; it does not repair inaccessible source code or guarantee that a website conforms to WCAG or accessibility laws.
Use the toolbar settings for the selected website to create website-specific preferences instead of relying only on global defaults.
Per-website toolbar preferences can store custom status, position, disclaimer, icon/custom icon URL, and enabled controls.
The current toolbar control catalog includes:
Note: Enable only the controls you want to expose for the selected website. Some controls change presentation for the visitor but do not change the underlying website markup.
Webflow: use the Custom Code API installation workflow. The manual embed instructions below apply to non-Webflow platforms.
After a website is connected and eligible for toolbar use, ScrollAccess generates an embed snippet.
For generic websites, ScrollAccess can also replace/rotate the embed key when needed. If the key is replaced, update the installed snippet on the website.
Note: Platform capabilities differ. Shopify checkout, plan-restricted custom-code areas, single-page applications, and dynamically rendered content can require additional testing.
Default-language settings and browser-language detection do not grant permission to send page content. The first visitor language change asks for authorization before translation. A saved preference is reused only after authorization. For managed Webflow installations, mark public static containers with data-scrollaccess-translate-public="true". Leave account, form, checkout, personalized and sensitive regions unmarked. See Security and visitor authorization.
Website language translation is an optional toolbar control. It must be enabled in the website’s toolbar control list and requires a configured translation provider API key.
ScrollAccess currently supports Google Cloud Translation, DeepL (Free / Pro), and managed LibreTranslate through libretranslate.com. Available source/target languages depend on the selected provider.
Note: Translation usage is sent to the configured provider and can count toward that provider account’s quota or billing.
Configure the translation provider in the website toolbar settings:
The translation key is stored encrypted on the server and is never included in the toolbar embed code. Switching providers requires a key for the new provider. Use Remove API key to clear the saved credential.
Manual review covers accessibility checks that automated scanning cannot reliably determine. ScrollAccess includes a manual review checklist with categories such as keyboard, screen reader, visual & zoom, media, forms, motion, and cognitive accessibility.
Note: Manual review should be performed by a person who understands the page’s purpose and interaction patterns.
Create accessibility reports from scan data and progress information. Reports can be exported in multiple formats for internal review, stakeholders, or clients.
Reports can include issue summaries, progress information, issue details, and related standards/guidance depending on the report and export format.
Where scheduled report email functionality is enabled by the site administrator, users can configure report delivery in account settings.
Note: The dashboard indicates when scheduled report emails are disabled by the site administrator.
Agency functionality supports multi-user accessibility work. Available actions depend on the user’s role and permissions.
Agencies can invite client portal users by account email and associate websites with client records. Portal access is permission-controlled and is intended to give clients access to the accessibility information assigned to them without exposing unrelated agency work.
Note: Only assign websites and information that the client should be permitted to access.
ScrollAccess plans can control website slots and feature/usage entitlements such as scans, AI usage, reports, toolbar access, and agency functionality. The dashboard billing area shows the plans available to the current installation/account.
ScrollAccess offers a 14-day trial. After the trial ends, an active paid subscription is required to scan websites or use the visitor toolbar; these features are unavailable without payment. Managed AI assistance remains subject to the selected plan and usage allowances.
If a website or feature is unavailable, confirm the active subscription, selected website, and remaining entitlement before troubleshooting the feature itself.
User-facing settings include profile name, dashboard language, appearance/theme, timezone, scheduled report email preferences, Webflow connection controls, toolbar settings, and Designer API keys where the native Webflow Designer extension is used.
Dashboard language and toolbar website translation are separate features: dashboard language changes the ScrollAccess interface, while Website language translation is a visitor toolbar control that uses a translation provider API.
ScrollAccess includes security controls for API requests and stores sensitive provider credentials server-side. AI and translation API keys are encrypted before storage and are not included in public embed code.
Automated scanning is useful for detecting many common issues, but it cannot find every accessibility barrier. For non-Webflow websites, public HTML scanning does not execute page scripts or inspect login-protected content. Webflow Designer scans instead inspect supported API-provided elements; they do not reproduce the rendered page or test dynamic behavior.
Combine automated results with manual keyboard testing, screen-reader testing, zoom/reflow review, content review, media review, and testing of dynamic interactions where appropriate.
Note: ScrollAccess provides accessibility tools, insights, and guidance. It does not provide legal advice, certification, or a guarantee of compliance with WCAG, ADA, EAA, Section 508, AODA, the Accessible Canada Act, or other laws/standards.
Does ScrollAccess automatically fix my website?
ScrollAccess does not silently fix or publish your website. For supported
findings, you can explicitly apply reviewed changes to matched elements in
Webflow Designer, including image alt text, heading levels, and accessible
labels. Other findings require manual editing. Rescan in Designer to review
updated findings, then publish separately and inspect the live page. Undo is
available for supported applied changes.
Can I configure the toolbar differently for each website?
Yes. Per-website preferences can include position, disclaimer,
icon/custom icon URL, and enabled controls.
Do I need a separate key for website translation?
Yes.
Translation uses the selected Google Cloud Translation, DeepL, or LibreTranslate
provider credential. The key is stored encrypted and is not placed in the embed
code.
Which AI providers are supported?
ScrollAccess manages the
active AI provider. Customers use available AI tools through their ScrollAccess
plan rather than configuring provider credentials. Review generated output
before use.
Does the scanner guarantee WCAG compliance?
No. Automated
testing cannot evaluate every accessibility requirement. Manual testing remains
necessary.
Can agencies manage clients?
Yes, subject to plan and role
permissions. Agency features include members, clients, website assignments,
portal invitations, and branding options.
If you need help with ScrollAccess, contact your ScrollAccess support channel and include enough information to reproduce the problem.
Note: Never send your password, AI API key, translation API key, payment credentials, OAuth token, or other private authentication secrets in a support request.
ScrollAccess is an accessibility testing, guidance, visitor-toolbar, reporting, and accessibility-management platform. It does not provide legal advice, legal certification, or a guarantee that a website complies with any accessibility law, regulation, or standard.
Automated results, AI output, toolbar controls, and reports should be combined with appropriate manual accessibility testing and professional review where needed.
Thank you for using ScrollAccess.