Sharing a result
Create a public scores-only link for an audit, what it shows and hides, and how to revoke it.
Updated
Any completed audit can be shared through a public link of the form /r/<token>. The link shows scores only, needs no sign-in, and can be revoked at any time. Full reports, evidence and memos always require login.
Creating a link
Open the audit's report page (sign in, then choose the run from the dashboard at /app). In the sidebar, the card "Share (scores only)" has a "Create share link" button. The link appears once, in the confirmation message at the top of the page, as /r/<token> on this site. Copy it then: only a hash of the token is stored, so EchoPilot cannot show it again later. If you lose it, create a new one.
You can create more than one link for the same run. Each one is listed in the card with its creation date and its own "Revoke" button.
What the page shows
The shared page renders exactly what the public payload allows:
- the business name as you entered it (or the domain for a free score);
- the overall score, rounded, with a notice if a gating check capped it at 40;
- the ten category scores, rounded;
- the date the audit completed;
- how many checks were not assessable and excluded from the score;
- the standing disclaimer that EchoPilot does not and cannot promise search positions, traffic, leads or revenue.
It does not show rule results, evidence rows, the fix list, the memo, deltas, or any account, business or run identifier. The page carries a noindex, nofollow robots directive so search engines do not list it.
Revoking a link
Click "Revoke" next to the link on the report page. From that moment the URL returns a 404, the same response as an unknown token. Revocation cannot be undone; create a new link if you need one again.
Security notes
- Tokens are 256-bit random values. Only their SHA-256 hash is stored, so a database read does not reveal working links.
- A link only renders while the run is in a completed state; runs that failed or were refused by the plan never render.
- Anyone with the link can view the page until you revoke it. Treat it like any other unlisted URL.
The sample audit
The sample audit linked from /how-it-works and /pricing uses the same /r/<token> route with one difference: it is a real audit of a real business, anonymised, and it shows evidence rows so visitors can see what a full report looks like. Your own share links never include evidence.
Related
- Reading your score explains what the shared numbers mean.
- What we store covers how share tokens are kept.