SHORT ANSWER
A compliance score implies a determination that a storefront meets the rules. No website scanner can make that determination: FDA reads intended use from the whole presentation, and a payment provider makes its own underwriting decision. RUO Clear reports an Observable Risk Score instead, a 0 to 100 estimate of how much risk was observed, with a critical finding flooring the number. It is a risk estimate, never a grade.
This material is general educational information as of the “last reviewed” date. It is not legal advice and may not reflect later developments or facts specific to your business. Links are provided so readers can inspect the primary or official sources.
01 / THE CLAIM
What a “compliance score” says it measures
Several tools aimed at research-use-only peptide sellers publish a single number and call it a compliance score. Merit, one such platform, describes “a live compliance score” shown as “one score in your dashboard,” under the headline “Compliance, verified,” with a section titled “Get approved. Stay approved.” (read September 3, 2026). The same page also says “Monitoring, not a guarantee.”
Taken at face value, a compliance score answers a yes-or-no question: does this storefront meet the rules? That is a determination, and it belongs to two parties a scanner cannot speak for.
Nothing here evaluates any competitor’s product quality, customers, or outcomes. It quotes the words a public page uses to describe itself and explains why RUO Clear chose different words.
02 / WHO ACTUALLY DECIDES
Two decisions a website scanner cannot make
The first belongs to FDA. Under 21 CFR § 201.128, whether a product is a drug turns on the objective intent shown by labeling, advertising, written statements, and the circumstances of distribution. FDA reads the whole presentation, including social posts, bundled supplies, and testimonials, on the day it looks. A scanner sees a subset of public pages on the day it crawls. It can report what it observed and which source each observation maps to. It cannot certify that nothing else exists or that a regulator would agree.
The second belongs to the payment provider. Stripe, WooPayments, and every acquirer publish restricted-category policies and then apply them account by account, with their own underwriting, reserves, and continued-service decisions. A scanner can help a merchant prepare for that review. It cannot conduct it.
A number labeled “compliance” collapses both decisions into one figure the tool does not control. That is why RUO Clear does not issue one.
03 / WHAT RUO CLEAR REPORTS
The Observable Risk Score, in the product’s own terms
RUO Clear reports an Observable Risk Score from 0 to 100. Higher means more observed risk. The score is driven by the scan’s substantive findings, each of which points to a captured page, an excerpt, and a resolvable source: a statute, a regulation, an FDA warning letter, FTC guidance, or a processor policy. Anything that is not source-backed is labeled a recommended control, not a finding.
A critical finding floors the score. A clean disclaimer elsewhere on the site cannot average away a product page that describes weight loss in people. That mirrors how the warning letters read a site: FDA quotes the outcome claim and sets the disclaimer aside.
The score is a risk estimate. It is not a compliance grade, a certification, an approval, or a pass/fail verdict, and the report says so on the same screen. The scanner also reports what it did not examine, because a result is only meaningful next to its coverage.
04 / SIDE BY SIDE
How the two framings differ
The differences are not cosmetic. Each one changes what a merchant believes after reading the number.
- Framing: “compliance score” implies a determination that rules are met. “Observable Risk Score” describes how much risk was seen in what was scanned.
- What the number means: a compliance score reads as “how close to passing.” An observable risk score reads as “how much was found, and how serious.”
- Direction: a higher compliance score reads as better. A higher risk score means more observed risk, so there is no number that reads as “passed.”
- Critical findings: an arithmetic score can be diluted by clean pages. RUO Clear’s critical findings floor the score so one serious claim cannot be averaged away.
- Coverage: RUO Clear states what was and was not scanned alongside the score. A single number without a coverage statement implies the whole site was judged.
- Payments: a “get approved” framing implies the score leads to processing. RUO Clear’s payments program is separately gated, and a provider makes its own decision after its own underwriting.
05 / WHY THE WORDS MATTER
Overclaiming by a compliance tool is itself an enforcement pattern
The FTC has acted against tools that promised a compliance outcome their automation could not deliver. In January 2025 it announced an order requiring accessiBe to pay $1 million over claims that its AI widget could make websites conform to accessibility guidelines; the order bars the company from claiming its automated products can make any website compliant, or keep it compliant over time, without evidence. In February 2025 it finalized an order against DoNotPay over claims that its “AI lawyer” could substitute for a human attorney, with $193,000 in monetary relief and notice to past subscribers.
The pattern is the same in both: a software product described its output as a legal or regulatory result. For a peptide merchant, the lesson runs in two directions. A tool that tells you your storefront is compliant is making a claim it cannot substantiate. And a merchant who repeats that claim to a processor, or on the storefront, inherits the exposure.
This is why RUO Clear’s own copy is held to the same discipline as the storefronts it scans. The product never says compliant, certified, approved, cleared, or verified as a verdict, and treats an overclaim in its own interface as a defect.
06 / HOW TO JUDGE ANY SCANNER
Four questions to ask before trusting a number
Whatever tool you use, RUO Clear included, the number is only as good as the answers to these.
- What source does each finding map to? A finding with no statute, regulation, letter, guidance, or policy behind it is an opinion.
- What was not scanned? Social accounts, blog archives, bundled products, and checkout copy are all places FDA has looked. A score that does not name its coverage is judging pages it never saw.
- What happens when something serious is found? If one critical claim can be averaged away by clean pages, the score is measuring arithmetic, not risk.
- Does it promise an outcome? Approval, continued processing, reduced reserves, or “compliant” are decisions made by regulators and providers. A tool that promises them is describing something it does not control.
QUESTIONS
Related questions
Is a low Observable Risk Score the same as being compliant?
No. A low score means the scan found little observable risk in the pages it captured, against the rules it applied. It says nothing about pages it did not capture, facts it cannot see, or how a regulator or provider would read the site.
Does RUO Clear’s score affect whether a provider approves my account?
Not directly. The score and evidence package help you prepare for a provider’s review. The provider runs its own underwriting and makes its own decision about approval, pricing, reserves, and continued service.
Why not just use a simpler pass/fail?
Because pass/fail is a verdict, and a website scanner is not in a position to issue one. Reporting observed risk with sources attached tells a merchant what to fix and lets a provider see the evidence, without anyone pretending the scan decided the outcome.
SOURCES
Sources cited
Each source is listed with its class so government authority, agency guidance, enforcement examples, and private policy are never blended into one rule.
Source of the quoted phrases “a live compliance score,” “Compliance, verified,” “Get approved. Stay approved.,” and “Monitoring, not a guarantee.” Published framing only; no evaluation of the product.
$1 million order over claims that an automated tool could make websites conform to accessibility guidelines; bars unsubstantiated compliance claims.
$193,000 in monetary relief and notice to subscribers over claims that an AI service performed like a lawyer without evidence.
Intended use is read from labeling, advertising, written statements, and circumstances of distribution, which is why a scan of some pages cannot decide it.