# DocAccess robots.txt
#
# Allowlist: only our public marketing pages are open to crawlers. Everything
# else — the customer app, admin, API, agreements, accessibility reports, and
# document delivery — is disallowed. Agreements now require sign-in and reports
# send X-Robots-Tag: noindex, so this is defence-in-depth against re-discovery.
# security-practices is intentionally left out of the allowlist. (DC-664)

User-agent: *
Allow: /$
Allow: /pricing$
Allow: /pricing-compliance$
Allow: /start$
Allow: /contact$
Allow: /support$
Allow: /vpat$
Allow: /accessibility-statement$
Allow: /privacy-policy$
Allow: /terms-of-service$
Allow: /terms-of-use$
Allow: /quick-quiz$
Allow: /blog
Disallow: /