Loading report

CertScore.ai report

Loading report

The report is ready; we’re loading its retained findings and evidence.

anthropic.com tracking, cookie, consent, and accessibility scan | CertScore.ai

Scanned from EU-IR

Oct 12, 2026, 7:31:36 PM UTC(24 sec scan)

Coverage

CMS / generator: Not identified
Declared version: Not available

Coverage

Scan scope: Single page
Pages scanned: 1
Scan region: EU-IR

Timing

Observation window: 24 sec

Started: Oct 12, 2026, 7:31:36 PM UTC
Completed: Oct 12, 2026, 7:32:02 PM UTC

anthropic.com

https://www.anthropic.com/

Executive overview

81/ 100

Page score

2 priority issues

1 page scanned

Assessment highlights

The assessment calls for focused review of the visitor's ability to refuse optional activity. “Decline consent control”: Partial support from scan evidence; Selected retained same-surface reject-path or post-reject comparison evidence. Review the retained first-layer consent-control inventory. If it confirms no reject or necessary-only control, add a visible refusal action and retest regional and device variants. Could not complete: “Pre-consent non-essential tracking”, “Non-essential activity after confirmed Reject”. Also review “Semantic labeling accessibility issue and Low text contrast”.

Pre-consent resource counts & classifications

Each resource is counted once. Services group requests, cookies/storage and frames.

Requests27

Non-essential: 0
Classification review: 16
Unknown purpose: 11
Contextual: 0
Essential: 0

Cookies & storage3

Non-essential: 0
Classification review: 0
Unknown purpose: 0
Contextual: 0
Essential: 3

Embedded frames0

Non-essential: 0
Classification review: 0
Unknown purpose: 0
Contextual: 0
Essential: 0

Services3

Cloudflare Bot Management
CloudFront Distribution
Webflow Hosted Assets

Forms0

Hidden links0

Requests270 non-essential16 review

Cookies & storage30 non-essential0 review

Embedded frames00 non-essential0 review

Regulatory Risk Review

Top issues on this page

2 issues

01Decline consent controlStarting pagePartial support from scan evidence; Selected retained same-surface reject-path or post-reject comparison evidence.Partial concernPartial concern

Affected pages

https://www.anthropic.com/ · Starting page

GDPR / ePrivacy: Decline consent control
Partial support from scan evidence; Selected retained same-surface reject-path or post-reject comparison evidence.

Recommended fixes

View supporting evidence ↓

Review the retained first-layer consent-control inventory. If it confirms no reject or necessary-only control, add a visible refusal action and retest regional and device variants.

JSON evidence

{
  "assessmentStatus": "review_signal",
  "checklistItemId": "reject_all_path_availability",
  "coverageArea": "Decline consent control",
  "evidenceState": "observed",
  "explanation": "Whether a first-layer reject, necessary-only, decline, refuse, or equivalent refusal option was observed on a sufficiently retained consent surface.",
  "note": "Whether a first-layer reject, necessary-only, decline, refuse, or equivalent refusal option was observed on a sufficiently retained consent surface.",
  "status": "Review signal",
  "tone": "warning",
  "pipeline": {
    "projectionStage": "unified_finding",
    "concernPolicyKey": "gdpr_eprivacy_coverage.reject_all_path_availability.review_signal",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.reject_all_path_availability"
  },
  "statusBasis": "Selected retained same-surface reject-path or post-reject comparison evidence.",
  "retainedEvidence": {
    "status": "Review signal",
    "evidenceRefs": [
      "Accept more prominent than reject",
      "Signal: Accept action more prominent than reject",
      "Evidence flag: explicit_policy_snippet_retained",
      "Evidence flag: contradiction_runtime_artifact_retained",
      "Evidence strength: direct runtime",
      "Evidence strength: policy text"
    ],
    "findingEntities": [
      {
        "id": "accept_more_prominent_than_reject",
        "entities": {
          "findingSubtype": [
            "consent_governance_disclosure_gap"
          ],
          "cpraOptOutEvidenceUrls": [
            "https://www.anthropic.com/"
          ],
          "consentVisualProminence": [
            "{\"version\":\"consent_visual_prominence_projection.v1\",\"assessmentSourceHash\":\"fnv1a-f7d693b0\",\"comparison\":{\"version\":\"consent_control_visual_comparison.v1\",\"documentToken\":\"2BFABD7C1F745215FBC8AA015869133C\",\"screenshotArtifactRef\":\"/tmp/certscore-v2-dag-lambda/358ac0fd-afba-4d17-aa0e-dc8817f9543e/lanes/consent_proof/screenshot-pre-consent-geometry-proof.png\",\"screenshotSha256\":\"9182b5dd4fdafcefa660eb6eb4c627a2448ad2fc01139e09692e3cbd064f0ea5\",\"imageWidth\":1366,\"imageHeight\":900,\"captureSkewMs\":94,\"accept\":{\"candidateId\":\"candidate_2\",\"bounds\":[1118,811,192,33],\"fillContrast\":5.903,\"outerEmphasisFraction\":0.048,\"backgroundUniformity\":0.981,\"interiorUniformity\":0.881},\"reject\":{\"candidateId\":\"candidate_1\",\"bounds\":[918,811,192,33],\"fillContrast\":1,\"outerEmphasisFraction\":0.048,\"backgroundUniformity\":0.946,\"interiorUniformity\":0.883}}}"
          ],
          "consentGovernanceDisclosureEvidence": [
            "{\"concernId\":\"consent_governance_disclosure_gap\",\"relevanceTriggers\":{},\"missingOrWeakDisclosureSignals\":{},\"supportingAnchors\":{\"cookiePolicyUrls\":[],\"observedConsentVendors\":[],\"observedControls\":[],\"observedTrackingVendors\":[],\"policyUrls\":[],\"preferenceCenterUrls\":[],\"runtimeAnchors\":[\"scan_runtime_artifacts.consent_control_assessment\",\"ConsentControlGeometryEvidence.json\",\"sha256:9182b5dd4fdafcefa660eb6eb4c627a2448ad2fc01139e09692e3cbd064f0ea5\"],\"textAnchors\":[]},\"coverage\":{}}"
          ]
        },
        "sourceRefs": [
          "Signal: Accept action more prominent than reject"
        ],
        "evidenceFlags": [
          "explicit_policy_snippet_retained",
          "contradiction_runtime_artifact_retained"
        ]
      }
    ],
    "evidenceHighlights": [],
    "missingEvidenceNeeded": [
      "Confirmed first-layer GDPR/ePrivacy cookie banner and same-surface accept/reject control inventory."
    ],
    "selectedEvidenceReason": "Selected retained same-surface reject-path or post-reject comparison evidence.",
    "weakerArtifactsIgnored": [],
    "selectedEvidenceStrength": "limited",
    "selectedEvidenceArtifactId": "rejectPathDepthAndAvailability"
  },
  "projectedFindings": [
    {
      "id": "accept_more_prominent_than_reject",
      "label": "Accept more prominent than reject",
      "severity": "medium"
    }
  ],
  "missingOrIncompleteSourceSignals": [],
  "groupedEvidence": [],
  "evidenceDetails": {
    "policyEvidenceDetails": {
      "assessmentStatus": "review_signal",
      "evidenceRefs": [
        "Accept more prominent than reject",
        "Signal: Accept action more prominent than reject",
        "Evidence flag: explicit_policy_snippet_retained",
        "Evidence flag: contradiction_runtime_artifact_retained",
        "Evidence strength: direct runtime",
        "Evidence strength: policy text"
      ],
      "explanation": "Whether a first-layer reject, necessary-only, decline, refuse, or equivalent refusal option was observed on a sufficiently retained consent surface.",
      "regulatoryAreaId": "gdpr_eprivacy",
      "regulatoryAreaTitle": "GDPR / ePrivacy",
      "regulatoryMapping": [],
      "missingOrIncompleteSourceSignals": [],
      "pipeline": {
        "projectionStage": "unified_finding",
        "concernPolicyKey": "gdpr_eprivacy_coverage.reject_all_path_availability.review_signal",
        "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
        "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.reject_all_path_availability"
      },
      "projectedFindings": [
        {
          "id": "accept_more_prominent_than_reject",
          "label": "Accept more prominent than reject",
          "severity": "medium"
        }
      ],
      "retainedEvidence": {
        "status": "Review signal",
        "evidenceRefs": [
          "Accept more prominent than reject",
          "Signal: Accept action more prominent than reject",
          "Evidence flag: explicit_policy_snippet_retained",
          "Evidence flag: contradiction_runtime_artifact_retained",
          "Evidence strength: direct runtime",
          "Evidence strength: policy text"
        ],
        "findingEntities": [
          {
            "id": "accept_more_prominent_than_reject",
            "entities": {
              "findingSubtype": [
                "consent_governance_disclosure_gap"
              ],
              "cpraOptOutEvidenceUrls": [
                "https://www.anthropic.com/"
              ],
              "consentVisualProminence": [
                "{\"version\":\"consent_visual_prominence_projection.v1\",\"assessmentSourceHash\":\"fnv1a-f7d693b0\",\"comparison\":{\"version\":\"consent_control_visual_comparison.v1\",\"documentToken\":\"2BFABD7C1F745215FBC8AA015869133C\",\"screenshotArtifactRef\":\"/tmp/certscore-v2-dag-lambda/358ac0fd-afba-4d17-aa0e-dc8817f9543e/lanes/consent_proof/screenshot-pre-consent-geometry-proof.png\",\"screenshotSha256\":\"9182b5dd4fdafcefa660eb6eb4c627a2448ad2fc01139e09692e3cbd064f0ea5\",\"imageWidth\":1366,\"imageHeight\":900,\"captureSkewMs\":94,\"accept\":{\"candidateId\":\"candidate_2\",\"bounds\":[1118,811,192,33],\"fillContrast\":5.903,\"outerEmphasisFraction\":0.048,\"backgroundUniformity\":0.981,\"interiorUniformity\":0.881},\"reject\":{\"candidateId\":\"candidate_1\",\"bounds\":[918,811,192,33],\"fillContrast\":1,\"outerEmphasisFraction\":0.048,\"backgroundUniformity\":0.946,\"interiorUniformity\":0.883}}}"
              ],
              "consentGovernanceDisclosureEvidence": [
                "{\"concernId\":\"consent_governance_disclosure_gap\",\"relevanceTriggers\":{},\"missingOrWeakDisclosureSignals\":{},\"supportingAnchors\":{\"cookiePolicyUrls\":[],\"observedConsentVendors\":[],\"observedControls\":[],\"observedTrackingVendors\":[],\"policyUrls\":[],\"preferenceCenterUrls\":[],\"runtimeAnchors\":[\"scan_runtime_artifacts.consent_control_assessment\",\"ConsentControlGeometryEvidence.json\",\"sha256:9182b5dd4fdafcefa660eb6eb4c627a2448ad2fc01139e09692e3cbd064f0ea5\"],\"textAnchors\":[]},\"coverage\":{}}"
              ]
            },
            "sourceRefs": [
              "Signal: Accept action more prominent than reject"
            ],
            "evidenceFlags": [
              "explicit_policy_snippet_retained",
              "contradiction_runtime_artifact_retained"
            ]
          }
        ],
        "evidenceHighlights": [],
        "missingEvidenceNeeded": [
          "Confirmed first-layer GDPR/ePrivacy cookie banner and same-surface accept/reject control inventory."
        ],
        "selectedEvidenceReason": "Selected retained same-surface reject-path or post-reject comparison evidence.",
        "weakerArtifactsIgnored": [],
        "selectedEvidenceStrength": "limited",
        "selectedEvidenceArtifactId": "rejectPathDepthAndAvailability"
      },
      "rowId": "reject_all_path_availability",
      "rowLabel": "Decline consent control",
      "rowNote": "Partial support from scan evidence; Selected retained same-surface reject-path or post-reject comparison evidence.",
      "statusBasis": "Partial support from scan evidence; Selected retained same-surface reject-path or post-reject comparison evidence.",
      "regulatoryConcernKind": "partial_rating",
      "status": "Review signal"
    }
  },
  "evidenceRefs": [
    "Accept more prominent than reject",
    "Signal: Accept action more prominent than reject",
    "Evidence flag: explicit_policy_snippet_retained",
    "Evidence flag: contradiction_runtime_artifact_retained",
    "Evidence strength: direct runtime",
    "Evidence strength: policy text"
  ],
  "findingId": "regulatory_gap__gdpr_eprivacy__reject_all_path_availability"
}

02Accessibility issuesStarting pageReview automated accessibility findings and retained examples in Detailed evidence.ReviewReview

Affected pages

https://www.anthropic.com/ · Starting page

Semantic labeling accessibility issue
Visual contrast accessibility issue

Recommended fixes

View accessibility breakdown in Detailed evidence ↓

Repair labels, accessible names, role/ARIA usage, and semantic structure for the retained axe examples, then rerun the accessibility scan.
Adjust the flagged text and background colors to meet the required contrast ratio shown in the evidence. For links flagged as distinguishable only by color, add a persistent non-color cue such as an underline. Rerun the affected checks after updating the styles.

JSON evidence

{
  "presentationGroup": "accessibility",
  "groupedFindingIds": [
    "semantic_labeling_accessibility_issue",
    "visual_contrast_accessibility_issue"
  ],
  "findings": [
    {
      "correctionSteps": [
        "Repair labels, accessible names, role/ARIA usage, and semantic structure for the retained axe examples, then rerun the accessibility scan."
      ],
      "priority": "high",
      "evidence": [
        "Automated accessibility checks found failures on 1 tested page (7 element failures). Links lacked discernible accessible names.",
        "CanonicalEvidenceBundle.json#accessibilityAudit",
        "Axe example: link-name/wcag2a, wcag244, wcag412 on https://www.anthropic.com/; selector a[data-cta-text]; nodes 7; impact serious; severity high; help: Links must have discernible text.",
        "https://www.anthropic.com/"
      ],
      "evidenceJson": {
        "groupedEvidence": [],
        "evidenceDetails": {
          "counts": {
            "representativeAxePageCount": 1,
            "representativeAxeRuleCount": 1,
            "accessibilityExampleNodeCount": 7,
            "representativeAxeExampleCount": 1
          },
          "scanContext": {
            "pageUrl": "https://www.anthropic.com/",
            "scanMode": "initial_page_load"
          },
          "limitations": [
            "Automated scan does not determine legal status.",
            "Representative evidence is capped and should be reviewed with the full scan record before final conclusions."
          ],
          "evidenceSnippets": [
            "CanonicalEvidenceBundle.json#accessibilityAudit",
            "Axe example: link-name/wcag2a, wcag244, wcag412 on https://www.anthropic.com/; selector a[data-cta-text]; nodes 7; impact serious; severity high; help: Links must have discernible text."
          ],
          "pageUrls": [
            "https://www.anthropic.com/"
          ],
          "sourceUrls": [
            "https://www.anthropic.com/"
          ],
          "sourceSignals": [
            "accessibility.audit.semantic_labeling_accessibility_issue: Semantic labeling accessibility issue"
          ],
          "evidenceFlags": [
            "representative_accessibility_examples_retained"
          ],
          "accessibilityEvidence": {
            "observed": true,
            "basis": "CanonicalEvidenceBundle.json#accessibilityAudit",
            "representativeExamplesRetained": 1,
            "representativeNodesRetained": 3,
            "affectedNodes": 7,
            "nodeCountBasis": "rule_node_occurrences",
            "pageCount": 1,
            "axeRuleId": "link-name",
            "ruleCodes": [
              "link-name"
            ],
            "impact": "serious",
            "impacts": [
              "serious"
            ],
            "severity": "high",
            "axeEvidence": [
              {
                "ruleId": "link-name",
                "impact": "serious",
                "nodeCount": 7,
                "description": "Ensure links have discernible text",
                "helpUrl": "https://dequeuniversity.com/rules/axe/4.11/link-name?application=axeAPI",
                "pageUrl": "https://www.anthropic.com/",
                "representativeNodes": [
                  {
                    "selectors": [
                      "a[data-cta-text]"
                    ],
                    "failureSummary": "Fix all of the following: Element is in tab order and does not have accessible text Fix any of the following: Element does not have text that is visible to screen readers aria-label attribute does not exist or is empty aria-labelledby attribute does not exist, references elements that do not exist or references elements that are empty Element has no title attribute",
                    "htmlSnippet": "<a data-cta-text data-cta data-cta-position href class></a>"
                  },
                  {
                    "selectors": [
                      "a[data-cta-text]"
                    ],
                    "failureSummary": "Fix all of the following: Element is in tab order and does not have accessible text Fix any of the following: Element does not have text that is visible to screen readers aria-label attribute does not exist or is empty aria-labelledby attribute does not exist, references elements that do not exist or references elements that are empty Element has no title attribute",
                    "htmlSnippet": "<a data-cta-text data-cta data-cta-position href class></a>"
                  },
                  {
                    "selectors": [
                      "li:nth-child(3) > .article-list-item.u-detail-m[data-wf--global-article-list-item--variant] > .g_clickable_link[data-cta-position][data-cta]"
                    ],
                    "failureSummary": "Fix all of the following: Element is in tab order and does not have accessible text Fix any of the following: Element does not have text that is visible to screen readers aria-label attribute does not exist or is empty aria-labelledby attribute does not exist, references elements that do not exist or references elements that are empty Element has no title attribute",
                    "htmlSnippet": "<a data-cta-text data-cta data-cta-position href class></a>"
                  }
                ],
                "representativeSelectors": [
                  "a[data-cta-text]",
                  "li:nth-child(3) > .article-list-item.u-detail-m[data-wf--global-article-list-item--variant] > .g_clickable_link[data-cta-position][data-cta]"
                ]
              }
            ]
          }
        },
        "evidenceRefs": [
          "https://www.anthropic.com/",
          "https://www.w3.org/WAI/standards-guidelines/wcag/"
        ],
        "findingId": "semantic_labeling_accessibility_issue"
      },
      "focus": "Accessibility",
      "id": "semantic_labeling_accessibility_issue",
      "rank": 2,
      "status": "Observed",
      "summary": "Automated accessibility checks found failures on 1 tested page (7 element failures). Links lacked discernible accessible names.",
      "title": "Semantic labeling accessibility issue",
      "vendors": []
    },
    {
      "correctionSteps": [
        "Adjust the flagged text and background colors to meet the required contrast ratio shown in the evidence. For links flagged as distinguishable only by color, add a persistent non-color cue such as an underline. Rerun the affected checks after updating the styles."
      ],
      "priority": "high",
      "evidence": [
        "Low-contrast text was detected on 1 tested page (2 element failures). Retained examples measured 3.12:1 (required 4.5:1).",
        "CanonicalEvidenceBundle.json#accessibilityAudit",
        "Axe example: color-contrast/wcag2aa, wcag143 on https://www.anthropic.com/; selector #accept-btn; nodes 2; impact serious; severity high; help: Elements must meet minimum color contrast ratio thresholds.",
        "https://www.anthropic.com/"
      ],
      "evidenceJson": {
        "groupedEvidence": [],
        "evidenceDetails": {
          "counts": {
            "representativeAxePageCount": 1,
            "representativeAxeRuleCount": 1,
            "accessibilityExampleNodeCount": 2,
            "representativeAxeExampleCount": 1
          },
          "scanContext": {
            "pageUrl": "https://www.anthropic.com/",
            "scanMode": "initial_page_load"
          },
          "limitations": [
            "Automated scan does not determine legal status.",
            "Representative evidence is capped and should be reviewed with the full scan record before final conclusions."
          ],
          "evidenceSnippets": [
            "CanonicalEvidenceBundle.json#accessibilityAudit",
            "Axe example: color-contrast/wcag2aa, wcag143 on https://www.anthropic.com/; selector #accept-btn; nodes 2; impact serious; severity high; help: Elements must meet minimum color contrast ratio thresholds."
          ],
          "pageUrls": [
            "https://www.anthropic.com/"
          ],
          "sourceUrls": [
            "https://www.anthropic.com/"
          ],
          "sourceSignals": [
            "accessibility.audit.visual_contrast_accessibility_issue: Visual contrast accessibility issue"
          ],
          "evidenceFlags": [
            "representative_accessibility_examples_retained"
          ],
          "accessibilityEvidence": {
            "observed": true,
            "basis": "CanonicalEvidenceBundle.json#accessibilityAudit",
            "representativeExamplesRetained": 1,
            "representativeNodesRetained": 2,
            "affectedNodes": 2,
            "nodeCountBasis": "rule_node_occurrences",
            "pageCount": 1,
            "axeRuleId": "color-contrast",
            "ruleCodes": [
              "color-contrast"
            ],
            "impact": "serious",
            "impacts": [
              "serious"
            ],
            "severity": "high",
            "axeEvidence": [
              {
                "ruleId": "color-contrast",
                "impact": "serious",
                "nodeCount": 2,
                "description": "Ensure the contrast between foreground and background colors meets WCAG 2 AA minimum contrast ratio thresholds",
                "helpUrl": "https://dequeuniversity.com/rules/axe/4.11/color-contrast?application=axeAPI",
                "pageUrl": "https://www.anthropic.com/",
                "representativeNodes": [
                  {
                    "selectors": [
                      "#accept-btn"
                    ],
                    "failureSummary": "Fix any of the following: Element has insufficient color contrast of 3.12 (foreground color: #ffffff, background color: #d97757, font size: 9.0pt (12px), font weight: normal). Expected contrast ratio of 4.5:1",
                    "htmlSnippet": "<button id style><span></span></button>",
                    "colorContrast": {
                      "foregroundColor": "#ffffff",
                      "backgroundColor": "#d97757",
                      "contrastRatio": 3.12,
                      "requiredContrastRatio": 4.5,
                      "fontSize": "9.0pt (12px)",
                      "fontWeight": "normal"
                    }
                  },
                  {
                    "selectors": [
                      "#accept-btn > span"
                    ],
                    "failureSummary": "Fix any of the following: Element has insufficient color contrast of 3.12 (foreground color: #ffffff, background color: #d97757, font size: 9.0pt (12px), font weight: normal). Expected contrast ratio of 4.5:1",
                    "htmlSnippet": "<span></span>",
                    "colorContrast": {
                      "foregroundColor": "#ffffff",
                      "backgroundColor": "#d97757",
                      "contrastRatio": 3.12,
                      "requiredContrastRatio": 4.5,
                      "fontSize": "9.0pt (12px)",
                      "fontWeight": "normal"
                    }
                  }
                ],
                "representativeSelectors": [
                  "#accept-btn",
                  "#accept-btn > span"
                ]
              }
            ]
          }
        },
        "evidenceRefs": [
          "https://www.anthropic.com/",
          "https://www.w3.org/WAI/standards-guidelines/wcag/"
        ],
        "findingId": "visual_contrast_accessibility_issue"
      },
      "focus": "Accessibility",
      "id": "visual_contrast_accessibility_issue",
      "rank": 3,
      "status": "Observed",
      "summary": "Low-contrast text was detected on 1 tested page (2 element failures). Retained examples measured 3.12:1 (required 4.5:1).",
      "title": "Visual contrast accessibility issue",
      "vendors": []
    }
  ]
}

Pre-consent page event timeline

Scan start

Public page observation began

1.01s

Cookie observed

Essential cookie · retained observation

1.05s

3P request

3P request first observed

3.41s

Consent banner

accept: Observed · reject: Observed · options: Observed

23.32s

Observation end

Retained scan window closed

Pre-consent supporting evidence

Services & Resources

Resource breakdowns

30 distinct resources = 27 requests + 3 cookies & storage. Services group these resources.

Type mix

Requests27
Cookies & storage3

Evidence mix

Classification review16
Unknown purpose11
Essential3

Purpose mix

Infrastructure16
Unknown purpose11
Security3

Site relationship

First party8
Third party22

Services and their member resources
						Domain	Site relationship
1	CloudFront Distribution	CDN	Policy disclosure · Not found CloudFront Distribution Review scope: retained site policy from the homepage scan; this is a disclosure lookup, not a finding about compliance. https://www.anthropic.com/legal/privacy Reviewed 2026-10-12T19:32:01.354Z · Complete retained text Evidence SHA-256: b763dd02428a494c4680e640685c27e6bff8535ce263bd7cba1a24c641dd5065 https://www.anthropic.com/legal/consumer-health-data-privacy-policy Reviewed 2026-10-12T19:32:01.354Z · Complete retained text Evidence SHA-256: c81851a14a4bb0527b8b319a9f0d6df94c4ebc232d88f312ba8ff6610fc3fc3e	Location details CloudFront Distribution Server locations describe the endpoint associated with the captured browser response. They may be CDN edges and do not establish subsequent processing or storage locations. Ireland 3.162.143.129 · Amazon.com, Inc. · AS16509 Approximate server country · Source: proxy connect iplocate Country database: 2026-10-07 Network database: 2026-10-07 1 of 1 request events assessed; 0 without a retained server IP. Provider headquarters: Unknown Transfer mechanism: Mechanism not assessed Corporate headquarters Amazon Web Services, Inc. AWS lists this entity at a Seattle address, but the reviewed page does not explicitly establish its headquarters. Do not inherit Amazon.com headquarters or the Luxembourg HQ of AWS Europe. Sources checked 2026-09-07 AWS legal entities Headquarters and network operator are distinct; neither establishes this site's contracting entity or subsequent data processing locations.	1.06s	d3e54v103j8qbb.cloudfront.net	Third party	Captured on 1 page https://www.anthropic.com/
15	Webflow Hosted Assets	CDN	Policy disclosure · Not found Webflow Hosted Assets Review scope: retained site policy from the homepage scan; this is a disclosure lookup, not a finding about compliance. https://www.anthropic.com/legal/privacy Reviewed 2026-10-12T19:32:01.354Z · Complete retained text Evidence SHA-256: b763dd02428a494c4680e640685c27e6bff8535ce263bd7cba1a24c641dd5065 https://www.anthropic.com/legal/consumer-health-data-privacy-policy Reviewed 2026-10-12T19:32:01.354Z · Complete retained text Evidence SHA-256: c81851a14a4bb0527b8b319a9f0d6df94c4ebc232d88f312ba8ff6610fc3fc3e	Location details Webflow Hosted Assets Server locations describe the endpoint associated with the captured browser response. They may be CDN edges and do not establish subsequent processing or storage locations. United States 104.18.160.117 · Cloudflare, Inc. · AS13335 Approximate server country · Source: proxy connect iplocate Country database: 2026-10-07 Network database: 2026-10-07 United States 104.18.160.117 · Cloudflare, Inc. · AS13335 Approximate server country · Source: proxy connect iplocate Country database: 2026-10-07 Network database: 2026-10-07 15 of 15 request events assessed; 0 without a retained server IP. Provider headquarters: US Transfer mechanism: Mechanism not assessed Headquarters reference only; this vendor's transfer arrangements have not been assessed. Registry reference date: 2026-09-07. This is registry context, not verification of this site's transfer arrangements. Corporate headquarters Webflow, Inc. Webflow identifies San Francisco, California headquarters. Its terms establish the Webflow, Inc. identity; remote employees and regional affiliates do not change this company reference. Sources checked 2026-09-07 Webflow official headquarters profile Webflow legal identity Headquarters and network operator are distinct; neither establishes this site's contracting entity or subsequent data processing locations.	1.05s	cdn.prod.website-files.com	Third party	Captured on 1 page https://www.anthropic.com/
3	Cloudflare Bot Management	Security	Policy disclosure · Not found Cloudflare Bot Management Review scope: retained site policy from the homepage scan; this is a disclosure lookup, not a finding about compliance. https://www.anthropic.com/legal/privacy Reviewed 2026-10-12T19:32:01.354Z · Complete retained text Evidence SHA-256: b763dd02428a494c4680e640685c27e6bff8535ce263bd7cba1a24c641dd5065 https://www.anthropic.com/legal/consumer-health-data-privacy-policy Reviewed 2026-10-12T19:32:01.354Z · Complete retained text Evidence SHA-256: c81851a14a4bb0527b8b319a9f0d6df94c4ebc232d88f312ba8ff6610fc3fc3e	Location details Cloudflare Bot Management Server locations describe the endpoint associated with the captured browser response. They may be CDN edges and do not establish subsequent processing or storage locations. No server IP is available in this inventory entry. Historical evidence may not include a destination summary. For newly assessed requests, a service-worker, failed or incomplete response may not expose an address; check retained connection evidence for the reason. Complete destination coverage is not available for this historical evidence. Provider headquarters: US Transfer mechanism: Mechanism not assessed Headquarters reference only; this vendor's transfer arrangements have not been assessed. Registry reference date: 2026-09-07. This is registry context, not verification of this site's transfer arrangements. Corporate headquarters Cloudflare, Inc. San Francisco is explicitly marked as headquarters; regional offices are listed separately. Sources checked 2026-09-07 About Cloudflare Headquarters and network operator are distinct; neither establishes this site's contracting entity or subsequent data processing locations.	1.01s	claude.com Service domains claude.com hubspotonwebflow.com website.anthropic.com	Mixed	Captured on 1 page https://www.anthropic.com/

Unattributed resources (11)

3 distinct services, including child services and unattributed resources

Forms: no forms observed on the scanned pages.

Detailed evidence

Privacy & security ratingsStarting page

30 rows

1Needs review19positive8contextual2limited

CertScore.ai can make mistakes. Verify all findings.

CMP details

13 checks · 1 to review · 9 limited

Review

Consent platform not i...

Consent management audit · 13 criteria

Reject optionReject or an equivalent refusal option was available on the banner.Observed

View consent choices ↓

JSON evidence

{
  "scope": "starting_page",
  "scanId": "358ac0fd-afba-4d17-aa0e-dc8817f9543e",
  "assessmentSourceHash": "fnv1a-f7d693b0",
  "criterion": {
    "id": "reject",
    "label": "Option to reject cookies available",
    "status": "Observed",
    "detail": "First-layer Reject or equivalent refusal control.",
    "sourceIds": [
      "consentControlAssessment.controls.reject"
    ]
  }
}

Accept / Reject prominenceAccept was more prominent than Reject in the retained visual comparison.Review

Accept / Reject comparison
Control	Size (px)	Fill contrast
Accept	192 × 33	5.903:1
Reject / necessary only	192 × 33	1.000:1

Button sizes and screenshot were captured 94 ms apart on the starting page. Fill contrast compares button backgrounds, not text readability.

JSON evidence

{
  "scope": "starting_page",
  "scanId": "358ac0fd-afba-4d17-aa0e-dc8817f9543e",
  "assessmentSourceHash": "fnv1a-f7d693b0",
  "criterion": {
    "id": "prominence",
    "label": "Accept / Reject prominence comparison",
    "status": "Review recommended",
    "detail": "Accept was more prominent than Reject in the retained visual comparison.",
    "sourceIds": [
      "accept_more_prominent_than_reject"
    ],
    "supportingEvidence": {
      "prominence": {
        "accept": {
          "candidateId": "candidate_2",
          "bounds": [
            1118,
            811,
            192,
            33
          ],
          "fillContrast": 5.903,
          "outerEmphasisFraction": 0.048,
          "backgroundUniformity": 0.981,
          "interiorUniformity": 0.881
        },
        "reject": {
          "candidateId": "candidate_1",
          "bounds": [
            918,
            811,
            192,
            33
          ],
          "fillContrast": 1,
          "outerEmphasisFraction": 0.048,
          "backgroundUniformity": 0.946,
          "interiorUniformity": 0.883
        },
        "captureSkewMs": 94
      }
    }
  }
}

Correction steps

01Compare Accept and Reject on the same page.
02Make Reject as easy to find and use, then check both controls in a fresh session.

Category choicesNot enough verified evidence was captured.Not assessed

JSON evidence

{
  "scope": "starting_page",
  "scanId": "358ac0fd-afba-4d17-aa0e-dc8817f9543e",
  "assessmentSourceHash": "fnv1a-f7d693b0",
  "criterion": {
    "id": "categories",
    "label": "Selection by categories available",
    "status": "Not assessed",
    "detail": "Sufficient verified evidence for this criterion was not retained in this scan.",
    "sourceIds": []
  }
}

CMP service listNot enough verified evidence was captured.Not assessed

JSON evidence

{
  "scope": "starting_page",
  "scanId": "358ac0fd-afba-4d17-aa0e-dc8817f9543e",
  "assessmentSourceHash": "fnv1a-f7d693b0",
  "criterion": {
    "id": "services",
    "label": "Individual services identified in the CMP",
    "status": "Not assessed",
    "detail": "Sufficient verified evidence for this criterion was not retained in this scan.",
    "sourceIds": []
  }
}

Privacy-policy linkA privacy-policy link or page was found.Observed

View privacy-policy discovery evidence ↓

Privacy link before consentNot enough verified evidence was captured.Not assessed

JSON evidence

{
  "scope": "starting_page",
  "scanId": "358ac0fd-afba-4d17-aa0e-dc8817f9543e",
  "assessmentSourceHash": "fnv1a-f7d693b0",
  "criterion": {
    "id": "privacy_access",
    "label": "Privacy-policy link reachable before consent interaction",
    "status": "Not assessed",
    "detail": "Sufficient verified evidence for this criterion was not retained in this scan.",
    "sourceIds": []
  }
}

Browser consent recordNot enough verified evidence was captured.Not assessed

JSON evidence

{
  "scope": "starting_page",
  "scanId": "358ac0fd-afba-4d17-aa0e-dc8817f9543e",
  "assessmentSourceHash": "fnv1a-f7d693b0",
  "criterion": {
    "id": "consent_record",
    "label": "Client-side consent decision recorded",
    "status": "Not assessed",
    "detail": "Sufficient verified evidence for this criterion was not retained in this scan.",
    "sourceIds": []
  }
}

Tracking after consent choicesPost-choice tracking was not assessed in this saved scan.Not assessed

View Reject action evidence ↓

JSON evidence

post-reject tracking reduction evidence

Full evidence JSON

{
  "assessmentStatus": "coverage_limitation",
  "checklistItemId": "post_reject_tracking_reduction",
  "coverageArea": "Post-choice tracking reduction",
  "evidenceState": "not_testable",
  "explanation": "What tracking activity was observed after Reject, including the services contacted and when requests began. Consent-state confirmation is recorded separately.",
  "note": "What tracking activity was observed after Reject, including the services contacted and when requests began. Consent-state confirmation is recorded separately.",
  "status": "Not testable",
  "tone": "neutral",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.post_reject_tracking_reduction.not_testable",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.post_reject_tracking_reduction"
  },
  "statusBasis": "Post-choice consent-flow automation is deferred from the current production core scanner. Retained reject-path or post-reject evidence may remain available for analyst review, but CertScore.ai does not currently report a production gap or success conclusion for post-choice tracking reduction.",
  "retainedEvidence": {
    "execution": {
      "status": "succeeded",
      "policyVersion": "choice_path_execution.v1",
      "clickCompleted": true,
      "consentConfirmed": false,
      "observationCompleted": true
    },
    "scoreEffect": "canonical_post_refusal_policy",
    "evidenceRefs": [
      "Evidence: post-reject tracking reduction evidence"
    ],
    "resolverMethod": "canonical_consent_control_registry_recipe",
    "productionPosture": "post_choice_flow_deferred_from_core",
    "afterActionCapture": {
      "action": "reject",
      "requestIds": [],
      "stopReason": "window_elapsed",
      "policyVersion": "bounded_after_action_capture.v2",
      "storageWrites": [
        {
          "name": "anthropic-consent-preferences",
          "hostname": "anthropic.com",
          "storageType": "cookie",
          "nonEssential": false,
          "observedAtMs": 3954
        }
      ],
      "requestAncestry": [],
      "requestsDropped": 0,
      "activationStatus": "completed",
      "captureEndedAtMs": 11907,
      "requestedWindowMs": 8000,
      "actionDispatchedAtMs": 3895,
      "storageWriteCoverage": "bounded_main_document_sample",
      "storageSnapshotRetained": true
    },
    "sourcePacketSha256": "e26dcabf0b337a956518ad94447b827ab4f9cde4ac75c54eeccd266f4b46d3b5",
    "missingEvidenceNeeded": [
      "Confirmed reject action plus refusal-anchored request/write evidence, a contradictory consent signal, or exact unchanged storage identity-and-value evidence."
    ],
    "reportControlObserved": true,
    "selectedEvidenceReason": "Reject-path evidence is not selected as testable unless a first-layer GDPR/ePrivacy cookie banner and valid reject state are confirmed.",
    "weakerArtifactsIgnored": [],
    "selectedEvidenceStrength": "limited",
    "postRejectActivityDetails": {
      "vendors": [],
      "version": 1,
      "activityCount": 0,
      "storageWriteCount": 0,
      "timedActivityCount": 0,
      "networkRequestCount": 0,
      "lastObservedMsAfterReject": null,
      "firstObservedMsAfterReject": null,
      "vendorAttributedActivityCount": 0
    },
    "postRejectWindowAvailable": false,
    "reductionEvaluationStatus": "not_testable",
    "rejectInteractionConfirmed": false,
    "selectedEvidenceArtifactId": "postRejectTrackingReductionEvidence",
    "preConsentStorageNotCleared": false,
    "refusalSignalContradictsAction": false,
    "postRejectRequestRecordsObserved": false,
    "preConsentStorageNotClearedCount": 0,
    "postRejectNonEssentialRequestCount": 0,
    "postRejectNonEssentialActivityRetained": false,
    "storagePresenceDoesNotEstablishActiveUse": false,
    "concretePostRejectNonEssentialDetailsRetained": false
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

1The scan could not fully evaluate Post-choice tracking reduction, so improve access to the relevant page or feature before treating this as a confirmed issue.
2Resolve any blocked or unavailable page or path noted in the evidence details.
3Confirm the relevant page, policy, or user-choice control is reachable without authentication or bot challenge.
4Rerun the scan with the same location and settings so the result can be compared consistently.
5Keep a short internal record of what changed so the next scan can be compared with the same page and settings.

Consent-cookie expiryNot enough verified evidence was captured.Not assessed

JSON evidence

{
  "scope": "starting_page",
  "scanId": "358ac0fd-afba-4d17-aa0e-dc8817f9543e",
  "assessmentSourceHash": "fnv1a-f7d693b0",
  "criterion": {
    "id": "duration",
    "label": "Consent-cookie expiry observed",
    "status": "Not assessed",
    "detail": "Sufficient verified evidence for this criterion was not retained in this scan.",
    "sourceIds": []
  }
}

Pre-consent cookie comparisonNot enough verified evidence was captured.Not assessed

JSON evidence

{
  "scope": "starting_page",
  "scanId": "358ac0fd-afba-4d17-aa0e-dc8817f9543e",
  "assessmentSourceHash": "fnv1a-f7d693b0",
  "criterion": {
    "id": "declared_not_found",
    "label": "CMP cookie declarations compared with pre-consent capture",
    "status": "Not assessed",
    "detail": "Sufficient verified evidence for this criterion was not retained in this scan.",
    "sourceIds": []
  }
}

Unmatched cookie namesNot enough verified evidence was captured.Not assessed

JSON evidence

{
  "scope": "starting_page",
  "scanId": "358ac0fd-afba-4d17-aa0e-dc8817f9543e",
  "assessmentSourceHash": "fnv1a-f7d693b0",
  "criterion": {
    "id": "found_not_declared",
    "label": "Observed cookie names missing from CMP declarations",
    "status": "Not assessed",
    "detail": "Sufficient verified evidence for this criterion was not retained in this scan.",
    "sourceIds": []
  }
}

Cookie detailsNot enough verified evidence was captured.Not assessed

View cookie-disclosure availability ↓

JSON evidence

{
  "scope": "starting_page",
  "scanId": "358ac0fd-afba-4d17-aa0e-dc8817f9543e",
  "assessmentSourceHash": "fnv1a-f7d693b0",
  "criterion": {
    "id": "cookie_information",
    "label": "Information about cookies available (e.g., storage duration)",
    "status": "Not assessed",
    "detail": "Sufficient verified evidence for this criterion was not retained in this scan.",
    "sourceIds": []
  }
}

Tracking & embeds

4 checks · 1 limited

Limited

Pre-consent non-essential trackingSelected retained pre-consent request/vendor timing evidence; storage evidence is evaluated separately.Limited

JSON evidence

Third-party tracking observed before recorded consent

Signal: Pre-consent tracking detected

contradiction_runtime_artifact_retained

Full evidence JSON

{
  "assessmentStatus": "coverage_limitation",
  "checklistItemId": "pre_consent_third_party_tracking",
  "coverageArea": "Pre-consent non-essential tracking",
  "evidenceState": "observed",
  "explanation": "Whether classified non-essential analytics, advertising, measurement, replay, or similar requests were observed before recorded consent. Site relationship and entity ownership are reported separately.",
  "note": "Whether classified non-essential analytics, advertising, measurement, replay, or similar requests were observed before recorded consent. Site relationship and entity ownership are reported separately.",
  "status": "Insufficient evidence",
  "tone": "warning",
  "pipeline": {
    "projectionStage": "unified_finding",
    "concernPolicyKey": "gdpr_eprivacy_coverage.pre_consent_third_party_tracking.insufficient_evidence",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.pre_consent_third_party_tracking"
  },
  "statusBasis": "Selected retained pre-consent request/vendor timing evidence; storage evidence is evaluated separately.",
  "retainedEvidence": {
    "status": "Insufficient evidence",
    "evidenceRefs": [
      "Third-party tracking observed before recorded consent",
      "Signal: Pre-consent tracking detected",
      "Evidence flag: contradiction_runtime_artifact_retained",
      "Evidence flag: privacy.preconsent_tracking_detected",
      "Evidence strength: direct runtime",
      "Evidence strength: fallback only"
    ],
    "findingEntities": [
      {
        "id": "preconsent_tracking",
        "entities": {
          "runtimeRequestUrls": [
            "https://www.anthropic.com/scripts/webflow-privacy-banner.js"
          ],
          "preconsent_cookie_names": [
            "_cfuvid",
            "__cf_bm"
          ],
          "preconsent_cookie_categories": [
            "security"
          ],
          "preconsent_cookie_timing_evidence": [
            "before_consent_cookie_write"
          ],
          "preconsent_cookie_initiator_domains": [
            "anthropic.com"
          ]
        },
        "sourceRefs": [
          "Signal: Pre-consent tracking detected"
        ],
        "evidenceFlags": [
          "privacy.preconsent_tracking_detected"
        ]
      }
    ],
    "evidenceHighlights": [],
    "missingEvidenceNeeded": [
      "CertScore.unifiedFinding.presentationDecision.status: Required to treat a matched canonical finding as fully surfaced evidence for this checklist row."
    ],
    "trackingRequestTiming": {
      "version": "classified-request-timing.v1",
      "requests": []
    },
    "selectedEvidenceReason": "Selected retained pre-consent request/vendor timing evidence; storage evidence is evaluated separately.",
    "weakerArtifactsIgnored": [],
    "preconsentTimingEvidence": {
      "thirdPartyTracking": {
        "trackingRequestTiming": {
          "version": "classified-request-timing.v1",
          "requests": []
        },
        "preconsentThirdPartyTrackingTimedObservationCount": 0
      }
    },
    "selectedEvidenceStrength": "limited",
    "selectedEvidenceArtifactId": "preConsentTrackingRequestEvidence",
    "preconsentThirdPartyTrackingTimedObservationCount": 0
  },
  "projectedFindings": [
    {
      "id": "preconsent_tracking",
      "label": "Third-party tracking observed before recorded consent",
      "severity": "medium"
    }
  ],
  "missingOrIncompleteSourceSignals": [
    {
      "field": "CertScore.unifiedFinding.presentationDecision.status",
      "actual": [
        "audit_only"
      ],
      "source": "CertScore.ai",
      "expected": "surface",
      "whyNeeded": "Required to treat a matched canonical finding as fully surfaced evidence for this checklist row."
    }
  ]
}

Correction steps

1Review the listed tracking requests, initiating integrations, and purposes against the retained pre-consent timing.
2Gate consent-dependent tracking at the tag or integration and verify that essential traffic remains separately classified.
3Retest the same page in fresh sessions before consent, after Reject, and after Accept; compare the listed endpoints and retain the results.

Third-party iframes before consentNo third-party iframes were detected before a consent choice.Not observed

JSON evidence

retained pre-consent iframe inventory

Full evidence JSON

{
  "assessmentStatus": "checked",
  "checklistItemId": "third_party_iframe_pre_consent",
  "coverageArea": "3rd party iframes before consent",
  "evidenceState": "not_observed",
  "explanation": "Whether retained scanner evidence showed known 3rd party iframe embeds before a recorded consent action.",
  "note": "Whether retained scanner evidence showed known 3rd party iframe embeds before a recorded consent action.",
  "status": "Not observed",
  "tone": "neutral",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.third_party_iframe_pre_consent.not_observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.third_party_iframe_pre_consent"
  },
  "statusBasis": "Retained iframe inventory did not show known 3rd party iframe embeds before a recorded consent action.",
  "retainedEvidence": {
    "evidenceRefs": [
      "Evidence: retained pre-consent iframe inventory"
    ],
    "missingEvidenceNeeded": [],
    "preConsentIframeCount": 0,
    "iframeObservationCount": 0,
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "runtimeCaptureCompleted": true,
    "selectedEvidenceStrength": "missing",
    "selectedEvidenceArtifactId": "coverage_policy"
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Social/media services before consentNo social or media services loaded before a consent choice.Not observed

JSON evidence

retained pre-consent embedded-content inventory

Full evidence JSON

{
  "assessmentStatus": "checked",
  "checklistItemId": "social_media_embed_pre_consent",
  "coverageArea": "Social/media embeds or plugins loaded before consent",
  "evidenceState": "not_observed",
  "explanation": "Whether retained network/runtime evidence showed a social, video, media embed, social pixel, or plugin provider loading before a recorded consent action.",
  "note": "Whether retained network/runtime evidence showed a social, video, media embed, social pixel, or plugin provider loading before a recorded consent action.",
  "status": "Not observed",
  "tone": "neutral",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.social_media_embed_pre_consent.not_observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.social_media_embed_pre_consent"
  },
  "statusBasis": "Retained embedded-content checks did not show a social/media embed, plugin, widget, or pixel provider request before consent. Plain outbound links are not treated as evidence for this row.",
  "retainedEvidence": {
    "evidenceRefs": [
      "Evidence: retained pre-consent embedded-content inventory"
    ],
    "placeholderDetected": false,
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "runtimeCaptureCompleted": true,
    "selectedEvidenceStrength": "missing",
    "selectedEvidenceArtifactId": "coverage_policy",
    "socialMediaEmbedObservationCount": 0
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Third-party embeds before consentNo third-party embeds were detected before a consent choice.Not observed

JSON evidence

EmbeddedContentObservationCount: 0

Full evidence JSON

{
  "assessmentStatus": "checked",
  "checklistItemId": "embedded_content_pre_consent",
  "coverageArea": "Embedded third-party services before consent",
  "evidenceState": "not_observed",
  "explanation": "Whether retained scanner evidence showed iframe, embed, widget, or visibly integrated third-party services before a recorded consent action. This row does not represent all background analytics or network requests.",
  "note": "Whether retained scanner evidence showed iframe, embed, widget, or visibly integrated third-party services before a recorded consent action. This row does not represent all background analytics or network requests.",
  "status": "Not observed",
  "tone": "neutral",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.embedded_content_pre_consent.not_observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.embedded_content_pre_consent"
  },
  "statusBasis": "Iframe/runtime checks completed for the tested context and did not retain a concrete 3rd party embedded-content iframe before consent.",
  "retainedEvidence": {
    "evidenceRefs": [
      "Evidence: retained pre-consent embedded-content inventory"
    ],
    "missingEvidenceNeeded": [],
    "preConsentIframeCount": 0,
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "runtimeCaptureCompleted": true,
    "selectedEvidenceStrength": "missing",
    "selectedEvidenceArtifactId": "coverage_policy",
    "embeddedContentObservationCount": 0
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Policies & disclosures

12 checks · 1 limited

Limited

JSON evidence

Policy source

Captured page title: Policy source — https://anthropic.com/legal/consumer-health-data-privacy-policy

Source policy language: en; banner/page language: en; translation applied: No.

Policy reached through: Unknown; directly linked from scanned page: Unknown.

Section: Not retained.

Open policy source

privacy notice link/surface retained

Limitation: substantive policy body not retained

Policy URL: https://anthropic.com/legal/consumer-health-data-privacy-policy

Full evidence JSON

{
  "assessmentStatus": "checked",
  "checklistItemId": "privacy_notice_availability",
  "coverageArea": "Privacy notice link/surface discovered",
  "evidenceState": "observed",
  "explanation": "Whether a reachable privacy notice or privacy policy link/surface was retained. This row does not by itself confirm that substantive notice content was available.",
  "note": "Whether a reachable privacy notice or privacy policy link/surface was retained. This row does not by itself confirm that substantive notice content was available.",
  "status": "Observed",
  "tone": "warning",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.privacy_notice_availability.observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.privacy_notice_availability"
  },
  "statusBasis": "A privacy-notice link or page surface was reachable, but substantive notice content was not available in the retained rendered text. Row-specific transparency disclosures remain unconfirmed.",
  "retainedEvidence": {
    "remediation": {
      "kind": "none",
      "steps": [],
      "message": "No remediation is established by this check alone. Retain its evidence and reassess after relevant changes."
    },
    "evidenceRefs": [
      "Evidence: privacy notice link/surface retained",
      "Limitation: substantive policy body not retained",
      "Policy URL: https://anthropic.com/legal/consumer-health-data-privacy-policy",
      "Policy URL: https://anthropic.com/legal/privacy"
    ],
    "signalObserved": "surface_only_substantive_content_unavailable",
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "policyEvidenceAssessment": {
      "result": "disclosure_observed",
      "scoreEffect": "canonical_policy",
      "topicRelevance": "direct",
      "contractVersion": "certscore.policy-topic-evidence-assessment.v1"
    },
    "policyEvidenceProvenance": {
      "sourceUrl": "https://anthropic.com/legal/consumer-health-data-privacy-policy",
      "bannerLanguage": "en",
      "contractVersion": "certscore.policy-evidence-provenance.v1",
      "detectedLanguage": "en",
      "translationApplied": false
    },
    "selectedEvidenceStrength": "moderate",
    "policyTextExtractionHealth": {
      "policyUrls": [
        "https://anthropic.com/legal/privacy",
        "https://anthropic.com/legal/consumer-health-data-privacy-policy"
      ],
      "nanoInvoked": false,
      "nanoSkipReason": "policy_text_input_limited",
      "contractVersion": "certscore.policy-text-extraction-health.v2",
      "policyTextQuality": {
        "usable": true,
        "codeSignalCount": 0,
        "codeSymbolRatio": 0.000569216757741348,
        "policyTermCount": 16,
        "alphabeticWordRatio": 0.804910516195829,
        "accessChallengeSignalCount": 0,
        "naturalLanguageSentenceCount": 234
      },
      "policyUrlRetained": true,
      "extractedTextLength": 43920,
      "policySurfaceObserved": true,
      "detectedPolicyLanguage": "en",
      "extractionFailureReason": "privacy_policy_text_processing_error",
      "minimumTextLengthRequired": 500,
      "policyTextExtractionStatus": "errored",
      "verifiedPolicyDocumentCount": 2,
      "detectedPolicyLanguageSource": "policy_surface",
      "supportedGdprTransparencyLocales": [
        "en",
        "de",
        "fr",
        "es",
        "it",
        "nl",
        "pl",
        "pt",
        "ru",
        "ja",
        "zh",
        "ar",
        "sv",
        "ro",
        "cs",
        "el",
        "hu",
        "da",
        "fi",
        "sk",
        "bg",
        "hr",
        "nb",
        "sl",
        "lt",
        "lv",
        "et",
        "uk",
        "tr",
        "fa",
        "vi",
        "id",
        "ko",
        "th",
        "he",
        "sr",
        "ca",
        "hi",
        "az",
        "gl"
      ],
      "gdprTransparencyLanguageSupported": true,
      "policyTextEvidenceProjectionStatus": "verified_complete",
      "policyTextEvidenceProjectionContractVersion": "certscore.policy-text-evidence-projection.v1"
    },
    "selectedEvidenceArtifactId": "coverage_policy",
    "policySurfaceSummary": {
      "scanStartedAt": "2026-10-12T19:31:38.032Z",
      "observedTopics": [
        "sale_or_share",
        "third_party_disclosures",
        "consent_withdrawal",
        "controller_contact",
        "processing_purposes",
        "recipients_or_vendor_categories",
        "ai_features",
        "cookies",
        "analytics",
        "advertising",
        "targeted_advertising",
        "global_privacy_control",
        "profiling_or_automated_decision_making",
        "vendor_list",
        "data_retention",
        "legal_basis",
        "data_subject_rights",
        "international_transfers",
        "dpo_contact",
        "supervisory_authority",
        "contact_privacy"
      ],
      "cookiePolicyUrls": [],
      "cookieDisclosures": [],
      "mentionedControls": [
        "global_privacy_control",
        "consent_withdrawal"
      ],
      "privacyPolicySize": {
        "url": "https://anthropic.com/legal/consumer-health-data-privacy-policy",
        "completeness": "complete",
        "documentFormat": "text",
        "compressedBytes": 100985,
        "measurementScope": "selected_usable_privacy_policy",
        "decompressedBytes": 100985
      },
      "privacyPolicyUrls": [
        "https://anthropic.com/legal/consumer-health-data-privacy-policy",
        "https://anthropic.com/legal/privacy"
      ],
      "cookie_disclosures": [],
      "policySectionCount": 21,
      "policySurfaceCount": 4,
      "cookiePolicyPresent": false,
      "scannedPageLanguage": "en",
      "privacyPolicyPresent": true,
      "policyPrimaryLanguage": "en",
      "policyLastUpdatedTexts": [],
      "policyTextCoverageMode": "section_targeted",
      "retainedPolicySections": [
        {
          "charEnd": 4327,
          "heading": "1. Collection of Consumer Health Data",
          "quality": "strong",
          "charStart": 2747,
          "sourceUrl": "https://www.anthropic.com/legal/consumer-health-data-privacy-policy",
          "textExcerpt": "We collect the following categories of consumer health data where you provide it to us directly, including if you elect to connect a third-party application to Claude.ai that contains your consumer health data: Information about your health-related conditions, symptoms, status, diagnoses, medical interventions, surgeries, procedures, testing, or treatments; Vital signs, bodily functions, symptoms, or health measurements that reveal your health status; Information about your use or purchase of prescribed medication; Biometric and genetic data; Precise location information; Information, including location or precise location information, that could identify your attempt to seek health care services or supplies; and Other information that may be used to infer or derive consumer health data. For additional information about the types of data we collect and how we collect it, please review “1. Collection of Personal Data” in our Privacy Policy. You can revoke your consent to third-party integrations that may provide Claude.ai access to consumer health data at any time in your Settings."
        },
        {
          "charEnd": 5914,
          "heading": "2. Uses of Consumer Health Data Permitted Under Applicable Data Protection Laws",
          "quality": "strong",
          "charStart": 4327,
          "sourceUrl": "https://www.anthropic.com/legal/consumer-health-data-privacy-policy",
          "textExcerpt": "We use your consumer health data for the following purposes: To integrate your third party health application with Claude.ai so that you share your data with Claude to discuss; To prevent and investigate fraud, abuse, and violations of our Usage Policy, unlawful or criminal activity, unauthorized access to or use of personal data or Anthropic systems and networks, to protect our rights and the rights of others, and to meet legal, governmental and institutional policy obligations; In an aggregated form, to help us develop, test and improve our services. We may seek your consent to certain uses of consumer health data in accordance with applicable laws. For example, we may seek your consent to integrate with a third-party health app and collect and process data we collect through the integration. For additional information about how we use data, please review “2. Uses of Personal Data Permitted Under Applicable Data Protection Laws” in our Privacy Policy."
        },
        {
          "charEnd": 6799,
          "heading": "3. How We Disclose Consumer Health Data",
          "quality": "strong",
          "charStart": 5914,
          "sourceUrl": "https://www.anthropic.com/legal/consumer-health-data-privacy-policy",
          "textExcerpt": "Anthropic will disclose the categories of consumer health data described above to the categories of third parties described in “3. How We Disclose Personal Data” in our Privacy Policy. For example, if you choose to integrate the Services with websites, apps, and services managed by third parties, by interacting with these third parties, you may choose to provide information directly to the third party via the Services. To learn more about your third party integrations, please review Setting Up Claude Integrations ."
        },
        {
          "charEnd": 9746,
          "heading": "4. Rights and Choices",
          "quality": "strong",
          "charStart": 6799,
          "sourceUrl": "https://www.anthropic.com/legal/consumer-health-data-privacy-policy",
          "textExcerpt": "You may be entitled, in accordance with applicable law, to submit a request to know, access, or delete the consumer health data we have collected about you or withdraw consent to our use of consumer health data. Anthropic gives you access to a variety of tools to help you manage your data. You can access these in your Privacy Settings . Consumer Health Data Privacy Policy \\ Anthropic"
        },
        {
          "charEnd": 13770,
          "heading": "Personal data we collect or receive to train our models",
          "quality": "strong",
          "charStart": 12283,
          "sourceUrl": "https://www.anthropic.com/legal/privacy",
          "textExcerpt": "Anthropic obtains personal data from third party sources in order to train our models. Specifically, we train our models using data from the following sources: Publicly available information via the Internet Datasets that we obtain through commercial agreements with third party businesses Data that our users or crowd workers provide, including Inputs and Outputs from our Services (unless users opt out) Feedback that users explicitly provide about our Services Materials flagged for safety, security, or policy review Data that we generate internally For more information about how we collect and use personal data to develop our language models that power our Services, the steps we take to minimize the privacy impact on individuals through the training process, and your choices with respect to that information, please see our separate Non-User Privacy Policy ."
        },
        {
          "charEnd": 16514,
          "heading": "2. Uses of Personal Data Permitted Under Applicable Data Protection Laws",
          "quality": "strong",
          "charStart": 13770,
          "sourceUrl": "https://www.anthropic.com/legal/privacy",
          "textExcerpt": "We use your personal data for the following purposes: To provide, maintain and facilitate any products and services offered to you with respect to your Anthropic account, which are governed by our Terms of Service; To provide, maintain and facilitate optional services and features that enhance platform functionality and user experience; To provide you with service updates, communications, and to provide tailored recommendations about our Services that may be of interest to you; To create and administer your Anthropic account; To facilitate payments for products and services provided by Anthropic; To prevent and investigate fraud, abuse, and violations of our Usage Policy , unlawful or criminal activity, unauthorized access to or use of personal data or Anthropic systems and networks, to protect our rights and the rights of others, to protect your safety or that of any other person, and to meet legal, governmental and institutional policy obligations; To investigate and resolve disputes; To investigate and resolve security issues; To debug and to identify and repair errors that impair existing functionality; To improve the Services and conduct research, including training our"
        },
        {
          "charEnd": 21697,
          "heading": "3. Recipients and Third-Party Data Sources",
          "quality": "strong",
          "charStart": 16514,
          "sourceUrl": "https://www.anthropic.com/legal/privacy",
          "textExcerpt": "Anthropic will disclose personal data to, or receive personal data from, the following categories of third parties for the purposes explained in this Policy: Affiliates & corporate partners: Anthropic discloses the categories of personal data described above between and among its affiliates and related entities. Service providers & business partners: Anthropic may receive and disclose the categories of personal data described above with service providers and business partners for a variety of business purposes, including website and data hosting, ensuring compliance with industry standards, research, auditing, data processing, investigating and resolving safety and security issues, preventing and investigating fraud, abuse, and violations of our Usage Policy, and providing you with the Services. Your Organization and Administrator: If you use an email address owned by your employer or another organization, your account may be linked to the organization’s enterprise account with us, as described in our Consumer Terms of Service."
        },
        {
          "charEnd": 30827,
          "heading": "5. Data Transfers",
          "quality": "strong",
          "charStart": 27835,
          "sourceUrl": "https://www.anthropic.com/legal/privacy",
          "textExcerpt": "Anthropic is a global company, and when you access our Services, your personal data is transferred to our servers in the US, or to other countries outside the European Economic Area (“EEA”) and the UK for the purposes outlined in Section 2 of this Privacy Policy, for example to provide you with the Service, or to train our models, or to conduct research. This may be a direct provision of your personal data to us, or a transfer that we or a third party make. You can find more details about the affiliates and third parties we transfer data to, including their locations, in our Trust Center. Where Anthropic transfers information outside the EEA or the UK, we ensure it benefits from an adequate level of data protection by relying on: Adequacy decisions: These are decisions from the European Commission under Article 45 GDPR (or equivalent decisions under other laws) where they recognize that a country outside of the EEA offers an adequate level of data protection."
        },
        {
          "charEnd": 33907,
          "heading": "6. Data Retention, Data Lifecycle, and Security Controls",
          "quality": "strong",
          "charStart": 30827,
          "sourceUrl": "https://www.anthropic.com/legal/privacy",
          "textExcerpt": "Anthropic retains your personal data for as long as reasonably necessary for the purposes and criteria outlined in this Privacy Policy and explained further in our privacy center . When the personal data collected is no longer required by us, we and our service providers will perform the necessary procedures for destroying, deleting, erasing, or converting it into an anonymous form as permitted or required under applicable laws. Aggregated or De-Identified Information We apply aggregation and de-identification techniques where appropriate as part of our data minimization practices. For example, we may process personal data in an aggregated or de-identified form to analyze and improve the effectiveness of our Services including to conduct analytics, conduct research, study user behavior, and train our AI models as permitted under applicable laws. For instance: When you submit Feedback, we disassociate Inputs and Outputs from your user ID to use them for training and improving our models."
        },
        {
          "charEnd": 37692,
          "heading": "9. Contact Information",
          "quality": "strong",
          "charStart": 35289,
          "sourceUrl": "https://www.anthropic.com/legal/privacy",
          "textExcerpt": "If you live in the European Economic Area (EEA), UK or Switzerland (the “European Region”), the data controller responsible for your personal data is Anthropic Ireland, Limited. If you live outside the European Region, the data controller responsible for your personal data is Anthropic PBC. If you have any questions about this Privacy Policy, or have any questions, complaints or requests regarding your personal data, you can contact us as described below: Anthropic PBC with a registered address at 548 Market St, PMB 90375, San Francisco, CA 94104 (United States). Anthropic Ireland, Limited with a registered address at 6th Floor, South Bank House, Barrow Street, Dublin 4, D04 TR29 (Ireland). You can email us at [email protected] and contact our Data Protection Officer at [email protected] . Please note that under many countries' laws, you have the right to lodge a complaint with the supervisory authority in the place in which you live or work. A full list of EU supervisory authorities’ contact details is available here . If you live or work in the UK, you have the right to lodge a complaint with the UK Information Commissioner’s Office ."
        },
        {
          "charEnd": 49326,
          "heading": "10. Legal Bases for Processing",
          "quality": "strong",
          "charStart": 37692,
          "sourceUrl": "https://www.anthropic.com/legal/privacy",
          "textExcerpt": "Purpose Type of Data Legal Basis To provide, maintain and facilitate any products and services offered to you with respect to your Anthropic account, which are governed by our Terms of Service Identity and Contact Data Payment Information Feedback Inputs and Outputs Technical Information Contract To provide, maintain and facilitate optional services and features that enhance platform functionality and user experience Identity and Contact Data Feedback Study Participation Data Inputs and Outputs Technical Information Consent (for example for precise device location or for health app integrations) Legitimate interests It is in our and our users' legitimate interests to expand our product features and deliver additional services that enhance platform functionality and user experience. To provide you with service updates, communications, and to provide tailored recommendations about our Services that may be of interest to you. Identity and Contact Data Communication Information Technical Information Study Participation Data Where necessary to perform a contract with you, such as processing your contact information to send you a technical announcement about the Services."
        },
        {
          "charEnd": 62058,
          "heading": "11. Regional Supplemental Disclosures",
          "quality": "strong",
          "charStart": 49326,
          "sourceUrl": "https://www.anthropic.com/legal/privacy",
          "textExcerpt": "Supplemental Disclosures for Residents of Canada These supplemental disclosures contain additional information relevant to residents of Canada. This content should be read in conjunction with the rest of our Privacy Policy. In case of conflict between our Privacy Policy and these supplemental disclosures, the supplemental disclosures shall prevail in relation to residents of Canada. Consent. By expressly consenting to this Privacy Policy, you confirm you have read, understand, and consent to the collection, use, processing, and disclosure of your personal data in accordance with this Privacy Policy and understand that, in jurisdictions where it is available, Anthropic also relies on other lawful bases for the foregoing as more fully set out in this policy. We will only collect, use and disclose your personal data with your consent, unless otherwise permitted or required by law. Your consent may be given expressly or implied, depending on the circumstances and the sensitivity of the information involved. You may withdraw consent at any time, subject to legal or contractual restrictions and reasonable notice. Cross-jurisdictional Transfers."
        },
        {
          "charEnd": 51963,
          "heading": "Supplemental Disclosures for Residents of Canada",
          "quality": "strong",
          "charStart": 49494,
          "sourceUrl": "https://www.anthropic.com/legal/privacy",
          "textExcerpt": "These supplemental disclosures contain additional information relevant to residents of Canada. This content should be read in conjunction with the rest of our Privacy Policy. In case of conflict between our Privacy Policy and these supplemental disclosures, the supplemental disclosures shall prevail in relation to residents of Canada. Consent. By expressly consenting to this Privacy Policy, you confirm you have read, understand, and consent to the collection, use, processing, and disclosure of your personal data in accordance with this Privacy Policy and understand that, in jurisdictions where it is available, Anthropic also relies on other lawful bases for the foregoing as more fully set out in this policy. We will only collect, use and disclose your personal data with your consent, unless otherwise permitted or required by law. Your consent may be given expressly or implied, depending on the circumstances and the sensitivity of the information involved. You may withdraw consent at any time, subject to legal or contractual restrictions and reasonable notice. Cross-jurisdictional Transfers."
        },
        {
          "charEnd": 56635,
          "heading": "Supplemental Disclosures for Residents of Brazil",
          "quality": "strong",
          "charStart": 51963,
          "sourceUrl": "https://www.anthropic.com/legal/privacy",
          "textExcerpt": "These supplemental disclosures contain additional information relevant to residents of Brazil. This content should be read in conjunction with the rest of our Privacy Policy. In case of conflict between our Privacy Policy and these supplemental disclosures, the supplemental disclosures shall prevail in relation to residents of Brazil. Legal Bases. Depending on the specific purpose of the processing, we may rely on different grounds than those listed under section 2, where permitted by and in accordance with the Brazilian General Data Protection Law (LGPD). For example, we may rely on the \"exercise of legal rights\" basis to process personal data associated with customer complaints and to enforce our Terms of Service and similar terms and agreements, including our Usage Policy. Data Subject's Rights. LGPD grants certain rights regarding your personal data, which differ from the ones listed under section 4. We will respond to your requests to exercise your rights below in accordance with applicable law: Confirmation of whether your data is being processed. You have the right to receive a confirmation on whether Anthropic processes your data. Access to your data."
        },
        {
          "charEnd": 37344,
          "heading": "international transfers of personal data",
          "quality": "strong",
          "charStart": 36471,
          "sourceUrl": "https://www.anthropic.com/legal/privacy",
          "textExcerpt": "For the proper operation of the Services, Anthropic needs to carry out international transfers of personal data. In the case of Brazil, we will rely on standard contractual clauses (SCCs) for our data transfers where required and in instances where they are not covered by an adequacy decision. These SCCs have been approved by the Brazilian Data Protection Authority (ANPD), which is the \"competent supervisory authority\" for these transfers, as governed by Brazilian Data Protection Laws. You can view the SCCs adopted by the ANPD here . Supplemental Disclosures for Residents of the Republic of Korea This section applies to the extent that Anthropic is subject to the Personal Information Protection Act (“PIPA”), and supplements the information in the Privacy Policy. This is an addendum to the Privacy Policy and should be read in conjunction with the Privacy Policy."
        },
        {
          "charEnd": 18118,
          "heading": "right to object to processing",
          "quality": "strong",
          "charStart": 17175,
          "sourceUrl": "https://www.anthropic.com/legal/privacy",
          "textExcerpt": "Objection: the right to object to processing of your personal data, including profiling conducted on grounds of public or legitimate interest. In places where such a right applies, we will no longer process the personal data in case of such objection unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or for the establishment, exercise or defense of legal claims. If we use your information for direct marketing, you can object and opt out of future direct marketing messages using the unsubscribe link in such communications. Restriction: the right to restrict our processing of your personal data in certain circumstances. Withdrawal of consent: Where Anthropic’s processing of your personal data is based on consent, you have the right to withdraw your consent. For example, you can disconnect your health app integration and withdraw your consent in your settings ."
        },
        {
          "charEnd": 25280,
          "heading": "data protection officer",
          "quality": "strong",
          "charStart": 24574,
          "sourceUrl": "https://www.anthropic.com/legal/privacy",
          "textExcerpt": "You can email us at [email protected] and contact our Data Protection Officer at [email protected] . Please note that under many countries' laws, you have the right to lodge a complaint with the supervisory authority in the place in which you live or work. A full list of EU supervisory authorities’ contact details is available here . If you live or work in the UK, you have the right to lodge a complaint with the UK Information Commissioner’s Office . If you live in Brazil, you have the right to lodge a complaint with the Brazilian Data Protection Authority (ANPD) . If you live in Australia, you have the right to lodge a complaint with the Office of the Australian Information Commissioner . 10."
        },
        {
          "charEnd": 24834,
          "heading": "data controller",
          "quality": "strong",
          "charStart": 23854,
          "sourceUrl": "https://www.anthropic.com/legal/privacy",
          "textExcerpt": "Contact Information If you live in the European Economic Area (EEA), UK or Switzerland (the “European Region”), the data controller responsible for your personal data is Anthropic Ireland, Limited. If you live outside the European Region, the data controller responsible for your personal data is Anthropic PBC. If you have any questions about this Privacy Policy, or have any questions, complaints or requests regarding your personal data, you can contact us as described below: Anthropic PBC with a registered address at 548 Market St, PMB 90375, San Francisco, CA 94104 (United States). Anthropic Ireland, Limited with a registered address at 6th Floor, South Bank House, Barrow Street, Dublin 4, D04 TR29 (Ireland). You can email us at [email protected] and contact our Data Protection Officer at [email protected] . Please note that under many countries' laws, you have the right to lodge a complaint with the supervisory authority in the place in which you live or work."
        },
        {
          "charEnd": 25280,
          "heading": "right to lodge a complaint",
          "quality": "strong",
          "charStart": 24679,
          "sourceUrl": "https://www.anthropic.com/legal/privacy",
          "textExcerpt": "Please note that under many countries' laws, you have the right to lodge a complaint with the supervisory authority in the place in which you live or work. A full list of EU supervisory authorities’ contact details is available here . If you live or work in the UK, you have the right to lodge a complaint with the UK Information Commissioner’s Office . If you live in Brazil, you have the right to lodge a complaint with the Brazilian Data Protection Authority (ANPD) . If you live in Australia, you have the right to lodge a complaint with the Office of the Australian Information Commissioner . 10."
        },
        {
          "charEnd": 19674,
          "heading": "Policy section",
          "quality": "strong",
          "charStart": 18906,
          "sourceUrl": "https://www.anthropic.com/legal/privacy",
          "textExcerpt": "To learn more, click here . Anthropic gives you access to a variety of tools to help you manage your data. You can access these in your Privacy Settings . 5. Data Transfers Anthropic is a global company, and when you access our Services, your personal data is transferred to our servers in the US, or to other countries outside the European Economic Area (“EEA”) and the UK for the purposes outlined in Section 2 of this Privacy Policy, for example to provide you with the Service, or to train our models, or to conduct research. This may be a direct provision of your personal data to us, or a transfer that we or a third party make. You can find more details about the affiliates and third parties we transfer data to, including their locations, in our Trust Center."
        },
        {
          "charEnd": 18118,
          "heading": "Policy section",
          "quality": "strong",
          "charStart": 17175,
          "sourceUrl": "https://www.anthropic.com/legal/privacy",
          "textExcerpt": "Objection: the right to object to processing of your personal data, including profiling conducted on grounds of public or legitimate interest. In places where such a right applies, we will no longer process the personal data in case of such objection unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or for the establishment, exercise or defense of legal claims. If we use your information for direct marketing, you can object and opt out of future direct marketing messages using the unsubscribe link in such communications. Restriction: the right to restrict our processing of your personal data in certain circumstances. Withdrawal of consent: Where Anthropic’s processing of your personal data is based on consent, you have the right to withdraw your consent. For example, you can disconnect your health app integration and withdraw your consent in your settings ."
        }
      ],
      "cookieDisclosurePresent": true,
      "policyCookieDisclosures": [],
      "privacyPolicyDiscovered": true,
      "processingErrorObserved": true,
      "observedPolicyTopicHints": [
        "sale_or_share",
        "third_party_disclosures",
        "consent_withdrawal",
        "controller_contact",
        "processing_purposes",
        "recipients_or_vendor_categories",
        "ai_features",
        "cookies",
        "analytics",
        "advertising",
        "targeted_advertising",
        "global_privacy_control",
        "profiling_or_automated_decision_making",
        "vendor_list",
        "data_retention",
        "legal_basis",
        "data_subject_rights",
        "international_transfers",
        "dpo_contact",
        "supervisory_authority",
        "contact_privacy"
      ],
      "policyDocumentProvenance": [
        {
          "sourceUrl": "https://anthropic.com/legal/consumer-health-data-privacy-policy",
          "policyTitle": "Consumer Health Data Privacy Policy \\ Anthropic",
          "artifactRefs": [
            "policy_excerpt_2cbc38f4_ee912f89",
            "policy_surface_text_2cbc38f4_ee912f89"
          ],
          "effectiveDate": null,
          "observationId": "policy_surface_2cbc38f4",
          "discoveryMethod": "footer_link",
          "documentHeading": "1. Collection of Consumer Health Data",
          "lastUpdatedText": null,
          "detectedLanguage": "en",
          "retrievalTimestamp": "2026-10-12T19:31:52.180Z",
          "targetRelationship": "target_controller",
          "translationApplied": false,
          "documentOwnerEntity": "Consumer Health Data Anthropic",
          "ownershipConfidence": 0.98,
          "translationTargetLanguage": null,
          "directlyLinkedFromScannedPage": true
        },
        {
          "sourceUrl": "https://anthropic.com/legal/privacy",
          "policyTitle": "Privacy Policy \\ Anthropic",
          "artifactRefs": [
            "policy_excerpt_1d925b9c_977b211",
            "policy_surface_text_1d925b9c_450ef827"
          ],
          "effectiveDate": null,
          "observationId": "policy_surface_1d925b9c",
          "discoveryMethod": "footer_link",
          "documentHeading": "Personal data we collect or receive to train our models",
          "lastUpdatedText": null,
          "detectedLanguage": "en",
          "retrievalTimestamp": "2026-10-12T19:32:00.669Z",
          "targetRelationship": "target_controller",
          "translationApplied": false,
          "documentOwnerEntity": "Anthropic",
          "ownershipConfidence": 0.98,
          "translationTargetLanguage": null,
          "directlyLinkedFromScannedPage": true
        }
      ],
      "policy_cookie_disclosures": [],
      "article13DisclosureSignals": [
        {
          "source": "deterministic",
          "status": "observed",
          "confidence": 0.9,
          "surfaceUrl": "https://anthropic.com/legal/consumer-health-data-privacy-policy",
          "evidenceText": "collect, use, disclose, and process “consumer health data” in the event that we process such data. This Consumer Health Data Privacy Policy applies only where Anthropic acts as a data controller—for example, when you interact with Claude.ai or other products as a consumer for personal use (“Services”).",
          "disclosureType": "controller_contact",
          "selectedEvidenceStrength": "strong",
          "selectedPolicySectionUrl": "https://anthropic.com/legal/consumer-health-data-privacy-policy",
          "supportingContactContext": null,
          "selectedPolicySectionExcerpt": "This Consumer Health Data Privacy Policy explains how we collect, use, disclose, and process “consumer health data” in the event that we process such data. This Consumer Health Data Privacy Policy applies only where Anthropic acts as a data controller—for example, when you interact with Claude.ai or other products as a consumer for personal use (“Services”). These supplemental disclosures contain additional information relevant to residents of Washington or residents in states with similar “consumer health data” laws. This content should be read in conjunction with the rest of our Privacy Policy . In case of conflict between our Privacy Policy and these supplemental disclosures, the supplemental disclosures shall prevail, where applicable. 1. Collection of Consumer Health Data We collect the following categories of consumer health data where you provide it to us directly, including if you elect to connect a third-party application to Claude.ai that contains your consumer health data: Information about your health-related conditions, symptoms, status, diagnoses, medical interventions, surgeries, procedures, testing, or treatments; Vital signs, bodily functions, symptoms, or health measurements that reveal your health status; Information about your use or purchase of prescribed medication; Biometric and genetic data; Precise location information; Information, including location or precise location information, that could identify your attempt to seek health care services or supplies; and Other information that may be used to infer or derive consumer health data. For additional information about the types of data we collect and how we collect it, please review “1. Collection of Personal Data” in our Privacy Policy. You can revoke your consent to third-party integrations that may provide Claude.ai access to consumer health data at any time in your Settings. ...",
          "selectedPolicySectionHeading": "Policy text context"
        },
        {
          "source": "deterministic",
          "status": "observed",
          "confidence": 0.76,
          "surfaceUrl": "https://anthropic.com/legal/consumer-health-data-privacy-policy",
          "evidenceText": "For additional information about how we use data, please review “2.",
          "disclosureType": "processing_purposes",
          "evidenceSource": "deterministic",
          "selectedEvidenceStrength": "strong",
          "selectedPolicySectionUrl": "https://www.anthropic.com/legal/consumer-health-data-privacy-policy",
          "supportingContactContext": null,
          "selectedPolicySectionExcerpt": "For additional information about how we use data, please review “2.",
          "selectedPolicySectionHeading": "2. Uses of Consumer Health Data Permitted Under Applicable Data Protection Laws"
        },
        {
          "source": "deterministic",
          "status": "observed",
          "confidence": 0.9,
          "surfaceUrl": "https://anthropic.com/legal/privacy",
          "matchedTerm": "right to object to processing",
          "evidenceText": "Policy. Data Subject's Rights. LGPD grants certain rights regarding your personal data, which differ from the ones listed under section 4. We will respond to your requests to exercise your rights below in accordance with applicable law: Confirmation of whether your data is being processed. You have the right to receive a confirmation on whether Anthropic processes your data. Access to your data.",
          "matchStrength": "direct",
          "matchedLocale": "en",
          "disclosureType": "data_subject_rights",
          "evidenceSource": "canonical_retained_article13_signal",
          "productionCredit": true,
          "classifierProvenance": "gdpr_transparency_topic_classifier.v1",
          "classifierReasonCodes": [
            "matched_data_subject_rights",
            "match_strength_direct"
          ],
          "productionCreditProfile": "gdpr_transparency_multilingual_article13_v1",
          "selectedEvidenceStrength": "strong",
          "selectedPolicySectionUrl": "https://anthropic.com/legal/privacy",
          "selectedPolicySectionExcerpt": "Policy. Data Subject's Rights. LGPD grants certain rights regarding your personal data, which differ from the ones listed under section 4. We will respond to your requests to exercise your rights below in accordance with applicable law: Confirmation of whether your data is being processed. You have the right to receive a confirmation on whether Anthropic processes your data. Access to your data.",
          "selectedPolicySectionHeading": "Supplemental Disclosures for Residents of Brazil",
          "sourceCandidateProductionCredit": false
        },
        {
          "source": "deterministic",
          "status": "observed",
          "confidence": 0.9,
          "surfaceUrl": "https://anthropic.com/legal/privacy",
          "matchedTerm": "international transfers of personal data",
          "evidenceText": "Data Transfers Anthropic is a global company, and when you access our Services, your personal data is transferred to our servers in the US, or to other countries outside the European Economic Area (“EEA”) and the UK for the purposes outlined in Section 2 of this Privacy Policy, for example to provide you with the Service, or to train our models, or to conduct research.",
          "matchStrength": "direct",
          "matchedLocale": "en",
          "disclosureType": "international_transfers",
          "evidenceSource": "canonical_retained_article13_signal",
          "productionCredit": true,
          "classifierProvenance": "gdpr_transparency_topic_classifier.v1",
          "classifierReasonCodes": [
            "matched_international_transfers",
            "match_strength_direct"
          ],
          "productionCreditProfile": "gdpr_transparency_multilingual_article13_v1",
          "selectedEvidenceStrength": "strong",
          "selectedPolicySectionUrl": "https://anthropic.com/legal/privacy",
          "selectedPolicySectionExcerpt": "Data Transfers Anthropic is a global company, and when you access our Services, your personal data is transferred to our servers in the US, or to other countries outside the European Economic Area (“EEA”) and the UK for the purposes outlined in Section 2 of this Privacy Policy, for example to provide you with the Service, or to train our models, or to conduct research.",
          "sourceCandidateProductionCredit": false
        },
        {
          "source": "deterministic",
          "status": "observed",
          "confidence": 0.82,
          "surfaceUrl": "https://anthropic.com/legal/privacy",
          "matchedTerm": "right to lodge a complaint",
          "evidenceText": "If you live in Brazil, you have the right to lodge a complaint with the Brazilian Data Protection Authority (ANPD) .",
          "matchStrength": "equivalent",
          "matchedLocale": "en",
          "disclosureType": "supervisory_authority",
          "evidenceSource": "canonical_retained_article13_signal",
          "productionCredit": true,
          "classifierProvenance": "gdpr_transparency_topic_classifier.v1",
          "classifierReasonCodes": [
            "matched_supervisory_authority",
            "match_strength_equivalent",
            "variant_requires_privacy_context"
          ],
          "productionCreditProfile": "gdpr_transparency_multilingual_article13_v1",
          "selectedEvidenceStrength": "strong",
          "selectedPolicySectionUrl": "https://anthropic.com/legal/privacy",
          "selectedPolicySectionExcerpt": "If you live in Brazil, you have the right to lodge a complaint with the Brazilian Data Protection Authority (ANPD) .",
          "sourceCandidateProductionCredit": false
        },
        {
          "source": "deterministic",
          "status": "observed",
          "confidence": 0.9,
          "surfaceUrl": "https://anthropic.com/legal/privacy",
          "matchedTerm": "data protection officer",
          "evidenceText": "Data Protection Officer at [email protected]",
          "matchStrength": "direct",
          "matchedLocale": "en",
          "disclosureType": "dpo_contact",
          "evidenceSource": "canonical_retained_article13_signal",
          "productionCredit": true,
          "classifierProvenance": "gdpr_transparency_topic_classifier.v1",
          "classifierReasonCodes": [
            "matched_dpo_contact",
            "match_strength_direct"
          ],
          "productionCreditProfile": "gdpr_transparency_multilingual_article13_v1",
          "selectedEvidenceStrength": "strong",
          "selectedPolicySectionUrl": "https://anthropic.com/legal/privacy",
          "selectedPolicySectionExcerpt": "Data Protection Officer at [email protected]",
          "sourceCandidateProductionCredit": false
        },
        {
          "source": "deterministic",
          "status": "observed",
          "confidence": 0.9,
          "surfaceUrl": "https://anthropic.com/legal/privacy",
          "matchedTerm": "data controller",
          "evidenceText": "If you live in the European Economic Area (EEA), UK or Switzerland (the “European Region”), the data controller responsible for your personal data is Anthropic Ireland, Limited. If you live outside the European Region, the data controller responsible for your personal data is Anthropic PBC. If you have any questions about this Privacy Policy, or have any questions, complaints or requests regarding your personal data, you can contact us as described below: Anthropic PBC with a registered address at 548 Market St, PMB 90375, San Francisco, CA 94104 (United States). Anthropic Ireland, Limited with a registered address at 6th Floor, Sou",
          "matchStrength": "direct",
          "matchedLocale": "en",
          "disclosureType": "controller_contact",
          "evidenceSource": "canonical_retained_article13_signal",
          "productionCredit": true,
          "classifierProvenance": "gdpr_transparency_topic_classifier.v1",
          "classifierReasonCodes": [
            "matched_controller_contact",
            "match_strength_direct"
          ],
          "productionCreditProfile": "gdpr_transparency_multilingual_article13_v1",
          "selectedEvidenceStrength": "strong",
          "selectedPolicySectionUrl": "https://anthropic.com/legal/privacy",
          "selectedPolicySectionExcerpt": "If you live in the European Economic Area (EEA), UK or Switzerland (the “European Region”), the data controller responsible for your personal data is Anthropic Ireland, Limited. If you live outside the European Region, the data controller responsible for your personal data is Anthropic PBC. If you have any questions about this Privacy Policy, or have any questions, complaints or requests regarding your personal data, you can contact us as described below: Anthropic PBC with a registered address at 548 Market St, PMB 90375, San Francisco, CA 94104 (United States). Anthropic Ireland, Limited with a registered address at 6th Floor, Sou",
          "selectedPolicySectionHeading": "9. Contact Information",
          "sourceCandidateProductionCredit": false
        },
        {
          "source": "deterministic",
          "status": "observed",
          "confidence": 0.9,
          "surfaceUrl": "https://anthropic.com/legal/privacy",
          "matchedTerm": "use your personal data",
          "evidenceText": "We use your personal data for the following purposes: To provide, maintain and facilitate any products and services offered to you with respect to your Anthropic account, which are governed by our Terms of Service; To provide, maintain and facilitate optional services and features that enhance platform functionality and user experience; To provide you with service updates, communications, and to provide tailored recommendations about our Services that may be of interest to you; To create and administer your Anthropic account; To fac",
          "matchStrength": "direct",
          "matchedLocale": "en",
          "disclosureType": "processing_purposes",
          "evidenceSource": "canonical_retained_article13_signal",
          "productionCredit": true,
          "classifierProvenance": "gdpr_transparency_topic_classifier.v1",
          "classifierReasonCodes": [
            "matched_processing_purposes",
            "match_strength_direct"
          ],
          "productionCreditProfile": "gdpr_transparency_multilingual_article13_v1",
          "selectedEvidenceStrength": "strong",
          "selectedPolicySectionUrl": "https://anthropic.com/legal/privacy",
          "selectedPolicySectionExcerpt": "We use your personal data for the following purposes: To provide, maintain and facilitate any products and services offered to you with respect to your Anthropic account, which are governed by our Terms of Service; To provide, maintain and facilitate optional services and features that enhance platform functionality and user experience; To provide you with service updates, communications, and to provide tailored recommendations about our Services that may be of interest to you; To create and administer your Anthropic account; To fac",
          "selectedPolicySectionHeading": "2. Uses of Personal Data Permitted Under Applicable Data Protection Laws",
          "sourceCandidateProductionCredit": false
        },
        {
          "source": "deterministic",
          "status": "observed",
          "confidence": 0.88,
          "surfaceUrl": "https://anthropic.com/legal/privacy",
          "matchedTerm": "section-bound legal basis",
          "evidenceText": "Objection: the right to object to processing of your personal data, including profiling conducted on grounds of public or legitimate interest. In places where such a right applies, we will no longer process the personal data in case of such objection unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or for the establishment, exercise or defense of legal claims.",
          "matchStrength": "equivalent",
          "matchedLocale": "en",
          "disclosureType": "legal_basis",
          "evidenceSource": "canonical_retained_article13_signal",
          "productionCredit": true,
          "classifierProvenance": "gdpr_transparency_topic_classifier.v1",
          "classifierReasonCodes": [
            "matched_legal_basis",
            "match_strength_equivalent",
            "variant_section_semantic_clause"
          ],
          "productionCreditProfile": "gdpr_transparency_multilingual_article13_v1",
          "selectedEvidenceStrength": "strong",
          "selectedPolicySectionUrl": "https://anthropic.com/legal/privacy",
          "selectedPolicySectionExcerpt": "Objection: the right to object to processing of your personal data, including profiling conducted on grounds of public or legitimate interest. In places where such a right applies, we will no longer process the personal data in case of such objection unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or for the establishment, exercise or defense of legal claims.",
          "sourceCandidateProductionCredit": false
        },
        {
          "source": "deterministic",
          "status": "observed",
          "confidence": 0.86,
          "surfaceUrl": "https://anthropic.com/legal/privacy",
          "matchedTerm": "named recipient or meaningful recipient category",
          "evidenceText": "Anthropic will disclose personal data to, or receive personal data from, the following categories of third parties for the purposes explained in this Policy: Affiliates & corporate partners: Anthropic discloses the categories of personal data described above between and among its affiliates and related entities.",
          "matchStrength": "equivalent",
          "matchedLocale": "en",
          "disclosureType": "recipients_or_vendor_categories",
          "evidenceSource": "canonical_retained_article13_signal",
          "productionCredit": true,
          "classifierProvenance": "gdpr_transparency_topic_classifier.v1",
          "classifierReasonCodes": [
            "matched_recipients_or_vendor_categories",
            "match_strength_equivalent",
            "variant_semantic_clause"
          ],
          "productionCreditProfile": "gdpr_transparency_multilingual_article13_v1",
          "selectedEvidenceStrength": "strong",
          "selectedPolicySectionUrl": "https://anthropic.com/legal/privacy",
          "selectedPolicySectionExcerpt": "Anthropic will disclose personal data to, or receive personal data from, the following categories of third parties for the purposes explained in this Policy: Affiliates & corporate partners: Anthropic discloses the categories of personal data described above between and among its affiliates and related entities.",
          "selectedPolicySectionHeading": "3. Recipients and Third-Party Data Sources",
          "sourceCandidateProductionCredit": false
        },
        {
          "source": "deterministic",
          "status": "observed",
          "confidence": 0.86,
          "surfaceUrl": "https://anthropic.com/legal/consumer-health-data-privacy-policy",
          "matchedTerm": "specific personal-data processing purpose",
          "evidenceText": "2. Uses of Consumer Health Data Permitted Under Applicable Data Protection Laws We use your consumer health data for the following purposes: To integrate your third party health application with Claude.ai so that you share your data with Claude to discuss; To prevent and investigate fraud, abuse, and violations of our Usage Policy, unlawful or criminal",
          "matchStrength": "equivalent",
          "matchedLocale": "en",
          "disclosureType": "processing_purposes",
          "evidenceSource": "gdpr_transparency_topic_candidate",
          "productionCredit": true,
          "classifierProvenance": "gdpr_transparency_topic_classifier.v1",
          "classifierReasonCodes": [
            "matched_processing_purposes",
            "match_strength_equivalent",
            "variant_semantic_clause"
          ],
          "productionCreditProfile": "gdpr_transparency_multilingual_article13_v1",
          "selectedEvidenceStrength": "strong",
          "selectedPolicySectionUrl": "https://anthropic.com/legal/consumer-health-data-privacy-policy",
          "selectedPolicySectionExcerpt": "2. Uses of Consumer Health Data Permitted Under Applicable Data Protection Laws We use your consumer health data for the following purposes: To integrate your third party health application with Claude.ai so that you share your data with Claude to discuss; To prevent and investigate fraud, abuse, and violations of our Usage Policy, unlawful or criminal",
          "selectedPolicySectionHeading": "2. Uses of Consumer Health Data Permitted Under Applicable Data Protection Laws",
          "sourceCandidateProductionCredit": false
        },
        {
          "source": "deterministic",
          "status": "observed",
          "confidence": 0.88,
          "surfaceUrl": "https://anthropic.com/legal/privacy",
          "matchedTerm": "section-bound retention period or criterion",
          "evidenceText": "6. Data Retention, Data Lifecycle, and Security Controls. Anthropic retains your personal data for as long as reasonably necessary for the purposes and criteria outlined in this Privacy Policy and explained further in our privacy center .",
          "matchStrength": "equivalent",
          "matchedLocale": "en",
          "disclosureType": "data_retention",
          "evidenceSource": "gdpr_transparency_topic_candidate",
          "productionCredit": true,
          "classifierProvenance": "gdpr_transparency_topic_classifier.v1",
          "classifierReasonCodes": [
            "matched_data_retention",
            "match_strength_equivalent",
            "variant_section_semantic_clause"
          ],
          "productionCreditProfile": "gdpr_transparency_multilingual_article13_v1",
          "selectedEvidenceStrength": "strong",
          "selectedPolicySectionUrl": "https://anthropic.com/legal/privacy",
          "selectedPolicySectionExcerpt": "6. Data Retention, Data Lifecycle, and Security Controls. Anthropic retains your personal data for as long as reasonably necessary for the purposes and criteria outlined in this Privacy Policy and explained further in our privacy center .",
          "selectedPolicySectionHeading": "6. Data Retention, Data Lifecycle, and Security Controls",
          "sourceCandidateProductionCredit": false
        }
      ],
      "policyTextExtractionHealth": {
        "policyUrls": [
          "https://anthropic.com/legal/privacy",
          "https://anthropic.com/legal/consumer-health-data-privacy-policy"
        ],
        "nanoInvoked": false,
        "nanoSkipReason": "policy_text_input_limited",
        "contractVersion": "certscore.policy-text-extraction-health.v2",
        "policyTextQuality": {
          "usable": true,
          "codeSignalCount": 0,
          "codeSymbolRatio": 0.000569216757741348,
          "policyTermCount": 16,
          "alphabeticWordRatio": 0.804910516195829,
          "accessChallengeSignalCount": 0,
          "naturalLanguageSentenceCount": 234
        },
        "policyUrlRetained": true,
        "extractedTextLength": 43920,
        "policySurfaceObserved": true,
        "detectedPolicyLanguage": "en",
        "extractionFailureReason": "privacy_policy_text_processing_error",
        "minimumTextLengthRequired": 500,
        "policyTextExtractionStatus": "errored",
        "verifiedPolicyDocumentCount": 2,
        "detectedPolicyLanguageSource": "policy_surface",
        "supportedGdprTransparencyLocales": [
          "en",
          "de",
          "fr",
          "es",
          "it",
          "nl",
          "pl",
          "pt",
          "ru",
          "ja",
          "zh",
          "ar",
          "sv",
          "ro",
          "cs",
          "el",
          "hu",
          "da",
          "fi",
          "sk",
          "bg",
          "hr",
          "nb",
          "sl",
          "lt",
          "lv",
          "et",
          "uk",
          "tr",
          "fa",
          "vi",
          "id",
          "ko",
          "th",
          "he",
          "sr",
          "ca",
          "hi",
          "az",
          "gl"
        ],
        "gdprTransparencyLanguageSupported": true,
        "policyTextEvidenceProjectionStatus": "verified_complete",
        "policyTextEvidenceProjectionContractVersion": "certscore.policy-text-evidence-projection.v1"
      },
      "privacyPolicyEvidencePaths": [],
      "discoveredPrivacyPolicyUrls": [
        "https://www.anthropic.com/legal/privacy",
        "https://www.anthropic.com/legal/consumer-health-data-privacy-policy"
      ],
      "article13CoverageAssessments": [
        {
          "topic": "automated_decision_making_or_profiling",
          "status": "insufficient_retained_evidence",
          "sourceUrls": [
            "https://www.anthropic.com/legal/privacy",
            "https://www.anthropic.com/legal/consumer-health-data-privacy-policy"
          ],
          "reasonCodes": [
            "policy_absence_coverage_preconditions_not_met",
            "typed_topic_coverage_diagnostic_missing_or_limited",
            "policy_document_content_coverage_incomplete"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_1d925b9c",
            "policy_surface_2cbc38f4"
          ],
          "policyDocumentRoles": [
            "policy_document",
            "policy_document"
          ],
          "policyDocumentSha256": [
            "b763dd02428a494c4680e640685c27e6bff8535ce263bd7cba1a24c641dd5065",
            "c81851a14a4bb0527b8b319a9f0d6df94c4ebc232d88f312ba8ff6610fc3fc3e"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "controller_contact",
          "status": "observed",
          "sourceUrls": [
            "https://www.anthropic.com/legal/privacy",
            "https://www.anthropic.com/legal/consumer-health-data-privacy-policy"
          ],
          "reasonCodes": [
            "row_specific_disclosure_observed"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_1d925b9c",
            "policy_surface_2cbc38f4"
          ],
          "policyDocumentRoles": [
            "policy_document",
            "policy_document"
          ],
          "policyDocumentSha256": [
            "b763dd02428a494c4680e640685c27e6bff8535ce263bd7cba1a24c641dd5065",
            "c81851a14a4bb0527b8b319a9f0d6df94c4ebc232d88f312ba8ff6610fc3fc3e"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "data_retention",
          "status": "observed",
          "sourceUrls": [
            "https://www.anthropic.com/legal/privacy",
            "https://www.anthropic.com/legal/consumer-health-data-privacy-policy"
          ],
          "reasonCodes": [
            "row_specific_disclosure_observed"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_1d925b9c",
            "policy_surface_2cbc38f4"
          ],
          "policyDocumentRoles": [
            "policy_document",
            "policy_document"
          ],
          "policyDocumentSha256": [
            "b763dd02428a494c4680e640685c27e6bff8535ce263bd7cba1a24c641dd5065",
            "c81851a14a4bb0527b8b319a9f0d6df94c4ebc232d88f312ba8ff6610fc3fc3e"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "data_subject_rights",
          "status": "observed",
          "sourceUrls": [
            "https://www.anthropic.com/legal/privacy",
            "https://www.anthropic.com/legal/consumer-health-data-privacy-policy"
          ],
          "reasonCodes": [
            "row_specific_disclosure_observed"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_1d925b9c",
            "policy_surface_2cbc38f4"
          ],
          "policyDocumentRoles": [
            "policy_document",
            "policy_document"
          ],
          "policyDocumentSha256": [
            "b763dd02428a494c4680e640685c27e6bff8535ce263bd7cba1a24c641dd5065",
            "c81851a14a4bb0527b8b319a9f0d6df94c4ebc232d88f312ba8ff6610fc3fc3e"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "dpo_contact",
          "status": "observed",
          "sourceUrls": [
            "https://www.anthropic.com/legal/privacy",
            "https://www.anthropic.com/legal/consumer-health-data-privacy-policy"
          ],
          "reasonCodes": [
            "row_specific_disclosure_observed"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_1d925b9c",
            "policy_surface_2cbc38f4"
          ],
          "policyDocumentRoles": [
            "policy_document",
            "policy_document"
          ],
          "policyDocumentSha256": [
            "b763dd02428a494c4680e640685c27e6bff8535ce263bd7cba1a24c641dd5065",
            "c81851a14a4bb0527b8b319a9f0d6df94c4ebc232d88f312ba8ff6610fc3fc3e"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "international_transfers",
          "status": "observed",
          "sourceUrls": [
            "https://www.anthropic.com/legal/privacy",
            "https://www.anthropic.com/legal/consumer-health-data-privacy-policy"
          ],
          "reasonCodes": [
            "row_specific_disclosure_observed"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_1d925b9c",
            "policy_surface_2cbc38f4"
          ],
          "policyDocumentRoles": [
            "policy_document",
            "policy_document"
          ],
          "policyDocumentSha256": [
            "b763dd02428a494c4680e640685c27e6bff8535ce263bd7cba1a24c641dd5065",
            "c81851a14a4bb0527b8b319a9f0d6df94c4ebc232d88f312ba8ff6610fc3fc3e"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "legal_basis",
          "status": "observed",
          "sourceUrls": [
            "https://www.anthropic.com/legal/privacy",
            "https://www.anthropic.com/legal/consumer-health-data-privacy-policy"
          ],
          "reasonCodes": [
            "row_specific_disclosure_observed"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_1d925b9c",
            "policy_surface_2cbc38f4"
          ],
          "policyDocumentRoles": [
            "policy_document",
            "policy_document"
          ],
          "policyDocumentSha256": [
            "b763dd02428a494c4680e640685c27e6bff8535ce263bd7cba1a24c641dd5065",
            "c81851a14a4bb0527b8b319a9f0d6df94c4ebc232d88f312ba8ff6610fc3fc3e"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "processing_purposes",
          "status": "observed",
          "sourceUrls": [
            "https://www.anthropic.com/legal/privacy",
            "https://www.anthropic.com/legal/consumer-health-data-privacy-policy"
          ],
          "reasonCodes": [
            "row_specific_disclosure_observed"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_1d925b9c",
            "policy_surface_2cbc38f4"
          ],
          "policyDocumentRoles": [
            "policy_document",
            "policy_document"
          ],
          "policyDocumentSha256": [
            "b763dd02428a494c4680e640685c27e6bff8535ce263bd7cba1a24c641dd5065",
            "c81851a14a4bb0527b8b319a9f0d6df94c4ebc232d88f312ba8ff6610fc3fc3e"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "recipients_or_vendor_categories",
          "status": "observed",
          "sourceUrls": [
            "https://www.anthropic.com/legal/privacy",
            "https://www.anthropic.com/legal/consumer-health-data-privacy-policy"
          ],
          "reasonCodes": [
            "row_specific_disclosure_observed"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_1d925b9c",
            "policy_surface_2cbc38f4"
          ],
          "policyDocumentRoles": [
            "policy_document",
            "policy_document"
          ],
          "policyDocumentSha256": [
            "b763dd02428a494c4680e640685c27e6bff8535ce263bd7cba1a24c641dd5065",
            "c81851a14a4bb0527b8b319a9f0d6df94c4ebc232d88f312ba8ff6610fc3fc3e"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "supervisory_authority",
          "status": "observed",
          "sourceUrls": [
            "https://www.anthropic.com/legal/privacy",
            "https://www.anthropic.com/legal/consumer-health-data-privacy-policy"
          ],
          "reasonCodes": [
            "row_specific_disclosure_observed"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_1d925b9c",
            "policy_surface_2cbc38f4"
          ],
          "policyDocumentRoles": [
            "policy_document",
            "policy_document"
          ],
          "policyDocumentSha256": [
            "b763dd02428a494c4680e640685c27e6bff8535ce263bd7cba1a24c641dd5065",
            "c81851a14a4bb0527b8b319a9f0d6df94c4ebc232d88f312ba8ff6610fc3fc3e"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        }
      ],
      "dedicatedCookiePolicyPresent": false,
      "policyTextEvidenceProjection": {
        "scanId": "358ac0fd-afba-4d17-aa0e-dc8817f9543e",
        "documents": [
          {
            "finalUrl": "https://www.anthropic.com/legal/privacy",
            "artifactId": "policy_surface_text_1d925b9c_450ef827",
            "artifactUri": "s3://certscore-v2-dag-local-artifacts-eu-west-1-199536052647/v2-dag-lambda/local/358ac0fd-afba-4d17-aa0e-dc8817f9543e/auxiliary/policy_surface_text_1d925b9c_450ef827.txt",
            "contentType": "text/html; charset=utf-8",
            "documentRole": "policy_document",
            "requestedUrl": "https://www.anthropic.com/legal/privacy",
            "observationId": "policy_surface_1d925b9c",
            "redirectChain": [
              "https://www.anthropic.com/legal/privacy"
            ],
            "artifactSha256": "b763dd02428a494c4680e640685c27e6bff8535ce263bd7cba1a24c641dd5065",
            "documentFormat": "text",
            "limitationKeys": [
              "policy_section_inventory_bounded",
              "policy_section_text_bounded"
            ],
            "contentCoverage": {
              "status": "truncated",
              "limitationKeys": [
                "policy_section_inventory_bounded",
                "policy_section_text_bounded"
              ],
              "sourceTextChars": 40064,
              "retainedSectionCount": 17,
              "extractedSectionCount": 42,
              "retainedTableRowCount": 0
            },
            "artifactFileName": "policy_surface_text_1d925b9c_450ef827.txt",
            "extractionStatus": "complete",
            "artifactSizeBytes": 40160,
            "retainedTextChars": 40064,
            "documentFetchState": "fetched",
            "retainedTextSha256": "b763dd02428a494c4680e640685c27e6bff8535ce263bd7cba1a24c641dd5065",
            "targetRelationship": "target_controller",
            "documentOwnerEntity": "Anthropic",
            "ownershipConfidence": 0.98,
            "documentTextCoverage": {
              "status": "complete",
              "limitationKeys": [],
              "sourceTextChars": 40064,
              "retainedTextChars": 40064
            },
            "documentEvaluationState": "usable",
            "documentRoleReasonCodes": [
              "multiple_substantive_disclosure_signals_retained"
            ],
            "governingPolicySelection": {
              "rank": 2,
              "score": 85,
              "state": "supporting",
              "reasonCodes": [
                "eligible_supporting_policy_document",
                "target_controller_document",
                "policy_content_coverage_truncated",
                "complete_policy_text_retention",
                "multiple_substantive_disclosure_signals_retained"
              ],
              "contractVersion": "governing_policy_selection.v1"
            },
            "artifactVerificationStatus": "verified",
            "gdprTransparencyTopicCoverageDiagnostics": [
              {
                "topic": "controller_contact",
                "reasonCodes": [
                  "row_specific_disclosure_observed",
                  "evidence_hash_binding_verified",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "observed",
                "sourceDocumentSha256": "cb6262f0181a63283b25c8a8b29d7c2d80a79ee3713595c719348792602f3982",
                "evidenceSectionSha256": "497c47c5ca94be4c7e7196665a8372e79c4729552617f065ace9518c2f5f4ed5",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated",
                "sectionExtractionMethod": "html_heading_hierarchy"
              },
              {
                "topic": "processing_purposes",
                "reasonCodes": [
                  "row_specific_disclosure_observed",
                  "evidence_hash_binding_verified",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "observed",
                "sourceDocumentSha256": "cb6262f0181a63283b25c8a8b29d7c2d80a79ee3713595c719348792602f3982",
                "evidenceSectionSha256": "7cdcd15f497f11e7b937876e245e70c9515d22d2a8e412f3c7b16660a742a73a",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated",
                "sectionExtractionMethod": "html_heading_hierarchy"
              },
              {
                "topic": "legal_basis",
                "reasonCodes": [
                  "row_specific_disclosure_observed",
                  "evidence_hash_binding_verified",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "observed",
                "sourceDocumentSha256": "b763dd02428a494c4680e640685c27e6bff8535ce263bd7cba1a24c641dd5065",
                "evidenceSectionSha256": "dd3adb5867f9b528376a8cd866cf968d72bde18a8a4e648b19c4b89d0be96fc2",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated",
                "sectionExtractionMethod": "canonical_topic_window"
              },
              {
                "topic": "recipients_or_vendor_categories",
                "reasonCodes": [
                  "row_specific_disclosure_observed",
                  "evidence_hash_binding_verified",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "observed",
                "sourceDocumentSha256": "cb6262f0181a63283b25c8a8b29d7c2d80a79ee3713595c719348792602f3982",
                "evidenceSectionSha256": "298527ceb38eeb2e1b241feaa3a55a470004af3b243e344e60845690d6b8b32d",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated",
                "sectionExtractionMethod": "html_heading_hierarchy"
              },
              {
                "topic": "data_retention",
                "reasonCodes": [
                  "row_specific_disclosure_not_confirmed",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "unknown",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated"
              },
              {
                "topic": "data_subject_rights",
                "reasonCodes": [
                  "row_specific_disclosure_observed",
                  "evidence_hash_binding_verified",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "observed",
                "sourceDocumentSha256": "cb6262f0181a63283b25c8a8b29d7c2d80a79ee3713595c719348792602f3982",
                "evidenceSectionSha256": "c8f16f3c379c382c1d26875a2202f654481af277c91401e2008f186eef6484e1",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated",
                "sectionExtractionMethod": "html_heading_hierarchy"
              },
              {
                "topic": "international_transfers",
                "reasonCodes": [
                  "row_specific_disclosure_observed",
                  "evidence_hash_binding_verified",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "observed",
                "sourceDocumentSha256": "b763dd02428a494c4680e640685c27e6bff8535ce263bd7cba1a24c641dd5065",
                "evidenceSectionSha256": "00c036d53fb6868fcaac22be302e4a128813df421af1ae871efc6896b34fe974",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated",
                "sectionExtractionMethod": "canonical_topic_window"
              },
              {
                "topic": "dpo_contact",
                "reasonCodes": [
                  "row_specific_disclosure_observed",
                  "evidence_hash_binding_verified",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "observed",
                "sourceDocumentSha256": "cb6262f0181a63283b25c8a8b29d7c2d80a79ee3713595c719348792602f3982",
                "evidenceSectionSha256": "414706b2ce9e16ba77b697fe0f0a2d94a63da72d36cffe3b9a3cfc286c3a71d6",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated",
                "sectionExtractionMethod": "html_heading_hierarchy"
              },
              {
                "topic": "supervisory_authority",
                "reasonCodes": [
                  "row_specific_disclosure_observed",
                  "evidence_hash_binding_verified",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "observed",
                "sourceDocumentSha256": "b763dd02428a494c4680e640685c27e6bff8535ce263bd7cba1a24c641dd5065",
                "evidenceSectionSha256": "e4cbf8674ce9ece1ceb080ccc67251b1785efefb327958230dd4b32adcd33a6c",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated",
                "sectionExtractionMethod": "canonical_topic_window"
              },
              {
                "topic": "automated_decision_making_or_profiling",
                "reasonCodes": [
                  "row_specific_disclosure_not_confirmed",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "unknown",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated"
              }
            ]
          },
          {
            "finalUrl": "https://www.anthropic.com/legal/consumer-health-data-privacy-policy",
            "artifactId": "policy_surface_text_2cbc38f4_ee912f89",
            "artifactUri": "s3://certscore-v2-dag-local-artifacts-eu-west-1-199536052647/v2-dag-lambda/local/358ac0fd-afba-4d17-aa0e-dc8817f9543e/auxiliary/policy_surface_text_2cbc38f4_ee912f89.txt",
            "contentType": "text/html; charset=utf-8",
            "documentRole": "policy_document",
            "requestedUrl": "https://www.anthropic.com/legal/consumer-health-data-privacy-policy",
            "observationId": "policy_surface_2cbc38f4",
            "redirectChain": [
              "https://www.anthropic.com/legal/consumer-health-data-privacy-policy"
            ],
            "artifactSha256": "c81851a14a4bb0527b8b319a9f0d6df94c4ebc232d88f312ba8ff6610fc3fc3e",
            "documentFormat": "text",
            "limitationKeys": [],
            "contentCoverage": {
              "status": "complete",
              "limitationKeys": [],
              "sourceTextChars": 3855,
              "retainedSectionCount": 4,
              "extractedSectionCount": 4,
              "retainedTableRowCount": 0
            },
            "artifactFileName": "policy_surface_text_2cbc38f4_ee912f89.txt",
            "extractionStatus": "complete",
            "artifactSizeBytes": 3881,
            "retainedTextChars": 3855,
            "documentFetchState": "fetched",
            "retainedTextSha256": "c81851a14a4bb0527b8b319a9f0d6df94c4ebc232d88f312ba8ff6610fc3fc3e",
            "targetRelationship": "target_controller",
            "documentOwnerEntity": "Consumer Health Data Anthropic",
            "ownershipConfidence": 0.98,
            "documentTextCoverage": {
              "status": "complete",
              "limitationKeys": [],
              "sourceTextChars": 3855,
              "retainedTextChars": 3855
            },
            "documentEvaluationState": "usable",
            "documentRoleReasonCodes": [
              "multiple_substantive_disclosure_signals_retained"
            ],
            "governingPolicySelection": {
              "rank": 1,
              "score": 94,
              "state": "primary",
              "reasonCodes": [
                "highest_ranked_eligible_governing_policy",
                "target_controller_document",
                "complete_policy_content_coverage",
                "complete_policy_text_retention",
                "multiple_substantive_disclosure_signals_retained"
              ],
              "contractVersion": "governing_policy_selection.v1"
            },
            "artifactVerificationStatus": "verified",
            "gdprTransparencyTopicCoverageDiagnostics": [
              {
                "topic": "controller_contact",
                "reasonCodes": [
                  "row_specific_disclosure_not_confirmed"
                ],
                "coverageState": "complete",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "unknown",
                "documentRetentionState": "complete",
                "sectionExtractionState": "complete"
              },
              {
                "topic": "processing_purposes",
                "reasonCodes": [
                  "row_specific_disclosure_observed",
                  "evidence_hash_binding_verified"
                ],
                "coverageState": "complete",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "observed",
                "sourceDocumentSha256": "157c2ac67cab5c9c11452fb393ec43080b253b53bc0afd82787d3e8861417a78",
                "evidenceSectionSha256": "04436c7a10e8b9518b6948a632c6955c11e628e31d509c38b2466342fde2d827",
                "documentRetentionState": "complete",
                "sectionExtractionState": "complete",
                "sectionExtractionMethod": "html_heading_hierarchy"
              },
              {
                "topic": "legal_basis",
                "reasonCodes": [
                  "row_specific_disclosure_not_confirmed"
                ],
                "coverageState": "complete",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "unknown",
                "documentRetentionState": "complete",
                "sectionExtractionState": "complete"
              },
              {
                "topic": "recipients_or_vendor_categories",
                "reasonCodes": [
                  "row_specific_disclosure_not_confirmed"
                ],
                "coverageState": "complete",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "unknown",
                "documentRetentionState": "complete",
                "sectionExtractionState": "complete"
              },
              {
                "topic": "data_retention",
                "reasonCodes": [
                  "row_specific_disclosure_not_confirmed"
                ],
                "coverageState": "complete",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "unknown",
                "documentRetentionState": "complete",
                "sectionExtractionState": "complete"
              },
              {
                "topic": "data_subject_rights",
                "reasonCodes": [
                  "row_specific_disclosure_observed",
                  "evidence_hash_binding_verified"
                ],
                "coverageState": "complete",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "observed",
                "sourceDocumentSha256": "157c2ac67cab5c9c11452fb393ec43080b253b53bc0afd82787d3e8861417a78",
                "evidenceSectionSha256": "01380a5d53f252d4798969fd6e9ed6f27c1eca2272049db47e37bc4677ba48a1",
                "documentRetentionState": "complete",
                "sectionExtractionState": "complete",
                "sectionExtractionMethod": "html_heading_hierarchy"
              },
              {
                "topic": "international_transfers",
                "reasonCodes": [
                  "row_specific_disclosure_not_confirmed"
                ],
                "coverageState": "complete",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "unknown",
                "documentRetentionState": "complete",
                "sectionExtractionState": "complete"
              },
              {
                "topic": "dpo_contact",
                "reasonCodes": [
                  "row_specific_disclosure_not_confirmed"
                ],
                "coverageState": "complete",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "unknown",
                "documentRetentionState": "complete",
                "sectionExtractionState": "complete"
              },
              {
                "topic": "supervisory_authority",
                "reasonCodes": [
                  "row_specific_disclosure_not_confirmed"
                ],
                "coverageState": "complete",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "unknown",
                "documentRetentionState": "complete",
                "sectionExtractionState": "complete"
              },
              {
                "topic": "automated_decision_making_or_profiling",
                "reasonCodes": [
                  "row_specific_disclosure_not_confirmed"
                ],
                "coverageState": "complete",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "unknown",
                "documentRetentionState": "complete",
                "sectionExtractionState": "complete"
              }
            ]
          }
        ],
        "generatedAt": "2026-10-12T19:32:01.354Z",
        "sourceBundle": {
          "uri": "s3://certscore-v2-dag-local-artifacts-eu-west-1-199536052647/v2-dag-lambda/local/358ac0fd-afba-4d17-aa0e-dc8817f9543e/CanonicalEvidenceBundle.json",
          "sha256": "cfb3aaea5174ccdb58b72d9ec060a6d278da4a3d073c19ac470a892d9bf8ad24",
          "sizeBytes": 733580,
          "schemaVersion": "certscore.v2.alpha.1",
          "verificationStatus": "verified"
        },
        "limitationKeys": [
          "policy_section_inventory_bounded",
          "policy_section_text_bounded"
        ],
        "contractVersion": "certscore.policy-text-evidence-projection.v1",
        "projectionStatus": "verified_complete"
      },
      "privacyPolicyEvaluationState": "fetched_insufficient",
      "legalFrameworkValidityMatches": [],
      "missingExpectedPolicySections": [
        "Your privacy controls",
        "Exporting and deleting your information",
        "Retaining your information",
        "Compliance and cooperation with regulators",
        "European requirements"
      ],
      "policy_text_extraction_health": {
        "policyUrls": [
          "https://anthropic.com/legal/privacy",
          "https://anthropic.com/legal/consumer-health-data-privacy-policy"
        ],
        "nanoInvoked": false,
        "nanoSkipReason": "policy_text_input_limited",
        "contractVersion": "certscore.policy-text-extraction-health.v2",
        "policyTextQuality": {
          "usable": true,
          "codeSignalCount": 0,
          "codeSymbolRatio": 0.000569216757741348,
          "policyTermCount": 16,
          "alphabeticWordRatio": 0.804910516195829,
          "accessChallengeSignalCount": 0,
          "naturalLanguageSentenceCount": 234
        },
        "policyUrlRetained": true,
        "extractedTextLength": 43920,
        "policySurfaceObserved": true,
        "detectedPolicyLanguage": "en",
        "extractionFailureReason": "privacy_policy_text_processing_error",
        "minimumTextLengthRequired": 500,
        "policyTextExtractionStatus": "errored",
        "verifiedPolicyDocumentCount": 2,
        "detectedPolicyLanguageSource": "policy_surface",
        "supportedGdprTransparencyLocales": [
          "en",
          "de",
          "fr",
          "es",
          "it",
          "nl",
          "pl",
          "pt",
          "ru",
          "ja",
          "zh",
          "ar",
          "sv",
          "ro",
          "cs",
          "el",
          "hu",
          "da",
          "fi",
          "sk",
          "bg",
          "hr",
          "nb",
          "sl",
          "lt",
          "lv",
          "et",
          "uk",
          "tr",
          "fa",
          "vi",
          "id",
          "ko",
          "th",
          "he",
          "sr",
          "ca",
          "hi",
          "az",
          "gl"
        ],
        "gdprTransparencyLanguageSupported": true,
        "policyTextEvidenceProjectionStatus": "verified_complete",
        "policyTextEvidenceProjectionContractVersion": "certscore.policy-text-evidence-projection.v1"
      },
      "retainedPolicySectionHeadings": [
        "1. Collection of Consumer Health Data",
        "2. Uses of Consumer Health Data Permitted Under Applicable Data Protection Laws",
        "3. How We Disclose Consumer Health Data",
        "4. Rights and Choices",
        "Personal data we collect or receive to train our models",
        "2. Uses of Personal Data Permitted Under Applicable Data Protection Laws",
        "3. Recipients and Third-Party Data Sources",
        "5. Data Transfers",
        "6. Data Retention, Data Lifecycle, and Security Controls",
        "9. Contact Information",
        "10. Legal Bases for Processing",
        "11. Regional Supplemental Disclosures",
        "Supplemental Disclosures for Residents of Canada",
        "Supplemental Disclosures for Residents of Brazil",
        "international transfers of personal data",
        "right to object to processing",
        "data protection officer",
        "data controller",
        "right to lodge a complaint",
        "Policy section"
      ],
      "selectedPrivacyPolicyDocument": {
        "documentUrl": "https://anthropic.com/legal/consumer-health-data-privacy-policy",
        "observationId": "policy_surface_2cbc38f4",
        "traversalDepth": 0,
        "parentSurfaceUrl": null,
        "parentObservationId": null,
        "selectionReasonCodes": []
      },
      "article13_coverage_assessments": [
        {
          "topic": "automated_decision_making_or_profiling",
          "status": "insufficient_retained_evidence",
          "sourceUrls": [
            "https://www.anthropic.com/legal/privacy",
            "https://www.anthropic.com/legal/consumer-health-data-privacy-policy"
          ],
          "reasonCodes": [
            "policy_absence_coverage_preconditions_not_met",
            "typed_topic_coverage_diagnostic_missing_or_limited",
            "policy_document_content_coverage_incomplete"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_1d925b9c",
            "policy_surface_2cbc38f4"
          ],
          "policyDocumentRoles": [
            "policy_document",
            "policy_document"
          ],
          "policyDocumentSha256": [
            "b763dd02428a494c4680e640685c27e6bff8535ce263bd7cba1a24c641dd5065",
            "c81851a14a4bb0527b8b319a9f0d6df94c4ebc232d88f312ba8ff6610fc3fc3e"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "controller_contact",
          "status": "observed",
          "sourceUrls": [
            "https://www.anthropic.com/legal/privacy",
            "https://www.anthropic.com/legal/consumer-health-data-privacy-policy"
          ],
          "reasonCodes": [
            "row_specific_disclosure_observed"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_1d925b9c",
            "policy_surface_2cbc38f4"
          ],
          "policyDocumentRoles": [
            "policy_document",
            "policy_document"
          ],
          "policyDocumentSha256": [
            "b763dd02428a494c4680e640685c27e6bff8535ce263bd7cba1a24c641dd5065",
            "c81851a14a4bb0527b8b319a9f0d6df94c4ebc232d88f312ba8ff6610fc3fc3e"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "data_retention",
          "status": "observed",
          "sourceUrls": [
            "https://www.anthropic.com/legal/privacy",
            "https://www.anthropic.com/legal/consumer-health-data-privacy-policy"
          ],
          "reasonCodes": [
            "row_specific_disclosure_observed"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_1d925b9c",
            "policy_surface_2cbc38f4"
          ],
          "policyDocumentRoles": [
            "policy_document",
            "policy_document"
          ],
          "policyDocumentSha256": [
            "b763dd02428a494c4680e640685c27e6bff8535ce263bd7cba1a24c641dd5065",
            "c81851a14a4bb0527b8b319a9f0d6df94c4ebc232d88f312ba8ff6610fc3fc3e"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "data_subject_rights",
          "status": "observed",
          "sourceUrls": [
            "https://www.anthropic.com/legal/privacy",
            "https://www.anthropic.com/legal/consumer-health-data-privacy-policy"
          ],
          "reasonCodes": [
            "row_specific_disclosure_observed"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_1d925b9c",
            "policy_surface_2cbc38f4"
          ],
          "policyDocumentRoles": [
            "policy_document",
            "policy_document"
          ],
          "policyDocumentSha256": [
            "b763dd02428a494c4680e640685c27e6bff8535ce263bd7cba1a24c641dd5065",
            "c81851a14a4bb0527b8b319a9f0d6df94c4ebc232d88f312ba8ff6610fc3fc3e"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "dpo_contact",
          "status": "observed",
          "sourceUrls": [
            "https://www.anthropic.com/legal/privacy",
            "https://www.anthropic.com/legal/consumer-health-data-privacy-policy"
          ],
          "reasonCodes": [
            "row_specific_disclosure_observed"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_1d925b9c",
            "policy_surface_2cbc38f4"
          ],
          "policyDocumentRoles": [
            "policy_document",
            "policy_document"
          ],
          "policyDocumentSha256": [
            "b763dd02428a494c4680e640685c27e6bff8535ce263bd7cba1a24c641dd5065",
            "c81851a14a4bb0527b8b319a9f0d6df94c4ebc232d88f312ba8ff6610fc3fc3e"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "international_transfers",
          "status": "observed",
          "sourceUrls": [
            "https://www.anthropic.com/legal/privacy",
            "https://www.anthropic.com/legal/consumer-health-data-privacy-policy"
          ],
          "reasonCodes": [
            "row_specific_disclosure_observed"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_1d925b9c",
            "policy_surface_2cbc38f4"
          ],
          "policyDocumentRoles": [
            "policy_document",
            "policy_document"
          ],
          "policyDocumentSha256": [
            "b763dd02428a494c4680e640685c27e6bff8535ce263bd7cba1a24c641dd5065",
            "c81851a14a4bb0527b8b319a9f0d6df94c4ebc232d88f312ba8ff6610fc3fc3e"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "legal_basis",
          "status": "observed",
          "sourceUrls": [
            "https://www.anthropic.com/legal/privacy",
            "https://www.anthropic.com/legal/consumer-health-data-privacy-policy"
          ],
          "reasonCodes": [
            "row_specific_disclosure_observed"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_1d925b9c",
            "policy_surface_2cbc38f4"
          ],
          "policyDocumentRoles": [
            "policy_document",
            "policy_document"
          ],
          "policyDocumentSha256": [
            "b763dd02428a494c4680e640685c27e6bff8535ce263bd7cba1a24c641dd5065",
            "c81851a14a4bb0527b8b319a9f0d6df94c4ebc232d88f312ba8ff6610fc3fc3e"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "processing_purposes",
          "status": "observed",
          "sourceUrls": [
            "https://www.anthropic.com/legal/privacy",
            "https://www.anthropic.com/legal/consumer-health-data-privacy-policy"
          ],
          "reasonCodes": [
            "row_specific_disclosure_observed"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_1d925b9c",
            "policy_surface_2cbc38f4"
          ],
          "policyDocumentRoles": [
            "policy_document",
            "policy_document"
          ],
          "policyDocumentSha256": [
            "b763dd02428a494c4680e640685c27e6bff8535ce263bd7cba1a24c641dd5065",
            "c81851a14a4bb0527b8b319a9f0d6df94c4ebc232d88f312ba8ff6610fc3fc3e"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "recipients_or_vendor_categories",
          "status": "observed",
          "sourceUrls": [
            "https://www.anthropic.com/legal/privacy",
            "https://www.anthropic.com/legal/consumer-health-data-privacy-policy"
          ],
          "reasonCodes": [
            "row_specific_disclosure_observed"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_1d925b9c",
            "policy_surface_2cbc38f4"
          ],
          "policyDocumentRoles": [
            "policy_document",
            "policy_document"
          ],
          "policyDocumentSha256": [
            "b763dd02428a494c4680e640685c27e6bff8535ce263bd7cba1a24c641dd5065",
            "c81851a14a4bb0527b8b319a9f0d6df94c4ebc232d88f312ba8ff6610fc3fc3e"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "supervisory_authority",
          "status": "observed",
          "sourceUrls": [
            "https://www.anthropic.com/legal/privacy",
            "https://www.anthropic.com/legal/consumer-health-data-privacy-policy"
          ],
          "reasonCodes": [
            "row_specific_disclosure_observed"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_1d925b9c",
            "policy_surface_2cbc38f4"
          ],
          "policyDocumentRoles": [
            "policy_document",
            "policy_document"
          ],
          "policyDocumentSha256": [
            "b763dd02428a494c4680e640685c27e6bff8535ce263bd7cba1a24c641dd5065",
            "c81851a14a4bb0527b8b319a9f0d6df94c4ebc232d88f312ba8ff6610fc3fc3e"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        }
      ],
      "discoveredPrivacyPolicyDetails": [
        {
          "url": "https://www.anthropic.com/legal/privacy",
          "status": "fetched",
          "documentFetchState": "fetched",
          "fetchFailureReason": null,
          "linkObservationState": "observed",
          "documentEvaluationState": "usable"
        },
        {
          "url": "https://www.anthropic.com/legal/consumer-health-data-privacy-policy",
          "status": "fetched",
          "documentFetchState": "fetched",
          "fetchFailureReason": null,
          "linkObservationState": "observed",
          "documentEvaluationState": "usable"
        }
      ],
      "article13DisclosureTypesPartial": [],
      "discoveredPrivacyPolicyStatuses": [
        "fetched"
      ],
      "gdprTransparencyEvidenceProfile": "gdpr_transparency_multilingual_article13_v1",
      "policy_text_evidence_projection": {
        "scanId": "358ac0fd-afba-4d17-aa0e-dc8817f9543e",
        "documents": [
          {
            "finalUrl": "https://www.anthropic.com/legal/privacy",
            "artifactId": "policy_surface_text_1d925b9c_450ef827",
            "artifactUri": "s3://certscore-v2-dag-local-artifacts-eu-west-1-199536052647/v2-dag-lambda/local/358ac0fd-afba-4d17-aa0e-dc8817f9543e/auxiliary/policy_surface_text_1d925b9c_450ef827.txt",
            "contentType": "text/html; charset=utf-8",
            "documentRole": "policy_document",
            "requestedUrl": "https://www.anthropic.com/legal/privacy",
            "observationId": "policy_surface_1d925b9c",
            "redirectChain": [
              "https://www.anthropic.com/legal/privacy"
            ],
            "artifactSha256": "b763dd02428a494c4680e640685c27e6bff8535ce263bd7cba1a24c641dd5065",
            "documentFormat": "text",
            "limitationKeys": [
              "policy_section_inventory_bounded",
              "policy_section_text_bounded"
            ],
            "contentCoverage": {
              "status": "truncated",
              "limitationKeys": [
                "policy_section_inventory_bounded",
                "policy_section_text_bounded"
              ],
              "sourceTextChars": 40064,
              "retainedSectionCount": 17,
              "extractedSectionCount": 42,
              "retainedTableRowCount": 0
            },
            "artifactFileName": "policy_surface_text_1d925b9c_450ef827.txt",
            "extractionStatus": "complete",
            "artifactSizeBytes": 40160,
            "retainedTextChars": 40064,
            "documentFetchState": "fetched",
            "retainedTextSha256": "b763dd02428a494c4680e640685c27e6bff8535ce263bd7cba1a24c641dd5065",
            "targetRelationship": "target_controller",
            "documentOwnerEntity": "Anthropic",
            "ownershipConfidence": 0.98,
            "documentTextCoverage": {
              "status": "complete",
              "limitationKeys": [],
              "sourceTextChars": 40064,
              "retainedTextChars": 40064
            },
            "documentEvaluationState": "usable",
            "documentRoleReasonCodes": [
              "multiple_substantive_disclosure_signals_retained"
            ],
            "governingPolicySelection": {
              "rank": 2,
              "score": 85,
              "state": "supporting",
              "reasonCodes": [
                "eligible_supporting_policy_document",
                "target_controller_document",
                "policy_content_coverage_truncated",
                "complete_policy_text_retention",
                "multiple_substantive_disclosure_signals_retained"
              ],
              "contractVersion": "governing_policy_selection.v1"
            },
            "artifactVerificationStatus": "verified",
            "gdprTransparencyTopicCoverageDiagnostics": [
              {
                "topic": "controller_contact",
                "reasonCodes": [
                  "row_specific_disclosure_observed",
                  "evidence_hash_binding_verified",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "observed",
                "sourceDocumentSha256": "cb6262f0181a63283b25c8a8b29d7c2d80a79ee3713595c719348792602f3982",
                "evidenceSectionSha256": "497c47c5ca94be4c7e7196665a8372e79c4729552617f065ace9518c2f5f4ed5",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated",
                "sectionExtractionMethod": "html_heading_hierarchy"
              },
              {
                "topic": "processing_purposes",
                "reasonCodes": [
                  "row_specific_disclosure_observed",
                  "evidence_hash_binding_verified",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "observed",
                "sourceDocumentSha256": "cb6262f0181a63283b25c8a8b29d7c2d80a79ee3713595c719348792602f3982",
                "evidenceSectionSha256": "7cdcd15f497f11e7b937876e245e70c9515d22d2a8e412f3c7b16660a742a73a",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated",
                "sectionExtractionMethod": "html_heading_hierarchy"
              },
              {
                "topic": "legal_basis",
                "reasonCodes": [
                  "row_specific_disclosure_observed",
                  "evidence_hash_binding_verified",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "observed",
                "sourceDocumentSha256": "b763dd02428a494c4680e640685c27e6bff8535ce263bd7cba1a24c641dd5065",
                "evidenceSectionSha256": "dd3adb5867f9b528376a8cd866cf968d72bde18a8a4e648b19c4b89d0be96fc2",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated",
                "sectionExtractionMethod": "canonical_topic_window"
              },
              {
                "topic": "recipients_or_vendor_categories",
                "reasonCodes": [
                  "row_specific_disclosure_observed",
                  "evidence_hash_binding_verified",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "observed",
                "sourceDocumentSha256": "cb6262f0181a63283b25c8a8b29d7c2d80a79ee3713595c719348792602f3982",
                "evidenceSectionSha256": "298527ceb38eeb2e1b241feaa3a55a470004af3b243e344e60845690d6b8b32d",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated",
                "sectionExtractionMethod": "html_heading_hierarchy"
              },
              {
                "topic": "data_retention",
                "reasonCodes": [
                  "row_specific_disclosure_not_confirmed",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "unknown",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated"
              },
              {
                "topic": "data_subject_rights",
                "reasonCodes": [
                  "row_specific_disclosure_observed",
                  "evidence_hash_binding_verified",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "observed",
                "sourceDocumentSha256": "cb6262f0181a63283b25c8a8b29d7c2d80a79ee3713595c719348792602f3982",
                "evidenceSectionSha256": "c8f16f3c379c382c1d26875a2202f654481af277c91401e2008f186eef6484e1",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated",
                "sectionExtractionMethod": "html_heading_hierarchy"
              },
              {
                "topic": "international_transfers",
                "reasonCodes": [
                  "row_specific_disclosure_observed",
                  "evidence_hash_binding_verified",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "observed",
                "sourceDocumentSha256": "b763dd02428a494c4680e640685c27e6bff8535ce263bd7cba1a24c641dd5065",
                "evidenceSectionSha256": "00c036d53fb6868fcaac22be302e4a128813df421af1ae871efc6896b34fe974",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated",
                "sectionExtractionMethod": "canonical_topic_window"
              },
              {
                "topic": "dpo_contact",
                "reasonCodes": [
                  "row_specific_disclosure_observed",
                  "evidence_hash_binding_verified",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "observed",
                "sourceDocumentSha256": "cb6262f0181a63283b25c8a8b29d7c2d80a79ee3713595c719348792602f3982",
                "evidenceSectionSha256": "414706b2ce9e16ba77b697fe0f0a2d94a63da72d36cffe3b9a3cfc286c3a71d6",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated",
                "sectionExtractionMethod": "html_heading_hierarchy"
              },
              {
                "topic": "supervisory_authority",
                "reasonCodes": [
                  "row_specific_disclosure_observed",
                  "evidence_hash_binding_verified",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "observed",
                "sourceDocumentSha256": "b763dd02428a494c4680e640685c27e6bff8535ce263bd7cba1a24c641dd5065",
                "evidenceSectionSha256": "e4cbf8674ce9ece1ceb080ccc67251b1785efefb327958230dd4b32adcd33a6c",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated",
                "sectionExtractionMethod": "canonical_topic_window"
              },
              {
                "topic": "automated_decision_making_or_profiling",
                "reasonCodes": [
                  "row_specific_disclosure_not_confirmed",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "unknown",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated"
              }
            ]
          },
          {
            "finalUrl": "https://www.anthropic.com/legal/consumer-health-data-privacy-policy",
            "artifactId": "policy_surface_text_2cbc38f4_ee912f89",
            "artifactUri": "s3://certscore-v2-dag-local-artifacts-eu-west-1-199536052647/v2-dag-lambda/local/358ac0fd-afba-4d17-aa0e-dc8817f9543e/auxiliary/policy_surface_text_2cbc38f4_ee912f89.txt",
            "contentType": "text/html; charset=utf-8",
            "documentRole": "policy_document",
            "requestedUrl": "https://www.anthropic.com/legal/consumer-health-data-privacy-policy",
            "observationId": "policy_surface_2cbc38f4",
            "redirectChain": [
              "https://www.anthropic.com/legal/consumer-health-data-privacy-policy"
            ],
            "artifactSha256": "c81851a14a4bb0527b8b319a9f0d6df94c4ebc232d88f312ba8ff6610fc3fc3e",
            "documentFormat": "text",
            "limitationKeys": [],
            "contentCoverage": {
              "status": "complete",
              "limitationKeys": [],
              "sourceTextChars": 3855,
              "retainedSectionCount": 4,
              "extractedSectionCount": 4,
              "retainedTableRowCount": 0
            },
            "artifactFileName": "policy_surface_text_2cbc38f4_ee912f89.txt",
            "extractionStatus": "complete",
            "artifactSizeBytes": 3881,
            "retainedTextChars": 3855,
            "documentFetchState": "fetched",
            "retainedTextSha256": "c81851a14a4bb0527b8b319a9f0d6df94c4ebc232d88f312ba8ff6610fc3fc3e",
            "targetRelationship": "target_controller",
            "documentOwnerEntity": "Consumer Health Data Anthropic",
            "ownershipConfidence": 0.98,
            "documentTextCoverage": {
              "status": "complete",
              "limitationKeys": [],
              "sourceTextChars": 3855,
              "retainedTextChars": 3855
            },
            "documentEvaluationState": "usable",
            "documentRoleReasonCodes": [
              "multiple_substantive_disclosure_signals_retained"
            ],
            "governingPolicySelection": {
              "rank": 1,
              "score": 94,
              "state": "primary",
              "reasonCodes": [
                "highest_ranked_eligible_governing_policy",
                "target_controller_document",
                "complete_policy_content_coverage",
                "complete_policy_text_retention",
                "multiple_substantive_disclosure_signals_retained"
              ],
              "contractVersion": "governing_policy_selection.v1"
            },
            "artifactVerificationStatus": "verified",
            "gdprTransparencyTopicCoverageDiagnostics": [
              {
                "topic": "controller_contact",
                "reasonCodes": [
                  "row_specific_disclosure_not_confirmed"
                ],
                "coverageState": "complete",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "unknown",
                "documentRetentionState": "complete",
                "sectionExtractionState": "complete"
              },
              {
                "topic": "processing_purposes",
                "reasonCodes": [
                  "row_specific_disclosure_observed",
                  "evidence_hash_binding_verified"
                ],
                "coverageState": "complete",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "observed",
                "sourceDocumentSha256": "157c2ac67cab5c9c11452fb393ec43080b253b53bc0afd82787d3e8861417a78",
                "evidenceSectionSha256": "04436c7a10e8b9518b6948a632c6955c11e628e31d509c38b2466342fde2d827",
                "documentRetentionState": "complete",
                "sectionExtractionState": "complete",
                "sectionExtractionMethod": "html_heading_hierarchy"
              },
              {
                "topic": "legal_basis",
                "reasonCodes": [
                  "row_specific_disclosure_not_confirmed"
                ],
                "coverageState": "complete",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "unknown",
                "documentRetentionState": "complete",
                "sectionExtractionState": "complete"
              },
              {
                "topic": "recipients_or_vendor_categories",
                "reasonCodes": [
                  "row_specific_disclosure_not_confirmed"
                ],
                "coverageState": "complete",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "unknown",
                "documentRetentionState": "complete",
                "sectionExtractionState": "complete"
              },
              {
                "topic": "data_retention",
                "reasonCodes": [
                  "row_specific_disclosure_not_confirmed"
                ],
                "coverageState": "complete",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "unknown",
                "documentRetentionState": "complete",
                "sectionExtractionState": "complete"
              },
              {
                "topic": "data_subject_rights",
                "reasonCodes": [
                  "row_specific_disclosure_observed",
                  "evidence_hash_binding_verified"
                ],
                "coverageState": "complete",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "observed",
                "sourceDocumentSha256": "157c2ac67cab5c9c11452fb393ec43080b253b53bc0afd82787d3e8861417a78",
                "evidenceSectionSha256": "01380a5d53f252d4798969fd6e9ed6f27c1eca2272049db47e37bc4677ba48a1",
                "documentRetentionState": "complete",
                "sectionExtractionState": "complete",
                "sectionExtractionMethod": "html_heading_hierarchy"
              },
              {
                "topic": "international_transfers",
                "reasonCodes": [
                  "row_specific_disclosure_not_confirmed"
                ],
                "coverageState": "complete",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "unknown",
                "documentRetentionState": "complete",
                "sectionExtractionState": "complete"
              },
              {
                "topic": "dpo_contact",
                "reasonCodes": [
                  "row_specific_disclosure_not_confirmed"
                ],
                "coverageState": "complete",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "unknown",
                "documentRetentionState": "complete",
                "sectionExtractionState": "complete"
              },
              {
                "topic": "supervisory_authority",
                "reasonCodes": [
                  "row_specific_disclosure_not_confirmed"
                ],
                "coverageState": "complete",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "unknown",
                "documentRetentionState": "complete",
                "sectionExtractionState": "complete"
              },
              {
                "topic": "automated_decision_making_or_profiling",
                "reasonCodes": [
                  "row_specific_disclosure_not_confirmed"
                ],
                "coverageState": "complete",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "unknown",
                "documentRetentionState": "complete",
                "sectionExtractionState": "complete"
              }
            ]
          }
        ],
        "generatedAt": "2026-10-12T19:32:01.354Z",
        "sourceBundle": {
          "uri": "s3://certscore-v2-dag-local-artifacts-eu-west-1-199536052647/v2-dag-lambda/local/358ac0fd-afba-4d17-aa0e-dc8817f9543e/CanonicalEvidenceBundle.json",
          "sha256": "cfb3aaea5174ccdb58b72d9ec060a6d278da4a3d073c19ac470a892d9bf8ad24",
          "sizeBytes": 733580,
          "schemaVersion": "certscore.v2.alpha.1",
          "verificationStatus": "verified"
        },
        "limitationKeys": [
          "policy_section_inventory_bounded",
          "policy_section_text_bounded"
        ],
        "contractVersion": "certscore.policy-text-evidence-projection.v1",
        "projectionStatus": "verified_complete"
      },
      "privacyPolicyTextCharacterCount": 43920,
      "retainedCookiePolicyTextExcerpt": "",
      "validatedDisclosureTypesPartial": [],
      "article13DisclosureTypesObserved": [
        "controller_contact",
        "processing_purposes",
        "data_subject_rights",
        "international_transfers",
        "supervisory_authority",
        "dpo_contact",
        "legal_basis",
        "recipients_or_vendor_categories",
        "data_retention"
      ],
      "retainedArticle13SectionEvidence": [
        {
          "surfaceUrl": "https://anthropic.com/legal/consumer-health-data-privacy-policy",
          "coverageArea": "data_retention",
          "evidenceSource": "deterministic",
          "signalObserved": "not_confirmed",
          "extractionLimitation": "section_retained_without_row_specific_disclosure",
          "selectedEvidenceStrength": "limited",
          "selectedPolicySectionUrl": "https://www.anthropic.com/legal/consumer-health-data-privacy-policy",
          "selectedPolicySectionExcerpt": "You may be entitled, in accordance with applicable law, to submit a request to know, access, or delete the consumer health data we have collected about you or withdraw consent to our use of consumer health data. Anthropic gives you access to a variety of tools to help you manage your data. You can access these in your Privacy Settings . Consumer Health Data Privacy Policy \\ Anthropic",
          "selectedPolicySectionHeading": "4. Rights and Choices"
        },
        {
          "surfaceUrl": "https://anthropic.com/legal/consumer-health-data-privacy-policy",
          "coverageArea": "data_subject_rights",
          "evidenceSource": "deterministic",
          "signalObserved": "observed",
          "selectedEvidenceStrength": "strong",
          "selectedPolicySectionUrl": "https://www.anthropic.com/legal/consumer-health-data-privacy-policy",
          "selectedPolicySectionExcerpt": "You may be entitled, in accordance with applicable law, to submit a request to know, access, or delete the consumer health data we have collected about you or withdraw consent to our use of consumer health data. Anthropic gives you access to a variety of tools to help you manage your data. You can access these in your Privacy Settings . Consumer Health Data Privacy Policy \\ Anthropic",
          "selectedPolicySectionHeading": "4. Rights and Choices"
        },
        {
          "surfaceUrl": "https://anthropic.com/legal/consumer-health-data-privacy-policy",
          "coverageArea": "dpo_contact",
          "evidenceSource": "deterministic",
          "signalObserved": "not_confirmed",
          "extractionLimitation": "section_retained_without_row_specific_disclosure",
          "selectedEvidenceStrength": "limited",
          "selectedPolicySectionUrl": "https://www.anthropic.com/legal/consumer-health-data-privacy-policy",
          "selectedPolicySectionExcerpt": "We use your consumer health data for the following purposes: To integrate your third party health application with Claude.ai so that you share your data with Claude to discuss; To prevent and investigate fraud, abuse, and violations of our Usage Policy, unlawful or criminal activity, unauthorized access to or use of personal data or Anthropic systems and networks, to protect our rights and the rights of others, and to meet legal, governmental and institutional policy obligations; In an aggregated form, to help us develop, test and improve our services. We may seek your consent to certain uses of consumer health data in accordance with applicable laws. For example, we may seek your consent to integrate with a third-party health app and collect and process data we collect through the integration. For additional information about how we use data, please review “2. Uses of Personal Data Permitted Under Applicable Data Protection Laws” in our Privacy Policy.",
          "selectedPolicySectionHeading": "2. Uses of Consumer Health Data Permitted Under Applicable Data Protection Laws"
        },
        {
          "surfaceUrl": "https://anthropic.com/legal/consumer-health-data-privacy-policy",
          "coverageArea": "processing_purposes",
          "evidenceSource": "deterministic",
          "signalObserved": "observed",
          "selectedEvidenceStrength": "strong",
          "selectedPolicySectionUrl": "https://www.anthropic.com/legal/consumer-health-data-privacy-policy",
          "selectedPolicySectionExcerpt": "For additional information about how we use data, please review “2.",
          "selectedPolicySectionHeading": "2. Uses of Consumer Health Data Permitted Under Applicable Data Protection Laws"
        },
        {
          "surfaceUrl": "https://anthropic.com/legal/consumer-health-data-privacy-policy",
          "coverageArea": "legal_basis",
          "evidenceSource": "deterministic",
          "signalObserved": "not_confirmed",
          "extractionLimitation": "section_retained_without_row_specific_disclosure",
          "selectedEvidenceStrength": "limited",
          "selectedPolicySectionUrl": "https://www.anthropic.com/legal/consumer-health-data-privacy-policy",
          "selectedPolicySectionExcerpt": "For additional information about the types of data we collect and how we collect it, please review “1. Collection of Personal Data” in our Privacy Policy. You can revoke your consent to third-party integrations that may provide Claude.ai access to consumer health data at any time in your Settings.",
          "selectedPolicySectionHeading": "1. Collection of Consumer Health Data"
        },
        {
          "surfaceUrl": "https://anthropic.com/legal/consumer-health-data-privacy-policy",
          "coverageArea": "recipients_or_vendor_categories",
          "evidenceSource": "deterministic",
          "signalObserved": "not_confirmed",
          "extractionLimitation": "section_retained_without_row_specific_disclosure",
          "selectedEvidenceStrength": "limited",
          "selectedPolicySectionUrl": "https://www.anthropic.com/legal/consumer-health-data-privacy-policy",
          "selectedPolicySectionExcerpt": "How We Disclose Personal Data” in our Privacy Policy. For example, if you choose to integrate the Services with websites, apps, and services managed by third parties, by interacting with these third parties, you may choose to provide information directly to the third party via the Services.",
          "selectedPolicySectionHeading": "3. How We Disclose Consumer Health Data"
        },
        {
          "surfaceUrl": "https://anthropic.com/legal/privacy",
          "coverageArea": "data_retention",
          "evidenceSource": "deterministic",
          "signalObserved": "not_confirmed",
          "extractionLimitation": "selected_policy_section_truncated_by_retention_limit",
          "selectedEvidenceStrength": "limited",
          "selectedPolicySectionUrl": "https://www.anthropic.com/legal/privacy",
          "selectedPolicySectionExcerpt": "Anthropic retains your personal data for as long as reasonably necessary for the purposes and criteria outlined in this Privacy Policy and explained further in our privacy center . When the personal data collected is no longer required by us, we and our service providers will perform the necessary procedures for destroying, deleting, erasing, or converting it into an anonymous form as permitted or required under applicable laws. Aggregated or De-Identified Information We apply aggregation and de-identification techniques where appropriate as part of our data minimization practices. For example, we may process personal data in an aggregated or de-identified form to analyze and improve the effectiveness of our Services including to conduct analytics, conduct research, study user behavior, and train our AI models as permitted under applicable laws. For instance: When you submit Feedback, we disassociate Inputs and Outputs from your user ID to use them for training and improving our models.",
          "selectedPolicySectionHeading": "6. Data Retention, Data Lifecycle, and Security Controls"
        },
        {
          "surfaceUrl": "https://anthropic.com/legal/privacy",
          "coverageArea": "data_subject_rights",
          "evidenceSource": "deterministic",
          "signalObserved": "observed",
          "extractionLimitation": "selected_policy_section_truncated_by_retention_limit",
          "selectedEvidenceStrength": "strong",
          "selectedPolicySectionUrl": "https://www.anthropic.com/legal/privacy",
          "selectedPolicySectionExcerpt": "Policy. Data Subject's Rights. LGPD grants certain rights regarding your personal data, which differ from the ones listed under section 4. We will respond to your requests to exercise your rights below in accordance with applicable law: Confirmation of whether your data is being processed. You have the right to receive a confirmation on whether Anthropic processes your data. Access to your data.",
          "selectedPolicySectionHeading": "Supplemental Disclosures for Residents of Brazil"
        },
        {
          "surfaceUrl": "https://anthropic.com/legal/privacy",
          "coverageArea": "international_transfers",
          "evidenceSource": "deterministic",
          "signalObserved": "observed",
          "selectedEvidenceStrength": "strong",
          "selectedPolicySectionUrl": "https://www.anthropic.com/legal/privacy",
          "selectedPolicySectionExcerpt": "Data Transfers Anthropic is a global company, and when you access our Services, your personal data is transferred to our servers in the US, or to other countries outside the European Economic Area (“EEA”) and the UK for the purposes outlined in Section 2 of this Privacy Policy, for example to provide you with the Service, or to train our models, or to conduct research.",
          "selectedPolicySectionHeading": "Policy section"
        },
        {
          "surfaceUrl": "https://anthropic.com/legal/privacy",
          "coverageArea": "supervisory_authority",
          "evidenceSource": "deterministic",
          "signalObserved": "observed",
          "selectedEvidenceStrength": "strong",
          "selectedPolicySectionUrl": "https://www.anthropic.com/legal/privacy",
          "selectedPolicySectionExcerpt": "If you live in Brazil, you have the right to lodge a complaint with the Brazilian Data Protection Authority (ANPD) .",
          "selectedPolicySectionHeading": "right to lodge a complaint"
        },
        {
          "surfaceUrl": "https://anthropic.com/legal/privacy",
          "coverageArea": "dpo_contact",
          "evidenceSource": "deterministic",
          "signalObserved": "observed",
          "extractionLimitation": "selected_policy_section_truncated_by_retention_limit",
          "selectedEvidenceStrength": "strong",
          "selectedPolicySectionUrl": "https://www.anthropic.com/legal/privacy",
          "selectedPolicySectionExcerpt": "Data Protection Officer at [email protected]",
          "selectedPolicySectionHeading": "9. Contact Information"
        },
        {
          "surfaceUrl": "https://anthropic.com/legal/privacy",
          "coverageArea": "controller_contact",
          "evidenceSource": "deterministic",
          "signalObserved": "observed",
          "extractionLimitation": "selected_policy_section_truncated_by_retention_limit",
          "selectedEvidenceStrength": "strong",
          "selectedPolicySectionUrl": "https://www.anthropic.com/legal/privacy",
          "selectedPolicySectionExcerpt": "If you live in the European Economic Area (EEA), UK or Switzerland (the “European Region”), the data controller responsible for your personal data is Anthropic Ireland, Limited. If you live outside the European Region, the data controller responsible for your personal data is Anthropic PBC. If you have any questions about this Privacy Policy, or have any questions, complaints or requests regarding your personal data, you can contact us as described below: Anthropic PBC with a registered address at 548 Market St, PMB 90375, San Francisco, CA 94104 (United States). Anthropic Ireland, Limited with a registered address at 6th Floor, South Bank House, Barrow Street, Dublin 4, D04 TR29 (Ireland). You can email us at [email protected] and contact our Data Protection Officer at [email protected] . Please note that under many countries' laws, you have the right to lodge a complaint with the supervisory authority in the place in which you live or work. A full list of EU supervisory authorities’ contact details is available here . If you live or work in the UK, you have the right to lodge a complaint with the UK Information Commissioner’s Office .",
          "selectedPolicySectionHeading": "9. Contact Information"
        },
        {
          "surfaceUrl": "https://anthropic.com/legal/privacy",
          "coverageArea": "processing_purposes",
          "evidenceSource": "deterministic",
          "signalObserved": "observed",
          "extractionLimitation": "selected_policy_section_truncated_by_retention_limit",
          "selectedEvidenceStrength": "strong",
          "selectedPolicySectionUrl": "https://www.anthropic.com/legal/privacy",
          "selectedPolicySectionExcerpt": "We use your personal data for the following purposes: To provide, maintain and facilitate any products and services offered to you with respect to your Anthropic account, which are governed by our Terms of Service; To provide, maintain and facilitate optional services and features that enhance platform functionality and user experience; To provide you with service updates, communications, and to provide tailored recommendations about our Services that may be of interest to you; To create and administer your Anthropic account; To fac",
          "selectedPolicySectionHeading": "2. Uses of Personal Data Permitted Under Applicable Data Protection Laws"
        },
        {
          "surfaceUrl": "https://anthropic.com/legal/privacy",
          "coverageArea": "legal_basis",
          "evidenceSource": "deterministic",
          "signalObserved": "observed",
          "selectedEvidenceStrength": "strong",
          "selectedPolicySectionUrl": "https://www.anthropic.com/legal/privacy",
          "selectedPolicySectionExcerpt": "Objection: the right to object to processing of your personal data, including profiling conducted on grounds of public or legitimate interest. In places where such a right applies, we will no longer process the personal data in case of such objection unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or for the establishment, exercise or defense of legal claims.",
          "selectedPolicySectionHeading": "right to object to processing"
        },
        {
          "surfaceUrl": "https://anthropic.com/legal/privacy",
          "coverageArea": "recipients_or_vendor_categories",
          "evidenceSource": "deterministic",
          "signalObserved": "observed",
          "extractionLimitation": "selected_policy_section_truncated_by_retention_limit",
          "selectedEvidenceStrength": "strong",
          "selectedPolicySectionUrl": "https://www.anthropic.com/legal/privacy",
          "selectedPolicySectionExcerpt": "Anthropic will disclose personal data to, or receive personal data from, the following categories of third parties for the purposes explained in this Policy: Affiliates & corporate partners: Anthropic discloses the categories of personal data described above between and among its affiliates and related entities.",
          "selectedPolicySectionHeading": "3. Recipients and Third-Party Data Sources"
        },
        {
          "surfaceUrl": "https://anthropic.com/legal/privacy",
          "coverageArea": "automated_decision_making_or_profiling",
          "evidenceSource": "deterministic",
          "signalObserved": "not_confirmed",
          "extractionLimitation": "selected_policy_section_truncated_by_retention_limit",
          "selectedEvidenceStrength": "limited",
          "selectedPolicySectionUrl": "https://www.anthropic.com/legal/privacy",
          "selectedPolicySectionExcerpt": "and facilitate optional services and features that enhance platform functionality and user experience; To provide you with service updates, communications, and to provide tailored recommendations about our Services that may be of interest to you; To create and administer your Anthropic account; To facilitate payments for products and services provided by Anthropic; To prevent and investigate fraud, abuse, and violations of our Usage Policy , unlawful or criminal activity, unauthorized access to or use of personal data or Anthropic systems and networks, to protect our rights and the rights of others, to protect your safety or that of any other person, and to meet legal, governmental and institutional policy obligations; To investigate and resolve disputes; To investigate and resolve security issues; To debug and to identify and repair errors that impair existing functionality; To improve the Services and conduct research, including training our",
          "selectedPolicySectionHeading": "2. Uses of Personal Data Permitted Under Applicable Data Protection Laws"
        }
      ],
      "retainedPrivacyPolicyTextExcerpt": "This Consumer Health Data Privacy Policy explains how we collect, use, disclose, and process “consumer health data” in the event that we process such data. This Consumer Health Data Privacy Policy applies only where Anthropic acts as a data controller—for example, when you interact with Claude.ai or other products as a consumer for personal use (“Services”). These supplemental disclosures contain additional information relevant to residents of Washington or residents in states with similar “consumer health data” laws. This content should be read in conjunction with the rest of our Privacy Policy . In case of conflict between our Privacy Policy and these supplemental disclosures, the supplemental disclosures shall prevail, where applicable. 1. Collection of Consumer Health Data We collect the following categories of consumer health data where you provide it to us directly, including if you elect to connect a third-party application to Claude.ai that contains your consumer health data: Information about your health-related conditions, symptoms, status, diagnoses, medical interventions, surgeries, procedures, testing, or treatments; Vital signs, bodily functions, symptoms, or health measurements that reveal your health status; Information about your use or purchase of prescribed medication; Biometric and genetic data; Precise location information; Information, including location or precise location information, that could identify your attempt to seek health care services or supplies; and Other information that may be used to infer or derive consumer health data. For additional information about the types of data we collect and how we collect it, please review “1. Collection of Personal Data” in our Privacy Policy. You can revoke your consent to third-party integrations that may provide Claude.ai access to consumer health data at any time in your Settings. 2. Uses of Consumer Health Data Permitted Under Applicable Data Protection Laws We use your consumer health data for the following purposes: To integrate your third party health application with Claude.ai so that you share your data with Claude to discuss; To prevent and investigate fraud, abuse, and violations of our Usage Policy, unlawful or criminal activity, unauthorized access to or use of personal data or Anthropic systems and networks, to protect our rights and the rights of others, and to meet legal, governmental and institutional policy obligations; In an aggregated form, to help us develop, test and improve our services. We may seek your consent to certain uses of consumer health data in accordance with applicable laws. For example, we may seek your consent to integrate with a third-party health app and collect and process data we collect through the integration. For additional information about how we use data, please review “2. Uses of Personal Data Permitted Under Applicable Data Protection Laws” in our Privacy Policy. 3. How We Disclose Consumer Health Data Anthropic will disclose the categories of consumer health data described above to the categories of third parties described in “3. How We Disclose Personal Data” in our Privacy Policy. For example, if you choose to integrate the Services with websites, apps, and services managed by third parties, by interacting with these third parties, you may choose to provide information directly to the third party via the Services. To learn more about your third party integrations, please review Setting Up Claude Integrations . 4. Rights and Choices You may be entitled, in accordance with applicable law, to submit a request to know, access, or delete the consumer health data we have collected about you or withdraw consent to our use of consumer health data. Anthropic gives you access to a variety of tools to help you manage your data. You can access these in your Privacy Settings . Anthropic is an AI safety and research company working to build reliable, interpretable, and steerable AI systems. This Privacy Policy explains how we collect, use, disclose, and process your personal data when you use our website, Claude.ai, or other Anthropic products and services (the “Services”). This Privacy Policy does not apply to content that we process on behalf of customers of our business offerings, such as our Enterprise accounts. Our use of that data is governed by our customer agreements covering access to and use of those offerings. Please see our Non-User Privacy Policy for information on how our large language models are ‘trained’ and how personal data obtained from third party sources, including where others may submit personal data when using our services, may be used when developing or delivering our products and services. This Privacy Policy also describes your privacy rights. More information about your rights, and how to exercise them, is set out in Section 4 (“Rights and Choices”). If you are located in Canada, Brazil, or the Republic of Korea, please read the relevant Regional Supplemental Disclosure which applies to you. If you are located in Washington or a state with similar consumer health data laws, please read our Consumer Health Data Privacy Policy which applies to you if you integrate third party health applications with Claude. 1. Collection of Personal Data We collect the following categories of personal data: Personal data you provide to us directly Identity and Contact Data: Anthropic collects identifiers, including your name, email address, and phone number when you sign up for an Anthropic account, or to receive information on our Services. We may also collect or generate indirect identifiers (e.g., “USER12345”). Payment Information: We shall collect your payment information if you choose to purchase access to Anthropic’s Services. Inputs and Outputs: You are able to interact with our Services in a variety of formats, including but not limited to chat, coding, agentic sessions (where Claude performs multi-step tasks or takes actions on your behalf), and connected services. The content you submit to the Services through these interactions, including via third-party applications, services, and content you choose to upload, integrate or interact with using our Services, are your “Inputs”. Inputs generate responses and actions (“Outputs”). If you include personal data or reference external content in your Inputs, we will collect that information and it may be reproduced in your Outputs. Depending on the permissions you grant Claude, some Outputs may result in actions with effects outside the Services, such as sending communications, modifying files, or interacting with third-party services on your behalf. Feedback on your use of our Services: We appreciate feedback, including ideas and suggestions for improvement or rating an Output in response to an Input (\"Feedback\"). If you rate an Output in response to an Input—for example, by using the thumbs up/thumbs down icon—we may store the entire related conversation as part of your Feedback. You can learn more about how we use Feedback here . Study Participation Data: If you participate in Anthropic research studies, surveys, or interviews (for example our Anthropic Interviewer), we collect the responses you provide, associated account data, and related Technical Information. We may combine this data with other data from your account for aggregated analysis. Communication Information: If you communicate with us, including via our chatbot on our Help site, we collect your name, contact information, and the contents of any messages you send. Verification Data: In certain circumstances, we may ask you to verify your age or identity. If you choose to do so, data we will collect includes, depending on the method: an image of your government-issued identity document and the information appearing on it (such as your ID number and date of birth); your image in photo or video form, facial geometry templates (which may be considered ‘biometric data’ in some jurisdictions); and the result of the verification (for example, whether your age meets the applicable threshold). When you provide Inputs—including by uploading files, granting Claude access to third-party services, or instructing Claude to retrieve or act on information—you are responsible for ensuring you have the necessary rights, permissions, or authority to do so. Personal data we receive automatically from your use of the Services When you use the Services, we also receive certain technical data automatically (described below, collectively “ Technical Information ”). This includes: Device and Connection Information: Consistent with your device or browser permissions, your device or browser automatically sends us information about when and how you install, access, or use our Services. This includes information such as your device type, operating system information, browser information and web page referers, mobile network, connection information, mobile operator or internet service provider (ISP), time zone setting, IP address (including information about the location of the device derived from your IP address), identifiers (including device or advertising identifiers, probabilistic identifiers, and other unique personal or online identifiers), and device location. Usage Information: We collect information about your use of the Services, such as the dates and times of access, browsing history, search, information about the links you click and about third-party applications, services, and content you integrate or interact with, pages you view, and other information about how you use the Services, and technology on the devices you use to access the Services. Log and Troubleshooting Information: We collect information about how our Services are performing when you use them. This information includes log files. If you or your device experiences an error, we may collect information about the error, the time the error occurred, the feature being used, the state of the application when the error occurred, and any communications or content provided at the time the error occurred. Cookies & Similar Technologies: We and our service providers use cookies, scripts, or similar technologies (“Cookies”) to manage the Services and to collect information about you and your use of the Services. These technologies help us to recognize you, customize or personalize your experience, market additional products or services to you, and analyze the use of our Services to make them safer and more useful to you. For more details about how we use these technologies, and your opt-out controls and other options, please visit our Cookie Policy . Personal data we collect or receive to train our models Anthropic obtains personal data from third party sources in order to train our models. Specifically, we train our models using data from the following sources: Publicly available information via the Internet Datasets that we obtain through commercial agreements with third party businesses Data that our users or crowd workers provide, including Inputs and Outputs from our Services (unless users opt out) Feedback that users explicitly provide about our Services Materials flagged for safety, security, or policy review Data that we generate internally For more information about how we collect and use personal data to develop our language models that power our Services, the steps we take to minimize the privacy impact on individuals through the training process, and your choices with respect to that information, please see our separate Non-User Privacy Policy . 2. Uses of Personal Data Permitted Under Applicable Data Protection Laws We use your personal data for the following purposes: To provide, maintain and facilitate any products and services offered to you with respect to your Anthropic account, which are governed by our Terms of Service; To provide, maintain and facilitate optional services and features that enhance platform functionality and user experience; To provide you with service updates, communications, and to provide tailored recommendations about our Services that may be of interest to you; To create and administer your Anthropic account; To facilitate payments for products and services provided by Anthropic; To prevent and investigate fraud, abuse, and violations of our Usage Policy , unlawful or criminal activity, unauthorized access to or use of personal data or Anthropic systems and networks, to protect our rights and the rights of others, to protect your safety or that of any other person, and to meet legal, governmental and institutional policy obligations; To investigate and resolve disputes; To investigate and resolve security issues; To debug and to identify and repair errors that impair existing functionality; To improve the Services and conduct research, including training our models and conducting broader research on AI-related topics such as the societal impacts of AI; and To enforce our Terms of Service and similar terms and agreements, including our Usage Policy . We may use your Inputs and Outputs to train and improve Anthropic AI models, unless you opt out through your account settings. Even if you opt-out, we will use Inputs and Outputs for model improvement when: (i) your conversations are flagged for safety review to improve our ability to detect harmful content, enforce our policies, or advance AI safety research, or (ii) you've explicitly reported the materials to us (for example via our feedback mechanisms). Please see Section 10 below for details of our legal bases for processing your personal data. 3. Recipients and Third-Party Data Sources Anthropic will disclose personal data to, or receive personal data from, the following categories of third parties for the purposes explained in this Policy: Affiliates & corporate partners: Anthropic discloses the categories of personal data described above between and among its affiliates and related entities. Service providers & business partners: Anthropic may receive and disclose the categories of personal data described above with service providers and business partners for a variety of business purposes, including website and data hosting, ensuring compliance with industry standards, research, auditing, data processing, investigating and resolving safety and security issues, preventing and investigating fraud, abuse, and violations of our Usage Policy, and providing you with the Services. Your Organization and Administrator: If you use an email address owned by your employer or another organization, your account may be linked to the organization’s enterprise account with us, as described in our Consumer Terms of Service. Anthropic may also receive or disclose personal data in the following circumstances: As part of a significant corporate event: If Anthropic is involved in a merger, corporate transaction, bankruptcy, or other situation involving the transfer of business assets, Anthropic will receive or disclose your personal data as part of these corporate transactions. Third-Party Websites, Integrations, and Services: Our Services allow you to connect to and interact with third-party applications, services, and content (“Third-Party Services”) via the Services and through integrations you enable, such as Connectors, plugins, webhooks, and external APIs. When you connect to or interact with Third-Party Services: Claude may send your Inputs, Outputs, and instructions to Third-Party Services to perform actions on your behalf (such as reading files, sending messages, or retrieving information). The Third-Party Service receives this data directly and processes it according to its own privacy policy. Claude may retrieve content and data from Third-Party Services you interact with. This data becomes part of your Inputs. Some integrations or features may allow Claude to access Third-Party Services on an ongoing basis until you disable the feature or disconnect the integration in your settings. Anthropic does not control, and is not responsible for, the data practices of Third-Party Services. Before enabling an integration, granting Claude access to, or instructing Claude to take actions on a Third-Party Service, you should ensure you have the authority to grant such access and that doing so complies with any applicable terms, policies, or confidentiality obligations. Before enabling an integration, you should review the third party's privacy policy. Our Services may also link to third-party websites (such as social media); by following these links, you provide information directly to those third parties. Our linking to, or supporting an integration with, a Third-Party Service does not mean we endorse it or speak for that third party. Pursuant to regulatory or legal requirements, safety, rights of others, and to enforce our rights or our terms. We may share personal data with government authorities, law enforcement, or other third parties where, based on the information available to us, we have a good-faith belief that disclosure is reasonably necessary to (i) comply with applicable law, regulation or legal process, including for legal, tax or accounting purposes, or in response to an enforceable governmental request; (ii) prevent serious harm to any person or to property; (iii) detect, prevent, or otherwise address fraud or other illegal activity; or (iv) enforce our terms, or protect the rights, property, security, or safety of Anthropic, our users, or others. Research publications: We may publish aggregated, de-identified, or anonymized findings from our research, including research into how our Services are used and AI safety research. With an individual's consent: Anthropic will otherwise disclose personal data when an individual gives us permission or directs us to disclose this information, including as a part of our Services. You can find information about the third parties Anthropic engages to help us process personal data here . 4. Rights and Choices Depending on where you live and the laws that apply in your country of residence, you may enjoy certain rights regarding your personal data, as described further below. However, please be aware that these rights are limited, and that the processes by which we may need to action your requests regarding our training dataset are complex. We may also decline a request if we have a lawful reason for doing so. That said, we strive to prioritize the protection of personal data, and comply with all applicable privacy laws. To exercise your rights, you or an authorized agent may submit a request by contacting us . After we receive your request, we may verify it by requesting information sufficient to confirm your identity (e.g. email address, billing details). Where a third party representative submits a request on behalf of a data subject, we require evidence of authorization to act on behalf of the data subject. We will respond to your request within the period required by the data protection law that applies to you. For example, where the EU GDPR or UK GDPR applies, we will respond within one calendar month of receiving a verifiable request, and where your request is complex or you have made a number of requests within a short timeframe, we may extend that period by up to a further two months. Where another law applies to you and sets a different period, we will respond within that period. You may also have the right to appeal requests that we deny by emailing [email protected]. Anthropic will not discriminate based on the exercising of privacy rights you may have. Set out below is a summary of the rights which you may enjoy, depending on the laws that apply in your country of residence. Right to know: the right to know what personal data Anthropic processes about you, including the categories of personal data, the categories of sources from which it is collected, the business or commercial purposes for collection, and the categories of third parties to whom we disclose it. Access & data portability: the right to request a copy of the personal data Anthropic processes about you, subject to certain exceptions and conditions. In certain cases and subject to applicable law, you have the right to port your information. Deletion: the right to request that we delete personal data collected from you when you use our Services, subject to certain exceptions. You also are able to delete individual conversations , which will be removed immediately from your conversation history and automatically deleted from our back-end within 30 days. Learn more here . Correction: the right to request that we correct inaccurate personal data Anthropic retains about you, subject to certain exceptions. Please note that we cannot guarantee the factual accuracy of Outputs. If Outputs contain factually inaccurate personal data relating to you, you can submit a correction request and we will make a reasonable effort to correct this information—but due to the technical complexity of our large language models, it may not always be possible for us to do so. Objection: the right to object to processing of your personal data, including profiling conducted on grounds of public or legitimate interest. In places where such a right applies, we will no longer process the personal data in case of such objection unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or for the establishment, exercise or defense of legal claims. If we use your information for direct marketing, you can object and opt out of future direct marketing messages using the unsubscribe link in such communications. Restriction: the right to restrict our processing of your personal data in certain circumstances. Withdrawal of consent: Where Anthropic’s processing of your personal data is based on consent, you have the right to withdraw your consent. For example, you can disconnect your health app integration and withdraw your consent in your settings . The withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal. Automated decision-making: Anthropic does not engage in decision making based solely on automated processing or profiling in a manner which produces a legal effect (i.e., impacts your legal rights) or significantly affects you in a similar way (e.g., significantly affects your financial circumstances or ability to access essential goods or services). Sale & targeted Anthropic marketing of its products and services: Anthropic does not “sell” your personal data as that term is defined by applicable laws and regulations. You can opt-out of sharing your personal data for targeted advertising to promote our products and services, and we will honor global privacy controls. To learn more, click here . Anthropic gives you access to a variety of tools to help you manage your data. You can access these in your Privacy Settings . 5. Data Transfers Anthropic is a global company, and when you access our Services, your personal data is transferred to our servers in the US, or to other countries outside the European Economic Area (“EEA”) and the UK for the purposes outlined in Section 2 of this Privacy Policy, for example to provide you with the Service, or to train our models, or to conduct research. This may be a direct provision of your personal data to us, or a transfer that we or a third party make. You can find more details about the affiliates and third parties we transfer data to, including their locations, in our Trust Center. Where Anthropic transfers information outside the EEA or the UK, we ensure it benefits from an adequate level of data protection by relying on: Adequacy decisions: These are decisions from the European Commission under Article 45 GDPR (or equivalent decisions under other laws) where they recognize that a country outside of the EEA offers an adequate level of data protection. We transfer your information as described in “Collection of Personal Data” to some countries with adequacy decisions, such as the countries with EU adequacy decisions listed here and countries with UK adequacy decisions listed here ; or Standard contractual clauses: The European Commission has approved contractual clauses under Article 46 GDPR that allows companies in the EEA to transfer data outside the EEA. These (and their approved equivalent for the UK and Switzerland) are called standard contractual clauses. We rely on standard contractual clauses to transfer information as described in “Collection of Personal Data” to certain affiliates and third parties in countries without an adequacy decision. In certain situations, we rely on derogations provided for under applicable data protection law to transfer information to a third country. If you have questions about international transfers, or the safeguards we apply, you can contact us . 6. Data Retention, Data Lifecycle, and Security Controls Anthropic retains your personal data for as long as reasonably necessary for the purposes and criteria outlined in this Privacy Policy and explained further in our privacy center . When the personal data collected is no longer required by us, we and our service providers will perform the necessary procedures for destroying, deleting, erasing, or converting it into an anonymous form as permitted or required under applicable laws. Aggregated or De-Identified Information We apply aggregation and de-identification techniques where appropriate as part of our data minimization practices. For example, we may process personal data in an aggregated or de-identified form to analyze and improve the effectiveness of our Services including to conduct analytics, conduct research, study user behavior, and train our AI models as permitted under applicable laws. For instance: When you submit Feedback, we disassociate Inputs and Outputs from your user ID to use them for training and improving our models. If our systems flag Inputs or Outputs for harmful content or for potentially violating our policies, we disassociate the content from your user ID to train our trust and safety internal classification and generative models. However, we may re-identify the Inputs or Outputs to enforce our Terms of Service or Usage Policy with the responsible user if necessary. To improve user experience, we may analyze and aggregate general user behavior and usage data. This information does not identify individual users. Where data is de-identified, Anthropic will maintain and use this information in its de-identified form, and will not attempt to re-identify such information, except as permitted by law. Security Controls Relating to our Processing of Personal Data We implement appropriate technical and organizational security measures designed to protect personal data from loss, misuse, and unauthorized access, disclosure, alteration, or destruction. 7. Children Our Services are not directed towards, and we do not knowingly collect, use, disclose, sell, or share any information from children under the age of 18. We have measures in place to detect and remove children from our Services. If you become aware that a child under the age of 18 has provided any personal data to us while using our Services, please email us at [email protected] and we will investigate the matter and, if appropriate, delete the personal data. 8. Changes to Our Privacy Policy Anthropic may update this Privacy Policy from time to time. We will notify you of any material changes to this Privacy Policy, as appropriate, and update the Effective Date at the top of https://www.anthropic.com/legal/privacy . You can view a summary of privacy policy changes and previous versions in our Privacy Center . 9. Contact Information If you live in the European Economic Area (EEA), UK or Switzerland (the “European Region”), the data controller responsible for your personal data is Anthropic Ireland, Limited. If you live outside the European Region, the data controller responsible for your personal data is Anthropic PBC. If you have any questions about this Privacy Policy, or have any questions, complaints or requests regarding your personal data, you can contact us as described below: Anthropic PBC with a registered address at 548 Market St, PMB 90375, San Francisco, CA 94104 (United States). Anthropic Ireland, Limited with a registered address at 6th Floor, South Bank House, Barrow Street, Dublin 4, D04 TR29 (Ireland). You can email us at [email protected] and contact our Data Protection Officer at [email protected] . Please note that under many countries' laws, you have the right to lodge a complaint with the supervisory authority in the place in which you live or work. A full list of EU supervisory authorities’ contact details is available here . If you live or work in the UK, you have the right to lodge a complaint with the UK Information Commissioner’s Office . If you live in Brazil, you have the right to lodge a complaint with the Brazilian Data Protection Authority (ANPD) . If you live in Australia, you have the right to lodge a complaint with the Office of the Australian Information Commissioner . 10. Legal Bases for Processing Purpose Type of Data Legal Basis To provide, maintain and facilitate any products and services offered to you with respect to your Anthropic account, which are governed by our Terms of Service Identity and Contact Data Payment Information Feedback Inputs and Outputs Technical Information Contract To provide, maintain and facilitate optional services and features that enhance platform functionality and user experience Identity and Contact Data Feedback Study Participation Data Inputs and Outputs Technical Information Consent (for example for precise device location or for health app integrations) Legitimate interests It is in our and our users' legitimate interests to expand our product features and deliver additional services that enhance platform functionality and user experience. To provide you with service updates, communications, and to provide tailored recommendations about our Services that may be of interest to you. Identity and Contact Data Communication Information Technical Information Study Participation Data Where necessary to perform a contract with you, such as processing your contact information to send you a technical announcement about the Services. Your consent when we ask for it to process your personal data for a specific purpose that we communicate to you, such as processing your contact information to send you certain forms of marketing communications. Legitimate Interests It is in our legitimate interests to promote our Services that may be of interest to you, including sending direct marketing. To create and administer your Anthropic account Identity and Contact Data Payment Information Feedback Verification Data Contract To facilitate payments for products and services provided by Anthropic Identity and Contact Data Payment Information Contract To prevent and investigate fraud, abuse, and violations of our Usage Policy , unlawful or criminal activity, unauthorized access to or use of personal data or Anthropic systems and networks, to protect our rights and the rights of others, to protect your safety or that of any other person, and to meet legal, governmental and institutional policy obligations Identity and Contact Data Payment Information Inputs and Outputs Technical Information Verification Data Study Participation Data Consent (for example where you choose to verify your identity using biometric data) Legitimate interests Legal obligation Vital Interests It is in our legitimate interests to protect our business, employees and users from illegal activities, inappropriate behavior or violations of terms that would be detrimental. We also have a duty to cooperate with authorities. To investigate and resolve disputes Identity and Contact Data Payment Information Inputs and Outputs Feedback Technical Information Study Participation Data Communication Information Legitimate interests Legal obligation It is in our legitimate interests to fully understand and make reasonable efforts to resolve customer complaints in order to improve user satisfaction. We also have a legal obligation in some cases. To investigate and resolve security issues Identity and Contact Data Payment Information Feedback Technical Information Inputs and Outputs Study Participation Data Communication Information Verification Data Legal obligation Legitimate interests It is in our legitimate interests to protect user data and our systems from intrusion or compromise through monitoring and swift response. We also have a legal obligation to provide adequate security safeguards. To debug and to identify and repair errors that impair existing functionality Identity and Contact Data Feedback Technical Information Inputs and Outputs Legitimate interests It is in our legitimate interests to maintain continuous functioning of our services and rapid correction of problems to ensure a positive user experience that encourages engagement. To improve the Services and conduct research (excluding model training) Identity and Contact Data Feedback Study Participation Data Technical Information Inputs and Outputs Scientific Research Legitimate interests It is in our legitimate interests and in the interest of Anthropic users to evaluate the use of the Services and adoption of new features to inform the development of future features and improve direction and development of the Services. Our research also benefits the AI industry and society: it investigates the safety, inner workings, and societal impact of AI models so that artificial intelligence has a positive impact on society as it becomes increasingly advanced and capable. To improve the Services and conduct research (including model training). See our Non-User Privacy Policy for more details on the data used to train our models, and the different stages of development. Feedback Study Participation Data Inputs and Outputs Data provided through the Development Partner Program Scientific Research Consent Legitimate interests It is in our legitimate interests and in the interest of Anthropic users to evaluate the use of the Services and adoption of new features to inform the development of future features and improve direction and development of the Services. Our research also benefits the AI industry and society: it investigates the safety, inner workings, and societal impact of AI models so that artificial intelligence has a positive impact on society as it becomes increasingly advanced and capable. To enforce our Terms of Service and similar terms and agreements, including our Usage Policy . Identity and Contact Data Inputs and Outputs Technical Information Study Participation Data Verification Data Contract Legitimate interests In certain circumstances outside of the performance of our contract with you, we may rely on legitimate interests. It is in our legitimate interests to enforce the rules and policies governing use of our services, to maintain intended functionality and value for users. We aim to provide a safe, useful platform. Use of personal data 11. Regional Supplemental Disclosures Supplemental Disclosures for Residents of Canada These supplemental disclosures contain additional information relevant to residents of Canada. This content should be read in conjunction with the rest of our Privacy Policy. In case of conflict between our Privacy Policy and these supplemental disclosures, the supplemental disclosures shall prevail in relation to residents of Canada. Consent. By expressly consenting to this Privacy Policy, you confirm you have read, understand, and consent to the collection, use, processing, and disclosure of your personal data in accordance with this Privacy Policy and understand that, in jurisdictions where it is available, Anthropic also relies on other lawful bases for the foregoing as more fully set out in this policy. We will only collect, use and disclose your personal data with your consent, unless otherwise permitted or required by law. Your consent may be given expressly or implied, depending on the circumstances and the sensitivity of the information involved. You may withdraw consent at any time, subject to legal or contractual restrictions and reasonable notice. Cross-jurisdictional Transfers. By providing us with personal data, you acknowledge and agree that your personal data may be transferred or disclosed to other jurisdictions for processing and storage outside of Canada, including to the United States and the countries listed on our Subprocessor List , where laws regarding the protection of personal data may be less stringent than the laws in your jurisdiction. Furthermore, we may disclose your personal data in these jurisdictions in response to legal processes or where we believe in good faith that disclosure is required or permitted by law. Contact. If you have any questions or comments about our processing of your personal data, or to exercise your rights as outlined in Section 4 (“Rights and Choices”), please contact us at [email protected]. Supplemental Disclosures for Residents of Brazil These supplemental disclosures contain additional information relevant to residents of Brazil. This content should be read in conjunction with the rest of our Privacy Policy. In case of conflict between our Privacy Policy and these supplemental disclosures, the supplemental disclosures shall prevail in relation to residents of Brazil. Legal Bases. Depending on the specific purpose of the processing, we may rely on different grounds than those listed under section 2, where permitted by and in accordance with the Brazilian General Data Protection Law (LGPD). For example, we may rely on the \"exercise of legal rights\" basis to process personal data associated with customer complaints and to enforce our Terms of Service and similar terms and agreements, including our Usage Policy. Data Subject's Rights. LGPD grants certain rights regarding your personal data, which differ from the ones listed under section 4. We will respond to your requests to exercise your rights below in accordance with applicable law: Confirmation of whether your data is being processed. You have the right to receive a confirmation on whether Anthropic processes your data. Access to your data. You have the right to know what personal data Anthropic processes about you. Correction of incomplete, inaccurate or outdated data. You have the right to request the correction of your data that is incomplete, inaccurate, or outdated. Anonymization, blocking or erasure of data. You have the right to request the anonymization, blocking or erasure of data that is unnecessary, excessive or processed in non-compliance with the provisions of the law. Portability of personal data to a third party. You have the right to request portability of your data to a third-party, as long as this does not infringe on our trade secrets. Information of public and private entities with which we shared data. You have the right to request information of public and private entities with which we have shared your data. Information about the possibility to refuse to provide consent and the respective consequences, when applicable. Withdrawal of your consent. You have the right to withdraw your consent. This procedure will be carried out free of charge. Request a review of decisions made solely based on automated processing of personal data. Please keep in mind that these rights are not absolute and may not apply in certain circumstances. For example, in certain cases we may continue to process and retain data regardless of your request for deletion, objection, blocking or anonymisation, in order to comply with legal, contractual and regulatory obligations, safeguard and exercise rights, including in judicial, administrative and arbitration proceedings and in other cases provided for by law. International Data Transfers. You acknowled",
      "validatedDisclosureTypesObserved": [
        "controller_contact",
        "processing_purposes",
        "data_subject_rights",
        "international_transfers",
        "supervisory_authority",
        "dpo_contact",
        "legal_basis",
        "recipients_or_vendor_categories",
        "data_retention"
      ],
      "privacyNoticeAvailabilityObserved": true,
      "evaluatedPrivacyPolicySurfaceCount": 2,
      "discardedArticle13DisclosureSignals": [
        {
          "source": "deterministic",
          "confidence": 0.76,
          "surfaceUrl": "https://anthropic.com/legal/consumer-health-data-privacy-policy",
          "evidenceText": "you share your data with Claude to discuss; To prevent and investigate fraud, abuse, and violations of our Usage Policy, unlawful or criminal activity, unauthorized access to or use of personal data or Anthropic systems and networks, to protect our rights and the rights of others, and to meet legal, governmental and",
          "rejectReason": "insufficient_row_specific_terms",
          "disclosureType": "processing_purposes"
        },
        {
          "source": "deterministic",
          "confidence": 0.7,
          "surfaceUrl": "https://anthropic.com/legal/consumer-health-data-privacy-policy",
          "evidenceText": "For additional information about the types of data we collect and how we collect it, please review “1. Collection of Personal Data” in our Privacy Policy. You can revoke your consent to third-party integrations that may provide Claude.ai access to consumer health data at any time in your Settings. 2.",
          "rejectReason": "insufficient_row_specific_terms",
          "disclosureType": "legal_basis"
        },
        {
          "source": "deterministic",
          "confidence": 0.76,
          "surfaceUrl": "https://anthropic.com/legal/consumer-health-data-privacy-policy",
          "evidenceText": "Laws” in our Privacy Policy. 3. How We Disclose Consumer Health Data Anthropic will disclose the categories of consumer health data described above to the categories of third parties described in “3. How We Disclose Personal Data” in our Privacy Policy.",
          "rejectReason": "insufficient_row_specific_terms",
          "disclosureType": "recipients_or_vendor_categories"
        },
        {
          "source": "deterministic",
          "confidence": 0.88,
          "surfaceUrl": "https://anthropic.com/legal/privacy",
          "evidenceText": "know what personal data Anthropic processes about you, including the categories of personal data, the categories of sources from which it is collected, the business or commercial purposes for collection, and the categories of third parties to whom we disclose it.",
          "rejectReason": "insufficient_row_specific_terms",
          "disclosureType": "processing_purposes"
        },
        {
          "source": "deterministic",
          "confidence": 0.76,
          "surfaceUrl": "https://anthropic.com/legal/privacy",
          "evidenceText": "reported the materials to us (for example via our feedback mechanisms). Please see Section 10 below for details of our legal bases for processing your personal data. 3.",
          "rejectReason": "insufficient_row_specific_terms",
          "disclosureType": "recipients_or_vendor_categories"
        },
        {
          "source": "deterministic",
          "confidence": 0.68,
          "surfaceUrl": "https://anthropic.com/legal/privacy",
          "evidenceText": "country. If you have questions about international transfers, or the safeguards we apply, you can contact us . 6. Data Retention, Data Lifecycle, and Security Controls Anthropic retains your personal data for as long as reasonably necessary for the purposes and criteria outlined in this Privacy Policy and explained",
          "rejectReason": "insufficient_row_specific_terms",
          "disclosureType": "data_retention"
        },
        {
          "source": "deterministic",
          "confidence": 0.9,
          "surfaceUrl": "https://anthropic.com/legal/privacy",
          "evidenceText": "to request a copy of the personal data Anthropic processes about you, subject to certain exceptions and conditions. In certain cases and subject to applicable law, you have the right to port your information.",
          "rejectReason": "insufficient_row_specific_terms",
          "disclosureType": "data_subject_rights"
        },
        {
          "source": "deterministic",
          "confidence": 0.6,
          "surfaceUrl": "https://anthropic.com/legal/privacy",
          "evidenceText": "health app integration and withdraw your consent in your settings . The withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.",
          "rejectReason": "insufficient_row_specific_terms",
          "disclosureType": "automated_decision_making_or_profiling"
        }
      ],
      "staleLegalFrameworkReferenceObserved": false,
      "policyEvidenceProvenanceContractVersion": "certscore.policy-evidence-provenance.v1",
      "gdprTransparencyProductionEvidenceEnabled": true,
      "gdprTransparencyProductionEvidenceDiagnostics": {
        "sourceCandidateCount": 11,
        "candidateDispositions": [
          {
            "topic": "legal_basis",
            "confidence": 0.86,
            "disposition": "discarded",
            "matchStrength": "equivalent",
            "matchedLocale": "en",
            "rejectionReason": "insufficient_row_specific_terms",
            "sourceObservationId": "policy_surface_2cbc38f4"
          },
          {
            "topic": "processing_purposes",
            "confidence": 0.86,
            "disposition": "accepted",
            "matchStrength": "equivalent",
            "matchedLocale": "en",
            "rejectionReason": null,
            "sourceObservationId": "policy_surface_2cbc38f4"
          },
          {
            "topic": "international_transfers",
            "confidence": 0.9,
            "disposition": "accepted",
            "matchStrength": "direct",
            "matchedLocale": "en",
            "rejectionReason": null,
            "sourceObservationId": "policy_surface_1d925b9c"
          },
          {
            "topic": "data_subject_rights",
            "confidence": 0.9,
            "disposition": "accepted",
            "matchStrength": "direct",
            "matchedLocale": "en",
            "rejectionReason": null,
            "sourceObservationId": "policy_surface_1d925b9c"
          },
          {
            "topic": "dpo_contact",
            "confidence": 0.9,
            "disposition": "accepted",
            "matchStrength": "direct",
            "matchedLocale": "en",
            "rejectionReason": null,
            "sourceObservationId": "policy_surface_1d925b9c"
          },
          {
            "topic": "processing_purposes",
            "confidence": 0.9,
            "disposition": "accepted",
            "matchStrength": "direct",
            "matchedLocale": "en",
            "rejectionReason": null,
            "sourceObservationId": "policy_surface_1d925b9c"
          },
          {
            "topic": "controller_contact",
            "confidence": 0.9,
            "disposition": "accepted",
            "matchStrength": "direct",
            "matchedLocale": "en",
            "rejectionReason": null,
            "sourceObservationId": "policy_surface_1d925b9c"
          },
          {
            "topic": "supervisory_authority",
            "confidence": 0.82,
            "disposition": "accepted",
            "matchStrength": "equivalent",
            "matchedLocale": "en",
            "rejectionReason": null,
            "sourceObservationId": "policy_surface_1d925b9c"
          },
          {
            "topic": "legal_basis",
            "confidence": 0.88,
            "disposition": "accepted",
            "matchStrength": "equivalent",
            "matchedLocale": "en",
            "rejectionReason": null,
            "sourceObservationId": "policy_surface_1d925b9c"
          },
          {
            "topic": "recipients_or_vendor_categories",
            "confidence": 0.86,
            "disposition": "accepted",
            "matchStrength": "equivalent",
            "matchedLocale": "en",
            "rejectionReason": null,
            "sourceObservationId": "policy_surface_1d925b9c"
          },
          {
            "topic": "data_retention",
            "confidence": 0.88,
            "disposition": "accepted",
            "matchStrength": "equivalent",
            "matchedLocale": "en",
            "rejectionReason": null,
            "sourceObservationId": "policy_surface_1d925b9c"
          }
        ],
        "acceptedCandidateCount": 10,
        "rejectedCandidateCount": 1,
        "discardedCandidateCount": 1,
        "diagnosticCandidateCount": 0,
        "productionCreditSignalCount": 10
      }
    }
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Legal basisIncludes legal grounds for using personal data.Observed

JSON evidence

Policy source

Captured page title: Privacy Policy \ Anthropic — https://anthropic.com/legal/privacy

Document heading: Personal data we collect or receive to train our models

Source policy language: en; banner/page language: en; translation applied: No.

Policy reached through: Footer Link; directly linked from scanned page: Yes; retrieved during scan: 2026-10-12T19:32:00.669Z.

Section: Not retained.

Open policy source

Objection: the right to object to processing of your personal data, including profiling conducted on grounds of public or legitimate interest. In places where such a right applies, we will no longer process the personal data in case of such objection unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or for the establishment, exercise or defense of legal claims.

Matched disclosure snippet: Objection: the right to object to processing of your personal data, including profiling conducted on grounds of public or…

Full evidence JSON

{
  "assessmentStatus": "checked",
  "checklistItemId": "legal_basis_disclosure_observed",
  "coverageArea": "Legal basis disclosure",
  "evidenceState": "observed",
  "explanation": "Whether retained privacy-policy evidence included a canonical legal-basis disclosure signal.",
  "note": "Whether retained privacy-policy evidence included a canonical legal-basis disclosure signal.",
  "status": "Observed",
  "tone": "warning",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.legal_basis_disclosure_observed.observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.legal_basis_disclosure_observed"
  },
  "statusBasis": "Legal basis disclosure evidence was retained through adapter-approved multilingual GDPR Transparency Article 13 evidence.",
  "retainedEvidence": {
    "remediation": {
      "kind": "none",
      "steps": [],
      "message": "No remediation is established by this check alone. Retain its evidence and reassess after relevant changes."
    },
    "evidenceRefs": [
      "Evidence: Legal basis disclosure",
      "Excerpt: Objection: the right to object to processing of your personal data, including profiling conducted on grounds of public or legitimate interest. In places where such a right applies, we will no longer process the personal data in case of such objection unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or for the establishment, exercise or defense of legal claims.",
      "Locale: en",
      "Policy URL: https://anthropic.com/legal/privacy"
    ],
    "signalObserved": true,
    "article13Signal": {
      "source": "normalized_concern",
      "status": "observed",
      "confidence": 0.88,
      "surfaceUrl": "https://anthropic.com/legal/privacy",
      "evidenceText": "Objection: the right to object to processing of your personal data, including profiling conducted on grounds of public or legitimate interest. In places where such a right applies, we will no longer process the personal data in case of such objection unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or for the establishment, exercise or defense of legal claims.",
      "matchStrength": "equivalent",
      "matchedLocale": "en",
      "disclosureType": "legal_basis",
      "evidenceSource": "normalized_gdpr_transparency_article13_concern",
      "productionCredit": true,
      "classifierProvenance": "gdpr_transparency_topic_classifier.v1",
      "classifierReasonCodes": [
        "matched_legal_basis",
        "match_strength_equivalent",
        "variant_section_semantic_clause"
      ],
      "productionCreditProfile": "gdpr_transparency_multilingual_article13_v1",
      "selectedEvidenceStrength": "strong",
      "selectedPolicySectionUrl": "https://anthropic.com/legal/privacy",
      "selectedPolicySectionHeading": null
    },
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "policyEvidenceAssessment": {
      "result": "disclosure_observed",
      "scoreEffect": "canonical_policy",
      "topicRelevance": "direct",
      "contractVersion": "certscore.policy-topic-evidence-assessment.v1"
    },
    "policyEvidenceProvenance": {
      "sourceUrl": "https://anthropic.com/legal/privacy",
      "policyTitle": "Privacy Policy \\ Anthropic",
      "artifactRefs": [
        "policy_excerpt_1d925b9c_977b211",
        "policy_surface_text_1d925b9c_450ef827"
      ],
      "bannerLanguage": "en",
      "contractVersion": "certscore.policy-evidence-provenance.v1",
      "discoveryMethod": "footer_link",
      "documentHeading": "Personal data we collect or receive to train our models",
      "detectedLanguage": "en",
      "retrievalTimestamp": "2026-10-12T19:32:00.669Z",
      "targetRelationship": "target_controller",
      "translationApplied": false,
      "documentOwnerEntity": "Anthropic",
      "ownershipConfidence": 0.98,
      "directlyLinkedFromScannedPage": true
    },
    "selectedEvidenceStrength": "moderate",
    "selectedEvidenceArtifactId": "coverage_policy",
    "gdprTransparencyArticle13Concern": {
      "state": "sufficient",
      "topic": "legal_basis",
      "originKey": "gdpr_transparency.article13.legal_basis",
      "canonicalConcernKey": "runtime_artifact:gdpr_transparency.article13.legal_basis",
      "regulatoryChecklistEligibility": "observed"
    }
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Data retentionDescribes when personal data is kept or deleted.Observed

JSON evidence

Policy source

Captured page title: Privacy Policy \ Anthropic — https://anthropic.com/legal/privacy

Document heading: Personal data we collect or receive to train our models

Source policy language: en; banner/page language: en; translation applied: No.

Policy reached through: Footer Link; directly linked from scanned page: Yes; retrieved during scan: 2026-10-12T19:32:00.669Z.

Section: 6. Data Retention, Data Lifecycle, and Security Controls.

Open policy source

6. Data Retention, Data Lifecycle, and Security Controls. Anthropic retains your personal data for as long as reasonably necessary for the purposes and criteria outlined in this Privacy Policy and explained further in our privacy center .

Matched disclosure snippet: 6. Data Retention, Data Lifecycle, and Security Controls. Anthropic retains your personal data for as long as reasonably…

Full evidence JSON

{
  "assessmentStatus": "checked",
  "checklistItemId": "retention_disclosure_observed",
  "coverageArea": "Retention disclosure",
  "evidenceState": "observed",
  "explanation": "Whether retained privacy-policy evidence included a data-retention disclosure signal.",
  "note": "Whether retained privacy-policy evidence included a data-retention disclosure signal.",
  "status": "Observed",
  "tone": "warning",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.retention_disclosure_observed.observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.retention_disclosure_observed"
  },
  "statusBasis": "Retention disclosure evidence was retained through adapter-approved multilingual GDPR Transparency Article 13 evidence.",
  "retainedEvidence": {
    "remediation": {
      "kind": "none",
      "steps": [],
      "message": "No remediation is established by this check alone. Retain its evidence and reassess after relevant changes."
    },
    "evidenceRefs": [
      "Evidence: Retention disclosure",
      "Excerpt: 6. Data Retention, Data Lifecycle, and Security Controls. Anthropic retains your personal data for as long as reasonably necessary for the purposes and criteria outlined in this Privacy Policy and explained further in our privacy center .",
      "Locale: en",
      "Policy URL: https://anthropic.com/legal/privacy"
    ],
    "signalObserved": true,
    "article13Signal": {
      "source": "normalized_concern",
      "status": "observed",
      "confidence": 0.88,
      "surfaceUrl": "https://anthropic.com/legal/privacy",
      "evidenceText": "6. Data Retention, Data Lifecycle, and Security Controls. Anthropic retains your personal data for as long as reasonably necessary for the purposes and criteria outlined in this Privacy Policy and explained further in our privacy center .",
      "matchStrength": "equivalent",
      "matchedLocale": "en",
      "disclosureType": "data_retention",
      "evidenceSource": "normalized_gdpr_transparency_article13_concern",
      "productionCredit": true,
      "classifierProvenance": "gdpr_transparency_topic_classifier.v1",
      "classifierReasonCodes": [
        "matched_data_retention",
        "match_strength_equivalent",
        "variant_section_semantic_clause"
      ],
      "productionCreditProfile": "gdpr_transparency_multilingual_article13_v1",
      "selectedEvidenceStrength": "strong",
      "selectedPolicySectionUrl": "https://anthropic.com/legal/privacy",
      "selectedPolicySectionHeading": "6. Data Retention, Data Lifecycle, and Security Controls"
    },
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "policyEvidenceAssessment": {
      "result": "disclosure_observed",
      "scoreEffect": "canonical_policy",
      "topicRelevance": "direct",
      "contractVersion": "certscore.policy-topic-evidence-assessment.v1"
    },
    "policyEvidenceProvenance": {
      "sourceUrl": "https://anthropic.com/legal/privacy",
      "policyTitle": "Privacy Policy \\ Anthropic",
      "artifactRefs": [
        "policy_excerpt_1d925b9c_977b211",
        "policy_surface_text_1d925b9c_450ef827"
      ],
      "bannerLanguage": "en",
      "sectionHeading": "6. Data Retention, Data Lifecycle, and Security Controls",
      "contractVersion": "certscore.policy-evidence-provenance.v1",
      "discoveryMethod": "footer_link",
      "documentHeading": "Personal data we collect or receive to train our models",
      "detectedLanguage": "en",
      "retrievalTimestamp": "2026-10-12T19:32:00.669Z",
      "targetRelationship": "target_controller",
      "translationApplied": false,
      "documentOwnerEntity": "Anthropic",
      "ownershipConfidence": 0.98,
      "directlyLinkedFromScannedPage": true
    },
    "selectedEvidenceStrength": "moderate",
    "selectedEvidenceArtifactId": "coverage_policy",
    "gdprTransparencyArticle13Concern": {
      "state": "sufficient",
      "topic": "data_retention",
      "originKey": "gdpr_transparency.article13.data_retention",
      "canonicalConcernKey": "runtime_artifact:gdpr_transparency.article13.data_retention",
      "regulatoryChecklistEligibility": "observed"
    }
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Controller and contact detailsIdentifies who is responsible for personal data and provides contact details.Observed

JSON evidence

Policy source

Captured page title: Privacy Policy \ Anthropic — https://anthropic.com/legal/privacy

Document heading: Personal data we collect or receive to train our models

Source policy language: en; banner/page language: en; translation applied: No.

Policy reached through: Footer Link; directly linked from scanned page: Yes; retrieved during scan: 2026-10-12T19:32:00.669Z.

Section: 9. Contact Information.

Open policy source

If you live in the European Economic Area (EEA), UK or Switzerland (the “European Region”), the data controller responsible for your personal data is Anthropic Ireland, Limited. If you live outside the European Region, the data controller responsible for your personal data is Anthropic PBC. If you have any questions about this Privacy Policy, or have any questions, complaints or requests regarding your personal data, you can contact us as described below: Anthropic PBC with a registered address at 548 Market St, PMB 90375, San Francisco, CA 94104 (United States). Anthropic Ireland, Limited with a registered address at 6th Floor, Sou

Matched disclosure snippet: If you live in the European Economic Area (EEA), UK or Switzerland (the “European Region”), the data controller responsib…

Full evidence JSON

{
  "assessmentStatus": "checked",
  "checklistItemId": "controller_contact_disclosure",
  "coverageArea": "Controller/contact disclosure",
  "evidenceState": "observed",
  "explanation": "Whether retained privacy-policy evidence included a controller, privacy contact, or equivalent contact point.",
  "note": "Whether retained privacy-policy evidence included a controller, privacy contact, or equivalent contact point.",
  "status": "Observed",
  "tone": "warning",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.controller_contact_disclosure.observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.controller_contact_disclosure"
  },
  "statusBasis": "Controller/contact disclosure evidence was retained through adapter-approved multilingual GDPR Transparency Article 13 evidence.",
  "retainedEvidence": {
    "remediation": {
      "kind": "none",
      "steps": [],
      "message": "No remediation is established by this check alone. Retain its evidence and reassess after relevant changes."
    },
    "evidenceRefs": [
      "Evidence: Controller/contact disclosure",
      "Excerpt: If you live in the European Economic Area (EEA), UK or Switzerland (the “European Region”), the data controller responsible for your personal data is Anthropic Ireland, Limited. If you live outside the European Region, the data controller responsible for your personal data is Anthropic PBC. If you have any questions about this Privacy Policy, or have any questions, complaints or requests regarding your personal data, you can contact us as described below: Anthropic PBC with a registered address at 548 Market St, PMB 90375, San Francisco, CA 94104 (United States). Anthropic Ireland, Limited with a registered address at 6th Floor, Sou",
      "Locale: en",
      "Policy URL: https://anthropic.com/legal/privacy"
    ],
    "signalObserved": true,
    "article13Signal": {
      "source": "normalized_concern",
      "status": "observed",
      "confidence": 0.9,
      "surfaceUrl": "https://anthropic.com/legal/privacy",
      "evidenceText": "If you live in the European Economic Area (EEA), UK or Switzerland (the “European Region”), the data controller responsible for your personal data is Anthropic Ireland, Limited. If you live outside the European Region, the data controller responsible for your personal data is Anthropic PBC. If you have any questions about this Privacy Policy, or have any questions, complaints or requests regarding your personal data, you can contact us as described below: Anthropic PBC with a registered address at 548 Market St, PMB 90375, San Francisco, CA 94104 (United States). Anthropic Ireland, Limited with a registered address at 6th Floor, Sou",
      "matchStrength": "direct",
      "matchedLocale": "en",
      "disclosureType": "controller_contact",
      "evidenceSource": "normalized_gdpr_transparency_article13_concern",
      "productionCredit": true,
      "classifierProvenance": "gdpr_transparency_topic_classifier.v1",
      "classifierReasonCodes": [
        "matched_controller_contact",
        "match_strength_direct"
      ],
      "productionCreditProfile": "gdpr_transparency_multilingual_article13_v1",
      "selectedEvidenceStrength": "strong",
      "selectedPolicySectionUrl": "https://anthropic.com/legal/privacy",
      "selectedPolicySectionHeading": "9. Contact Information"
    },
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "policyEvidenceAssessment": {
      "result": "disclosure_observed",
      "scoreEffect": "canonical_policy",
      "topicRelevance": "direct",
      "contractVersion": "certscore.policy-topic-evidence-assessment.v1"
    },
    "policyEvidenceProvenance": {
      "sourceUrl": "https://anthropic.com/legal/privacy",
      "policyTitle": "Privacy Policy \\ Anthropic",
      "artifactRefs": [
        "policy_excerpt_1d925b9c_977b211",
        "policy_surface_text_1d925b9c_450ef827"
      ],
      "bannerLanguage": "en",
      "sectionHeading": "9. Contact Information",
      "contractVersion": "certscore.policy-evidence-provenance.v1",
      "discoveryMethod": "footer_link",
      "documentHeading": "Personal data we collect or receive to train our models",
      "detectedLanguage": "en",
      "retrievalTimestamp": "2026-10-12T19:32:00.669Z",
      "targetRelationship": "target_controller",
      "translationApplied": false,
      "documentOwnerEntity": "Anthropic",
      "ownershipConfidence": 0.98,
      "directlyLinkedFromScannedPage": true
    },
    "selectedEvidenceStrength": "moderate",
    "selectedEvidenceArtifactId": "coverage_policy",
    "gdprTransparencyArticle13Concern": {
      "state": "sufficient",
      "topic": "controller_contact",
      "originKey": "gdpr_transparency.article13.controller_contact",
      "canonicalConcernKey": "runtime_artifact:gdpr_transparency.article13.controller_contact",
      "regulatoryChecklistEligibility": "observed"
    }
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Data use purposesDescribes purposes for using personal data.Observed

JSON evidence

Policy source

Captured page title: Privacy Policy \ Anthropic — https://anthropic.com/legal/privacy

Document heading: Personal data we collect or receive to train our models

Source policy language: en; banner/page language: en; translation applied: No.

Policy reached through: Footer Link; directly linked from scanned page: Yes; retrieved during scan: 2026-10-12T19:32:00.669Z.

Section: 2. Uses of Personal Data Permitted Under Applicable Data Protection Laws.

Open policy source

We use your personal data for the following purposes: To provide, maintain and facilitate any products and services offered to you with respect to your Anthropic account, which are governed by our Terms of Service; To provide, maintain and facilitate optional services and features that enhance platform functionality and user experience; To provide you with service updates, communications, and to provide tailored recommendations about our Services that may be of interest to you; To create and administer your Anthropic account; To fac

Matched disclosure snippet: We use your personal data for the following purposes: To provide, maintain and facilitate any products and services offer…

Full evidence JSON

{
  "assessmentStatus": "checked",
  "checklistItemId": "processing_purposes_disclosure",
  "coverageArea": "Processing purposes disclosure",
  "evidenceState": "observed",
  "explanation": "Whether retained privacy-policy evidence described the purposes for processing personal data.",
  "note": "Whether retained privacy-policy evidence described the purposes for processing personal data.",
  "status": "Observed",
  "tone": "warning",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.processing_purposes_disclosure.observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.processing_purposes_disclosure"
  },
  "statusBasis": "Processing purposes disclosure evidence was retained through adapter-approved multilingual GDPR Transparency Article 13 evidence.",
  "retainedEvidence": {
    "remediation": {
      "kind": "none",
      "steps": [],
      "message": "No remediation is established by this check alone. Retain its evidence and reassess after relevant changes."
    },
    "evidenceRefs": [
      "Evidence: Processing purposes disclosure",
      "Excerpt: We use your personal data for the following purposes: To provide, maintain and facilitate any products and services offered to you with respect to your Anthropic account, which are governed by our Terms of Service; To provide, maintain and facilitate optional services and features that enhance platform functionality and user experience; To provide you with service updates, communications, and to provide tailored recommendations about our Services that may be of interest to you; To create and administer your Anthropic account; To fac",
      "Locale: en",
      "Policy URL: https://anthropic.com/legal/privacy"
    ],
    "signalObserved": true,
    "article13Signal": {
      "source": "normalized_concern",
      "status": "observed",
      "confidence": 0.9,
      "surfaceUrl": "https://anthropic.com/legal/privacy",
      "evidenceText": "We use your personal data for the following purposes: To provide, maintain and facilitate any products and services offered to you with respect to your Anthropic account, which are governed by our Terms of Service; To provide, maintain and facilitate optional services and features that enhance platform functionality and user experience; To provide you with service updates, communications, and to provide tailored recommendations about our Services that may be of interest to you; To create and administer your Anthropic account; To fac",
      "matchStrength": "direct",
      "matchedLocale": "en",
      "disclosureType": "processing_purposes",
      "evidenceSource": "normalized_gdpr_transparency_article13_concern",
      "productionCredit": true,
      "classifierProvenance": "gdpr_transparency_topic_classifier.v1",
      "classifierReasonCodes": [
        "matched_processing_purposes",
        "match_strength_direct"
      ],
      "productionCreditProfile": "gdpr_transparency_multilingual_article13_v1",
      "selectedEvidenceStrength": "strong",
      "selectedPolicySectionUrl": "https://anthropic.com/legal/privacy",
      "selectedPolicySectionHeading": "2. Uses of Personal Data Permitted Under Applicable Data Protection Laws"
    },
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "policyEvidenceAssessment": {
      "result": "disclosure_observed",
      "scoreEffect": "canonical_policy",
      "topicRelevance": "direct",
      "contractVersion": "certscore.policy-topic-evidence-assessment.v1"
    },
    "policyEvidenceProvenance": {
      "sourceUrl": "https://anthropic.com/legal/privacy",
      "policyTitle": "Privacy Policy \\ Anthropic",
      "artifactRefs": [
        "policy_excerpt_1d925b9c_977b211",
        "policy_surface_text_1d925b9c_450ef827"
      ],
      "bannerLanguage": "en",
      "sectionHeading": "2. Uses of Personal Data Permitted Under Applicable Data Protection Laws",
      "contractVersion": "certscore.policy-evidence-provenance.v1",
      "discoveryMethod": "footer_link",
      "documentHeading": "Personal data we collect or receive to train our models",
      "detectedLanguage": "en",
      "retrievalTimestamp": "2026-10-12T19:32:00.669Z",
      "targetRelationship": "target_controller",
      "translationApplied": false,
      "documentOwnerEntity": "Anthropic",
      "ownershipConfidence": 0.98,
      "directlyLinkedFromScannedPage": true
    },
    "selectedEvidenceStrength": "moderate",
    "selectedEvidenceArtifactId": "coverage_policy",
    "gdprTransparencyArticle13Concern": {
      "state": "sufficient",
      "topic": "processing_purposes",
      "originKey": "gdpr_transparency.article13.processing_purposes",
      "canonicalConcernKey": "runtime_artifact:gdpr_transparency.article13.processing_purposes",
      "regulatoryChecklistEligibility": "observed"
    }
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Recipients and vendor categoriesIdentifies recipients or types of organizations that may receive personal data.Observed

JSON evidence

Policy source

Captured page title: Privacy Policy \ Anthropic — https://anthropic.com/legal/privacy

Document heading: Personal data we collect or receive to train our models

Source policy language: en; banner/page language: en; translation applied: No.

Policy reached through: Footer Link; directly linked from scanned page: Yes; retrieved during scan: 2026-10-12T19:32:00.669Z.

Section: 3. Recipients and Third-Party Data Sources.

Open policy source

Anthropic will disclose personal data to, or receive personal data from, the following categories of third parties for the purposes explained in this Policy: Affiliates & corporate partners: Anthropic discloses the categories of personal data described above between and among its affiliates and related entities.

Matched disclosure snippet: Anthropic will disclose personal data to, or receive personal data from, the following categories of third parties for th…

Full evidence JSON

{
  "assessmentStatus": "checked",
  "checklistItemId": "recipients_vendor_categories_disclosure",
  "coverageArea": "Recipients/vendor categories disclosed",
  "evidenceState": "observed",
  "explanation": "Whether retained privacy-policy evidence described recipient, vendor, or 3rd party categories.",
  "note": "Whether retained privacy-policy evidence described recipient, vendor, or 3rd party categories.",
  "status": "Observed",
  "tone": "warning",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.recipients_vendor_categories_disclosure.observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.recipients_vendor_categories_disclosure"
  },
  "statusBasis": "Recipients/vendor categories disclosure evidence was retained through adapter-approved multilingual GDPR Transparency Article 13 evidence.",
  "retainedEvidence": {
    "remediation": {
      "kind": "none",
      "steps": [],
      "message": "No remediation is established by this check alone. Retain its evidence and reassess after relevant changes."
    },
    "evidenceRefs": [
      "Evidence: Recipients/vendor categories disclosure",
      "Excerpt: Anthropic will disclose personal data to, or receive personal data from, the following categories of third parties for the purposes explained in this Policy: Affiliates & corporate partners: Anthropic discloses the categories of personal data described above between and among its affiliates and related entities.",
      "Locale: en",
      "Policy URL: https://anthropic.com/legal/privacy"
    ],
    "signalObserved": true,
    "article13Signal": {
      "source": "normalized_concern",
      "status": "observed",
      "confidence": 0.86,
      "surfaceUrl": "https://anthropic.com/legal/privacy",
      "evidenceText": "Anthropic will disclose personal data to, or receive personal data from, the following categories of third parties for the purposes explained in this Policy: Affiliates & corporate partners: Anthropic discloses the categories of personal data described above between and among its affiliates and related entities.",
      "matchStrength": "equivalent",
      "matchedLocale": "en",
      "disclosureType": "recipients_or_vendor_categories",
      "evidenceSource": "normalized_gdpr_transparency_article13_concern",
      "productionCredit": true,
      "classifierProvenance": "gdpr_transparency_topic_classifier.v1",
      "classifierReasonCodes": [
        "matched_recipients_or_vendor_categories",
        "match_strength_equivalent",
        "variant_semantic_clause"
      ],
      "productionCreditProfile": "gdpr_transparency_multilingual_article13_v1",
      "selectedEvidenceStrength": "strong",
      "selectedPolicySectionUrl": "https://anthropic.com/legal/privacy",
      "selectedPolicySectionHeading": "3. Recipients and Third-Party Data Sources"
    },
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "policyEvidenceAssessment": {
      "result": "disclosure_observed",
      "scoreEffect": "canonical_policy",
      "topicRelevance": "direct",
      "contractVersion": "certscore.policy-topic-evidence-assessment.v1"
    },
    "policyEvidenceProvenance": {
      "sourceUrl": "https://anthropic.com/legal/privacy",
      "policyTitle": "Privacy Policy \\ Anthropic",
      "artifactRefs": [
        "policy_excerpt_1d925b9c_977b211",
        "policy_surface_text_1d925b9c_450ef827"
      ],
      "bannerLanguage": "en",
      "sectionHeading": "3. Recipients and Third-Party Data Sources",
      "contractVersion": "certscore.policy-evidence-provenance.v1",
      "discoveryMethod": "footer_link",
      "documentHeading": "Personal data we collect or receive to train our models",
      "detectedLanguage": "en",
      "retrievalTimestamp": "2026-10-12T19:32:00.669Z",
      "targetRelationship": "target_controller",
      "translationApplied": false,
      "documentOwnerEntity": "Anthropic",
      "ownershipConfidence": 0.98,
      "directlyLinkedFromScannedPage": true
    },
    "selectedEvidenceStrength": "moderate",
    "selectedEvidenceArtifactId": "coverage_policy",
    "gdprTransparencyArticle13Concern": {
      "state": "sufficient",
      "topic": "recipients_or_vendor_categories",
      "originKey": "gdpr_transparency.article13.recipients_or_vendor_categories",
      "canonicalConcernKey": "runtime_artifact:gdpr_transparency.article13.recipients_or_vendor_categories",
      "regulatoryChecklistEligibility": "observed"
    }
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Privacy rightsDescribes rights people have over their personal data.Observed

JSON evidence

Policy source

Captured page title: Privacy Policy \ Anthropic — https://anthropic.com/legal/privacy

Document heading: Personal data we collect or receive to train our models

Source policy language: en; banner/page language: en; translation applied: No.

Policy reached through: Footer Link; directly linked from scanned page: Yes; retrieved during scan: 2026-10-12T19:32:00.669Z.

Section: Supplemental Disclosures for Residents of Brazil.

Open policy source

Policy. Data Subject's Rights. LGPD grants certain rights regarding your personal data, which differ from the ones listed under section 4. We will respond to your requests to exercise your rights below in accordance with applicable law: Confirmation of whether your data is being processed. You have the right to receive a confirmation on whether Anthropic processes your data. Access to your data.

Matched disclosure snippet: Policy. Data Subject's Rights. LGPD grants certain rights regarding your personal data, which differ from the ones listed…

Full evidence JSON

{
  "assessmentStatus": "checked",
  "checklistItemId": "data_subject_rights_disclosure",
  "coverageArea": "Data subject rights disclosure",
  "evidenceState": "observed",
  "explanation": "Whether retained privacy-policy evidence described data subject rights or a rights request path.",
  "note": "Whether retained privacy-policy evidence described data subject rights or a rights request path.",
  "status": "Observed",
  "tone": "warning",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.data_subject_rights_disclosure.observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.data_subject_rights_disclosure"
  },
  "statusBasis": "Data subject rights disclosure evidence was retained through adapter-approved multilingual GDPR Transparency Article 13 evidence.",
  "retainedEvidence": {
    "remediation": {
      "kind": "none",
      "steps": [],
      "message": "No remediation is established by this check alone. Retain its evidence and reassess after relevant changes."
    },
    "evidenceRefs": [
      "Evidence: Data subject rights disclosure",
      "Excerpt: Policy. Data Subject's Rights. LGPD grants certain rights regarding your personal data, which differ from the ones listed under section 4. We will respond to your requests to exercise your rights below in accordance with applicable law: Confirmation of whether your data is being processed. You have the right to receive a confirmation on whether Anthropic processes your data. Access to your data.",
      "Locale: en",
      "Policy URL: https://anthropic.com/legal/privacy"
    ],
    "signalObserved": true,
    "article13Signal": {
      "source": "normalized_concern",
      "status": "observed",
      "confidence": 0.9,
      "surfaceUrl": "https://anthropic.com/legal/privacy",
      "evidenceText": "Policy. Data Subject's Rights. LGPD grants certain rights regarding your personal data, which differ from the ones listed under section 4. We will respond to your requests to exercise your rights below in accordance with applicable law: Confirmation of whether your data is being processed. You have the right to receive a confirmation on whether Anthropic processes your data. Access to your data.",
      "matchStrength": "direct",
      "matchedLocale": "en",
      "disclosureType": "data_subject_rights",
      "evidenceSource": "normalized_gdpr_transparency_article13_concern",
      "productionCredit": true,
      "classifierProvenance": "gdpr_transparency_topic_classifier.v1",
      "classifierReasonCodes": [
        "matched_data_subject_rights",
        "match_strength_direct"
      ],
      "productionCreditProfile": "gdpr_transparency_multilingual_article13_v1",
      "selectedEvidenceStrength": "strong",
      "selectedPolicySectionUrl": "https://anthropic.com/legal/privacy",
      "selectedPolicySectionHeading": "Supplemental Disclosures for Residents of Brazil"
    },
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "policyEvidenceAssessment": {
      "result": "disclosure_observed",
      "scoreEffect": "canonical_policy",
      "topicRelevance": "direct",
      "contractVersion": "certscore.policy-topic-evidence-assessment.v1"
    },
    "policyEvidenceProvenance": {
      "sourceUrl": "https://anthropic.com/legal/privacy",
      "policyTitle": "Privacy Policy \\ Anthropic",
      "artifactRefs": [
        "policy_excerpt_1d925b9c_977b211",
        "policy_surface_text_1d925b9c_450ef827"
      ],
      "bannerLanguage": "en",
      "sectionHeading": "Supplemental Disclosures for Residents of Brazil",
      "contractVersion": "certscore.policy-evidence-provenance.v1",
      "discoveryMethod": "footer_link",
      "documentHeading": "Personal data we collect or receive to train our models",
      "detectedLanguage": "en",
      "retrievalTimestamp": "2026-10-12T19:32:00.669Z",
      "targetRelationship": "target_controller",
      "translationApplied": false,
      "documentOwnerEntity": "Anthropic",
      "ownershipConfidence": 0.98,
      "directlyLinkedFromScannedPage": true
    },
    "selectedEvidenceStrength": "moderate",
    "selectedEvidenceArtifactId": "coverage_policy",
    "gdprTransparencyArticle13Concern": {
      "state": "sufficient",
      "topic": "data_subject_rights",
      "originKey": "gdpr_transparency.article13.data_subject_rights",
      "canonicalConcernKey": "runtime_artifact:gdpr_transparency.article13.data_subject_rights",
      "regulatoryChecklistEligibility": "observed"
    }
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

International data transfersAddresses transfers of personal data to other countries.Observed

JSON evidence

Policy source

Captured page title: Privacy Policy \ Anthropic — https://anthropic.com/legal/privacy

Document heading: Personal data we collect or receive to train our models

Source policy language: en; banner/page language: en; translation applied: No.

Policy reached through: Footer Link; directly linked from scanned page: Yes; retrieved during scan: 2026-10-12T19:32:00.669Z.

Section: Not retained.

Open policy source

Data Transfers Anthropic is a global company, and when you access our Services, your personal data is transferred to our servers in the US, or to other countries outside the European Economic Area (“EEA”) and the UK for the purposes outlined in Section 2 of this Privacy Policy, for example to provide you with the Service, or to train our models, or to conduct research.

Matched disclosure snippet: Data Transfers Anthropic is a global company, and when you access our Services, your personal data is transferred to our…

Full evidence JSON

{
  "assessmentStatus": "checked",
  "checklistItemId": "international_transfers_disclosure",
  "coverageArea": "International transfer disclosure",
  "evidenceState": "observed",
  "explanation": "Whether retained privacy-policy evidence described international transfers or transfer-relevant endpoint/vendor context.",
  "note": "Whether retained privacy-policy evidence described international transfers or transfer-relevant endpoint/vendor context.",
  "status": "Observed",
  "tone": "warning",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.international_transfers_disclosure.observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.international_transfers_disclosure"
  },
  "statusBasis": "International transfer disclosure evidence was retained through adapter-approved multilingual GDPR Transparency Article 13 evidence.",
  "retainedEvidence": {
    "remediation": {
      "kind": "none",
      "steps": [],
      "message": "No remediation is established by this check alone. Retain its evidence and reassess after relevant changes."
    },
    "evidenceRefs": [
      "Evidence: International transfer disclosure",
      "Excerpt: Data Transfers Anthropic is a global company, and when you access our Services, your personal data is transferred to our servers in the US, or to other countries outside the European Economic Area (“EEA”) and the UK for the purposes outlined in Section 2 of this Privacy Policy, for example to provide you with the Service, or to train our models, or to conduct research.",
      "Locale: en",
      "Policy URL: https://anthropic.com/legal/privacy"
    ],
    "signalObserved": true,
    "article13Signal": {
      "source": "normalized_concern",
      "status": "observed",
      "confidence": 0.9,
      "surfaceUrl": "https://anthropic.com/legal/privacy",
      "evidenceText": "Data Transfers Anthropic is a global company, and when you access our Services, your personal data is transferred to our servers in the US, or to other countries outside the European Economic Area (“EEA”) and the UK for the purposes outlined in Section 2 of this Privacy Policy, for example to provide you with the Service, or to train our models, or to conduct research.",
      "matchStrength": "direct",
      "matchedLocale": "en",
      "disclosureType": "international_transfers",
      "evidenceSource": "normalized_gdpr_transparency_article13_concern",
      "productionCredit": true,
      "classifierProvenance": "gdpr_transparency_topic_classifier.v1",
      "classifierReasonCodes": [
        "matched_international_transfers",
        "match_strength_direct"
      ],
      "productionCreditProfile": "gdpr_transparency_multilingual_article13_v1",
      "selectedEvidenceStrength": "strong",
      "selectedPolicySectionUrl": "https://anthropic.com/legal/privacy",
      "selectedPolicySectionHeading": null
    },
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "policyEvidenceAssessment": {
      "result": "disclosure_observed",
      "scoreEffect": "canonical_policy",
      "topicRelevance": "direct",
      "contractVersion": "certscore.policy-topic-evidence-assessment.v1"
    },
    "policyEvidenceProvenance": {
      "sourceUrl": "https://anthropic.com/legal/privacy",
      "policyTitle": "Privacy Policy \\ Anthropic",
      "artifactRefs": [
        "policy_excerpt_1d925b9c_977b211",
        "policy_surface_text_1d925b9c_450ef827"
      ],
      "bannerLanguage": "en",
      "contractVersion": "certscore.policy-evidence-provenance.v1",
      "discoveryMethod": "footer_link",
      "documentHeading": "Personal data we collect or receive to train our models",
      "detectedLanguage": "en",
      "retrievalTimestamp": "2026-10-12T19:32:00.669Z",
      "targetRelationship": "target_controller",
      "translationApplied": false,
      "documentOwnerEntity": "Anthropic",
      "ownershipConfidence": 0.98,
      "directlyLinkedFromScannedPage": true
    },
    "selectedEvidenceStrength": "moderate",
    "selectedEvidenceArtifactId": "coverage_policy",
    "gdprTransparencyArticle13Concern": {
      "state": "sufficient",
      "topic": "international_transfers",
      "originKey": "gdpr_transparency.article13.international_transfers",
      "canonicalConcernKey": "runtime_artifact:gdpr_transparency.article13.international_transfers",
      "regulatoryChecklistEligibility": "observed"
    }
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

DPO contact (if applicable)Provides contact details for a data protection officer.Observed

JSON evidence

Policy source

Captured page title: Privacy Policy \ Anthropic — https://anthropic.com/legal/privacy

Document heading: Personal data we collect or receive to train our models

Source policy language: en; banner/page language: en; translation applied: No.

Policy reached through: Footer Link; directly linked from scanned page: Yes; retrieved during scan: 2026-10-12T19:32:00.669Z.

Section: Not retained.

Open policy source

Data Protection Officer at [email protected]

Matched disclosure snippet: Data Protection Officer at [email protected]

Full evidence JSON

{
  "assessmentStatus": "checked",
  "checklistItemId": "dpo_contact_point_disclosure",
  "coverageArea": "DPO contact point (where applicable)",
  "evidenceState": "observed",
  "explanation": "Whether retained privacy-policy evidence identified a designated data protection officer or equivalent statutory DPO contact. A generic privacy mailbox is credited under controller/contact disclosure and does not by itself establish a DPO designation.",
  "note": "Whether retained privacy-policy evidence identified a designated data protection officer or equivalent statutory DPO contact. A generic privacy mailbox is credited under controller/contact disclosure and does not by itself establish a DPO designation.",
  "status": "Observed",
  "tone": "warning",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.dpo_contact_point_disclosure.observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.dpo_contact_point_disclosure"
  },
  "statusBasis": "DPO contact point (where applicable) evidence was retained through adapter-approved multilingual GDPR Transparency Article 13 evidence.",
  "retainedEvidence": {
    "remediation": {
      "kind": "none",
      "steps": [],
      "message": "No remediation is established by this check alone. Retain its evidence and reassess after relevant changes."
    },
    "evidenceRefs": [
      "Evidence: DPO contact point (where applicable)",
      "Excerpt: Data Protection Officer at [email protected]",
      "Locale: en",
      "Policy URL: https://anthropic.com/legal/privacy"
    ],
    "signalObserved": true,
    "article13Signal": {
      "source": "normalized_concern",
      "status": "observed",
      "confidence": 0.9,
      "surfaceUrl": "https://anthropic.com/legal/privacy",
      "evidenceText": "Data Protection Officer at [email protected]",
      "matchStrength": "direct",
      "matchedLocale": "en",
      "disclosureType": "dpo_contact",
      "evidenceSource": "normalized_gdpr_transparency_article13_concern",
      "productionCredit": true,
      "classifierProvenance": "gdpr_transparency_topic_classifier.v1",
      "classifierReasonCodes": [
        "matched_dpo_contact",
        "match_strength_direct"
      ],
      "productionCreditProfile": "gdpr_transparency_multilingual_article13_v1",
      "selectedEvidenceStrength": "strong",
      "selectedPolicySectionUrl": "https://anthropic.com/legal/privacy",
      "selectedPolicySectionHeading": null
    },
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "policyEvidenceAssessment": {
      "result": "disclosure_observed",
      "scoreEffect": "canonical_policy",
      "topicRelevance": "direct",
      "contractVersion": "certscore.policy-topic-evidence-assessment.v1"
    },
    "policyEvidenceProvenance": {
      "sourceUrl": "https://anthropic.com/legal/privacy",
      "policyTitle": "Privacy Policy \\ Anthropic",
      "artifactRefs": [
        "policy_excerpt_1d925b9c_977b211",
        "policy_surface_text_1d925b9c_450ef827"
      ],
      "bannerLanguage": "en",
      "contractVersion": "certscore.policy-evidence-provenance.v1",
      "discoveryMethod": "footer_link",
      "documentHeading": "Personal data we collect or receive to train our models",
      "detectedLanguage": "en",
      "retrievalTimestamp": "2026-10-12T19:32:00.669Z",
      "targetRelationship": "target_controller",
      "translationApplied": false,
      "documentOwnerEntity": "Anthropic",
      "ownershipConfidence": 0.98,
      "directlyLinkedFromScannedPage": true
    },
    "selectedEvidenceStrength": "moderate",
    "selectedEvidenceArtifactId": "coverage_policy",
    "gdprTransparencyArticle13Concern": {
      "state": "sufficient",
      "topic": "dpo_contact",
      "originKey": "gdpr_transparency.article13.dpo_contact",
      "canonicalConcernKey": "runtime_artifact:gdpr_transparency.article13.dpo_contact",
      "regulatoryChecklistEligibility": "observed"
    }
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Complaints to a regulatorExplains the right to complain to a data protection authority.Observed

JSON evidence

Policy source

Captured page title: Privacy Policy \ Anthropic — https://anthropic.com/legal/privacy

Document heading: Personal data we collect or receive to train our models

Source policy language: en; banner/page language: en; translation applied: No.

Policy reached through: Footer Link; directly linked from scanned page: Yes; retrieved during scan: 2026-10-12T19:32:00.669Z.

Section: Not retained.

Open policy source

If you live in Brazil, you have the right to lodge a complaint with the Brazilian Data Protection Authority (ANPD) .

Matched disclosure snippet: If you live in Brazil, you have the right to lodge a complaint with the Brazilian Data Protection Authority (ANPD) .

Full evidence JSON

{
  "assessmentStatus": "checked",
  "checklistItemId": "supervisory_authority_complaint_disclosure",
  "coverageArea": "Supervisory authority complaint",
  "evidenceState": "observed",
  "explanation": "Whether retained privacy-policy evidence referenced a right to complain to a supervisory authority.",
  "note": "Whether retained privacy-policy evidence referenced a right to complain to a supervisory authority.",
  "status": "Observed",
  "tone": "warning",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.supervisory_authority_complaint_disclosure.observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.supervisory_authority_complaint_disclosure"
  },
  "statusBasis": "Supervisory authority complaint disclosure evidence was retained through adapter-approved multilingual GDPR Transparency Article 13 evidence.",
  "retainedEvidence": {
    "remediation": {
      "kind": "none",
      "steps": [],
      "message": "No remediation is established by this check alone. Retain its evidence and reassess after relevant changes."
    },
    "evidenceRefs": [
      "Evidence: Supervisory authority complaint disclosure",
      "Excerpt: If you live in Brazil, you have the right to lodge a complaint with the Brazilian Data Protection Authority (ANPD) .",
      "Locale: en",
      "Policy URL: https://anthropic.com/legal/privacy"
    ],
    "signalObserved": true,
    "article13Signal": {
      "source": "normalized_concern",
      "status": "observed",
      "confidence": 0.82,
      "surfaceUrl": "https://anthropic.com/legal/privacy",
      "evidenceText": "If you live in Brazil, you have the right to lodge a complaint with the Brazilian Data Protection Authority (ANPD) .",
      "matchStrength": "equivalent",
      "matchedLocale": "en",
      "disclosureType": "supervisory_authority",
      "evidenceSource": "normalized_gdpr_transparency_article13_concern",
      "productionCredit": true,
      "classifierProvenance": "gdpr_transparency_topic_classifier.v1",
      "classifierReasonCodes": [
        "matched_supervisory_authority",
        "match_strength_equivalent",
        "variant_requires_privacy_context"
      ],
      "productionCreditProfile": "gdpr_transparency_multilingual_article13_v1",
      "selectedEvidenceStrength": "strong",
      "selectedPolicySectionUrl": "https://anthropic.com/legal/privacy",
      "selectedPolicySectionHeading": null
    },
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "policyEvidenceAssessment": {
      "result": "disclosure_observed",
      "scoreEffect": "canonical_policy",
      "topicRelevance": "direct",
      "contractVersion": "certscore.policy-topic-evidence-assessment.v1"
    },
    "policyEvidenceProvenance": {
      "sourceUrl": "https://anthropic.com/legal/privacy",
      "policyTitle": "Privacy Policy \\ Anthropic",
      "artifactRefs": [
        "policy_excerpt_1d925b9c_977b211",
        "policy_surface_text_1d925b9c_450ef827"
      ],
      "bannerLanguage": "en",
      "contractVersion": "certscore.policy-evidence-provenance.v1",
      "discoveryMethod": "footer_link",
      "documentHeading": "Personal data we collect or receive to train our models",
      "detectedLanguage": "en",
      "retrievalTimestamp": "2026-10-12T19:32:00.669Z",
      "targetRelationship": "target_controller",
      "translationApplied": false,
      "documentOwnerEntity": "Anthropic",
      "ownershipConfidence": 0.98,
      "directlyLinkedFromScannedPage": true
    },
    "selectedEvidenceStrength": "moderate",
    "selectedEvidenceArtifactId": "coverage_policy",
    "gdprTransparencyArticle13Concern": {
      "state": "sufficient",
      "topic": "supervisory_authority",
      "originKey": "gdpr_transparency.article13.supervisory_authority",
      "canonicalConcernKey": "runtime_artifact:gdpr_transparency.article13.supervisory_authority",
      "regulatoryChecklistEligibility": "observed"
    }
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Profiling and automated decisionsCoverage was limited by scan evidence; No production-approved topic match was established. This neutral result does not establish that the disclosure is absent; policy text extraction errored; 43920 characters retained; 500 required.Not confirmed

JSON evidence

Policy source

Captured page title: Policy source — https://anthropic.com/legal/consumer-health-data-privacy-policy

Source policy language: en; banner/page language: en; translation applied: No.

Policy reached through: Unknown; directly linked from scanned page: Unknown.

Section: Not retained.

Open policy source

No production-approved topic match was established. This neutral result does not establish that the disclosure is absent.

Full evidence JSON

{
  "assessmentStatus": "coverage_limitation",
  "checklistItemId": "automated_decision_making_profiling_disclosure",
  "coverageArea": "Profiling / automated decisions disclosure",
  "evidenceState": "not_testable",
  "explanation": "Whether adapter-approved Article 13 evidence retained automated decision-making or profiling disclosure context for review.",
  "note": "Whether adapter-approved Article 13 evidence retained automated decision-making or profiling disclosure context for review.",
  "status": "Not confirmed",
  "tone": "neutral",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.automated_decision_making_profiling_disclosure.not_confirmed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.automated_decision_making_profiling_disclosure"
  },
  "statusBasis": "No production-approved topic match was established. This neutral result does not establish that the disclosure is absent.",
  "retainedEvidence": {
    "remediation": {
      "kind": "steps",
      "steps": [
        "Review the governing policy section for the applicable automated decision-making or profiling disclosures; retain the exact excerpt and source URL.",
        "If relevant wording exists, record it for review and investigate extraction coverage. Unconfirmed evidence alone does not establish a missing disclosure.",
        "Retest the same policy version or record the revised version; verify that the extracted passage supports this specific topic, rather than nearby or unrelated wording."
      ]
    },
    "signalObserved": "not_confirmed_canonical_projection_unavailable",
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "canonicalProjectionState": "normalized_concern_unavailable",
    "policyEvidenceAssessment": {
      "result": "extraction_incomplete",
      "scoreEffect": "none",
      "topicRelevance": "unknown",
      "contractVersion": "certscore.policy-topic-evidence-assessment.v1"
    },
    "policyEvidenceProvenance": {
      "sourceUrl": "https://anthropic.com/legal/consumer-health-data-privacy-policy",
      "bannerLanguage": "en",
      "contractVersion": "certscore.policy-evidence-provenance.v1",
      "detectedLanguage": "en",
      "translationApplied": false
    },
    "selectedEvidenceStrength": "missing",
    "policyTextExtractionHealth": {
      "policyUrls": [
        "https://anthropic.com/legal/privacy",
        "https://anthropic.com/legal/consumer-health-data-privacy-policy"
      ],
      "nanoInvoked": false,
      "nanoSkipReason": "policy_text_input_limited",
      "contractVersion": "certscore.policy-text-extraction-health.v2",
      "policyTextQuality": {
        "usable": true,
        "codeSignalCount": 0,
        "codeSymbolRatio": 0.000569216757741348,
        "policyTermCount": 16,
        "alphabeticWordRatio": 0.804910516195829,
        "accessChallengeSignalCount": 0,
        "naturalLanguageSentenceCount": 234
      },
      "policyUrlRetained": true,
      "extractedTextLength": 43920,
      "policySurfaceObserved": true,
      "detectedPolicyLanguage": "en",
      "extractionFailureReason": "privacy_policy_text_processing_error",
      "minimumTextLengthRequired": 500,
      "policyTextExtractionStatus": "errored",
      "verifiedPolicyDocumentCount": 2,
      "detectedPolicyLanguageSource": "policy_surface",
      "supportedGdprTransparencyLocales": [
        "en",
        "de",
        "fr",
        "es",
        "it",
        "nl",
        "pl",
        "pt",
        "ru",
        "ja",
        "zh",
        "ar",
        "sv",
        "ro",
        "cs",
        "el",
        "hu",
        "da",
        "fi",
        "sk",
        "bg",
        "hr",
        "nb",
        "sl",
        "lt",
        "lv",
        "et",
        "uk",
        "tr",
        "fa",
        "vi",
        "id",
        "ko",
        "th",
        "he",
        "sr",
        "ca",
        "hi",
        "az",
        "gl"
      ],
      "gdprTransparencyLanguageSupported": true,
      "policyTextEvidenceProjectionStatus": "verified_complete",
      "policyTextEvidenceProjectionContractVersion": "certscore.policy-text-evidence-projection.v1"
    },
    "selectedEvidenceArtifactId": "coverage_policy",
    "article13CoverageAssessment": {
      "topic": "automated_decision_making_or_profiling",
      "status": "insufficient_retained_evidence",
      "sourceUrls": [
        "https://www.anthropic.com/legal/privacy",
        "https://www.anthropic.com/legal/consumer-health-data-privacy-policy"
      ],
      "reasonCodes": [
        "policy_absence_coverage_preconditions_not_met",
        "typed_topic_coverage_diagnostic_missing_or_limited",
        "policy_document_content_coverage_incomplete"
      ],
      "coverageStatus": "insufficient",
      "policyDocumentIds": [
        "policy_surface_1d925b9c",
        "policy_surface_2cbc38f4"
      ],
      "policyDocumentRoles": [
        "policy_document",
        "policy_document"
      ],
      "policyDocumentSha256": [
        "b763dd02428a494c4680e640685c27e6bff8535ce263bd7cba1a24c641dd5065",
        "c81851a14a4bb0527b8b319a9f0d6df94c4ebc232d88f312ba8ff6610fc3fc3e"
      ],
      "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
      "unresolvedMaterialPolicyChildUrls": []
    },
    "gdprTransparencyReportStatusContract": "observed_not_confirmed_no_match_found.v1"
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

1Review the governing policy section for the applicable automated decision-making or profiling disclosures; retain the exact excerpt and source URL.
2If relevant wording exists, record it for review and investigate extraction coverage. Unconfirmed evidence alone does not establish a missing disclosure.
3Retest the same policy version or record the revised version; verify that the extracted passage supports this specific topic, rather than nearby or unrelated wording.

Cookie disclosureA cookie policy or disclosure notice was found.Observed

JSON evidence

cookie policy or cookie disclosure surface retained

Not confirmed: granular named-cookie inventory

Not confirmed: cookie preference interface

Full evidence JSON

{
  "assessmentStatus": "checked",
  "checklistItemId": "cookie_notice_policy_availability",
  "coverageArea": "Cookie notice / cookie policy availability",
  "evidenceState": "observed",
  "explanation": "Whether a cookie notice, cookie policy, cookie settings surface, or equivalent cookie disclosure surface was retained.",
  "note": "Whether a cookie notice, cookie policy, cookie settings surface, or equivalent cookie disclosure surface was retained.",
  "status": "Observed",
  "tone": "warning",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.cookie_notice_policy_availability.observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.cookie_notice_policy_availability"
  },
  "statusBasis": "A durable cookie disclosure surface was retained in the tested context; a granular named-cookie inventory or preference interface was not confirmed.",
  "retainedEvidence": {
    "evidenceRefs": [
      "Evidence: cookie policy or cookie disclosure surface retained",
      "Not confirmed: granular named-cookie inventory",
      "Not confirmed: cookie preference interface",
      "Policy URL: https://anthropic.com/legal/consumer-health-data-privacy-policy",
      "Policy URL: https://anthropic.com/legal/privacy"
    ],
    "cookiePolicyUrls": [
      "https://anthropic.com/legal/consumer-health-data-privacy-policy",
      "https://anthropic.com/legal/privacy"
    ],
    "cookiePolicyPresent": true,
    "cookieNoticeObserved": true,
    "observedPolicyTopics": [
      "sale_or_share",
      "third_party_disclosures",
      "consent_withdrawal",
      "controller_contact",
      "processing_purposes",
      "recipients_or_vendor_categories"
    ],
    "missingEvidenceNeeded": [],
    "observedPolicyControls": [
      "global_privacy_control",
      "consent_withdrawal"
    ],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "selectedEvidenceStrength": "moderate",
    "selectedEvidenceArtifactId": "coverage_policy",
    "preferenceInterfaceConfirmed": false,
    "granularCookieInventoryConfirmed": false
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Accessibility (WCAG)

2 issues · 2 to review

Review

WCAG 2.2 A/AA automated checks on the starting page.

axe-core 4.11.3 · 62 rules evaluated

Coverage is limited: 2 checks need manual review.

Low text contrast2 elements affectedIssues found

Text must have sufficient contrast against its background.

Impact: Serious

WCAG criteria: 1.4.3

WCAG guidance & remediation ↗

Examples (2 of 2)

#accept-btn

Element has insufficient color contrast of 3.12 (foreground color: #ffffff, background color: #d97757, font size: 9.0pt (12px), font weight: normal). Expected contrast ratio of 4.5:1

<button id style><span></span></button>

Show more examples (1)

#accept-btn > span

Element has insufficient color contrast of 3.12 (foreground color: #ffffff, background color: #d97757, font size: 9.0pt (12px), font weight: normal). Expected contrast ratio of 4.5:1

<span></span>

JSON evidence

{
  "accessibilityRule": {
    "ruleId": "color-contrast",
    "impact": "serious",
    "tags": [
      "cat.color",
      "wcag2aa",
      "wcag143",
      "TTv5",
      "TT13.c",
      "EN-301-549",
      "EN-9.1.4.3",
      "ACT",
      "RGAAv4",
      "RGAA-3.2.1"
    ],
    "help": "Elements must meet minimum color contrast ratio thresholds",
    "description": "Ensure the contrast between foreground and background colors meets WCAG 2 AA minimum contrast ratio thresholds",
    "helpUrl": "https://dequeuniversity.com/rules/axe/4.11/color-contrast?application=axeAPI",
    "nodeCount": 2,
    "representativeNodes": [
      {
        "selectors": [
          "#accept-btn"
        ],
        "htmlSnippet": "<button id style><span></span></button>",
        "failureSummary": "Fix any of the following: Element has insufficient color contrast of 3.12 (foreground color: #ffffff, background color: #d97757, font size: 9.0pt (12px), font weight: normal). Expected contrast ratio of 4.5:1",
        "colorContrast": {
          "foregroundColor": "#ffffff",
          "backgroundColor": "#d97757",
          "contrastRatio": 3.12,
          "requiredContrastRatio": 4.5,
          "fontSize": "9.0pt (12px)",
          "fontWeight": "normal"
        }
      },
      {
        "selectors": [
          "#accept-btn > span"
        ],
        "htmlSnippet": "<span></span>",
        "failureSummary": "Fix any of the following: Element has insufficient color contrast of 3.12 (foreground color: #ffffff, background color: #d97757, font size: 9.0pt (12px), font weight: normal). Expected contrast ratio of 4.5:1",
        "colorContrast": {
          "foregroundColor": "#ffffff",
          "backgroundColor": "#d97757",
          "contrastRatio": 3.12,
          "requiredContrastRatio": 4.5,
          "fontSize": "9.0pt (12px)",
          "fontWeight": "normal"
        }
      }
    ]
  }
}

Correction steps

01Adjust the text or background colors to meet the required ratio shown in each example, then retest.

Link names7 elements affectedIssues found

Links need an accessible name describing their destination or purpose.

Impact: Serious

WCAG criteria: 2.4.4, 4.1.2

WCAG guidance & remediation ↗

Examples (5 of 7)

a[data-cta-text]

Element is in tab order and does not have accessible text Fix any of the following: Element does not have text that is visible to screen readers aria-label attribute does not exist or is empty aria-labelledby attribute does not exist, references elements that do not exist or references elements that are empty Element has no title attribute

<a data-cta-text data-cta data-cta-position href class></a>

Show more examples (4)

a[data-cta-text]

<a data-cta-text data-cta data-cta-position href class></a>

li:nth-child(3) > .article-list-item.u-detail-m[data-wf--global-article-list-item--variant] > .g_clickable_link[data-cta-position][data-cta]

<a data-cta-text data-cta data-cta-position href class></a>

li:nth-child(4) > .article-list-item.u-detail-m[data-wf--global-article-list-item--variant] > .g_clickable_link[data-cta-position][data-cta]

<a data-cta-text data-cta data-cta-position href class></a>

a[data-cta-text]

<a data-cta-text data-cta data-cta-position href class></a>

JSON evidence

{
  "accessibilityRule": {
    "ruleId": "link-name",
    "impact": "serious",
    "tags": [
      "cat.name-role-value",
      "wcag2a",
      "wcag244",
      "wcag412",
      "section508",
      "section508.22.a",
      "TTv5",
      "TT6.a",
      "EN-301-549",
      "EN-9.2.4.4",
      "EN-9.4.1.2",
      "ACT",
      "RGAAv4",
      "RGAA-6.2.1"
    ],
    "help": "Links must have discernible text",
    "description": "Ensure links have discernible text",
    "helpUrl": "https://dequeuniversity.com/rules/axe/4.11/link-name?application=axeAPI",
    "nodeCount": 7,
    "representativeNodes": [
      {
        "selectors": [
          "a[data-cta-text]"
        ],
        "htmlSnippet": "<a data-cta-text data-cta data-cta-position href class></a>",
        "failureSummary": "Fix all of the following: Element is in tab order and does not have accessible text Fix any of the following: Element does not have text that is visible to screen readers aria-label attribute does not exist or is empty aria-labelledby attribute does not exist, references elements that do not exist or references elements that are empty Element has no title attribute",
        "imageLinkIdentity": {
          "contractVersion": "certscore.accessibility-image-link-identity.v1",
          "nodeId": 1,
          "imageOnlyLinkId": null
        }
      },
      {
        "selectors": [
          "a[data-cta-text]"
        ],
        "htmlSnippet": "<a data-cta-text data-cta data-cta-position href class></a>",
        "failureSummary": "Fix all of the following: Element is in tab order and does not have accessible text Fix any of the following: Element does not have text that is visible to screen readers aria-label attribute does not exist or is empty aria-labelledby attribute does not exist, references elements that do not exist or references elements that are empty Element has no title attribute",
        "imageLinkIdentity": {
          "contractVersion": "certscore.accessibility-image-link-identity.v1",
          "nodeId": 2,
          "imageOnlyLinkId": null
        }
      },
      {
        "selectors": [
          "li:nth-child(3) > .article-list-item.u-detail-m[data-wf--global-article-list-item--variant] > .g_clickable_link[data-cta-position][data-cta]"
        ],
        "htmlSnippet": "<a data-cta-text data-cta data-cta-position href class></a>",
        "failureSummary": "Fix all of the following: Element is in tab order and does not have accessible text Fix any of the following: Element does not have text that is visible to screen readers aria-label attribute does not exist or is empty aria-labelledby attribute does not exist, references elements that do not exist or references elements that are empty Element has no title attribute",
        "imageLinkIdentity": {
          "contractVersion": "certscore.accessibility-image-link-identity.v1",
          "nodeId": 3,
          "imageOnlyLinkId": null
        }
      },
      {
        "selectors": [
          "li:nth-child(4) > .article-list-item.u-detail-m[data-wf--global-article-list-item--variant] > .g_clickable_link[data-cta-position][data-cta]"
        ],
        "htmlSnippet": "<a data-cta-text data-cta data-cta-position href class></a>",
        "failureSummary": "Fix all of the following: Element is in tab order and does not have accessible text Fix any of the following: Element does not have text that is visible to screen readers aria-label attribute does not exist or is empty aria-labelledby attribute does not exist, references elements that do not exist or references elements that are empty Element has no title attribute",
        "imageLinkIdentity": {
          "contractVersion": "certscore.accessibility-image-link-identity.v1",
          "nodeId": 4,
          "imageOnlyLinkId": null
        }
      },
      {
        "selectors": [
          "a[data-cta-text]"
        ],
        "htmlSnippet": "<a data-cta-text data-cta data-cta-position href class></a>",
        "failureSummary": "Fix all of the following: Element is in tab order and does not have accessible text Fix any of the following: Element does not have text that is visible to screen readers aria-label attribute does not exist or is empty aria-labelledby attribute does not exist, references elements that do not exist or references elements that are empty Element has no title attribute",
        "imageLinkIdentity": {
          "contractVersion": "certscore.accessibility-image-link-identity.v1",
          "nodeId": 5,
          "imageOnlyLinkId": null
        }
      }
    ]
  }
}

Correction steps

01Add descriptive link text or an accessible label, then check the name announced for each flagged link.

Checks needing manual review

Invalid ARIA values4 elements to reviewReview

ARIA values and references must be valid for the property.

Impact: Critical

WCAG criteria: 4.1.2

WCAG guidance & remediation ↗

Examples (4 of 4)

#w-dropdown-toggle-0

Unable to determine if aria-controls referenced ID exists on the page while using aria-haspopup: aria-controls="w-dropdown-list-0"

<div class id aria-controls aria-haspopup aria-expanded role tabindex>

Show more examples (3)

#w-dropdown-toggle-1

Unable to determine if aria-controls referenced ID exists on the page while using aria-haspopup: aria-controls="w-dropdown-list-1"

<div class id aria-controls aria-haspopup aria-expanded role tabindex>

#w-dropdown-toggle-2

Unable to determine if aria-controls referenced ID exists on the page while using aria-haspopup: aria-controls="w-dropdown-list-2"

<div class id aria-controls aria-haspopup aria-expanded role tabindex>

#w-dropdown-toggle-3

Unable to determine if aria-controls referenced ID exists on the page while using aria-haspopup: aria-controls="w-dropdown-list-3"

<div class id aria-controls aria-haspopup aria-expanded role tabindex>

JSON evidence

{
  "accessibilityRule": {
    "ruleId": "aria-valid-attr-value",
    "impact": "critical",
    "tags": [
      "cat.aria",
      "wcag2a",
      "wcag412",
      "EN-301-549",
      "EN-9.4.1.2",
      "RGAAv4",
      "RGAA-7.1.1"
    ],
    "help": "ARIA attributes must conform to valid values",
    "description": "Ensure all ARIA attributes have valid values",
    "helpUrl": "https://dequeuniversity.com/rules/axe/4.11/aria-valid-attr-value?application=axeAPI",
    "nodeCount": 4,
    "representativeNodes": [
      {
        "selectors": [
          "#w-dropdown-toggle-0"
        ],
        "htmlSnippet": "<div class id aria-controls aria-haspopup aria-expanded role tabindex>",
        "failureSummary": "Fix all of the following: Unable to determine if aria-controls referenced ID exists on the page while using aria-haspopup: aria-controls=\"w-dropdown-list-0\""
      },
      {
        "selectors": [
          "#w-dropdown-toggle-1"
        ],
        "htmlSnippet": "<div class id aria-controls aria-haspopup aria-expanded role tabindex>",
        "failureSummary": "Fix all of the following: Unable to determine if aria-controls referenced ID exists on the page while using aria-haspopup: aria-controls=\"w-dropdown-list-1\""
      },
      {
        "selectors": [
          "#w-dropdown-toggle-2"
        ],
        "htmlSnippet": "<div class id aria-controls aria-haspopup aria-expanded role tabindex>",
        "failureSummary": "Fix all of the following: Unable to determine if aria-controls referenced ID exists on the page while using aria-haspopup: aria-controls=\"w-dropdown-list-2\""
      },
      {
        "selectors": [
          "#w-dropdown-toggle-3"
        ],
        "htmlSnippet": "<div class id aria-controls aria-haspopup aria-expanded role tabindex>",
        "failureSummary": "Fix all of the following: Unable to determine if aria-controls referenced ID exists on the page while using aria-haspopup: aria-controls=\"w-dropdown-list-3\""
      }
    ]
  }
}

Correction steps

01Verify the flagged elements first. If the issue is confirmed, correct the flagged value or referenced element ID, then check the resulting accessible properties.

Low text contrast16 elements to reviewReview

Text must have sufficient contrast against its background.

Impact: Serious

WCAG criteria: 1.4.3

WCAG guidance & remediation ↗

Examples (5 of 16)

.nav_links_item.is-desktop:nth-child(6) > .nav_btn_combo_wrap > .is-combo.btn_main_wrap > .btn_main_text[aria-hidden]

Element's background color could not be determined because it is overlapped by another element

Contrast ratio: 0; required: 4.5.

<div aria-hidden class></div>

Show more examples (4)

.u-column-4:nth-child(1) > .package_banner.is-pad-m > .package_banner_left.is-child-stretch > div:nth-child(3) > .btn_main_wrap[data-wf--button-main--style] > .btn_main_text[aria-hidden]

Element's background color could not be determined because it is overlapped by another element

Contrast ratio: 0; required: 4.5.

<div aria-hidden class></div>

.u-column-4:nth-child(2) > .package_banner.is-pad-m > .package_banner_left.is-child-stretch > div:nth-child(3) > .btn_main_wrap[data-wf--button-main--style] > .btn_main_text[aria-hidden]

Element's background color could not be determined because it is overlapped by another element

Contrast ratio: 0; required: 4.5.

<div aria-hidden class></div>

.u-column-4:nth-child(3) > .package_banner.is-pad-m > .package_banner_left.is-child-stretch > div:nth-child(3) > .btn_main_wrap[data-wf--button-main--style] > .btn_main_text[aria-hidden]

Element's background color could not be determined because it is overlapped by another element

Contrast ratio: 0; required: 4.5.

<div aria-hidden class></div>

li:nth-child(1) > .article-list-item.u-detail-m[data-wf--global-article-list-item--variant] > .u-width-full:nth-child(1) > h3

Element's background color could not be determined because it is overlapped by another element

Contrast ratio: 0; required: 4.5.

<h3 class></h3>

JSON evidence

{
  "accessibilityRule": {
    "ruleId": "color-contrast",
    "impact": "serious",
    "tags": [
      "cat.color",
      "wcag2aa",
      "wcag143",
      "TTv5",
      "TT13.c",
      "EN-301-549",
      "EN-9.1.4.3",
      "ACT",
      "RGAAv4",
      "RGAA-3.2.1"
    ],
    "help": "Elements must meet minimum color contrast ratio thresholds",
    "description": "Ensure the contrast between foreground and background colors meets WCAG 2 AA minimum contrast ratio thresholds",
    "helpUrl": "https://dequeuniversity.com/rules/axe/4.11/color-contrast?application=axeAPI",
    "nodeCount": 16,
    "representativeNodes": [
      {
        "selectors": [
          ".nav_links_item.is-desktop:nth-child(6) > .nav_btn_combo_wrap > .is-combo.btn_main_wrap > .btn_main_text[aria-hidden]"
        ],
        "htmlSnippet": "<div aria-hidden class></div>",
        "failureSummary": "Fix any of the following: Element's background color could not be determined because it is overlapped by another element",
        "colorContrast": {
          "contrastRatio": 0,
          "requiredContrastRatio": 4.5,
          "fontSize": "11.3pt (15px)",
          "fontWeight": "normal"
        }
      },
      {
        "selectors": [
          ".u-column-4:nth-child(1) > .package_banner.is-pad-m > .package_banner_left.is-child-stretch > div:nth-child(3) > .btn_main_wrap[data-wf--button-main--style] > .btn_main_text[aria-hidden]"
        ],
        "htmlSnippet": "<div aria-hidden class></div>",
        "failureSummary": "Fix any of the following: Element's background color could not be determined because it is overlapped by another element",
        "colorContrast": {
          "contrastRatio": 0,
          "requiredContrastRatio": 4.5,
          "fontSize": "11.3pt (15px)",
          "fontWeight": "normal"
        }
      },
      {
        "selectors": [
          ".u-column-4:nth-child(2) > .package_banner.is-pad-m > .package_banner_left.is-child-stretch > div:nth-child(3) > .btn_main_wrap[data-wf--button-main--style] > .btn_main_text[aria-hidden]"
        ],
        "htmlSnippet": "<div aria-hidden class></div>",
        "failureSummary": "Fix any of the following: Element's background color could not be determined because it is overlapped by another element",
        "colorContrast": {
          "contrastRatio": 0,
          "requiredContrastRatio": 4.5,
          "fontSize": "11.3pt (15px)",
          "fontWeight": "normal"
        }
      },
      {
        "selectors": [
          ".u-column-4:nth-child(3) > .package_banner.is-pad-m > .package_banner_left.is-child-stretch > div:nth-child(3) > .btn_main_wrap[data-wf--button-main--style] > .btn_main_text[aria-hidden]"
        ],
        "htmlSnippet": "<div aria-hidden class></div>",
        "failureSummary": "Fix any of the following: Element's background color could not be determined because it is overlapped by another element",
        "colorContrast": {
          "contrastRatio": 0,
          "requiredContrastRatio": 4.5,
          "fontSize": "11.3pt (15px)",
          "fontWeight": "normal"
        }
      },
      {
        "selectors": [
          "li:nth-child(1) > .article-list-item.u-detail-m[data-wf--global-article-list-item--variant] > .u-width-full:nth-child(1) > h3"
        ],
        "htmlSnippet": "<h3 class></h3>",
        "failureSummary": "Fix any of the following: Element's background color could not be determined because it is overlapped by another element",
        "colorContrast": {
          "contrastRatio": 0,
          "requiredContrastRatio": 4.5,
          "fontSize": "12.0pt (16px)",
          "fontWeight": "normal"
        }
      }
    ]
  }
}

Correction steps

01Check the text against its actual background. If it falls below the required ratio, adjust the colors and retest.

Cookies & tracking

3 checks · No review flags

Non-essential storage before consentNo non-essential cookie or storage writes were detected before a consent choice.Not observed

JSON evidence

_cfuvid (website.anthropic.com): essential, first observed 1.007s after scan start

__cf_bm (hubspotonwebflow.com): essential, first observed 1.641s after scan start

__cf_bm (claude.com): essential, first observed 1.909s after scan start

Full evidence JSON

{
  "assessmentStatus": "checked",
  "checklistItemId": "pre_consent_cookies_storage",
  "coverageArea": "Non-essential pre-consent cookies/storage",
  "evidenceState": "not_observed",
  "explanation": "Whether non-essential cookies or browser storage were observed before a recorded consent action.",
  "note": "Whether non-essential cookies or browser storage were observed before a recorded consent action.",
  "status": "Not observed",
  "tone": "neutral",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.pre_consent_cookies_storage.not_observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.pre_consent_cookies_storage"
  },
  "statusBasis": "The retained pre-consent storage inventory was classified and did not contain eligible non-essential storage. Essential, consent-management, security, and functional storage remains contextual evidence only.",
  "retainedEvidence": {
    "remediation": {
      "kind": "none",
      "steps": [],
      "message": "No remediation is established by this check alone. Retain its evidence and reassess after relevant changes."
    },
    "evidenceRefs": [
      "_cfuvid (website.anthropic.com): essential, first observed 1.007s after scan start",
      "__cf_bm (hubspotonwebflow.com): essential, first observed 1.641s after scan start",
      "__cf_bm (claude.com): essential, first observed 1.909s after scan start",
      "Aggregate pre-consent storage count: 3",
      "Assessment reconciliation: reconciled"
    ],
    "cookiesSeenCount": 3,
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected retained concrete cookie/storage evidence for storage timing; request-only tracking evidence is not used as storage proof.",
    "weakerArtifactsIgnored": [],
    "selectedEvidenceStrength": "moderate",
    "cookiesBeforeConsentCount": 0,
    "selectedEvidenceArtifactId": "preConsentCookieOrStorageEvidence.missing",
    "preConsentStorageAssessment": {
      "status": "classified_zero",
      "evidenceRows": [
        {
          "name": "_cfuvid",
          "party": "first_party",
          "domain": "website.anthropic.com",
          "category": "security",
          "storageType": "cookie",
          "essentiality": "essential",
          "timingEvidence": "before_consent_write",
          "exclusionReason": "functional_or_consent_storage",
          "firstObservedMs": 1007,
          "initiatorDomain": null,
          "initiatorVendor": null,
          "essentialitySource": "canonical_registry"
        },
        {
          "name": "__cf_bm",
          "party": "third_party",
          "domain": "hubspotonwebflow.com",
          "category": "security",
          "storageType": "cookie",
          "essentiality": "essential",
          "timingEvidence": "before_consent_write",
          "exclusionReason": "functional_or_consent_storage",
          "firstObservedMs": 1641,
          "initiatorDomain": null,
          "initiatorVendor": null,
          "essentialitySource": "canonical_registry"
        },
        {
          "name": "__cf_bm",
          "party": "third_party",
          "domain": "claude.com",
          "category": "security",
          "storageType": "cookie",
          "essentiality": "essential",
          "timingEvidence": "before_consent_write",
          "exclusionReason": "functional_or_consent_storage",
          "firstObservedMs": 1909,
          "initiatorDomain": "anthropic.com",
          "initiatorVendor": null,
          "essentialitySource": "canonical_registry"
        }
      ],
      "provenWriteCount": 0,
      "assessmentVersion": "pre-consent-storage-assessment-v1",
      "unclassifiedCount": 0,
      "reconciliationStatus": "reconciled",
      "snapshotPresenceCount": 0,
      "aggregateObservedCount": 3,
      "classifiedEssentialCount": 3,
      "classifiedNonEssentialCount": 0,
      "attributedPreConsentRecordCount": 3,
      "excludedFunctionalOrConsentCount": 3
    },
    "excludedEssentialOrFunctionalRows": [
      {
        "name": "_cfuvid",
        "party": "first_party",
        "domain": "website.anthropic.com",
        "category": "security",
        "storageType": "cookie",
        "essentiality": "essential",
        "timingEvidence": "before_consent_write",
        "exclusionReason": "functional_or_consent_storage",
        "firstObservedMs": 1007,
        "initiatorDomain": null,
        "initiatorVendor": null,
        "essentialitySource": "canonical_registry"
      },
      {
        "name": "__cf_bm",
        "party": "third_party",
        "domain": "hubspotonwebflow.com",
        "category": "security",
        "storageType": "cookie",
        "essentiality": "essential",
        "timingEvidence": "before_consent_write",
        "exclusionReason": "functional_or_consent_storage",
        "firstObservedMs": 1641,
        "initiatorDomain": null,
        "initiatorVendor": null,
        "essentialitySource": "canonical_registry"
      },
      {
        "name": "__cf_bm",
        "party": "third_party",
        "domain": "claude.com",
        "category": "security",
        "storageType": "cookie",
        "essentiality": "essential",
        "timingEvidence": "before_consent_write",
        "exclusionReason": "functional_or_consent_storage",
        "firstObservedMs": 1909,
        "initiatorDomain": "anthropic.com",
        "initiatorVendor": null,
        "essentialitySource": "canonical_registry"
      }
    ],
    "preConsentStorageAssessmentStatus": "classified_zero",
    "rowLevelEssentialityEvidenceRetained": true,
    "firstPreconsentCookieOrStorageObservedMs": 1007,
    "preConsentStorageClassificationLimitation": false,
    "preconsentCookieOrStorageExactTimingRetained": false,
    "eligibleNonEssentialCookieStorageFindingProjected": false
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Session recordingNo session-recording service was detected during this scan.Not observed

JSON evidence

Context: browser API access retained

Observed host: anthropic.com

Full evidence JSON

{
  "assessmentStatus": "checked",
  "checklistItemId": "session_replay_fingerprinting_review",
  "coverageArea": "Session replay signal",
  "evidenceState": "not_observed",
  "explanation": "No eligible session replay, behavioral recording, or fingerprinting-like signal was observed in the tested context.",
  "note": "No eligible session replay, behavioral recording, or fingerprinting-like signal was observed in the tested context.",
  "status": "Not observed",
  "tone": "neutral",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.session_replay_fingerprinting_review.not_observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.session_replay_fingerprinting_review"
  },
  "statusBasis": "Browser API access was retained as device-identification context, but no session replay vendor or collection signal was observed. The browser/device context is evaluated separately in the device-identification row.",
  "retainedEvidence": {
    "remediation": {
      "kind": "none",
      "steps": [],
      "message": "No remediation is established by this check alone. Retain its evidence and reassess after relevant changes."
    },
    "evidenceRefs": [
      "Context: browser API access retained",
      "Observed host: anthropic.com"
    ],
    "missingEvidenceNeeded": [],
    "sessionReplayObserved": false,
    "fingerprintingObserved": false,
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "selectedEvidenceStrength": "missing",
    "selectedEvidenceArtifactId": "coverage_policy",
    "browserDeviceEntropyEvidence": {
      "hosts": [
        "anthropic.com"
      ],
      "observedMs": [
        2606
      ],
      "firstObservedMs": 2606,
      "browserApiSignals": [
        "CanvasRenderingContext2D.getImageData"
      ],
      "assessmentStrength": "contextual_only",
      "highEntropySignals": [
        "CanvasRenderingContext2D.getImageData",
        "canvas"
      ],
      "assessmentContractVersion": "fingerprinting_evidence_assessment.v1",
      "entropyLinkedToIdentifier": false,
      "deviceDataLikeRequestCount": 0,
      "strongCorroboratorObserved": false,
      "entropyTransmissionObserved": false,
      "distinctAttributeFamilyCount": 1,
      "coordinatedSignalClusterObserved": false,
      "fingerprintingRuntimeEvidenceCount": 2
    }
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Device fingerprintingNo device-fingerprinting activity was detected during this scan.Not observed

JSON evidence

Context only: browser capability access retained

Browser API access: CanvasRenderingContext2D.getImageData

Browser API access: canvas

Full evidence JSON

{
  "assessmentStatus": "checked",
  "checklistItemId": "device_identification_fingerprinting_signal_observed",
  "coverageArea": "Device identification / fingerprinting signal",
  "evidenceState": "not_observed",
  "explanation": "Whether browser/device entropy, fingerprinting, or identifier-like device collection signals were observed in retained runtime evidence.",
  "note": "Whether browser/device entropy, fingerprinting, or identifier-like device collection signals were observed in retained runtime evidence.",
  "status": "Not observed",
  "tone": "neutral",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.device_identification_fingerprinting_signal_observed.not_observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.device_identification_fingerprinting_signal_observed"
  },
  "statusBasis": "No eligible device-identification or fingerprinting signal was observed. Low-specificity browser capability access was retained as contextual evidence.",
  "retainedEvidence": {
    "evidenceRefs": [
      "Context only: browser capability access retained",
      "Browser API access: CanvasRenderingContext2D.getImageData",
      "Browser API access: canvas"
    ],
    "promotionEligible": false,
    "missingEvidenceNeeded": [],
    "fingerprintingObserved": false,
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "selectedEvidenceStrength": "missing",
    "selectedEvidenceArtifactId": "coverage_policy",
    "browserDeviceEntropyEvidence": {
      "hosts": [
        "anthropic.com"
      ],
      "observedMs": [
        2606
      ],
      "firstObservedMs": 2606,
      "browserApiSignals": [
        "CanvasRenderingContext2D.getImageData"
      ],
      "assessmentStrength": "contextual_only",
      "highEntropySignals": [
        "CanvasRenderingContext2D.getImageData",
        "canvas"
      ],
      "assessmentContractVersion": "fingerprinting_evidence_assessment.v1",
      "entropyLinkedToIdentifier": false,
      "deviceDataLikeRequestCount": 0,
      "strongCorroboratorObserved": false,
      "entropyTransmissionObserved": false,
      "distinctAttributeFamilyCount": 1,
      "coordinatedSignalClusterObserved": false,
      "fingerprintingRuntimeEvidenceCount": 2
    }
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Connection security

5 checks · 5 observed

HTTPS deliveryThe scanned page used HTTPS.Observed

JSON evidence

ref_transport_security

Full evidence JSON

{
  "assessmentStatus": "checked",
  "checklistItemId": "transport_security_https_delivery",
  "coverageArea": "HTTPS delivery for scanned pages",
  "evidenceState": "observed",
  "explanation": "Whether the retained scanned page was served over HTTPS.",
  "note": "Whether the retained scanned page was served over HTTPS.",
  "status": "Observed",
  "tone": "warning",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.transport_security_https_delivery.observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.transport_security_https_delivery"
  },
  "statusBasis": "The scanned page was served over HTTPS in the retained transport observation.",
  "retainedEvidence": {
    "finalUrl": "https://www.anthropic.com/",
    "finalScheme": "https",
    "evidenceRefs": [
      "ref_transport_security"
    ],
    "httpProbeStatus": 200,
    "sampledPageUrls": [
      "https://anthropic.com/",
      "https://www.anthropic.com/"
    ],
    "httpProbeOutcome": "redirected_to_https",
    "httpProbeFinalUrl": "https://www.anthropic.com/",
    "pageHttpsObserved": true,
    "tlsProbeAttempted": true,
    "formInventoryState": "complete",
    "formTransportCount": 1,
    "httpProbeAttempted": true,
    "validTlsCertificate": true,
    "httpProbeFinalScheme": "https",
    "httpRedirectsToHttps": true,
    "mixedContentObserved": false,
    "missingEvidenceNeeded": [],
    "httpProbeRedirectChain": [
      "http://anthropic.com/",
      "https://www.anthropic.com/"
    ],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "selectedEvidenceStrength": "moderate",
    "mixedContentObservedCount": 0,
    "selectedEvidenceArtifactId": "coverage_policy",
    "tlsCertificateObservations": [
      {
        "issuer": "CN=YE1, O=Let's Encrypt",
        "subject": "CN=anthropic.com",
        "validTo": "Dec  4 18:42:31 2026 GMT",
        "inputUrl": "https://anthropic.com/",
        "validFrom": "Sep  5 18:42:32 2026 GMT",
        "validCertificate": true,
        "chainCertificateCount": 5
      },
      {
        "issuer": "CN=YE1, O=Let's Encrypt",
        "subject": "CN=www.anthropic.com",
        "validTo": "Dec  4 15:05:40 2026 GMT",
        "inputUrl": "https://www.anthropic.com/",
        "validFrom": "Sep  5 15:05:41 2026 GMT",
        "validCertificate": true,
        "chainCertificateCount": 5
      }
    ],
    "insecureFormTransportObserved": false
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

HTTPS certificateThe website's HTTPS certificate passed validation.Observed

JSON evidence

ref_transport_security

Full evidence JSON

{
  "assessmentStatus": "checked",
  "checklistItemId": "transport_security_tls_certificate",
  "coverageArea": "Valid SSL/TLS certificate",
  "evidenceState": "observed",
  "explanation": "Whether a strict TLS probe verified the HTTPS origin certificate separately from the normal scanner runtime.",
  "note": "Whether a strict TLS probe verified the HTTPS origin certificate separately from the normal scanner runtime.",
  "status": "Observed",
  "tone": "warning",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.transport_security_tls_certificate.observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.transport_security_tls_certificate"
  },
  "statusBasis": "Retained certificate validation verified the HTTPS origin certificate. Retained certificate evidence: https://anthropic.com/ presented CN=anthropic.com certificate valid Sep 5–Dec 4, 2026; https://www.anthropic.com/ presented CN=www.anthropic.com certificate valid Sep 5–Dec 4, 2026.",
  "retainedEvidence": {
    "finalUrl": "https://www.anthropic.com/",
    "finalScheme": "https",
    "evidenceRefs": [
      "ref_transport_security"
    ],
    "httpProbeStatus": 200,
    "sampledPageUrls": [
      "https://anthropic.com/",
      "https://www.anthropic.com/"
    ],
    "httpProbeOutcome": "redirected_to_https",
    "httpProbeFinalUrl": "https://www.anthropic.com/",
    "pageHttpsObserved": true,
    "tlsProbeAttempted": true,
    "formInventoryState": "complete",
    "formTransportCount": 1,
    "httpProbeAttempted": true,
    "validTlsCertificate": true,
    "httpProbeFinalScheme": "https",
    "httpRedirectsToHttps": true,
    "mixedContentObserved": false,
    "missingEvidenceNeeded": [],
    "httpProbeRedirectChain": [
      "http://anthropic.com/",
      "https://www.anthropic.com/"
    ],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "selectedEvidenceStrength": "moderate",
    "mixedContentObservedCount": 0,
    "selectedEvidenceArtifactId": "coverage_policy",
    "tlsCertificateObservations": [
      {
        "issuer": "CN=YE1, O=Let's Encrypt",
        "subject": "CN=anthropic.com",
        "validTo": "Dec  4 18:42:31 2026 GMT",
        "inputUrl": "https://anthropic.com/",
        "validFrom": "Sep  5 18:42:32 2026 GMT",
        "validCertificate": true,
        "chainCertificateCount": 5
      },
      {
        "issuer": "CN=YE1, O=Let's Encrypt",
        "subject": "CN=www.anthropic.com",
        "validTo": "Dec  4 15:05:40 2026 GMT",
        "inputUrl": "https://www.anthropic.com/",
        "validFrom": "Sep  5 15:05:41 2026 GMT",
        "validCertificate": true,
        "chainCertificateCount": 5
      }
    ],
    "insecureFormTransportObserved": false
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

HTTP-to-HTTPS redirectHTTP redirected to HTTPS.Observed

JSON evidence

ref_transport_security

Full evidence JSON

{
  "assessmentStatus": "checked",
  "checklistItemId": "transport_security_http_redirect",
  "coverageArea": "HTTP redirects to HTTPS",
  "evidenceState": "observed",
  "explanation": "Whether an explicit HTTP-origin probe redirected to HTTPS.",
  "note": "Whether an explicit HTTP-origin probe redirected to HTTPS.",
  "status": "Observed",
  "tone": "warning",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.transport_security_http_redirect.observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.transport_security_http_redirect"
  },
  "statusBasis": "The explicit HTTP-origin probe redirected to HTTPS.",
  "retainedEvidence": {
    "finalUrl": "https://www.anthropic.com/",
    "finalScheme": "https",
    "evidenceRefs": [
      "ref_transport_security"
    ],
    "httpProbeStatus": 200,
    "sampledPageUrls": [
      "https://anthropic.com/",
      "https://www.anthropic.com/"
    ],
    "httpProbeOutcome": "redirected_to_https",
    "httpProbeFinalUrl": "https://www.anthropic.com/",
    "pageHttpsObserved": true,
    "tlsProbeAttempted": true,
    "formInventoryState": "complete",
    "formTransportCount": 1,
    "httpProbeAttempted": true,
    "validTlsCertificate": true,
    "httpProbeFinalScheme": "https",
    "httpRedirectsToHttps": true,
    "mixedContentObserved": false,
    "missingEvidenceNeeded": [],
    "httpProbeRedirectChain": [
      "http://anthropic.com/",
      "https://www.anthropic.com/"
    ],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "selectedEvidenceStrength": "moderate",
    "mixedContentObservedCount": 0,
    "selectedEvidenceArtifactId": "coverage_policy",
    "tlsCertificateObservations": [
      {
        "issuer": "CN=YE1, O=Let's Encrypt",
        "subject": "CN=anthropic.com",
        "validTo": "Dec  4 18:42:31 2026 GMT",
        "inputUrl": "https://anthropic.com/",
        "validFrom": "Sep  5 18:42:32 2026 GMT",
        "validCertificate": true,
        "chainCertificateCount": 5
      },
      {
        "issuer": "CN=YE1, O=Let's Encrypt",
        "subject": "CN=www.anthropic.com",
        "validTo": "Dec  4 15:05:40 2026 GMT",
        "inputUrl": "https://www.anthropic.com/",
        "validFrom": "Sep  5 15:05:41 2026 GMT",
        "validCertificate": true,
        "chainCertificateCount": 5
      }
    ],
    "insecureFormTransportObserved": false
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Mixed contentNo insecure HTTP resources were found on the scanned HTTPS page.Observed

JSON evidence

ref_transport_security

Full evidence JSON

{
  "assessmentStatus": "checked",
  "checklistItemId": "transport_security_mixed_content",
  "coverageArea": "Mixed content",
  "evidenceState": "observed",
  "explanation": "Whether HTTP subresources were observed or blocked on a retained HTTPS page.",
  "note": "Whether HTTP subresources were observed or blocked on a retained HTTPS page.",
  "status": "Observed",
  "tone": "warning",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.transport_security_mixed_content.observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.transport_security_mixed_content"
  },
  "statusBasis": "No mixed-content HTTP subresources were retained for the scanned HTTPS page.",
  "retainedEvidence": {
    "finalUrl": "https://www.anthropic.com/",
    "finalScheme": "https",
    "evidenceRefs": [
      "ref_transport_security"
    ],
    "httpProbeStatus": 200,
    "sampledPageUrls": [
      "https://anthropic.com/",
      "https://www.anthropic.com/"
    ],
    "httpProbeOutcome": "redirected_to_https",
    "httpProbeFinalUrl": "https://www.anthropic.com/",
    "pageHttpsObserved": true,
    "tlsProbeAttempted": true,
    "formInventoryState": "complete",
    "formTransportCount": 1,
    "httpProbeAttempted": true,
    "validTlsCertificate": true,
    "httpProbeFinalScheme": "https",
    "httpRedirectsToHttps": true,
    "mixedContentObserved": false,
    "missingEvidenceNeeded": [],
    "httpProbeRedirectChain": [
      "http://anthropic.com/",
      "https://www.anthropic.com/"
    ],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "selectedEvidenceStrength": "moderate",
    "mixedContentObservedCount": 0,
    "selectedEvidenceArtifactId": "coverage_policy",
    "tlsCertificateObservations": [
      {
        "issuer": "CN=YE1, O=Let's Encrypt",
        "subject": "CN=anthropic.com",
        "validTo": "Dec  4 18:42:31 2026 GMT",
        "inputUrl": "https://anthropic.com/",
        "validFrom": "Sep  5 18:42:32 2026 GMT",
        "validCertificate": true,
        "chainCertificateCount": 5
      },
      {
        "issuer": "CN=YE1, O=Let's Encrypt",
        "subject": "CN=www.anthropic.com",
        "validTo": "Dec  4 15:05:40 2026 GMT",
        "inputUrl": "https://www.anthropic.com/",
        "validFrom": "Sep  5 15:05:41 2026 GMT",
        "validCertificate": true,
        "chainCertificateCount": 5
      }
    ],
    "insecureFormTransportObserved": false
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Form transport securityNo insecure form destinations were found during this scan.Observed

JSON evidence

ref_transport_security

Full evidence JSON

{
  "assessmentStatus": "checked",
  "checklistItemId": "transport_security_form_transport",
  "coverageArea": "Observed form transport",
  "evidenceState": "observed",
  "explanation": "Whether observed forms resolved to HTTPS transport without submitting form data.",
  "note": "Whether observed forms resolved to HTTPS transport without submitting form data.",
  "status": "Observed",
  "tone": "warning",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.transport_security_form_transport.observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.transport_security_form_transport"
  },
  "statusBasis": "No insecure observed form transport was retained for the scanned page.",
  "retainedEvidence": {
    "finalUrl": "https://www.anthropic.com/",
    "finalScheme": "https",
    "evidenceRefs": [
      "ref_transport_security"
    ],
    "httpProbeStatus": 200,
    "sampledPageUrls": [
      "https://anthropic.com/",
      "https://www.anthropic.com/"
    ],
    "httpProbeOutcome": "redirected_to_https",
    "httpProbeFinalUrl": "https://www.anthropic.com/",
    "pageHttpsObserved": true,
    "tlsProbeAttempted": true,
    "formInventoryState": "complete",
    "formTransportCount": 1,
    "httpProbeAttempted": true,
    "validTlsCertificate": true,
    "httpProbeFinalScheme": "https",
    "httpRedirectsToHttps": true,
    "mixedContentObserved": false,
    "missingEvidenceNeeded": [],
    "httpProbeRedirectChain": [
      "http://anthropic.com/",
      "https://www.anthropic.com/"
    ],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "selectedEvidenceStrength": "moderate",
    "mixedContentObservedCount": 0,
    "selectedEvidenceArtifactId": "coverage_policy",
    "tlsCertificateObservations": [
      {
        "issuer": "CN=YE1, O=Let's Encrypt",
        "subject": "CN=anthropic.com",
        "validTo": "Dec  4 18:42:31 2026 GMT",
        "inputUrl": "https://anthropic.com/",
        "validFrom": "Sep  5 18:42:32 2026 GMT",
        "validCertificate": true,
        "chainCertificateCount": 5
      },
      {
        "issuer": "CN=YE1, O=Let's Encrypt",
        "subject": "CN=www.anthropic.com",
        "validTo": "Dec  4 15:05:40 2026 GMT",
        "inputUrl": "https://www.anthropic.com/",
        "validFrom": "Sep  5 15:05:41 2026 GMT",
        "validCertificate": true,
        "chainCertificateCount": 5
      }
    ],
    "insecureFormTransportObserved": false
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Global Privacy Control

No observable response

GPC comparisonThe paired scan did not observe a qualifying reduction in classified tracking activity with GPC.

No classified tracking requests were observed with GPC enabled.

Baseline → GPC

First 1,000 ms after each document commit

Observed requests	Baseline	GPC
Advertising / marketing	0	0
Analytics / session replay	0	0

How we measured this

Page request: Sec-GPC 1; browser setting: true.

25 retained request attempts; 25 retained requests with Sec-GPC.

The matched passive comparison did not observe a qualifying reduction in classified tracking activity with GPC. This observation alone is not a legal compliance conclusion.

JSON evidence

{
  "assessment": {
    "contractVersion": "certscore.gpc-response-assessment.v3",
    "generatedAt": "2026-10-12T19:32:01.616Z",
    "status": "no_observable_response",
    "findingTitle": "No observable GPC response",
    "scoreEffect": "none",
    "legalInterpretation": "not_assessed",
    "comparison": {
      "comparable": true,
      "protocol": "passive_baseline_with_sec_gpc",
      "baselineArtifact": {
        "lane": "runtime_evidence",
        "sha256": "15613e6ed01785aaf129ed11055463a4eee51f55a772fca651696d354d335b4a",
        "sizeBytes": 267247,
        "uri": "s3://certscore-v2-dag-local-artifacts-eu-west-1-199536052647/v2-dag-lambda/local/358ac0fd-afba-4d17-aa0e-dc8817f9543e/lanes/runtime_evidence/CanonicalEvidenceBundle.json"
      },
      "gpcArtifact": {
        "lane": "gpc_observation",
        "sha256": "105c4368a8d3a1c851947f7680b4c13a662bd72825881821cf22e93816b97dbd",
        "sizeBytes": 303638,
        "uri": "s3://certscore-v2-dag-local-artifacts-eu-west-1-199536052647/v2-dag-lambda/local/358ac0fd-afba-4d17-aa0e-dc8817f9543e/lanes/gpc_observation/CanonicalEvidenceBundle.json"
      },
      "enabledProof": {
        "secGpcHeaderValue": "1",
        "requestsWithSecGpc": 25,
        "requestEventIds": [
          "net_605",
          "net_607",
          "net_612",
          "net_614",
          "net_616",
          "net_618",
          "net_620",
          "net_622",
          "net_624",
          "net_626",
          "net_628",
          "net_630",
          "net_638",
          "net_640",
          "net_643",
          "net_645",
          "net_647",
          "net_650",
          "net_661",
          "net_663",
          "net_668",
          "net_670",
          "net_672",
          "net_674",
          "net_677"
        ],
        "navigatorGlobalPrivacyControl": true
      },
      "delivery": {
        "status": "verified",
        "baseline": {
          "contractVersion": "certscore.gpc-signal-observation.v1",
          "expectedEnabled": false,
          "documentUrlSha256": "afe2508ac4caf5ee1733a2f27207ba7219f309f11664d73da2368c3d760c4eb9",
          "contextConfigSha256": "7a20ef851f83cb76f7294dc01169581c10ca30d0e11e444c9ec76cbcd4fd1bb3",
          "capturedAtMs": 2920,
          "documentStartedAtMs": 853,
          "frameCount": 1,
          "frames": [
            {
              "documentUrlSha256": "afe2508ac4caf5ee1733a2f27207ba7219f309f11664d73da2368c3d760c4eb9",
              "mainFrame": true,
              "navigatorValue": false
            }
          ],
          "workerCount": 0,
          "limitationKeys": []
        },
        "gpc": {
          "contractVersion": "certscore.gpc-signal-observation.v1",
          "expectedEnabled": true,
          "documentUrlSha256": "afe2508ac4caf5ee1733a2f27207ba7219f309f11664d73da2368c3d760c4eb9",
          "contextConfigSha256": "7a20ef851f83cb76f7294dc01169581c10ca30d0e11e444c9ec76cbcd4fd1bb3",
          "prototypeCaptureBinding": {
            "captureId": "6f3af9eb-7acf-4a14-abfb-da9ca3ee4830",
            "documentIdentitySource": "cdp_loader_id",
            "documentToken": "F21C12C7ACF2138A2AB179CDCA68013F"
          },
          "prototypeSessionSha256": "719d986f419f3e87451c3d9c2dd8a8a7b2e029bb5f7d9d3c63313b9556fd4e67",
          "capturedAtMs": 2486,
          "documentStartedAtMs": 823,
          "frameCount": 1,
          "frames": [
            {
              "documentUrlSha256": "afe2508ac4caf5ee1733a2f27207ba7219f309f11664d73da2368c3d760c4eb9",
              "mainFrame": true,
              "navigatorValue": true
            }
          ],
          "workerCount": 0,
          "limitationKeys": []
        }
      },
      "coverage": {
        "status": "complete",
        "comparedThroughMs": 1663
      },
      "responseBasis": "no_qualified_reduction",
      "deltas": {
        "cookies": {
          "baselineCount": 3,
          "gpcCount": 3,
          "countDelta": 0,
          "baselineOnly": [],
          "gpcOnly": [],
          "shared": [
            "[\"__cf_bm\",\"claude.com\",\"/\"]",
            "[\"__cf_bm\",\"hubspotonwebflow.com\",\"/\"]",
            "[\"_cfuvid\",\"website.anthropic.com\",\"/\"]"
          ],
          "baselineOnlyCount": 0,
          "gpcOnlyCount": 0,
          "sharedCount": 3,
          "samplesTruncated": false
        },
        "webStorage": {
          "baselineCount": 0,
          "gpcCount": 0,
          "countDelta": 0,
          "baselineOnly": [],
          "gpcOnly": [],
          "shared": [],
          "baselineOnlyCount": 0,
          "gpcOnlyCount": 0,
          "sharedCount": 0,
          "samplesTruncated": false
        },
        "trackers": {
          "baselineCount": 0,
          "gpcCount": 0,
          "countDelta": 0,
          "baselineOnly": [],
          "gpcOnly": [],
          "shared": [],
          "baselineOnlyCount": 0,
          "gpcOnlyCount": 0,
          "sharedCount": 0,
          "samplesTruncated": false
        },
        "advertisingOrMeasurementActivity": {
          "baselineCount": 0,
          "gpcCount": 0,
          "countDelta": 0,
          "baselineOnly": [],
          "gpcOnly": [],
          "shared": [],
          "baselineOnlyCount": 0,
          "gpcOnlyCount": 0,
          "sharedCount": 0,
          "samplesTruncated": false
        },
        "advertisingOrMarketingActivity": {
          "baselineCount": 0,
          "gpcCount": 0,
          "countDelta": 0,
          "baselineOnly": [],
          "gpcOnly": [],
          "shared": [],
          "baselineOnlyCount": 0,
          "gpcOnlyCount": 0,
          "sharedCount": 0,
          "samplesTruncated": false
        },
        "consentOrCmpBehavior": {
          "baselineCount": 0,
          "gpcCount": 0,
          "countDelta": 0,
          "baselineOnly": [],
          "gpcOnly": [],
          "shared": [],
          "baselineOnlyCount": 0,
          "gpcOnlyCount": 0,
          "sharedCount": 0,
          "samplesTruncated": false
        }
      },
      "evidenceRefs": [
        "net_605",
        "net_607",
        "net_612",
        "net_614",
        "net_616",
        "net_618",
        "net_620",
        "net_622",
        "net_624",
        "net_626",
        "net_628",
        "net_630",
        "net_638",
        "net_640",
        "net_643",
        "net_645",
        "net_647",
        "net_650",
        "net_661",
        "net_663",
        "net_668",
        "net_670",
        "net_672",
        "net_674",
        "net_677",
        "s3://certscore-v2-dag-local-artifacts-eu-west-1-199536052647/v2-dag-lambda/local/358ac0fd-afba-4d17-aa0e-dc8817f9543e/lanes/gpc_observation/CanonicalEvidenceBundle.json",
        "s3://certscore-v2-dag-local-artifacts-eu-west-1-199536052647/v2-dag-lambda/local/358ac0fd-afba-4d17-aa0e-dc8817f9543e/lanes/runtime_evidence/CanonicalEvidenceBundle.json"
      ],
      "limitationKeys": []
    },
    "observation": {
      "contractVersion": "certscore.gpc-bounded-observation.v1",
      "scope": "main_document_and_retained_http_requests",
      "status": "complete",
      "sourceSha256": "105c4368a8d3a1c851947f7680b4c13a662bd72825881821cf22e93816b97dbd",
      "sessionSha256": "719d986f419f3e87451c3d9c2dd8a8a7b2e029bb5f7d9d3c63313b9556fd4e67",
      "documentUrlSha256": "afe2508ac4caf5ee1733a2f27207ba7219f309f11664d73da2368c3d760c4eb9",
      "delivery": {
        "httpHeaderRetained": true,
        "mainNavigatorReadbackRetained": true,
        "fullContextVerified": true
      },
      "semanticProbe": "unavailable",
      "registration": {
        "basis": "current_recorded_state",
        "sale": "unknown",
        "sharing": "unknown",
        "cmpGpcSignal": "unknown",
        "causedByGpc": "not_established"
      },
      "acknowledgment": {
        "observed": false,
        "captureComplete": true
      },
      "requests": {
        "count": 25,
        "blockedBeforeTransmissionCount": 0,
        "complete": true,
        "fromMs": 742,
        "documentCommittedAtMs": 939,
        "throughMs": 2520,
        "classifiedCount": 0,
        "collectionCount": 0,
        "evidenceIds": [],
        "samplesTruncated": false
      },
      "limitationKeys": [],
      "scoreEffect": "none",
      "legalInterpretation": "not_assessed"
    }
  },
  "evidenceRefs": [
    "s3://certscore-v2-dag-local-artifacts-eu-west-1-199536052647/v2-dag-lambda/local/358ac0fd-afba-4d17-aa0e-dc8817f9543e/lanes/runtime_evidence/CanonicalEvidenceBundle.json",
    "s3://certscore-v2-dag-local-artifacts-eu-west-1-199536052647/v2-dag-lambda/local/358ac0fd-afba-4d17-aa0e-dc8817f9543e/lanes/gpc_observation/CanonicalEvidenceBundle.json",
    "net_605",
    "net_607",
    "net_612",
    "net_614",
    "net_616",
    "net_618",
    "net_620",
    "net_622",
    "net_624",
    "net_626",
    "net_628",
    "net_630",
    "net_638",
    "net_640",
    "net_643",
    "net_645",
    "net_647",
    "net_650",
    "net_661",
    "net_663",
    "net_668",
    "net_670",
    "net_672",
    "net_674",
    "net_677"
  ]
}

Loading report

Executive overview

Assessment highlights

Top issues on this page

Pre-consent page event timeline

Services & Resources

Type mix

Evidence mix

Purpose mix

Site relationship

Policy disclosure · Not found

Policy disclosure · Not found

Policy disclosure · Not found

Detailed evidence

CMP details

Consent management audit · 13 criteria

Consent choices

Tracking & embeds

Policies & disclosures

Accessibility (WCAG)

Cookies & tracking

Connection security

Global Privacy Control

Baseline → GPC