CertScore.ai report
Loading report
The report is ready; we’re loading its retained findings and evidence.
CertScore.ai report
The report is ready; we’re loading its retained findings and evidence.
Sep 21, 2026, 2:04:53 PM UTC
Page score
0 priority issues
1 page scanned
Overall, this scan did not surface a priority issue in the retained evidence. That is encouraging, but it is not a legal conclusion or proof that every site behavior was observed. Captured consent, runtime, policy, and transport signals should still be read alongside the underlying evidence before decisions are made. No checklist items were technically limited in this retained scan.
Each resource is counted once. Services group requests, cookies/storage and frames.
Requests1
Cookies & storage0
Embedded frames0
Priority review
No priority issues were identified in the assessed evidence. Resource purposes may remain unclassified; inventory labels are separate from priority findings.
0s
Scan start
Public page observation began
12.46s
Observation end
Retained scan window closed
Supporting evidence
1 distinct resources = 1 requests. Services group these resources.
Type | Priority legendShows the highest priority among the service’s resources. Expand the service to inspect individual resources. | Domain | Site relationship | JSON evidence | |||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
| 1 | Unclassified resourcesOrigin not fully attributed | Unknown purpose | Policy disclosure · UnknownUnclassified resources Review scope: retained site policy from the homepage scan; this is a disclosure lookup, not a finding about compliance. https://ergoveritas.com/privacy Reviewed 2026-09-21T14:05:11.171Z · Complete retained text Evidence SHA-256: 3d75b37b603331ceeee86f3acaaca9784838998683345159a79b53ea2cdf2475 | Location detailsUnclassified resources Server locations describe the endpoint associated with the captured browser response. They may be CDN edges and do not establish subsequent processing or storage locations.
1 of 1 request events assessed; 0 without a retained server IP. Provider headquarters: Unknown Transfer mechanism: Mechanism not assessed Corporate headquartersProvider unknown No verified headquarters reference available. Headquarters and network operator are distinct; neither establishes this site's contracting entity or subsequent data processing locations. | 2.05s | ergoveritas.com | First party | Captured on 1 page |
These resources were observed during the scan, but the retained evidence does not fully establish which integration loaded them. A service may be identifiable even when its loading origin is not.
They are grouped here for review, not as a parent–child relationship. This uncertainty does not itself indicate a risk or change their priority.
0 distinct services, including child services
Forms and fields observed on scanned pages. Expand a form to inspect its fields; submitted values are not included.
| View details | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| contact | 4 | 1 checkbox | ⚠Identity / profile | get | ergoveritas.comself | https://ergoveritas.com/form-inventory-01/ | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||
Contact enquiryObservation reference: collection_form_0 native form · Captured 2026-09-21T14:05:01.324Z
| |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
Evidence RatingsStarting page
29 rows
CertScore.ai can make mistakes. Verify all findings.
Signal SnapshotStarting page
No consent-platform identity was retained in the completed scan context.
Initial control inspection
Not observed
Not observed
Not observed
Initial visit · first layer
Read-only main-document inventory. Field details in Collection surface evidence below.
Not observed
Not observed
Not observed
Initial visit · first layer
CMP identity and control context are retained in the canonical consent projection.
complete ConsentControlAssessment v2
{
"assessmentStatus": "checked",
"checklistItemId": "consent_surface_observed",
"coverageArea": "Consent mechanism",
"evidenceState": "not_observed",
"explanation": "Whether an actionable cookie/consent banner or CMP preference surface was observed in the tested context.",
"note": "Whether an actionable cookie/consent banner or CMP preference surface was observed in the tested context.",
"status": "Not observed",
"tone": "neutral",
"pipeline": {
"projectionStage": "coverage_policy",
"concernPolicyKey": "gdpr_eprivacy_coverage.consent_surface_observed.not_observed",
"ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
"wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.consent_surface_observed"
},
"statusBasis": "No operational consent surface was retained in the tested context.",
"retainedEvidence": {
"remediation": {
"kind": "none",
"steps": [],
"message": "No remediation is established by this check alone. Retain its evidence and reassess after relevant changes."
},
"evidenceRefs": [
"Evidence: complete ConsentControlAssessment v2"
],
"consentSurfaceState": "not_observed",
"missingEvidenceNeeded": [],
"consentSurfaceObserved": false,
"selectedEvidenceReason": "Retained evidence did not confirm an uncontaminated first-layer GDPR/ePrivacy cookie/CMP consent surface.",
"weakerArtifactsIgnored": [],
"selectedEvidenceStrength": "missing",
"selectedEvidenceArtifactId": "consentControlLifecycleEvidence.surfaceClassification"
},
"projectedFindings": [],
"missingOrIncompleteSourceSignals": []
}No remediation is established by this check alone. Retain its evidence and reassess after relevant changes.
runtime capture completed
{
"assessmentStatus": "checked",
"checklistItemId": "cmp_framework_signal_observed",
"coverageArea": "CMP framework",
"evidenceState": "not_observed",
"explanation": "Whether a consent-management framework, CMP vendor, or CMP runtime signal was observed in the pre-consent/public-web context.",
"note": "Whether a consent-management framework, CMP vendor, or CMP runtime signal was observed in the pre-consent/public-web context.",
"status": "Not observed",
"tone": "neutral",
"pipeline": {
"projectionStage": "coverage_policy",
"concernPolicyKey": "gdpr_eprivacy_coverage.cmp_framework_signal_observed.not_observed",
"ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
"wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.cmp_framework_signal_observed"
},
"statusBasis": "Runtime consent/CMP checks completed for the tested context and did not retain a CMP framework signal.",
"retainedEvidence": {
"evidenceRefs": [
"Evidence: runtime capture completed"
],
"missingEvidenceNeeded": [],
"selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
"weakerArtifactsIgnored": [],
"runtimeCaptureCompleted": true,
"selectedEvidenceStrength": "missing",
"cmpFrameworkSignalObserved": false,
"selectedEvidenceArtifactId": "coverage_policy"
},
"projectedFindings": [],
"missingOrIncompleteSourceSignals": []
}CMP framework is currently rated Not observed. No site remediation is indicated from this row alone; rerun after material site, policy, or tag changes.
complete pre-interaction consent-surface inspection
{
"assessmentStatus": "checked",
"checklistItemId": "reject_all_path_availability",
"coverageArea": "Decline consent control",
"evidenceState": "not_observed",
"explanation": "Whether a first-layer reject, necessary-only, decline, refuse, or equivalent refusal option was observed on a sufficiently retained consent surface.",
"note": "Whether a first-layer reject, necessary-only, decline, refuse, or equivalent refusal option was observed on a sufficiently retained consent surface.",
"status": "Not observed",
"tone": "neutral",
"pipeline": {
"projectionStage": "coverage_policy",
"concernPolicyKey": "gdpr_eprivacy_coverage.reject_all_path_availability.not_observed",
"ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
"wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.reject_all_path_availability"
},
"statusBasis": "No reject control was retained because no operational consent surface was retained.",
"retainedEvidence": {
"remediation": {
"kind": "none",
"steps": [],
"message": "No remediation is established by this check alone. Retain its evidence and reassess after relevant changes."
},
"scoreEffect": "none",
"evidenceRefs": [
"Evidence: complete pre-interaction consent-surface inspection"
],
"missingEvidenceNeeded": [],
"rejectControlObserved": false,
"consentSurfaceObserved": false,
"selectedEvidenceReason": "Selected retained same-surface reject-path or post-reject comparison evidence.",
"weakerArtifactsIgnored": [],
"selectedEvidenceStrength": "limited",
"selectedEvidenceArtifactId": "rejectPathDepthAndAvailability",
"consentOperationalSurfaceConcern": {
"originKey": "consent.operational_surface.not_observed",
"canonicalConcernKey": "runtime_artifact:consent.operational_surface.not_observed"
},
"firstLayerCookieConsentBannerObserved": false
},
"projectedFindings": [],
"missingOrIncompleteSourceSignals": []
}No remediation is established by this check alone. Retain its evidence and reassess after relevant changes.
complete pre-interaction consent-surface inspection
{
"assessmentStatus": "checked",
"checklistItemId": "accept_consent_control",
"coverageArea": "Accept consent control",
"evidenceState": "not_observed",
"explanation": "Whether a first-layer accept, accept-all, allow-all, or agree control was observed on the retained consent surface.",
"note": "Whether a first-layer accept, accept-all, allow-all, or agree control was observed on the retained consent surface.",
"status": "Not observed",
"tone": "neutral",
"pipeline": {
"projectionStage": "coverage_policy",
"concernPolicyKey": "gdpr_eprivacy_coverage.accept_consent_control.not_observed",
"ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
"wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.accept_consent_control"
},
"statusBasis": "No accept control was retained because no operational consent surface was retained.",
"retainedEvidence": {
"remediation": {
"kind": "none",
"steps": [],
"message": "No remediation is established by this check alone. Retain its evidence and reassess after relevant changes."
},
"scoreEffect": "none",
"evidenceRefs": [
"Evidence: complete pre-interaction consent-surface inspection"
],
"acceptControlObserved": false,
"missingEvidenceNeeded": [],
"consentSurfaceObserved": false,
"selectedEvidenceReason": "Selected retained same-surface accept consent control evidence.",
"weakerArtifactsIgnored": [],
"selectedEvidenceStrength": "limited",
"selectedEvidenceArtifactId": "firstLayerConsentChoices.acceptControl",
"consentOperationalSurfaceConcern": {
"originKey": "consent.operational_surface.not_observed",
"canonicalConcernKey": "runtime_artifact:consent.operational_surface.not_observed"
},
"firstLayerCookieConsentBannerObserved": false
},
"projectedFindings": [],
"missingOrIncompleteSourceSignals": []
}No remediation is established by this check alone. Retain its evidence and reassess after relevant changes.
complete pre-interaction consent-surface inspection
{
"assessmentStatus": "checked",
"checklistItemId": "options_settings_preferences_control",
"coverageArea": "Options / settings / preferences control",
"evidenceState": "not_observed",
"explanation": "Whether a first-layer options, settings, preferences, or manage-preferences control was observed on the retained consent surface.",
"note": "Whether a first-layer options, settings, preferences, or manage-preferences control was observed on the retained consent surface.",
"status": "Not observed",
"tone": "neutral",
"pipeline": {
"projectionStage": "coverage_policy",
"concernPolicyKey": "gdpr_eprivacy_coverage.options_settings_preferences_control.not_observed",
"ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
"wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.options_settings_preferences_control"
},
"statusBasis": "No options control was retained because no operational consent surface was retained.",
"retainedEvidence": {
"remediation": {
"kind": "none",
"steps": [],
"message": "No remediation is established by this check alone. Retain its evidence and reassess after relevant changes."
},
"scoreEffect": "none",
"evidenceRefs": [
"Evidence: complete pre-interaction consent-surface inspection"
],
"missingEvidenceNeeded": [],
"consentSurfaceObserved": false,
"optionsControlObserved": false,
"selectedEvidenceReason": "Selected retained same-surface options/settings/preferences control evidence.",
"weakerArtifactsIgnored": [],
"selectedEvidenceStrength": "limited",
"selectedEvidenceArtifactId": "firstLayerConsentChoices.optionsControl",
"consentOperationalSurfaceConcern": {
"originKey": "consent.operational_surface.not_observed",
"canonicalConcernKey": "runtime_artifact:consent.operational_surface.not_observed"
},
"firstLayerCookieConsentBannerObserved": false
},
"projectedFindings": [],
"missingOrIncompleteSourceSignals": []
}No remediation is established by this check alone. Retain its evidence and reassess after relevant changes.
cookie policy or cookie disclosure surface retained
Not confirmed: granular named-cookie inventory
Not confirmed: cookie preference interface
{
"assessmentStatus": "checked",
"checklistItemId": "cookie_notice_policy_availability",
"coverageArea": "Cookie notice / cookie policy availability",
"evidenceState": "observed",
"explanation": "Whether a cookie notice, cookie policy, cookie settings surface, or equivalent cookie disclosure surface was retained.",
"note": "Whether a cookie notice, cookie policy, cookie settings surface, or equivalent cookie disclosure surface was retained.",
"status": "Observed",
"tone": "warning",
"pipeline": {
"projectionStage": "coverage_policy",
"concernPolicyKey": "gdpr_eprivacy_coverage.cookie_notice_policy_availability.observed",
"ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
"wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.cookie_notice_policy_availability"
},
"statusBasis": "A durable cookie disclosure surface was retained in the tested context; a granular named-cookie inventory or preference interface was not confirmed.",
"retainedEvidence": {
"evidenceRefs": [
"Evidence: cookie policy or cookie disclosure surface retained",
"Not confirmed: granular named-cookie inventory",
"Not confirmed: cookie preference interface",
"Policy URL: https://ergoveritas.com/privacy"
],
"cookiePolicyUrls": [
"https://ergoveritas.com/privacy"
],
"cookiePolicyPresent": true,
"cookieNoticeObserved": true,
"observedPolicyTopics": [
"cookies",
"analytics",
"third_party_disclosures",
"controller_contact",
"processing_purposes",
"recipients_or_vendor_categories"
],
"missingEvidenceNeeded": [],
"selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
"weakerArtifactsIgnored": [],
"selectedEvidenceStrength": "moderate",
"selectedEvidenceArtifactId": "coverage_policy",
"preferenceInterfaceConfirmed": false,
"granularCookieInventoryConfirmed": false
},
"projectedFindings": [],
"missingOrIncompleteSourceSignals": []
}Cookie notice / cookie policy availability is currently rated Observed. No site remediation is indicated from this row alone; rerun after material site, policy, or tag changes.
Tracking & embedded content · Starting page
runtime capture completed
{
"assessmentStatus": "checked",
"checklistItemId": "pre_consent_third_party_tracking",
"coverageArea": "Pre-consent non-essential tracking",
"evidenceState": "not_observed",
"explanation": "Whether classified non-essential analytics, advertising, measurement, replay, or similar requests were observed before recorded consent. Site relationship and entity ownership are reported separately.",
"note": "Whether classified non-essential analytics, advertising, measurement, replay, or similar requests were observed before recorded consent. Site relationship and entity ownership are reported separately.",
"status": "Not observed",
"tone": "neutral",
"pipeline": {
"projectionStage": "coverage_policy",
"concernPolicyKey": "gdpr_eprivacy_coverage.pre_consent_third_party_tracking.not_observed",
"ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
"wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.pre_consent_third_party_tracking"
},
"statusBasis": "Runtime tracking checks completed for the tested context, and no eligible pre-consent non-essential tracking finding was projected.",
"retainedEvidence": {
"remediation": {
"kind": "none",
"steps": [],
"message": "No remediation is established by this check alone. Retain its evidence and reassess after relevant changes."
},
"evidenceRefs": [
"Evidence: runtime capture completed"
],
"trackerVendorCount": 0,
"missingEvidenceNeeded": [],
"trackingRequestTiming": {
"version": "classified-request-timing.v1",
"requests": []
},
"selectedEvidenceReason": "Selected retained pre-consent request/vendor timing evidence; storage evidence is evaluated separately.",
"weakerArtifactsIgnored": [],
"runtimeCaptureCompleted": true,
"preconsentTimingEvidence": {
"cookieOrStorage": {
"preconsentCookieOrStorageExactTimingRetained": false,
"preconsentCookieOrStorageTimedObservationCount": 0,
"preconsentCookieOrStorageUntimedObservationCount": 0,
"preconsentCookieOrStorageInitialInventoryObserved": false
},
"thirdPartyTracking": {
"trackingRequestTiming": {
"version": "classified-request-timing.v1",
"requests": []
},
"preconsentThirdPartyTrackingTimedObservationCount": 0
}
},
"selectedEvidenceStrength": "moderate",
"preconsentTrackingDetected": false,
"selectedEvidenceArtifactId": "preConsentTrackingRequestEvidence.missing",
"preconsentCookieOrStorageExactTimingRetained": false,
"preconsentCookieOrStorageTimedObservationCount": 0,
"preconsentCookieOrStorageUntimedObservationCount": 0,
"preconsentCookieOrStorageInitialInventoryObserved": false,
"preconsentThirdPartyTrackingTimedObservationCount": 0
},
"projectedFindings": [],
"missingOrIncompleteSourceSignals": []
}No remediation is established by this check alone. Retain its evidence and reassess after relevant changes.
retained pre-consent iframe inventory
{
"assessmentStatus": "checked",
"checklistItemId": "third_party_iframe_pre_consent",
"coverageArea": "3rd party iframes before consent",
"evidenceState": "not_observed",
"explanation": "Whether retained scanner evidence showed known 3rd party iframe embeds before a recorded consent action.",
"note": "Whether retained scanner evidence showed known 3rd party iframe embeds before a recorded consent action.",
"status": "Not observed",
"tone": "neutral",
"pipeline": {
"projectionStage": "coverage_policy",
"concernPolicyKey": "gdpr_eprivacy_coverage.third_party_iframe_pre_consent.not_observed",
"ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
"wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.third_party_iframe_pre_consent"
},
"statusBasis": "Retained iframe inventory did not show known 3rd party iframe embeds before a recorded consent action.",
"retainedEvidence": {
"evidenceRefs": [
"Evidence: retained pre-consent iframe inventory"
],
"missingEvidenceNeeded": [],
"preConsentIframeCount": 0,
"iframeObservationCount": 0,
"selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
"weakerArtifactsIgnored": [],
"runtimeCaptureCompleted": true,
"selectedEvidenceStrength": "missing",
"selectedEvidenceArtifactId": "coverage_policy"
},
"projectedFindings": [],
"missingOrIncompleteSourceSignals": []
}3rd party iframes before consent is currently rated Not observed. No site remediation is indicated from this row alone; rerun after material site, policy, or tag changes.
retained pre-consent embedded-content inventory
{
"assessmentStatus": "checked",
"checklistItemId": "social_media_embed_pre_consent",
"coverageArea": "Social/media embeds or plugins loaded before consent",
"evidenceState": "not_observed",
"explanation": "Whether retained network/runtime evidence showed a social, video, media embed, social pixel, or plugin provider loading before a recorded consent action.",
"note": "Whether retained network/runtime evidence showed a social, video, media embed, social pixel, or plugin provider loading before a recorded consent action.",
"status": "Not observed",
"tone": "neutral",
"pipeline": {
"projectionStage": "coverage_policy",
"concernPolicyKey": "gdpr_eprivacy_coverage.social_media_embed_pre_consent.not_observed",
"ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
"wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.social_media_embed_pre_consent"
},
"statusBasis": "Retained embedded-content checks did not show a social/media embed, plugin, widget, or pixel provider request before consent. Plain outbound links are not treated as evidence for this row.",
"retainedEvidence": {
"evidenceRefs": [
"Evidence: retained pre-consent embedded-content inventory"
],
"placeholderDetected": false,
"missingEvidenceNeeded": [],
"selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
"weakerArtifactsIgnored": [],
"runtimeCaptureCompleted": true,
"selectedEvidenceStrength": "missing",
"selectedEvidenceArtifactId": "coverage_policy",
"socialMediaEmbedObservationCount": 0
},
"projectedFindings": [],
"missingOrIncompleteSourceSignals": []
}Social/media embeds or plugins loaded before consent is currently rated Not observed. No site remediation is indicated from this row alone; rerun after material site, policy, or tag changes.
EmbeddedContentObservationCount: 0
{
"assessmentStatus": "checked",
"checklistItemId": "embedded_content_pre_consent",
"coverageArea": "Embedded third-party services before consent",
"evidenceState": "not_observed",
"explanation": "Whether retained scanner evidence showed iframe, embed, widget, or visibly integrated third-party services before a recorded consent action. This row does not represent all background analytics or network requests.",
"note": "Whether retained scanner evidence showed iframe, embed, widget, or visibly integrated third-party services before a recorded consent action. This row does not represent all background analytics or network requests.",
"status": "Not observed",
"tone": "neutral",
"pipeline": {
"projectionStage": "coverage_policy",
"concernPolicyKey": "gdpr_eprivacy_coverage.embedded_content_pre_consent.not_observed",
"ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
"wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.embedded_content_pre_consent"
},
"statusBasis": "Iframe/runtime checks completed for the tested context and did not retain a concrete 3rd party embedded-content iframe before consent.",
"retainedEvidence": {
"evidenceRefs": [
"Evidence: retained pre-consent embedded-content inventory"
],
"missingEvidenceNeeded": [],
"preConsentIframeCount": 0,
"selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
"weakerArtifactsIgnored": [],
"runtimeCaptureCompleted": true,
"selectedEvidenceStrength": "missing",
"selectedEvidenceArtifactId": "coverage_policy",
"embeddedContentObservationCount": 0
},
"projectedFindings": [],
"missingOrIncompleteSourceSignals": []
}Embedded third-party services before consent is currently rated Not observed. No site remediation is indicated from this row alone; rerun after material site, policy, or tag changes.
Policy and transparency · Starting page
Policy source
Captured page title: Public-Web Evidence & Transparency Research | ErgoVeritas — https://ergoveritas.com/privacy
Document heading: Privacy Policy
Source policy language: en; banner/page language: en; translation applied: No.
Policy reached through: Guessed Common Path; directly linked from scanned page: No; retrieved during scan: 2026-09-21T14:05:09.113Z.
Section: Not retained; update text: Last updated August 6, 2026.
Open policy sourceprivacy policy surface retained
Excerpt: Learn more · Contact: [email protected] ErgoVeritas Evidence and transparency How It Works Use Cases Contact Privacy Policy Last updated August 6, 2026 Static website ErgoVeritas is served as a static website. It does not provide user accounts, accept file uploads, or maintain an application database. Hosting records Our hosting and content-delivery providers may process ordinary request information such as IP address, requested URL, timestamp, browser information, and security diagnostics to deliver and prote
Policy URL: https://ergoveritas.com/privacy
{
"assessmentStatus": "checked",
"checklistItemId": "privacy_notice_availability",
"coverageArea": "Privacy notice link/surface discovered",
"evidenceState": "observed",
"explanation": "Whether a reachable privacy notice or privacy policy link/surface was retained. This row does not by itself confirm that substantive notice content was available.",
"note": "Whether a reachable privacy notice or privacy policy link/surface was retained. This row does not by itself confirm that substantive notice content was available.",
"status": "Observed",
"tone": "warning",
"pipeline": {
"projectionStage": "coverage_policy",
"concernPolicyKey": "gdpr_eprivacy_coverage.privacy_notice_availability.observed",
"ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
"wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.privacy_notice_availability"
},
"statusBasis": "Privacy notice evidence was retained in public policy-surface evidence.",
"retainedEvidence": {
"remediation": {
"kind": "none",
"steps": [],
"message": "No remediation is established by this check alone. Retain its evidence and reassess after relevant changes."
},
"evidenceRefs": [
"Evidence: privacy policy surface retained",
"Excerpt: Learn more · Contact: [email protected] ErgoVeritas Evidence and transparency How It Works Use Cases Contact Privacy Policy Last updated August 6, 2026 Static website ErgoVeritas is served as a static website. It does not provide user accounts, accept file uploads, or maintain an application database. Hosting records Our hosting and content-delivery providers may process ordinary request information such as IP address, requested URL, timestamp, browser information, and security diagnostics to deliver and prote",
"Policy URL: https://ergoveritas.com/privacy"
],
"signalObserved": true,
"missingEvidenceNeeded": [],
"selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
"weakerArtifactsIgnored": [],
"policyEvidenceAssessment": {
"result": "disclosure_observed",
"scoreEffect": "canonical_policy",
"topicRelevance": "direct",
"contractVersion": "certscore.policy-topic-evidence-assessment.v1"
},
"policyEvidenceProvenance": {
"sourceUrl": "https://ergoveritas.com/privacy",
"policyTitle": "Public-Web Evidence & Transparency Research | ErgoVeritas",
"artifactRefs": [
"policy_excerpt_80ec08a8",
"policy_surface_text_80ec08a8"
],
"bannerLanguage": "en",
"contractVersion": "certscore.policy-evidence-provenance.v1",
"discoveryMethod": "guessed_common_path",
"documentHeading": "Privacy Policy",
"lastUpdatedText": "Last updated August 6, 2026",
"detectedLanguage": "en",
"retrievalTimestamp": "2026-09-21T14:05:09.113Z",
"targetRelationship": "target_controller",
"translationApplied": false,
"documentOwnerEntity": "Public Web Evidence Transparency Research ErgoVeritas",
"ownershipConfidence": 0.98,
"directlyLinkedFromScannedPage": false
},
"selectedEvidenceStrength": "moderate",
"selectedEvidenceArtifactId": "coverage_policy",
"policySurfaceSummary": {
"scanStartedAt": "2026-09-21T14:04:58.716Z",
"observedTopics": [
"cookies",
"analytics",
"third_party_disclosures",
"controller_contact",
"processing_purposes",
"recipients_or_vendor_categories",
"contact_privacy"
],
"cookiePolicyUrls": [],
"cookieDisclosures": [],
"mentionedControls": [],
"privacyPolicySize": {
"url": "https://ergoveritas.com/privacy",
"completeness": "complete",
"documentFormat": "text",
"compressedBytes": 4962,
"measurementScope": "selected_usable_privacy_policy",
"decompressedBytes": null
},
"privacyPolicyUrls": [
"https://ergoveritas.com/privacy"
],
"cookie_disclosures": [],
"policySectionCount": 7,
"policySurfaceCount": 1,
"cookiePolicyPresent": false,
"scannedPageLanguage": "en",
"privacyPolicyPresent": true,
"policyPrimaryLanguage": "en",
"policyLastUpdatedTexts": [
"Last updated August 6, 2026"
],
"policyTextCoverageMode": "section_targeted",
"retainedPolicySections": [
{
"charEnd": 4663,
"heading": "Privacy Policy",
"quality": "strong",
"charStart": 2027,
"sourceUrl": "https://ergoveritas.com/privacy",
"textExcerpt": "Last updated August 6, 2026 Static website ErgoVeritas is served as a static website. It does not provide user accounts, accept file uploads, or maintain an application database. Hosting records Our hosting and content-delivery providers may process ordinary request information such as IP address, requested URL, timestamp, browser information, and security diagnostics to deliver and protect the site. Analytics and session diagnostics On the main ErgoVeritas site, Google Tag Manager loads Google Analytics and Microsoft Clarity. These services may set cookies or use similar browser storage and collect information about page visits, device and browser characteristics, interactions, and approximate location. We use this information to understand site usage, verify changes, and diagnose usability issues. Microsoft Clarity is configured to mask sensitive content in session recordings. Contact If you email us, we receive the information you choose to include and use it to respond to your message. You can contact us at [email protected] ."
},
{
"charEnd": 2435,
"heading": "Static website",
"quality": "partial",
"charStart": 2185,
"sourceUrl": "https://ergoveritas.com/privacy",
"textExcerpt": "ErgoVeritas is served as a static website. It does not provide user accounts, accept file uploads, or maintain an application database."
},
{
"charEnd": 2759,
"heading": "Hosting records",
"quality": "partial",
"charStart": 2435,
"sourceUrl": "https://ergoveritas.com/privacy",
"textExcerpt": "Our hosting and content-delivery providers may process ordinary request information such as IP address, requested URL, timestamp, browser information, and security diagnostics to deliver and protect the site."
},
{
"charEnd": 3346,
"heading": "Analytics and session diagnostics",
"quality": "strong",
"charStart": 2759,
"sourceUrl": "https://ergoveritas.com/privacy",
"textExcerpt": "On the main ErgoVeritas site, Google Tag Manager loads Google Analytics and Microsoft Clarity. These services may set cookies or use similar browser storage and collect information about page visits, device and browser characteristics, interactions, and approximate location. We use this information to understand site usage, verify changes, and diagnose usability issues. Microsoft Clarity is configured to mask sensitive content in session recordings."
},
{
"charEnd": 3648,
"heading": "Contact",
"quality": "partial",
"charStart": 3346,
"sourceUrl": "https://ergoveritas.com/privacy",
"textExcerpt": "If you email us, we receive the information you choose to include and use it to respond to your message. You can contact us at [email protected] ."
},
{
"charEnd": 4439,
"heading": "Controlled calibration pages",
"quality": "strong",
"charStart": 3648,
"sourceUrl": "https://ergoveritas.com/privacy",
"textExcerpt": "No-index calibration pages may intentionally expose synthetic controls, policy text, cookies, browser-storage values, or designated third-party analytics and session-replay tags so authorized CertScore testing can verify scanner behavior. Each page is designed as an isolated test case; clean control pages remain free of the main-site Tag Manager loader. These pages are labeled as calibration surfaces and do not interpret a visitor's consent choice."
},
{
"charEnd": 778,
"heading": "content-delivery providers may process",
"quality": "partial",
"charStart": 554,
"sourceUrl": "https://ergoveritas.com/privacy",
"textExcerpt": "Hosting records Our hosting and content-delivery providers may process ordinary request information such as IP address, requested URL, timestamp, browser information, and security diagnostics to deliver and protect the site."
}
],
"cookieDisclosurePresent": true,
"policyCookieDisclosures": [],
"privacyPolicyDiscovered": true,
"processingErrorObserved": false,
"observedPolicyTopicHints": [
"cookies",
"analytics",
"third_party_disclosures",
"controller_contact",
"processing_purposes",
"recipients_or_vendor_categories",
"contact_privacy"
],
"policyDocumentProvenance": [
{
"sourceUrl": "https://ergoveritas.com/privacy",
"policyTitle": "Public-Web Evidence & Transparency Research | ErgoVeritas",
"artifactRefs": [
"policy_excerpt_80ec08a8",
"policy_surface_text_80ec08a8"
],
"effectiveDate": null,
"observationId": "policy_surface_80ec08a8",
"discoveryMethod": "guessed_common_path",
"documentHeading": "Privacy Policy",
"lastUpdatedText": "Last updated August 6, 2026",
"detectedLanguage": "en",
"retrievalTimestamp": "2026-09-21T14:05:09.113Z",
"targetRelationship": "target_controller",
"translationApplied": false,
"documentOwnerEntity": "Public Web Evidence Transparency Research ErgoVeritas",
"ownershipConfidence": 0.98,
"translationTargetLanguage": null,
"directlyLinkedFromScannedPage": false
}
],
"policy_cookie_disclosures": [],
"article13DisclosureSignals": [
{
"source": "deterministic",
"status": "observed",
"confidence": 0.82,
"surfaceUrl": "https://ergoveritas.com/privacy",
"matchedTerm": "we use this information to",
"evidenceText": "We use this information to understand site usage, verify changes, and diagnose usability issues. Microsoft Clarity is configured to mask sensitive content in session recordings. Contact If you email us, we receive the information you choose to include and use it to respond to your message. You can contact us at [email protected] .",
"matchStrength": "equivalent",
"matchedLocale": "en",
"disclosureType": "processing_purposes",
"evidenceSource": "gdpr_transparency_topic_candidate",
"productionCredit": true,
"classifierProvenance": "gdpr_transparency_topic_classifier.v1",
"classifierReasonCodes": [
"matched_processing_purposes",
"match_strength_equivalent"
],
"productionCreditProfile": "gdpr_transparency_multilingual_article13_v1",
"selectedEvidenceStrength": "strong",
"selectedPolicySectionUrl": "https://ergoveritas.com/privacy",
"selectedPolicySectionExcerpt": "We use this information to understand site usage, verify changes, and diagnose usability issues. Microsoft Clarity is configured to mask sensitive content in session recordings. Contact If you email us, we receive the information you choose to include and use it to respond to your message. You can contact us at [email protected] .",
"sourceCandidateProductionCredit": false
},
{
"source": "deterministic",
"status": "observed",
"confidence": 0.82,
"surfaceUrl": "https://ergoveritas.com/privacy",
"matchedTerm": "content-delivery providers may process",
"evidenceText": "Hosting records Our hosting and content-delivery providers may process ordinary request information such as IP address, requested URL, timestamp, browser information, and security diagnostics to deliver and protect the site. Analytics and session diagnostics On the main ErgoVeritas site, Google Tag Manager loads Google Analytics and Microsoft Clarity.",
"matchStrength": "equivalent",
"matchedLocale": "en",
"disclosureType": "recipients_or_vendor_categories",
"evidenceSource": "gdpr_transparency_topic_candidate",
"productionCredit": true,
"classifierProvenance": "gdpr_transparency_topic_classifier.v1",
"classifierReasonCodes": [
"matched_recipients_or_vendor_categories",
"match_strength_equivalent"
],
"productionCreditProfile": "gdpr_transparency_multilingual_article13_v1",
"selectedEvidenceStrength": "strong",
"selectedPolicySectionUrl": "https://ergoveritas.com/privacy",
"selectedPolicySectionExcerpt": "Hosting records Our hosting and content-delivery providers may process ordinary request information such as IP address, requested URL, timestamp, browser information, and security diagnostics to deliver and protect the site. Analytics and session diagnostics On the main ErgoVeritas site, Google Tag Manager loads Google Analytics and Microsoft Clarity.",
"sourceCandidateProductionCredit": false
}
],
"policyTextExtractionHealth": {
"policyUrls": [
"https://ergoveritas.com/privacy"
],
"nanoInvoked": false,
"contractVersion": "certscore.policy-text-extraction-health.v2",
"policyTextQuality": {
"usable": true,
"codeSignalCount": 0,
"codeSymbolRatio": 0.0004752851711026616,
"policyTermCount": 7,
"alphabeticWordRatio": 0.8556701030927835,
"accessChallengeSignalCount": 0,
"naturalLanguageSentenceCount": 17
},
"policyUrlRetained": true,
"extractedTextLength": 2104,
"policySurfaceObserved": true,
"detectedPolicyLanguage": "en",
"minimumTextLengthRequired": 500,
"policyTextExtractionStatus": "ok",
"verifiedPolicyDocumentCount": 1,
"detectedPolicyLanguageSource": "policy_surface",
"supportedGdprTransparencyLocales": [
"en",
"de",
"fr",
"es",
"it",
"nl",
"pl",
"pt",
"ru",
"ja",
"zh",
"ar",
"sv",
"ro",
"cs",
"el",
"hu",
"da",
"fi",
"sk",
"bg",
"hr",
"nb",
"sl",
"lt",
"lv",
"et",
"uk",
"tr",
"fa",
"vi",
"id",
"ko",
"th",
"he",
"sr",
"ca",
"hi",
"az",
"gl"
],
"gdprTransparencyLanguageSupported": true,
"policyTextEvidenceProjectionStatus": "verified_complete",
"policyTextEvidenceProjectionContractVersion": "certscore.policy-text-evidence-projection.v1"
},
"privacyPolicyEvidencePaths": [],
"discoveredPrivacyPolicyUrls": [],
"article13CoverageAssessments": [
{
"topic": "automated_decision_making_or_profiling",
"status": "insufficient_retained_evidence",
"sourceUrls": [
"https://ergoveritas.com/privacy"
],
"reasonCodes": [
"policy_absence_coverage_preconditions_not_met",
"typed_topic_coverage_diagnostic_missing_or_limited",
"policy_document_content_coverage_incomplete"
],
"coverageStatus": "insufficient",
"policyDocumentIds": [
"policy_surface_80ec08a8"
],
"policyDocumentRoles": [
"policy_document"
],
"policyDocumentSha256": [
"3d75b37b603331ceeee86f3acaaca9784838998683345159a79b53ea2cdf2475"
],
"assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
"unresolvedMaterialPolicyChildUrls": []
},
{
"topic": "controller_contact",
"status": "insufficient_retained_evidence",
"sourceUrls": [
"https://ergoveritas.com/privacy"
],
"reasonCodes": [
"policy_absence_coverage_preconditions_not_met",
"typed_topic_coverage_diagnostic_missing_or_limited",
"policy_document_content_coverage_incomplete"
],
"coverageStatus": "insufficient",
"policyDocumentIds": [
"policy_surface_80ec08a8"
],
"policyDocumentRoles": [
"policy_document"
],
"policyDocumentSha256": [
"3d75b37b603331ceeee86f3acaaca9784838998683345159a79b53ea2cdf2475"
],
"assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
"unresolvedMaterialPolicyChildUrls": []
},
{
"topic": "data_retention",
"status": "insufficient_retained_evidence",
"sourceUrls": [
"https://ergoveritas.com/privacy"
],
"reasonCodes": [
"policy_absence_coverage_preconditions_not_met",
"typed_topic_coverage_diagnostic_missing_or_limited",
"policy_document_content_coverage_incomplete"
],
"coverageStatus": "insufficient",
"policyDocumentIds": [
"policy_surface_80ec08a8"
],
"policyDocumentRoles": [
"policy_document"
],
"policyDocumentSha256": [
"3d75b37b603331ceeee86f3acaaca9784838998683345159a79b53ea2cdf2475"
],
"assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
"unresolvedMaterialPolicyChildUrls": []
},
{
"topic": "data_subject_rights",
"status": "insufficient_retained_evidence",
"sourceUrls": [
"https://ergoveritas.com/privacy"
],
"reasonCodes": [
"policy_absence_coverage_preconditions_not_met",
"typed_topic_coverage_diagnostic_missing_or_limited",
"policy_document_content_coverage_incomplete"
],
"coverageStatus": "insufficient",
"policyDocumentIds": [
"policy_surface_80ec08a8"
],
"policyDocumentRoles": [
"policy_document"
],
"policyDocumentSha256": [
"3d75b37b603331ceeee86f3acaaca9784838998683345159a79b53ea2cdf2475"
],
"assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
"unresolvedMaterialPolicyChildUrls": []
},
{
"topic": "dpo_contact",
"status": "insufficient_retained_evidence",
"sourceUrls": [
"https://ergoveritas.com/privacy"
],
"reasonCodes": [
"policy_absence_coverage_preconditions_not_met",
"typed_topic_coverage_diagnostic_missing_or_limited",
"policy_document_content_coverage_incomplete"
],
"coverageStatus": "insufficient",
"policyDocumentIds": [
"policy_surface_80ec08a8"
],
"policyDocumentRoles": [
"policy_document"
],
"policyDocumentSha256": [
"3d75b37b603331ceeee86f3acaaca9784838998683345159a79b53ea2cdf2475"
],
"assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
"unresolvedMaterialPolicyChildUrls": []
},
{
"topic": "international_transfers",
"status": "insufficient_retained_evidence",
"sourceUrls": [
"https://ergoveritas.com/privacy"
],
"reasonCodes": [
"policy_absence_coverage_preconditions_not_met",
"typed_topic_coverage_diagnostic_missing_or_limited",
"policy_document_content_coverage_incomplete"
],
"coverageStatus": "insufficient",
"policyDocumentIds": [
"policy_surface_80ec08a8"
],
"policyDocumentRoles": [
"policy_document"
],
"policyDocumentSha256": [
"3d75b37b603331ceeee86f3acaaca9784838998683345159a79b53ea2cdf2475"
],
"assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
"unresolvedMaterialPolicyChildUrls": []
},
{
"topic": "legal_basis",
"status": "insufficient_retained_evidence",
"sourceUrls": [
"https://ergoveritas.com/privacy"
],
"reasonCodes": [
"policy_absence_coverage_preconditions_not_met",
"typed_topic_coverage_diagnostic_missing_or_limited",
"policy_document_content_coverage_incomplete"
],
"coverageStatus": "insufficient",
"policyDocumentIds": [
"policy_surface_80ec08a8"
],
"policyDocumentRoles": [
"policy_document"
],
"policyDocumentSha256": [
"3d75b37b603331ceeee86f3acaaca9784838998683345159a79b53ea2cdf2475"
],
"assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
"unresolvedMaterialPolicyChildUrls": []
},
{
"topic": "processing_purposes",
"status": "observed",
"sourceUrls": [
"https://ergoveritas.com/privacy"
],
"reasonCodes": [
"row_specific_disclosure_observed"
],
"coverageStatus": "insufficient",
"policyDocumentIds": [
"policy_surface_80ec08a8"
],
"policyDocumentRoles": [
"policy_document"
],
"policyDocumentSha256": [
"3d75b37b603331ceeee86f3acaaca9784838998683345159a79b53ea2cdf2475"
],
"assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
"unresolvedMaterialPolicyChildUrls": []
},
{
"topic": "recipients_or_vendor_categories",
"status": "observed",
"sourceUrls": [
"https://ergoveritas.com/privacy"
],
"reasonCodes": [
"row_specific_disclosure_observed"
],
"coverageStatus": "insufficient",
"policyDocumentIds": [
"policy_surface_80ec08a8"
],
"policyDocumentRoles": [
"policy_document"
],
"policyDocumentSha256": [
"3d75b37b603331ceeee86f3acaaca9784838998683345159a79b53ea2cdf2475"
],
"assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
"unresolvedMaterialPolicyChildUrls": []
},
{
"topic": "supervisory_authority",
"status": "insufficient_retained_evidence",
"sourceUrls": [
"https://ergoveritas.com/privacy"
],
"reasonCodes": [
"policy_absence_coverage_preconditions_not_met",
"typed_topic_coverage_diagnostic_missing_or_limited",
"policy_document_content_coverage_incomplete"
],
"coverageStatus": "insufficient",
"policyDocumentIds": [
"policy_surface_80ec08a8"
],
"policyDocumentRoles": [
"policy_document"
],
"policyDocumentSha256": [
"3d75b37b603331ceeee86f3acaaca9784838998683345159a79b53ea2cdf2475"
],
"assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
"unresolvedMaterialPolicyChildUrls": []
}
],
"dedicatedCookiePolicyPresent": false,
"policyTextEvidenceProjection": {
"scanId": "63b87ff5-07c5-4c7b-895a-028ea6bb43c9",
"documents": [
{
"finalUrl": "https://ergoveritas.com/privacy",
"artifactId": "policy_surface_text_80ec08a8",
"artifactUri": "s3://certscore-v2-dag-local-artifacts-eu-west-1-199536052647/v2-dag-lambda/local/63b87ff5-07c5-4c7b-895a-028ea6bb43c9/auxiliary/policy_surface_text_80ec08a8.txt",
"documentRole": "policy_document",
"requestedUrl": "https://ergoveritas.com/privacy",
"observationId": "policy_surface_80ec08a8",
"redirectChain": [
"https://ergoveritas.com/privacy"
],
"artifactSha256": "3d75b37b603331ceeee86f3acaaca9784838998683345159a79b53ea2cdf2475",
"documentFormat": "text",
"limitationKeys": [
"policy_section_inventory_bounded",
"policy_section_text_bounded"
],
"contentCoverage": {
"status": "truncated",
"limitationKeys": [
"policy_section_inventory_bounded",
"policy_section_text_bounded"
],
"sourceTextChars": 2016,
"retainedSectionCount": 7,
"extractedSectionCount": 9,
"retainedTableRowCount": 0
},
"artifactFileName": "policy_surface_text_80ec08a8.txt",
"extractionStatus": "complete",
"artifactSizeBytes": 2106,
"retainedTextChars": 2104,
"documentFetchState": "fetched",
"retainedTextSha256": "3d75b37b603331ceeee86f3acaaca9784838998683345159a79b53ea2cdf2475",
"targetRelationship": "target_controller",
"documentOwnerEntity": "Public Web Evidence Transparency Research ErgoVeritas",
"ownershipConfidence": 0.98,
"documentTextCoverage": {
"status": "complete",
"limitationKeys": [],
"sourceTextChars": 2016,
"retainedTextChars": 2016
},
"documentEvaluationState": "usable",
"documentRoleReasonCodes": [
"multiple_substantive_disclosure_signals_retained"
],
"governingPolicySelection": {
"rank": 1,
"score": 79,
"state": "primary",
"reasonCodes": [
"highest_ranked_eligible_governing_policy",
"target_controller_document",
"policy_content_coverage_truncated",
"complete_policy_text_retention",
"multiple_substantive_disclosure_signals_retained"
],
"contractVersion": "governing_policy_selection.v1"
},
"artifactVerificationStatus": "verified",
"gdprTransparencyTopicCoverageDiagnostics": [
{
"topic": "controller_contact",
"reasonCodes": [
"row_specific_disclosure_not_confirmed",
"policy_content_coverage_truncated"
],
"coverageState": "limited",
"contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
"evaluationState": "unknown",
"documentRetentionState": "complete",
"sectionExtractionState": "truncated"
},
{
"topic": "processing_purposes",
"reasonCodes": [
"row_specific_disclosure_observed",
"evidence_hash_binding_verified",
"policy_content_coverage_truncated"
],
"coverageState": "limited",
"contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
"evaluationState": "observed",
"sourceDocumentSha256": "487966c5d95c8dba6f757bacac17340a665a9964f5b3a39dd8c232d240f6ce5d",
"evidenceSectionSha256": "c90070aea9d00485de89c69abddc0eea87005d720ec839ba42c37cd01fe77933",
"documentRetentionState": "complete",
"sectionExtractionState": "truncated",
"sectionExtractionMethod": "html_heading_hierarchy"
},
{
"topic": "legal_basis",
"reasonCodes": [
"row_specific_disclosure_not_confirmed",
"policy_content_coverage_truncated"
],
"coverageState": "limited",
"contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
"evaluationState": "unknown",
"documentRetentionState": "complete",
"sectionExtractionState": "truncated"
},
{
"topic": "recipients_or_vendor_categories",
"reasonCodes": [
"row_specific_disclosure_observed",
"evidence_hash_binding_verified",
"policy_content_coverage_truncated"
],
"coverageState": "limited",
"contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
"evaluationState": "observed",
"sourceDocumentSha256": "487966c5d95c8dba6f757bacac17340a665a9964f5b3a39dd8c232d240f6ce5d",
"evidenceSectionSha256": "aa69edf58e84dafd1d8cbbd37a88dcd8fa70e5b4a303e786fff49173ed568f59",
"documentRetentionState": "complete",
"sectionExtractionState": "truncated",
"sectionExtractionMethod": "html_heading_hierarchy"
},
{
"topic": "data_retention",
"reasonCodes": [
"row_specific_disclosure_not_confirmed",
"policy_content_coverage_truncated"
],
"coverageState": "limited",
"contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
"evaluationState": "unknown",
"documentRetentionState": "complete",
"sectionExtractionState": "truncated"
},
{
"topic": "data_subject_rights",
"reasonCodes": [
"row_specific_disclosure_not_confirmed",
"policy_content_coverage_truncated"
],
"coverageState": "limited",
"contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
"evaluationState": "unknown",
"documentRetentionState": "complete",
"sectionExtractionState": "truncated"
},
{
"topic": "international_transfers",
"reasonCodes": [
"row_specific_disclosure_not_confirmed",
"policy_content_coverage_truncated"
],
"coverageState": "limited",
"contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
"evaluationState": "unknown",
"documentRetentionState": "complete",
"sectionExtractionState": "truncated"
},
{
"topic": "dpo_contact",
"reasonCodes": [
"row_specific_disclosure_not_confirmed",
"policy_content_coverage_truncated"
],
"coverageState": "limited",
"contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
"evaluationState": "unknown",
"documentRetentionState": "complete",
"sectionExtractionState": "truncated"
},
{
"topic": "supervisory_authority",
"reasonCodes": [
"row_specific_disclosure_not_confirmed",
"policy_content_coverage_truncated"
],
"coverageState": "limited",
"contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
"evaluationState": "unknown",
"documentRetentionState": "complete",
"sectionExtractionState": "truncated"
},
{
"topic": "automated_decision_making_or_profiling",
"reasonCodes": [
"row_specific_disclosure_not_confirmed",
"policy_content_coverage_truncated"
],
"coverageState": "limited",
"contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
"evaluationState": "unknown",
"documentRetentionState": "complete",
"sectionExtractionState": "truncated"
}
]
}
],
"generatedAt": "2026-09-21T14:05:11.171Z",
"sourceBundle": {
"uri": "s3://certscore-v2-dag-local-artifacts-eu-west-1-199536052647/v2-dag-lambda/local/63b87ff5-07c5-4c7b-895a-028ea6bb43c9/CanonicalEvidenceBundle.json",
"sha256": "ed27016e5cbf8998e83c7cb27cb05af81c9d3f6c664c8d7a8437591a29ed2db5",
"sizeBytes": 117487,
"schemaVersion": "certscore.v2.alpha.1",
"verificationStatus": "verified"
},
"limitationKeys": [
"policy_section_inventory_bounded",
"policy_section_text_bounded"
],
"contractVersion": "certscore.policy-text-evidence-projection.v1",
"projectionStatus": "verified_complete"
},
"privacyPolicyEvaluationState": "fetched_usable",
"legalFrameworkValidityMatches": [],
"missingExpectedPolicySections": [
"Your privacy controls",
"Exporting and deleting your information",
"Retaining your information",
"Compliance and cooperation with regulators",
"European requirements",
"Data transfers"
],
"policy_text_extraction_health": {
"policyUrls": [
"https://ergoveritas.com/privacy"
],
"nanoInvoked": false,
"contractVersion": "certscore.policy-text-extraction-health.v2",
"policyTextQuality": {
"usable": true,
"codeSignalCount": 0,
"codeSymbolRatio": 0.0004752851711026616,
"policyTermCount": 7,
"alphabeticWordRatio": 0.8556701030927835,
"accessChallengeSignalCount": 0,
"naturalLanguageSentenceCount": 17
},
"policyUrlRetained": true,
"extractedTextLength": 2104,
"policySurfaceObserved": true,
"detectedPolicyLanguage": "en",
"minimumTextLengthRequired": 500,
"policyTextExtractionStatus": "ok",
"verifiedPolicyDocumentCount": 1,
"detectedPolicyLanguageSource": "policy_surface",
"supportedGdprTransparencyLocales": [
"en",
"de",
"fr",
"es",
"it",
"nl",
"pl",
"pt",
"ru",
"ja",
"zh",
"ar",
"sv",
"ro",
"cs",
"el",
"hu",
"da",
"fi",
"sk",
"bg",
"hr",
"nb",
"sl",
"lt",
"lv",
"et",
"uk",
"tr",
"fa",
"vi",
"id",
"ko",
"th",
"he",
"sr",
"ca",
"hi",
"az",
"gl"
],
"gdprTransparencyLanguageSupported": true,
"policyTextEvidenceProjectionStatus": "verified_complete",
"policyTextEvidenceProjectionContractVersion": "certscore.policy-text-evidence-projection.v1"
},
"retainedPolicySectionHeadings": [
"Privacy Policy",
"Static website",
"Hosting records",
"Analytics and session diagnostics",
"Contact",
"Controlled calibration pages",
"content-delivery providers may process"
],
"selectedPrivacyPolicyDocument": {
"documentUrl": "https://ergoveritas.com/privacy",
"observationId": "policy_surface_80ec08a8",
"traversalDepth": 0,
"parentSurfaceUrl": null,
"parentObservationId": null,
"selectionReasonCodes": []
},
"article13_coverage_assessments": [
{
"topic": "automated_decision_making_or_profiling",
"status": "insufficient_retained_evidence",
"sourceUrls": [
"https://ergoveritas.com/privacy"
],
"reasonCodes": [
"policy_absence_coverage_preconditions_not_met",
"typed_topic_coverage_diagnostic_missing_or_limited",
"policy_document_content_coverage_incomplete"
],
"coverageStatus": "insufficient",
"policyDocumentIds": [
"policy_surface_80ec08a8"
],
"policyDocumentRoles": [
"policy_document"
],
"policyDocumentSha256": [
"3d75b37b603331ceeee86f3acaaca9784838998683345159a79b53ea2cdf2475"
],
"assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
"unresolvedMaterialPolicyChildUrls": []
},
{
"topic": "controller_contact",
"status": "insufficient_retained_evidence",
"sourceUrls": [
"https://ergoveritas.com/privacy"
],
"reasonCodes": [
"policy_absence_coverage_preconditions_not_met",
"typed_topic_coverage_diagnostic_missing_or_limited",
"policy_document_content_coverage_incomplete"
],
"coverageStatus": "insufficient",
"policyDocumentIds": [
"policy_surface_80ec08a8"
],
"policyDocumentRoles": [
"policy_document"
],
"policyDocumentSha256": [
"3d75b37b603331ceeee86f3acaaca9784838998683345159a79b53ea2cdf2475"
],
"assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
"unresolvedMaterialPolicyChildUrls": []
},
{
"topic": "data_retention",
"status": "insufficient_retained_evidence",
"sourceUrls": [
"https://ergoveritas.com/privacy"
],
"reasonCodes": [
"policy_absence_coverage_preconditions_not_met",
"typed_topic_coverage_diagnostic_missing_or_limited",
"policy_document_content_coverage_incomplete"
],
"coverageStatus": "insufficient",
"policyDocumentIds": [
"policy_surface_80ec08a8"
],
"policyDocumentRoles": [
"policy_document"
],
"policyDocumentSha256": [
"3d75b37b603331ceeee86f3acaaca9784838998683345159a79b53ea2cdf2475"
],
"assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
"unresolvedMaterialPolicyChildUrls": []
},
{
"topic": "data_subject_rights",
"status": "insufficient_retained_evidence",
"sourceUrls": [
"https://ergoveritas.com/privacy"
],
"reasonCodes": [
"policy_absence_coverage_preconditions_not_met",
"typed_topic_coverage_diagnostic_missing_or_limited",
"policy_document_content_coverage_incomplete"
],
"coverageStatus": "insufficient",
"policyDocumentIds": [
"policy_surface_80ec08a8"
],
"policyDocumentRoles": [
"policy_document"
],
"policyDocumentSha256": [
"3d75b37b603331ceeee86f3acaaca9784838998683345159a79b53ea2cdf2475"
],
"assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
"unresolvedMaterialPolicyChildUrls": []
},
{
"topic": "dpo_contact",
"status": "insufficient_retained_evidence",
"sourceUrls": [
"https://ergoveritas.com/privacy"
],
"reasonCodes": [
"policy_absence_coverage_preconditions_not_met",
"typed_topic_coverage_diagnostic_missing_or_limited",
"policy_document_content_coverage_incomplete"
],
"coverageStatus": "insufficient",
"policyDocumentIds": [
"policy_surface_80ec08a8"
],
"policyDocumentRoles": [
"policy_document"
],
"policyDocumentSha256": [
"3d75b37b603331ceeee86f3acaaca9784838998683345159a79b53ea2cdf2475"
],
"assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
"unresolvedMaterialPolicyChildUrls": []
},
{
"topic": "international_transfers",
"status": "insufficient_retained_evidence",
"sourceUrls": [
"https://ergoveritas.com/privacy"
],
"reasonCodes": [
"policy_absence_coverage_preconditions_not_met",
"typed_topic_coverage_diagnostic_missing_or_limited",
"policy_document_content_coverage_incomplete"
],
"coverageStatus": "insufficient",
"policyDocumentIds": [
"policy_surface_80ec08a8"
],
"policyDocumentRoles": [
"policy_document"
],
"policyDocumentSha256": [
"3d75b37b603331ceeee86f3acaaca9784838998683345159a79b53ea2cdf2475"
],
"assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
"unresolvedMaterialPolicyChildUrls": []
},
{
"topic": "legal_basis",
"status": "insufficient_retained_evidence",
"sourceUrls": [
"https://ergoveritas.com/privacy"
],
"reasonCodes": [
"policy_absence_coverage_preconditions_not_met",
"typed_topic_coverage_diagnostic_missing_or_limited",
"policy_document_content_coverage_incomplete"
],
"coverageStatus": "insufficient",
"policyDocumentIds": [
"policy_surface_80ec08a8"
],
"policyDocumentRoles": [
"policy_document"
],
"policyDocumentSha256": [
"3d75b37b603331ceeee86f3acaaca9784838998683345159a79b53ea2cdf2475"
],
"assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
"unresolvedMaterialPolicyChildUrls": []
},
{
"topic": "processing_purposes",
"status": "observed",
"sourceUrls": [
"https://ergoveritas.com/privacy"
],
"reasonCodes": [
"row_specific_disclosure_observed"
],
"coverageStatus": "insufficient",
"policyDocumentIds": [
"policy_surface_80ec08a8"
],
"policyDocumentRoles": [
"policy_document"
],
"policyDocumentSha256": [
"3d75b37b603331ceeee86f3acaaca9784838998683345159a79b53ea2cdf2475"
],
"assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
"unresolvedMaterialPolicyChildUrls": []
},
{
"topic": "recipients_or_vendor_categories",
"status": "observed",
"sourceUrls": [
"https://ergoveritas.com/privacy"
],
"reasonCodes": [
"row_specific_disclosure_observed"
],
"coverageStatus": "insufficient",
"policyDocumentIds": [
"policy_surface_80ec08a8"
],
"policyDocumentRoles": [
"policy_document"
],
"policyDocumentSha256": [
"3d75b37b603331ceeee86f3acaaca9784838998683345159a79b53ea2cdf2475"
],
"assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
"unresolvedMaterialPolicyChildUrls": []
},
{
"topic": "supervisory_authority",
"status": "insufficient_retained_evidence",
"sourceUrls": [
"https://ergoveritas.com/privacy"
],
"reasonCodes": [
"policy_absence_coverage_preconditions_not_met",
"typed_topic_coverage_diagnostic_missing_or_limited",
"policy_document_content_coverage_incomplete"
],
"coverageStatus": "insufficient",
"policyDocumentIds": [
"policy_surface_80ec08a8"
],
"policyDocumentRoles": [
"policy_document"
],
"policyDocumentSha256": [
"3d75b37b603331ceeee86f3acaaca9784838998683345159a79b53ea2cdf2475"
],
"assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
"unresolvedMaterialPolicyChildUrls": []
}
],
"discoveredPrivacyPolicyDetails": [],
"article13DisclosureTypesPartial": [],
"discoveredPrivacyPolicyStatuses": [],
"gdprTransparencyEvidenceProfile": "gdpr_transparency_multilingual_article13_v1",
"policy_text_evidence_projection": {
"scanId": "63b87ff5-07c5-4c7b-895a-028ea6bb43c9",
"documents": [
{
"finalUrl": "https://ergoveritas.com/privacy",
"artifactId": "policy_surface_text_80ec08a8",
"artifactUri": "s3://certscore-v2-dag-local-artifacts-eu-west-1-199536052647/v2-dag-lambda/local/63b87ff5-07c5-4c7b-895a-028ea6bb43c9/auxiliary/policy_surface_text_80ec08a8.txt",
"documentRole": "policy_document",
"requestedUrl": "https://ergoveritas.com/privacy",
"observationId": "policy_surface_80ec08a8",
"redirectChain": [
"https://ergoveritas.com/privacy"
],
"artifactSha256": "3d75b37b603331ceeee86f3acaaca9784838998683345159a79b53ea2cdf2475",
"documentFormat": "text",
"limitationKeys": [
"policy_section_inventory_bounded",
"policy_section_text_bounded"
],
"contentCoverage": {
"status": "truncated",
"limitationKeys": [
"policy_section_inventory_bounded",
"policy_section_text_bounded"
],
"sourceTextChars": 2016,
"retainedSectionCount": 7,
"extractedSectionCount": 9,
"retainedTableRowCount": 0
},
"artifactFileName": "policy_surface_text_80ec08a8.txt",
"extractionStatus": "complete",
"artifactSizeBytes": 2106,
"retainedTextChars": 2104,
"documentFetchState": "fetched",
"retainedTextSha256": "3d75b37b603331ceeee86f3acaaca9784838998683345159a79b53ea2cdf2475",
"targetRelationship": "target_controller",
"documentOwnerEntity": "Public Web Evidence Transparency Research ErgoVeritas",
"ownershipConfidence": 0.98,
"documentTextCoverage": {
"status": "complete",
"limitationKeys": [],
"sourceTextChars": 2016,
"retainedTextChars": 2016
},
"documentEvaluationState": "usable",
"documentRoleReasonCodes": [
"multiple_substantive_disclosure_signals_retained"
],
"governingPolicySelection": {
"rank": 1,
"score": 79,
"state": "primary",
"reasonCodes": [
"highest_ranked_eligible_governing_policy",
"target_controller_document",
"policy_content_coverage_truncated",
"complete_policy_text_retention",
"multiple_substantive_disclosure_signals_retained"
],
"contractVersion": "governing_policy_selection.v1"
},
"artifactVerificationStatus": "verified",
"gdprTransparencyTopicCoverageDiagnostics": [
{
"topic": "controller_contact",
"reasonCodes": [
"row_specific_disclosure_not_confirmed",
"policy_content_coverage_truncated"
],
"coverageState": "limited",
"contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
"evaluationState": "unknown",
"documentRetentionState": "complete",
"sectionExtractionState": "truncated"
},
{
"topic": "processing_purposes",
"reasonCodes": [
"row_specific_disclosure_observed",
"evidence_hash_binding_verified",
"policy_content_coverage_truncated"
],
"coverageState": "limited",
"contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
"evaluationState": "observed",
"sourceDocumentSha256": "487966c5d95c8dba6f757bacac17340a665a9964f5b3a39dd8c232d240f6ce5d",
"evidenceSectionSha256": "c90070aea9d00485de89c69abddc0eea87005d720ec839ba42c37cd01fe77933",
"documentRetentionState": "complete",
"sectionExtractionState": "truncated",
"sectionExtractionMethod": "html_heading_hierarchy"
},
{
"topic": "legal_basis",
"reasonCodes": [
"row_specific_disclosure_not_confirmed",
"policy_content_coverage_truncated"
],
"coverageState": "limited",
"contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
"evaluationState": "unknown",
"documentRetentionState": "complete",
"sectionExtractionState": "truncated"
},
{
"topic": "recipients_or_vendor_categories",
"reasonCodes": [
"row_specific_disclosure_observed",
"evidence_hash_binding_verified",
"policy_content_coverage_truncated"
],
"coverageState": "limited",
"contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
"evaluationState": "observed",
"sourceDocumentSha256": "487966c5d95c8dba6f757bacac17340a665a9964f5b3a39dd8c232d240f6ce5d",
"evidenceSectionSha256": "aa69edf58e84dafd1d8cbbd37a88dcd8fa70e5b4a303e786fff49173ed568f59",
"documentRetentionState": "complete",
"sectionExtractionState": "truncated",
"sectionExtractionMethod": "html_heading_hierarchy"
},
{
"topic": "data_retention",
"reasonCodes": [
"row_specific_disclosure_not_confirmed",
"policy_content_coverage_truncated"
],
"coverageState": "limited",
"contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
"evaluationState": "unknown",
"documentRetentionState": "complete",
"sectionExtractionState": "truncated"
},
{
"topic": "data_subject_rights",
"reasonCodes": [
"row_specific_disclosure_not_confirmed",
"policy_content_coverage_truncated"
],
"coverageState": "limited",
"contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
"evaluationState": "unknown",
"documentRetentionState": "complete",
"sectionExtractionState": "truncated"
},
{
"topic": "international_transfers",
"reasonCodes": [
"row_specific_disclosure_not_confirmed",
"policy_content_coverage_truncated"
],
"coverageState": "limited",
"contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
"evaluationState": "unknown",
"documentRetentionState": "complete",
"sectionExtractionState": "truncated"
},
{
"topic": "dpo_contact",
"reasonCodes": [
"row_specific_disclosure_not_confirmed",
"policy_content_coverage_truncated"
],
"coverageState": "limited",
"contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
"evaluationState": "unknown",
"documentRetentionState": "complete",
"sectionExtractionState": "truncated"
},
{
"topic": "supervisory_authority",
"reasonCodes": [
"row_specific_disclosure_not_confirmed",
"policy_content_coverage_truncated"
],
"coverageState": "limited",
"contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
"evaluationState": "unknown",
"documentRetentionState": "complete",
"sectionExtractionState": "truncated"
},
{
"topic": "automated_decision_making_or_profiling",
"reasonCodes": [
"row_specific_disclosure_not_confirmed",
"policy_content_coverage_truncated"
],
"coverageState": "limited",
"contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
"evaluationState": "unknown",
"documentRetentionState": "complete",
"sectionExtractionState": "truncated"
}
]
}
],
"generatedAt": "2026-09-21T14:05:11.171Z",
"sourceBundle": {
"uri": "s3://certscore-v2-dag-local-artifacts-eu-west-1-199536052647/v2-dag-lambda/local/63b87ff5-07c5-4c7b-895a-028ea6bb43c9/CanonicalEvidenceBundle.json",
"sha256": "ed27016e5cbf8998e83c7cb27cb05af81c9d3f6c664c8d7a8437591a29ed2db5",
"sizeBytes": 117487,
"schemaVersion": "certscore.v2.alpha.1",
"verificationStatus": "verified"
},
"limitationKeys": [
"policy_section_inventory_bounded",
"policy_section_text_bounded"
],
"contractVersion": "certscore.policy-text-evidence-projection.v1",
"projectionStatus": "verified_complete"
},
"privacyPolicyTextCharacterCount": 2104,
"retainedCookiePolicyTextExcerpt": "",
"validatedDisclosureTypesPartial": [],
"article13DisclosureTypesObserved": [
"processing_purposes",
"recipients_or_vendor_categories"
],
"retainedArticle13SectionEvidence": [
{
"surfaceUrl": "https://ergoveritas.com/privacy",
"coverageArea": "data_subject_rights",
"evidenceSource": "deterministic",
"signalObserved": "partial",
"extractionLimitation": "selected_policy_section_truncated_by_retention_limit",
"selectedEvidenceStrength": "partial",
"selectedPolicySectionUrl": "https://ergoveritas.com/privacy",
"selectedPolicySectionExcerpt": "Privacy Policy. Last updated August 6, 2026 Static website ErgoVeritas is served as a static website. It does not provide user accounts, accept file uploads, or maintain an application database. Hosting records Our hosting and content-delivery providers may process ordinary request information such as IP address, requested URL, timestamp, browser information, and security diagnostics to deliver and protect the site. Analytics and session diagnostics On the main ErgoVeritas site, Google Tag Manager loads Google Analytics and Microsoft Clarity. These services may set cookies or use similar browser storage and collect information about page visits, device and browser characteristics, interactions, and approximate location. We use this information to understand site usage, verify changes, and diagnose usability issues. Microsoft Clarity is configured to mask sensitive content in session recordings. Contact If you email us, we receive the information you choose to include and use it to respond to your message. You can contact us at [email protected] .",
"selectedPolicySectionHeading": "Privacy Policy"
},
{
"surfaceUrl": "https://ergoveritas.com/privacy",
"coverageArea": "dpo_contact",
"evidenceSource": "deterministic",
"signalObserved": "not_confirmed",
"extractionLimitation": "section_retained_without_row_specific_disclosure",
"selectedEvidenceStrength": "limited",
"selectedPolicySectionUrl": "https://ergoveritas.com/privacy",
"selectedPolicySectionExcerpt": "Contact. If you email us, we receive the information you choose to include and use it to respond to your message. You can contact us at [email protected] .",
"selectedPolicySectionHeading": "Contact"
},
{
"surfaceUrl": "https://ergoveritas.com/privacy",
"coverageArea": "controller_contact",
"evidenceSource": "deterministic",
"signalObserved": "not_confirmed",
"extractionLimitation": "section_retained_without_row_specific_disclosure",
"selectedEvidenceStrength": "limited",
"selectedPolicySectionUrl": "https://ergoveritas.com/privacy",
"selectedPolicySectionExcerpt": "Contact. If you email us, we receive the information you choose to include and use it to respond to your message. You can contact us at [email protected] .",
"selectedPolicySectionHeading": "Contact"
},
{
"surfaceUrl": "https://ergoveritas.com/privacy",
"coverageArea": "processing_purposes",
"evidenceSource": "deterministic",
"signalObserved": "observed",
"extractionLimitation": "selected_policy_section_truncated_by_retention_limit",
"selectedEvidenceStrength": "strong",
"selectedPolicySectionUrl": "https://ergoveritas.com/privacy",
"selectedPolicySectionExcerpt": "Privacy Policy. We use this information to understand site usage, verify changes, and diagnose usability issues. Microsoft Clarity is configured to mask sensitive content in session recordings.",
"selectedPolicySectionHeading": "Privacy Policy"
},
{
"surfaceUrl": "https://ergoveritas.com/privacy",
"coverageArea": "legal_basis",
"evidenceSource": "deterministic",
"signalObserved": "not_confirmed",
"extractionLimitation": "section_retained_without_row_specific_disclosure",
"selectedEvidenceStrength": "limited",
"selectedPolicySectionUrl": "https://ergoveritas.com/privacy",
"selectedPolicySectionExcerpt": "Controlled calibration pages. as an isolated test case; clean control pages remain free of the main-site Tag Manager loader. These pages are labeled as calibration surfaces and do not interpret a visitor's consent choice.",
"selectedPolicySectionHeading": "Controlled calibration pages"
},
{
"surfaceUrl": "https://ergoveritas.com/privacy",
"coverageArea": "recipients_or_vendor_categories",
"evidenceSource": "deterministic",
"signalObserved": "observed",
"extractionLimitation": "selected_policy_section_truncated_by_retention_limit",
"selectedEvidenceStrength": "strong",
"selectedPolicySectionUrl": "https://ergoveritas.com/privacy",
"selectedPolicySectionExcerpt": "Privacy Policy. Hosting records Our hosting and content-delivery providers may process ordinary request information such as IP address, requested URL, timestamp, browser information, and security diagnostics to deliver and protect the site. Analytics and session diagnostics On the main ErgoVeritas site, Google Tag Manager loads Google Analytics and Microsoft Clarity.",
"selectedPolicySectionHeading": "Privacy Policy"
}
],
"retainedPrivacyPolicyTextExcerpt": "Public-Web Evidence & Transparency Research | ErgoVeritas ergoveritas.com is a controlled test environment used solely for automated compliance-scanning validation. Pages on this domain intentionally exhibit non-compliant tracking behaviors for detection-testing purposes. This site is not intended for public use. Learn more · Contact: [email protected] ErgoVeritas Evidence and transparency How It Works Use Cases Contact Privacy Policy Last updated August 6, 2026 Static website ErgoVeritas is served as a static website. It does not provide user accounts, accept file uploads, or maintain an application database. Hosting records Our hosting and content-delivery providers may process ordinary request information such as IP address, requested URL, timestamp, browser information, and security diagnostics to deliver and protect the site. Analytics and session diagnostics On the main ErgoVeritas site, Google Tag Manager loads Google Analytics and Microsoft Clarity. These services may set cookies or use similar browser storage and collect information about page visits, device and browser characteristics, interactions, and approximate location. We use this information to understand site usage, verify changes, and diagnose usability issues. Microsoft Clarity is configured to mask sensitive content in session recordings. Contact If you email us, we receive the information you choose to include and use it to respond to your message. You can contact us at [email protected] . Controlled calibration pages No-index calibration pages may intentionally expose synthetic controls, policy text, cookies, browser-storage values, or designated third-party analytics and session-replay tags so authorized CertScore testing can verify scanner behavior. Each page is designed as an isolated test case; clean control pages remain free of the main-site Tag Manager loader. These pages are labeled as calibration surfaces and do not interpret a visitor's consent choice. Terms Privacy Legal & Transparency CertScore findings © 2026 Ergoveritas.com. All rights reserved. Evidence before conclusions",
"validatedDisclosureTypesObserved": [
"processing_purposes",
"recipients_or_vendor_categories"
],
"privacyNoticeAvailabilityObserved": true,
"evaluatedPrivacyPolicySurfaceCount": 1,
"discardedArticle13DisclosureSignals": [
{
"source": "deterministic",
"confidence": 0.66,
"surfaceUrl": "https://ergoveritas.com/privacy",
"evidenceText": "Public-Web Evidence & Transparency Research | ErgoVeritas ergoveritas.com is a controlled test environment used solely for automated compliance-scanning validation. Pages on this domain intentionally exhibit non-compliant tracking behaviors for detection-testing purposes. This site is not intended for public use.",
"rejectReason": "insufficient_row_specific_terms",
"disclosureType": "controller_contact"
},
{
"source": "deterministic",
"confidence": 0.7,
"surfaceUrl": "https://ergoveritas.com/privacy",
"evidenceText": "as an isolated test case; clean control pages remain free of the main-site Tag Manager loader. These pages are labeled as calibration surfaces and do not interpret a visitor's consent choice. Embedded test content These same-site frames support scanner testing. They contain no third-party tracking.",
"rejectReason": "insufficient_row_specific_terms",
"disclosureType": "legal_basis"
},
{
"source": "deterministic",
"confidence": 0.76,
"surfaceUrl": "https://ergoveritas.com/privacy",
"evidenceText": ". Controlled calibration pages No-index calibration pages may intentionally expose synthetic controls, policy text, cookies, browser-storage values, or designated third-party analytics and session-replay tags so authorized CertScore testing can verify scanner behavior.",
"rejectReason": "insufficient_row_specific_terms",
"disclosureType": "recipients_or_vendor_categories"
}
],
"staleLegalFrameworkReferenceObserved": false,
"policyEvidenceProvenanceContractVersion": "certscore.policy-evidence-provenance.v1",
"gdprTransparencyProductionEvidenceEnabled": true,
"gdprTransparencyProductionEvidenceDiagnostics": {
"sourceCandidateCount": 2,
"candidateDispositions": [
{
"topic": "recipients_or_vendor_categories",
"confidence": 0.82,
"disposition": "accepted",
"matchStrength": "equivalent",
"matchedLocale": "en",
"rejectionReason": null,
"sourceObservationId": "policy_surface_80ec08a8"
},
{
"topic": "processing_purposes",
"confidence": 0.82,
"disposition": "accepted",
"matchStrength": "equivalent",
"matchedLocale": "en",
"rejectionReason": null,
"sourceObservationId": "policy_surface_80ec08a8"
}
],
"acceptedCandidateCount": 2,
"rejectedCandidateCount": 0,
"discardedCandidateCount": 0,
"diagnosticCandidateCount": 0,
"productionCreditSignalCount": 2
}
}
},
"projectedFindings": [],
"missingOrIncompleteSourceSignals": []
}No remediation is established by this check alone. Retain its evidence and reassess after relevant changes.
Policy source
Captured page title: Public-Web Evidence & Transparency Research | ErgoVeritas — https://ergoveritas.com/privacy
Document heading: Privacy Policy
Source policy language: en; banner/page language: en; translation applied: No.
Policy reached through: Guessed Common Path; directly linked from scanned page: No; retrieved during scan: 2026-09-21T14:05:09.113Z.
Section: Not retained; update text: Last updated August 6, 2026.
Open policy sourceNo production-approved topic match was established. This neutral result does not establish that the disclosure is absent.
{
"assessmentStatus": "coverage_limitation",
"checklistItemId": "legal_basis_disclosure_observed",
"coverageArea": "Legal basis disclosure",
"evidenceState": "not_testable",
"explanation": "Whether retained privacy-policy evidence included a canonical legal-basis disclosure signal.",
"note": "Whether retained privacy-policy evidence included a canonical legal-basis disclosure signal.",
"status": "Not confirmed",
"tone": "neutral",
"pipeline": {
"projectionStage": "coverage_policy",
"concernPolicyKey": "gdpr_eprivacy_coverage.legal_basis_disclosure_observed.not_confirmed",
"ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
"wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.legal_basis_disclosure_observed"
},
"statusBasis": "No production-approved topic match was established. This neutral result does not establish that the disclosure is absent.",
"retainedEvidence": {
"remediation": {
"kind": "steps",
"steps": [
"Review the governing policy section for the legal basis stated for each processing purpose; retain the exact excerpt and source URL.",
"If relevant wording exists, record it for review and investigate extraction coverage. Unconfirmed evidence alone does not establish a missing disclosure.",
"Retest the same policy version or record the revised version; verify that the extracted passage supports this specific topic, rather than nearby or unrelated wording."
]
},
"signalObserved": "not_confirmed_canonical_projection_unavailable",
"missingEvidenceNeeded": [],
"selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
"weakerArtifactsIgnored": [],
"canonicalProjectionState": "normalized_concern_unavailable",
"policyEvidenceAssessment": {
"result": "extraction_incomplete",
"scoreEffect": "none",
"topicRelevance": "unknown",
"contractVersion": "certscore.policy-topic-evidence-assessment.v1"
},
"policyEvidenceProvenance": {
"sourceUrl": "https://ergoveritas.com/privacy",
"policyTitle": "Public-Web Evidence & Transparency Research | ErgoVeritas",
"artifactRefs": [
"policy_excerpt_80ec08a8",
"policy_surface_text_80ec08a8"
],
"bannerLanguage": "en",
"contractVersion": "certscore.policy-evidence-provenance.v1",
"discoveryMethod": "guessed_common_path",
"documentHeading": "Privacy Policy",
"lastUpdatedText": "Last updated August 6, 2026",
"detectedLanguage": "en",
"retrievalTimestamp": "2026-09-21T14:05:09.113Z",
"targetRelationship": "target_controller",
"translationApplied": false,
"documentOwnerEntity": "Public Web Evidence Transparency Research ErgoVeritas",
"ownershipConfidence": 0.98,
"directlyLinkedFromScannedPage": false
},
"selectedEvidenceStrength": "missing",
"policyTextExtractionHealth": {
"policyUrls": [
"https://ergoveritas.com/privacy"
],
"nanoInvoked": false,
"contractVersion": "certscore.policy-text-extraction-health.v2",
"policyTextQuality": {
"usable": true,
"codeSignalCount": 0,
"codeSymbolRatio": 0.0004752851711026616,
"policyTermCount": 7,
"alphabeticWordRatio": 0.8556701030927835,
"accessChallengeSignalCount": 0,
"naturalLanguageSentenceCount": 17
},
"policyUrlRetained": true,
"extractedTextLength": 2104,
"policySurfaceObserved": true,
"detectedPolicyLanguage": "en",
"minimumTextLengthRequired": 500,
"policyTextExtractionStatus": "ok",
"verifiedPolicyDocumentCount": 1,
"detectedPolicyLanguageSource": "policy_surface",
"supportedGdprTransparencyLocales": [
"en",
"de",
"fr",
"es",
"it",
"nl",
"pl",
"pt",
"ru",
"ja",
"zh",
"ar",
"sv",
"ro",
"cs",
"el",
"hu",
"da",
"fi",
"sk",
"bg",
"hr",
"nb",
"sl",
"lt",
"lv",
"et",
"uk",
"tr",
"fa",
"vi",
"id",
"ko",
"th",
"he",
"sr",
"ca",
"hi",
"az",
"gl"
],
"gdprTransparencyLanguageSupported": true,
"policyTextEvidenceProjectionStatus": "verified_complete",
"policyTextEvidenceProjectionContractVersion": "certscore.policy-text-evidence-projection.v1"
},
"selectedEvidenceArtifactId": "coverage_policy",
"article13CoverageAssessment": {
"topic": "legal_basis",
"status": "insufficient_retained_evidence",
"sourceUrls": [
"https://ergoveritas.com/privacy"
],
"reasonCodes": [
"policy_absence_coverage_preconditions_not_met",
"typed_topic_coverage_diagnostic_missing_or_limited",
"policy_document_content_coverage_incomplete"
],
"coverageStatus": "insufficient",
"policyDocumentIds": [
"policy_surface_80ec08a8"
],
"policyDocumentRoles": [
"policy_document"
],
"policyDocumentSha256": [
"3d75b37b603331ceeee86f3acaaca9784838998683345159a79b53ea2cdf2475"
],
"assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
"unresolvedMaterialPolicyChildUrls": []
},
"gdprTransparencyReportStatusContract": "observed_not_confirmed_no_match_found.v1"
},
"projectedFindings": [],
"missingOrIncompleteSourceSignals": []
}Policy source
Captured page title: Public-Web Evidence & Transparency Research | ErgoVeritas — https://ergoveritas.com/privacy
Document heading: Privacy Policy
Source policy language: en; banner/page language: en; translation applied: No.
Policy reached through: Guessed Common Path; directly linked from scanned page: No; retrieved during scan: 2026-09-21T14:05:09.113Z.
Section: Not retained; update text: Last updated August 6, 2026.
Open policy sourceNo production-approved topic match was established. This neutral result does not establish that the disclosure is absent.
{
"assessmentStatus": "coverage_limitation",
"checklistItemId": "retention_disclosure_observed",
"coverageArea": "Retention disclosure",
"evidenceState": "not_testable",
"explanation": "Whether retained privacy-policy evidence included a data-retention disclosure signal.",
"note": "Whether retained privacy-policy evidence included a data-retention disclosure signal.",
"status": "Not confirmed",
"tone": "neutral",
"pipeline": {
"projectionStage": "coverage_policy",
"concernPolicyKey": "gdpr_eprivacy_coverage.retention_disclosure_observed.not_confirmed",
"ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
"wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.retention_disclosure_observed"
},
"statusBasis": "No production-approved topic match was established. This neutral result does not establish that the disclosure is absent.",
"retainedEvidence": {
"remediation": {
"kind": "steps",
"steps": [
"Review the governing policy section for the retention period or substantive criteria for each relevant data category; retain the exact excerpt and source URL.",
"If relevant wording exists, record it for review and investigate extraction coverage. Unconfirmed evidence alone does not establish a missing disclosure.",
"Retest the same policy version or record the revised version; verify that the extracted passage supports this specific topic, rather than nearby or unrelated wording."
]
},
"signalObserved": "not_confirmed_canonical_projection_unavailable",
"missingEvidenceNeeded": [],
"selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
"weakerArtifactsIgnored": [],
"canonicalProjectionState": "normalized_concern_unavailable",
"policyEvidenceAssessment": {
"result": "extraction_incomplete",
"scoreEffect": "none",
"topicRelevance": "unknown",
"contractVersion": "certscore.policy-topic-evidence-assessment.v1"
},
"policyEvidenceProvenance": {
"sourceUrl": "https://ergoveritas.com/privacy",
"policyTitle": "Public-Web Evidence & Transparency Research | ErgoVeritas",
"artifactRefs": [
"policy_excerpt_80ec08a8",
"policy_surface_text_80ec08a8"
],
"bannerLanguage": "en",
"contractVersion": "certscore.policy-evidence-provenance.v1",
"discoveryMethod": "guessed_common_path",
"documentHeading": "Privacy Policy",
"lastUpdatedText": "Last updated August 6, 2026",
"detectedLanguage": "en",
"retrievalTimestamp": "2026-09-21T14:05:09.113Z",
"targetRelationship": "target_controller",
"translationApplied": false,
"documentOwnerEntity": "Public Web Evidence Transparency Research ErgoVeritas",
"ownershipConfidence": 0.98,
"directlyLinkedFromScannedPage": false
},
"selectedEvidenceStrength": "missing",
"policyTextExtractionHealth": {
"policyUrls": [
"https://ergoveritas.com/privacy"
],
"nanoInvoked": false,
"contractVersion": "certscore.policy-text-extraction-health.v2",
"policyTextQuality": {
"usable": true,
"codeSignalCount": 0,
"codeSymbolRatio": 0.0004752851711026616,
"policyTermCount": 7,
"alphabeticWordRatio": 0.8556701030927835,
"accessChallengeSignalCount": 0,
"naturalLanguageSentenceCount": 17
},
"policyUrlRetained": true,
"extractedTextLength": 2104,
"policySurfaceObserved": true,
"detectedPolicyLanguage": "en",
"minimumTextLengthRequired": 500,
"policyTextExtractionStatus": "ok",
"verifiedPolicyDocumentCount": 1,
"detectedPolicyLanguageSource": "policy_surface",
"supportedGdprTransparencyLocales": [
"en",
"de",
"fr",
"es",
"it",
"nl",
"pl",
"pt",
"ru",
"ja",
"zh",
"ar",
"sv",
"ro",
"cs",
"el",
"hu",
"da",
"fi",
"sk",
"bg",
"hr",
"nb",
"sl",
"lt",
"lv",
"et",
"uk",
"tr",
"fa",
"vi",
"id",
"ko",
"th",
"he",
"sr",
"ca",
"hi",
"az",
"gl"
],
"gdprTransparencyLanguageSupported": true,
"policyTextEvidenceProjectionStatus": "verified_complete",
"policyTextEvidenceProjectionContractVersion": "certscore.policy-text-evidence-projection.v1"
},
"selectedEvidenceArtifactId": "coverage_policy",
"article13CoverageAssessment": {
"topic": "data_retention",
"status": "insufficient_retained_evidence",
"sourceUrls": [
"https://ergoveritas.com/privacy"
],
"reasonCodes": [
"policy_absence_coverage_preconditions_not_met",
"typed_topic_coverage_diagnostic_missing_or_limited",
"policy_document_content_coverage_incomplete"
],
"coverageStatus": "insufficient",
"policyDocumentIds": [
"policy_surface_80ec08a8"
],
"policyDocumentRoles": [
"policy_document"
],
"policyDocumentSha256": [
"3d75b37b603331ceeee86f3acaaca9784838998683345159a79b53ea2cdf2475"
],
"assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
"unresolvedMaterialPolicyChildUrls": []
},
"gdprTransparencyReportStatusContract": "observed_not_confirmed_no_match_found.v1"
},
"projectedFindings": [],
"missingOrIncompleteSourceSignals": []
}Policy source
Captured page title: Public-Web Evidence & Transparency Research | ErgoVeritas — https://ergoveritas.com/privacy
Document heading: Privacy Policy
Source policy language: en; banner/page language: en; translation applied: No.
Policy reached through: Guessed Common Path; directly linked from scanned page: No; retrieved during scan: 2026-09-21T14:05:09.113Z.
Section: Not retained; update text: Last updated August 6, 2026.
Open policy sourceNo production-approved topic match was established. This neutral result does not establish that the disclosure is absent.
{
"assessmentStatus": "coverage_limitation",
"checklistItemId": "controller_contact_disclosure",
"coverageArea": "Controller/contact disclosure",
"evidenceState": "not_testable",
"explanation": "Whether retained privacy-policy evidence included a controller, privacy contact, or equivalent contact point.",
"note": "Whether retained privacy-policy evidence included a controller, privacy contact, or equivalent contact point.",
"status": "Not confirmed",
"tone": "neutral",
"pipeline": {
"projectionStage": "coverage_policy",
"concernPolicyKey": "gdpr_eprivacy_coverage.controller_contact_disclosure.not_confirmed",
"ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
"wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.controller_contact_disclosure"
},
"statusBasis": "No production-approved topic match was established. This neutral result does not establish that the disclosure is absent.",
"retainedEvidence": {
"remediation": {
"kind": "steps",
"steps": [
"Review the governing policy section for the controller identity and contact details; retain the exact excerpt and source URL.",
"If relevant wording exists, record it for review and investigate extraction coverage. Unconfirmed evidence alone does not establish a missing disclosure.",
"Retest the same policy version or record the revised version; verify that the extracted passage supports this specific topic, rather than nearby or unrelated wording."
]
},
"signalObserved": "not_confirmed_canonical_projection_unavailable",
"missingEvidenceNeeded": [],
"selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
"weakerArtifactsIgnored": [],
"canonicalProjectionState": "normalized_concern_unavailable",
"policyEvidenceAssessment": {
"result": "extraction_incomplete",
"scoreEffect": "none",
"topicRelevance": "unknown",
"contractVersion": "certscore.policy-topic-evidence-assessment.v1"
},
"policyEvidenceProvenance": {
"sourceUrl": "https://ergoveritas.com/privacy",
"policyTitle": "Public-Web Evidence & Transparency Research | ErgoVeritas",
"artifactRefs": [
"policy_excerpt_80ec08a8",
"policy_surface_text_80ec08a8"
],
"bannerLanguage": "en",
"contractVersion": "certscore.policy-evidence-provenance.v1",
"discoveryMethod": "guessed_common_path",
"documentHeading": "Privacy Policy",
"lastUpdatedText": "Last updated August 6, 2026",
"detectedLanguage": "en",
"retrievalTimestamp": "2026-09-21T14:05:09.113Z",
"targetRelationship": "target_controller",
"translationApplied": false,
"documentOwnerEntity": "Public Web Evidence Transparency Research ErgoVeritas",
"ownershipConfidence": 0.98,
"directlyLinkedFromScannedPage": false
},
"selectedEvidenceStrength": "missing",
"policyTextExtractionHealth": {
"policyUrls": [
"https://ergoveritas.com/privacy"
],
"nanoInvoked": false,
"contractVersion": "certscore.policy-text-extraction-health.v2",
"policyTextQuality": {
"usable": true,
"codeSignalCount": 0,
"codeSymbolRatio": 0.0004752851711026616,
"policyTermCount": 7,
"alphabeticWordRatio": 0.8556701030927835,
"accessChallengeSignalCount": 0,
"naturalLanguageSentenceCount": 17
},
"policyUrlRetained": true,
"extractedTextLength": 2104,
"policySurfaceObserved": true,
"detectedPolicyLanguage": "en",
"minimumTextLengthRequired": 500,
"policyTextExtractionStatus": "ok",
"verifiedPolicyDocumentCount": 1,
"detectedPolicyLanguageSource": "policy_surface",
"supportedGdprTransparencyLocales": [
"en",
"de",
"fr",
"es",
"it",
"nl",
"pl",
"pt",
"ru",
"ja",
"zh",
"ar",
"sv",
"ro",
"cs",
"el",
"hu",
"da",
"fi",
"sk",
"bg",
"hr",
"nb",
"sl",
"lt",
"lv",
"et",
"uk",
"tr",
"fa",
"vi",
"id",
"ko",
"th",
"he",
"sr",
"ca",
"hi",
"az",
"gl"
],
"gdprTransparencyLanguageSupported": true,
"policyTextEvidenceProjectionStatus": "verified_complete",
"policyTextEvidenceProjectionContractVersion": "certscore.policy-text-evidence-projection.v1"
},
"selectedEvidenceArtifactId": "coverage_policy",
"article13CoverageAssessment": {
"topic": "controller_contact",
"status": "insufficient_retained_evidence",
"sourceUrls": [
"https://ergoveritas.com/privacy"
],
"reasonCodes": [
"policy_absence_coverage_preconditions_not_met",
"typed_topic_coverage_diagnostic_missing_or_limited",
"policy_document_content_coverage_incomplete"
],
"coverageStatus": "insufficient",
"policyDocumentIds": [
"policy_surface_80ec08a8"
],
"policyDocumentRoles": [
"policy_document"
],
"policyDocumentSha256": [
"3d75b37b603331ceeee86f3acaaca9784838998683345159a79b53ea2cdf2475"
],
"assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
"unresolvedMaterialPolicyChildUrls": []
},
"gdprTransparencyReportStatusContract": "observed_not_confirmed_no_match_found.v1"
},
"projectedFindings": [],
"missingOrIncompleteSourceSignals": []
}Policy source
Captured page title: Public-Web Evidence & Transparency Research | ErgoVeritas — https://ergoveritas.com/privacy
Document heading: Privacy Policy
Source policy language: en; banner/page language: en; translation applied: No.
Policy reached through: Guessed Common Path; directly linked from scanned page: No; retrieved during scan: 2026-09-21T14:05:09.113Z.
Section: Not retained; update text: Last updated August 6, 2026.
Open policy sourcePrivacy Policy. We use this information to understand site usage, verify changes, and diagnose usability issues. Microsoft Clarity is configured to mask sensitive content in session recordings.
Matched disclosure snippet: Privacy Policy. We use this information to understand site usage, verify changes, and diagnose usability issues. Microsof…
{
"assessmentStatus": "checked",
"checklistItemId": "processing_purposes_disclosure",
"coverageArea": "Processing purposes disclosure",
"evidenceState": "observed",
"explanation": "Whether retained privacy-policy evidence described the purposes for processing personal data.",
"note": "Whether retained privacy-policy evidence described the purposes for processing personal data.",
"status": "Observed",
"tone": "warning",
"pipeline": {
"projectionStage": "coverage_policy",
"concernPolicyKey": "gdpr_eprivacy_coverage.processing_purposes_disclosure.observed",
"ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
"wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.processing_purposes_disclosure"
},
"statusBasis": "Processing purposes disclosure evidence was retained through adapter-approved multilingual GDPR Transparency Article 13 evidence.",
"retainedEvidence": {
"remediation": {
"kind": "none",
"steps": [],
"message": "No remediation is established by this check alone. Retain its evidence and reassess after relevant changes."
},
"evidenceRefs": [
"Evidence: Processing purposes disclosure",
"Excerpt: Privacy Policy. We use this information to understand site usage, verify changes, and diagnose usability issues. Microsoft Clarity is configured to mask sensitive content in session recordings.",
"Policy URL: https://ergoveritas.com/privacy"
],
"signalObserved": true,
"article13Signal": {
"source": "normalized_concern",
"status": "observed",
"confidence": 0.96,
"surfaceUrl": "https://ergoveritas.com/privacy",
"evidenceText": "Privacy Policy. We use this information to understand site usage, verify changes, and diagnose usability issues. Microsoft Clarity is configured to mask sensitive content in session recordings.",
"matchedLocale": null,
"disclosureType": "processing_purposes",
"evidenceSource": "normalized_gdpr_transparency_article13_concern",
"productionCredit": true,
"classifierProvenance": "mini_policy_semantic_review.v2",
"classifierReasonCodes": [
"processing-purpose-disclosure-present",
"verified_retained_topic_evidence",
"policy_review_invariants_applied_v1"
],
"productionCreditProfile": "gdpr_transparency_mini_review_v1",
"selectedEvidenceStrength": "strong",
"selectedPolicySectionUrl": "https://ergoveritas.com/privacy"
},
"missingEvidenceNeeded": [],
"selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
"weakerArtifactsIgnored": [],
"policyEvidenceAssessment": {
"result": "disclosure_observed",
"scoreEffect": "canonical_policy",
"topicRelevance": "direct",
"contractVersion": "certscore.policy-topic-evidence-assessment.v1"
},
"policyEvidenceProvenance": {
"sourceUrl": "https://ergoveritas.com/privacy",
"policyTitle": "Public-Web Evidence & Transparency Research | ErgoVeritas",
"artifactRefs": [
"policy_excerpt_80ec08a8",
"policy_surface_text_80ec08a8"
],
"bannerLanguage": "en",
"contractVersion": "certscore.policy-evidence-provenance.v1",
"discoveryMethod": "guessed_common_path",
"documentHeading": "Privacy Policy",
"lastUpdatedText": "Last updated August 6, 2026",
"detectedLanguage": "en",
"retrievalTimestamp": "2026-09-21T14:05:09.113Z",
"targetRelationship": "target_controller",
"translationApplied": false,
"documentOwnerEntity": "Public Web Evidence Transparency Research ErgoVeritas",
"ownershipConfidence": 0.98,
"directlyLinkedFromScannedPage": false
},
"selectedEvidenceStrength": "moderate",
"selectedEvidenceArtifactId": "coverage_policy",
"gdprTransparencyArticle13Concern": {
"state": "sufficient",
"topic": "processing_purposes",
"originKey": "gdpr_transparency.article13.processing_purposes",
"canonicalConcernKey": "runtime_artifact:gdpr_transparency.article13.processing_purposes",
"regulatoryChecklistEligibility": "observed"
}
},
"projectedFindings": [],
"missingOrIncompleteSourceSignals": []
}No remediation is established by this check alone. Retain its evidence and reassess after relevant changes.
Policy source
Captured page title: Public-Web Evidence & Transparency Research | ErgoVeritas — https://ergoveritas.com/privacy
Document heading: Privacy Policy
Source policy language: en; banner/page language: en; translation applied: No.
Policy reached through: Guessed Common Path; directly linked from scanned page: No; retrieved during scan: 2026-09-21T14:05:09.113Z.
Section: Not retained; update text: Last updated August 6, 2026.
Open policy sourceHosting records Our hosting and content-delivery providers may process ordinary request information such as IP address, requested URL, timestamp, browser information, and security diagnostics to deliver and protect the site. Analytics and session diagnostics On the main ErgoVeritas site, Google Tag Manager loads Google Analytics and Microsoft Clarity.
Matched disclosure snippet: Hosting records Our hosting and content-delivery providers may process ordinary request information such as IP address, r…
{
"assessmentStatus": "checked",
"checklistItemId": "recipients_vendor_categories_disclosure",
"coverageArea": "Recipients/vendor categories disclosed",
"evidenceState": "observed",
"explanation": "Whether retained privacy-policy evidence described recipient, vendor, or 3rd party categories.",
"note": "Whether retained privacy-policy evidence described recipient, vendor, or 3rd party categories.",
"status": "Observed",
"tone": "warning",
"pipeline": {
"projectionStage": "coverage_policy",
"concernPolicyKey": "gdpr_eprivacy_coverage.recipients_vendor_categories_disclosure.observed",
"ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
"wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.recipients_vendor_categories_disclosure"
},
"statusBasis": "Recipients/vendor categories disclosure evidence was retained through adapter-approved multilingual GDPR Transparency Article 13 evidence.",
"retainedEvidence": {
"remediation": {
"kind": "none",
"steps": [],
"message": "No remediation is established by this check alone. Retain its evidence and reassess after relevant changes."
},
"evidenceRefs": [
"Evidence: Recipients/vendor categories disclosure",
"Excerpt: Hosting records Our hosting and content-delivery providers may process ordinary request information such as IP address, requested URL, timestamp, browser information, and security diagnostics to deliver and protect the site. Analytics and session diagnostics On the main ErgoVeritas site, Google Tag Manager loads Google Analytics and Microsoft Clarity.",
"Locale: en",
"Policy URL: https://ergoveritas.com/privacy"
],
"signalObserved": true,
"article13Signal": {
"source": "normalized_concern",
"status": "observed",
"confidence": 0.82,
"surfaceUrl": "https://ergoveritas.com/privacy",
"evidenceText": "Hosting records Our hosting and content-delivery providers may process ordinary request information such as IP address, requested URL, timestamp, browser information, and security diagnostics to deliver and protect the site. Analytics and session diagnostics On the main ErgoVeritas site, Google Tag Manager loads Google Analytics and Microsoft Clarity.",
"matchStrength": "equivalent",
"matchedLocale": "en",
"disclosureType": "recipients_or_vendor_categories",
"evidenceSource": "normalized_gdpr_transparency_article13_concern",
"productionCredit": true,
"classifierProvenance": "gdpr_transparency_topic_classifier.v1",
"classifierReasonCodes": [
"matched_recipients_or_vendor_categories",
"match_strength_equivalent"
],
"productionCreditProfile": "gdpr_transparency_multilingual_article13_v1",
"selectedEvidenceStrength": "strong",
"selectedPolicySectionUrl": "https://ergoveritas.com/privacy",
"selectedPolicySectionHeading": null
},
"missingEvidenceNeeded": [],
"selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
"weakerArtifactsIgnored": [],
"policyEvidenceAssessment": {
"result": "disclosure_observed",
"scoreEffect": "canonical_policy",
"topicRelevance": "direct",
"contractVersion": "certscore.policy-topic-evidence-assessment.v1"
},
"policyEvidenceProvenance": {
"sourceUrl": "https://ergoveritas.com/privacy",
"policyTitle": "Public-Web Evidence & Transparency Research | ErgoVeritas",
"artifactRefs": [
"policy_excerpt_80ec08a8",
"policy_surface_text_80ec08a8"
],
"bannerLanguage": "en",
"contractVersion": "certscore.policy-evidence-provenance.v1",
"discoveryMethod": "guessed_common_path",
"documentHeading": "Privacy Policy",
"lastUpdatedText": "Last updated August 6, 2026",
"detectedLanguage": "en",
"retrievalTimestamp": "2026-09-21T14:05:09.113Z",
"targetRelationship": "target_controller",
"translationApplied": false,
"documentOwnerEntity": "Public Web Evidence Transparency Research ErgoVeritas",
"ownershipConfidence": 0.98,
"directlyLinkedFromScannedPage": false
},
"selectedEvidenceStrength": "moderate",
"selectedEvidenceArtifactId": "coverage_policy",
"gdprTransparencyArticle13Concern": {
"state": "sufficient",
"topic": "recipients_or_vendor_categories",
"originKey": "gdpr_transparency.article13.recipients_or_vendor_categories",
"canonicalConcernKey": "runtime_artifact:gdpr_transparency.article13.recipients_or_vendor_categories",
"regulatoryChecklistEligibility": "observed"
}
},
"projectedFindings": [],
"missingOrIncompleteSourceSignals": []
}No remediation is established by this check alone. Retain its evidence and reassess after relevant changes.
Policy source
Captured page title: Public-Web Evidence & Transparency Research | ErgoVeritas — https://ergoveritas.com/privacy
Document heading: Privacy Policy
Source policy language: en; banner/page language: en; translation applied: No.
Policy reached through: Guessed Common Path; directly linked from scanned page: No; retrieved during scan: 2026-09-21T14:05:09.113Z.
Section: Not retained; update text: Last updated August 6, 2026.
Open policy sourceNo production-approved topic match was established. This neutral result does not establish that the disclosure is absent.
{
"assessmentStatus": "coverage_limitation",
"checklistItemId": "data_subject_rights_disclosure",
"coverageArea": "Data subject rights disclosure",
"evidenceState": "not_testable",
"explanation": "Whether retained privacy-policy evidence described data subject rights or a rights request path.",
"note": "Whether retained privacy-policy evidence described data subject rights or a rights request path.",
"status": "Not confirmed",
"tone": "neutral",
"pipeline": {
"projectionStage": "coverage_policy",
"concernPolicyKey": "gdpr_eprivacy_coverage.data_subject_rights_disclosure.not_confirmed",
"ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
"wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.data_subject_rights_disclosure"
},
"statusBasis": "No production-approved topic match was established. This neutral result does not establish that the disclosure is absent.",
"retainedEvidence": {
"remediation": {
"kind": "steps",
"steps": [
"Review the governing policy section for the applicable rights and how to exercise them; retain the exact excerpt and source URL.",
"If relevant wording exists, record it for review and investigate extraction coverage. Unconfirmed evidence alone does not establish a missing disclosure.",
"Retest the same policy version or record the revised version; verify that the extracted passage supports this specific topic, rather than nearby or unrelated wording."
]
},
"signalObserved": "not_confirmed_canonical_projection_unavailable",
"missingEvidenceNeeded": [],
"selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
"weakerArtifactsIgnored": [],
"canonicalProjectionState": "normalized_concern_unavailable",
"policyEvidenceAssessment": {
"result": "extraction_incomplete",
"scoreEffect": "none",
"topicRelevance": "unknown",
"contractVersion": "certscore.policy-topic-evidence-assessment.v1"
},
"policyEvidenceProvenance": {
"sourceUrl": "https://ergoveritas.com/privacy",
"policyTitle": "Public-Web Evidence & Transparency Research | ErgoVeritas",
"artifactRefs": [
"policy_excerpt_80ec08a8",
"policy_surface_text_80ec08a8"
],
"bannerLanguage": "en",
"contractVersion": "certscore.policy-evidence-provenance.v1",
"discoveryMethod": "guessed_common_path",
"documentHeading": "Privacy Policy",
"lastUpdatedText": "Last updated August 6, 2026",
"detectedLanguage": "en",
"retrievalTimestamp": "2026-09-21T14:05:09.113Z",
"targetRelationship": "target_controller",
"translationApplied": false,
"documentOwnerEntity": "Public Web Evidence Transparency Research ErgoVeritas",
"ownershipConfidence": 0.98,
"directlyLinkedFromScannedPage": false
},
"selectedEvidenceStrength": "missing",
"policyTextExtractionHealth": {
"policyUrls": [
"https://ergoveritas.com/privacy"
],
"nanoInvoked": false,
"contractVersion": "certscore.policy-text-extraction-health.v2",
"policyTextQuality": {
"usable": true,
"codeSignalCount": 0,
"codeSymbolRatio": 0.0004752851711026616,
"policyTermCount": 7,
"alphabeticWordRatio": 0.8556701030927835,
"accessChallengeSignalCount": 0,
"naturalLanguageSentenceCount": 17
},
"policyUrlRetained": true,
"extractedTextLength": 2104,
"policySurfaceObserved": true,
"detectedPolicyLanguage": "en",
"minimumTextLengthRequired": 500,
"policyTextExtractionStatus": "ok",
"verifiedPolicyDocumentCount": 1,
"detectedPolicyLanguageSource": "policy_surface",
"supportedGdprTransparencyLocales": [
"en",
"de",
"fr",
"es",
"it",
"nl",
"pl",
"pt",
"ru",
"ja",
"zh",
"ar",
"sv",
"ro",
"cs",
"el",
"hu",
"da",
"fi",
"sk",
"bg",
"hr",
"nb",
"sl",
"lt",
"lv",
"et",
"uk",
"tr",
"fa",
"vi",
"id",
"ko",
"th",
"he",
"sr",
"ca",
"hi",
"az",
"gl"
],
"gdprTransparencyLanguageSupported": true,
"policyTextEvidenceProjectionStatus": "verified_complete",
"policyTextEvidenceProjectionContractVersion": "certscore.policy-text-evidence-projection.v1"
},
"selectedEvidenceArtifactId": "coverage_policy",
"article13CoverageAssessment": {
"topic": "data_subject_rights",
"status": "insufficient_retained_evidence",
"sourceUrls": [
"https://ergoveritas.com/privacy"
],
"reasonCodes": [
"policy_absence_coverage_preconditions_not_met",
"typed_topic_coverage_diagnostic_missing_or_limited",
"policy_document_content_coverage_incomplete"
],
"coverageStatus": "insufficient",
"policyDocumentIds": [
"policy_surface_80ec08a8"
],
"policyDocumentRoles": [
"policy_document"
],
"policyDocumentSha256": [
"3d75b37b603331ceeee86f3acaaca9784838998683345159a79b53ea2cdf2475"
],
"assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
"unresolvedMaterialPolicyChildUrls": []
},
"gdprTransparencyReportStatusContract": "observed_not_confirmed_no_match_found.v1"
},
"projectedFindings": [],
"missingOrIncompleteSourceSignals": []
}Policy source
Captured page title: Public-Web Evidence & Transparency Research | ErgoVeritas — https://ergoveritas.com/privacy
Document heading: Privacy Policy
Source policy language: en; banner/page language: en; translation applied: No.
Policy reached through: Guessed Common Path; directly linked from scanned page: No; retrieved during scan: 2026-09-21T14:05:09.113Z.
Section: Not retained; update text: Last updated August 6, 2026.
Open policy sourceNo production-approved topic match was established. This neutral result does not establish that the disclosure is absent.
{
"assessmentStatus": "coverage_limitation",
"checklistItemId": "international_transfers_disclosure",
"coverageArea": "International transfer disclosure",
"evidenceState": "not_testable",
"explanation": "Whether retained privacy-policy evidence described international transfers or transfer-relevant endpoint/vendor context.",
"note": "Whether retained privacy-policy evidence described international transfers or transfer-relevant endpoint/vendor context.",
"status": "Not confirmed",
"tone": "neutral",
"pipeline": {
"projectionStage": "coverage_policy",
"concernPolicyKey": "gdpr_eprivacy_coverage.international_transfers_disclosure.not_confirmed",
"ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
"wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.international_transfers_disclosure"
},
"statusBasis": "No production-approved topic match was established. This neutral result does not establish that the disclosure is absent.",
"retainedEvidence": {
"remediation": {
"kind": "steps",
"steps": [
"Review the governing policy section for the intended international transfers and applicable safeguard information; retain the exact excerpt and source URL.",
"If relevant wording exists, record it for review and investigate extraction coverage. Unconfirmed evidence alone does not establish a missing disclosure.",
"Retest the same policy version or record the revised version; verify that the extracted passage supports this specific topic, rather than nearby or unrelated wording."
]
},
"signalObserved": "not_confirmed_canonical_projection_unavailable",
"missingEvidenceNeeded": [],
"selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
"weakerArtifactsIgnored": [],
"canonicalProjectionState": "normalized_concern_unavailable",
"policyEvidenceAssessment": {
"result": "extraction_incomplete",
"scoreEffect": "none",
"topicRelevance": "unknown",
"contractVersion": "certscore.policy-topic-evidence-assessment.v1"
},
"policyEvidenceProvenance": {
"sourceUrl": "https://ergoveritas.com/privacy",
"policyTitle": "Public-Web Evidence & Transparency Research | ErgoVeritas",
"artifactRefs": [
"policy_excerpt_80ec08a8",
"policy_surface_text_80ec08a8"
],
"bannerLanguage": "en",
"contractVersion": "certscore.policy-evidence-provenance.v1",
"discoveryMethod": "guessed_common_path",
"documentHeading": "Privacy Policy",
"lastUpdatedText": "Last updated August 6, 2026",
"detectedLanguage": "en",
"retrievalTimestamp": "2026-09-21T14:05:09.113Z",
"targetRelationship": "target_controller",
"translationApplied": false,
"documentOwnerEntity": "Public Web Evidence Transparency Research ErgoVeritas",
"ownershipConfidence": 0.98,
"directlyLinkedFromScannedPage": false
},
"selectedEvidenceStrength": "missing",
"policyTextExtractionHealth": {
"policyUrls": [
"https://ergoveritas.com/privacy"
],
"nanoInvoked": false,
"contractVersion": "certscore.policy-text-extraction-health.v2",
"policyTextQuality": {
"usable": true,
"codeSignalCount": 0,
"codeSymbolRatio": 0.0004752851711026616,
"policyTermCount": 7,
"alphabeticWordRatio": 0.8556701030927835,
"accessChallengeSignalCount": 0,
"naturalLanguageSentenceCount": 17
},
"policyUrlRetained": true,
"extractedTextLength": 2104,
"policySurfaceObserved": true,
"detectedPolicyLanguage": "en",
"minimumTextLengthRequired": 500,
"policyTextExtractionStatus": "ok",
"verifiedPolicyDocumentCount": 1,
"detectedPolicyLanguageSource": "policy_surface",
"supportedGdprTransparencyLocales": [
"en",
"de",
"fr",
"es",
"it",
"nl",
"pl",
"pt",
"ru",
"ja",
"zh",
"ar",
"sv",
"ro",
"cs",
"el",
"hu",
"da",
"fi",
"sk",
"bg",
"hr",
"nb",
"sl",
"lt",
"lv",
"et",
"uk",
"tr",
"fa",
"vi",
"id",
"ko",
"th",
"he",
"sr",
"ca",
"hi",
"az",
"gl"
],
"gdprTransparencyLanguageSupported": true,
"policyTextEvidenceProjectionStatus": "verified_complete",
"policyTextEvidenceProjectionContractVersion": "certscore.policy-text-evidence-projection.v1"
},
"selectedEvidenceArtifactId": "coverage_policy",
"article13CoverageAssessment": {
"topic": "international_transfers",
"status": "insufficient_retained_evidence",
"sourceUrls": [
"https://ergoveritas.com/privacy"
],
"reasonCodes": [
"policy_absence_coverage_preconditions_not_met",
"typed_topic_coverage_diagnostic_missing_or_limited",
"policy_document_content_coverage_incomplete"
],
"coverageStatus": "insufficient",
"policyDocumentIds": [
"policy_surface_80ec08a8"
],
"policyDocumentRoles": [
"policy_document"
],
"policyDocumentSha256": [
"3d75b37b603331ceeee86f3acaaca9784838998683345159a79b53ea2cdf2475"
],
"assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
"unresolvedMaterialPolicyChildUrls": []
},
"gdprTransparencyReportStatusContract": "observed_not_confirmed_no_match_found.v1"
},
"projectedFindings": [],
"missingOrIncompleteSourceSignals": []
}Policy source
Captured page title: Public-Web Evidence & Transparency Research | ErgoVeritas — https://ergoveritas.com/privacy
Document heading: Privacy Policy
Source policy language: en; banner/page language: en; translation applied: No.
Policy reached through: Guessed Common Path; directly linked from scanned page: No; retrieved during scan: 2026-09-21T14:05:09.113Z.
Section: Not retained; update text: Last updated August 6, 2026.
Open policy sourceNo production-approved topic match was established. This neutral result does not establish that the disclosure is absent.
{
"assessmentStatus": "coverage_limitation",
"checklistItemId": "dpo_contact_point_disclosure",
"coverageArea": "DPO contact point (where applicable)",
"evidenceState": "not_testable",
"explanation": "Whether retained privacy-policy evidence identified a designated data protection officer or equivalent statutory DPO contact. A generic privacy mailbox is credited under controller/contact disclosure and does not by itself establish a DPO designation.",
"note": "Whether retained privacy-policy evidence identified a designated data protection officer or equivalent statutory DPO contact. A generic privacy mailbox is credited under controller/contact disclosure and does not by itself establish a DPO designation.",
"status": "Not confirmed",
"tone": "neutral",
"pipeline": {
"projectionStage": "coverage_policy",
"concernPolicyKey": "gdpr_eprivacy_coverage.dpo_contact_point_disclosure.not_confirmed",
"ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
"wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.dpo_contact_point_disclosure"
},
"statusBasis": "No production-approved topic match was established. This neutral result does not establish that the disclosure is absent.",
"retainedEvidence": {
"remediation": {
"kind": "steps",
"steps": [
"Review the governing policy section for an expressly designated Data Protection Officer and contact route, where applicable; retain the exact excerpt and source URL.",
"Determine whether DPO designation is required separately. A generic privacy mailbox does not prove a designation.",
"If relevant wording exists, record it for review and investigate extraction coverage. Unconfirmed evidence alone does not establish a missing disclosure.",
"Retest the same policy version or record the revised version; verify that the extracted passage supports this specific topic, rather than nearby or unrelated wording."
]
},
"signalObserved": "not_confirmed_canonical_projection_unavailable",
"missingEvidenceNeeded": [],
"selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
"weakerArtifactsIgnored": [],
"canonicalProjectionState": "normalized_concern_unavailable",
"policyEvidenceAssessment": {
"result": "extraction_incomplete",
"scoreEffect": "none",
"topicRelevance": "unknown",
"contractVersion": "certscore.policy-topic-evidence-assessment.v1"
},
"policyEvidenceProvenance": {
"sourceUrl": "https://ergoveritas.com/privacy",
"policyTitle": "Public-Web Evidence & Transparency Research | ErgoVeritas",
"artifactRefs": [
"policy_excerpt_80ec08a8",
"policy_surface_text_80ec08a8"
],
"bannerLanguage": "en",
"contractVersion": "certscore.policy-evidence-provenance.v1",
"discoveryMethod": "guessed_common_path",
"documentHeading": "Privacy Policy",
"lastUpdatedText": "Last updated August 6, 2026",
"detectedLanguage": "en",
"retrievalTimestamp": "2026-09-21T14:05:09.113Z",
"targetRelationship": "target_controller",
"translationApplied": false,
"documentOwnerEntity": "Public Web Evidence Transparency Research ErgoVeritas",
"ownershipConfidence": 0.98,
"directlyLinkedFromScannedPage": false
},
"selectedEvidenceStrength": "missing",
"policyTextExtractionHealth": {
"policyUrls": [
"https://ergoveritas.com/privacy"
],
"nanoInvoked": false,
"contractVersion": "certscore.policy-text-extraction-health.v2",
"policyTextQuality": {
"usable": true,
"codeSignalCount": 0,
"codeSymbolRatio": 0.0004752851711026616,
"policyTermCount": 7,
"alphabeticWordRatio": 0.8556701030927835,
"accessChallengeSignalCount": 0,
"naturalLanguageSentenceCount": 17
},
"policyUrlRetained": true,
"extractedTextLength": 2104,
"policySurfaceObserved": true,
"detectedPolicyLanguage": "en",
"minimumTextLengthRequired": 500,
"policyTextExtractionStatus": "ok",
"verifiedPolicyDocumentCount": 1,
"detectedPolicyLanguageSource": "policy_surface",
"supportedGdprTransparencyLocales": [
"en",
"de",
"fr",
"es",
"it",
"nl",
"pl",
"pt",
"ru",
"ja",
"zh",
"ar",
"sv",
"ro",
"cs",
"el",
"hu",
"da",
"fi",
"sk",
"bg",
"hr",
"nb",
"sl",
"lt",
"lv",
"et",
"uk",
"tr",
"fa",
"vi",
"id",
"ko",
"th",
"he",
"sr",
"ca",
"hi",
"az",
"gl"
],
"gdprTransparencyLanguageSupported": true,
"policyTextEvidenceProjectionStatus": "verified_complete",
"policyTextEvidenceProjectionContractVersion": "certscore.policy-text-evidence-projection.v1"
},
"selectedEvidenceArtifactId": "coverage_policy",
"article13CoverageAssessment": {
"topic": "dpo_contact",
"status": "insufficient_retained_evidence",
"sourceUrls": [
"https://ergoveritas.com/privacy"
],
"reasonCodes": [
"policy_absence_coverage_preconditions_not_met",
"typed_topic_coverage_diagnostic_missing_or_limited",
"policy_document_content_coverage_incomplete"
],
"coverageStatus": "insufficient",
"policyDocumentIds": [
"policy_surface_80ec08a8"
],
"policyDocumentRoles": [
"policy_document"
],
"policyDocumentSha256": [
"3d75b37b603331ceeee86f3acaaca9784838998683345159a79b53ea2cdf2475"
],
"assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
"unresolvedMaterialPolicyChildUrls": []
},
"gdprTransparencyReportStatusContract": "observed_not_confirmed_no_match_found.v1"
},
"projectedFindings": [],
"missingOrIncompleteSourceSignals": []
}Policy source
Captured page title: Public-Web Evidence & Transparency Research | ErgoVeritas — https://ergoveritas.com/privacy
Document heading: Privacy Policy
Source policy language: en; banner/page language: en; translation applied: No.
Policy reached through: Guessed Common Path; directly linked from scanned page: No; retrieved during scan: 2026-09-21T14:05:09.113Z.
Section: Not retained; update text: Last updated August 6, 2026.
Open policy sourceNo production-approved topic match was established. This neutral result does not establish that the disclosure is absent.
{
"assessmentStatus": "coverage_limitation",
"checklistItemId": "supervisory_authority_complaint_disclosure",
"coverageArea": "Supervisory authority complaint",
"evidenceState": "not_testable",
"explanation": "Whether retained privacy-policy evidence referenced a right to complain to a supervisory authority.",
"note": "Whether retained privacy-policy evidence referenced a right to complain to a supervisory authority.",
"status": "Not confirmed",
"tone": "neutral",
"pipeline": {
"projectionStage": "coverage_policy",
"concernPolicyKey": "gdpr_eprivacy_coverage.supervisory_authority_complaint_disclosure.not_confirmed",
"ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
"wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.supervisory_authority_complaint_disclosure"
},
"statusBasis": "No production-approved topic match was established. This neutral result does not establish that the disclosure is absent.",
"retainedEvidence": {
"remediation": {
"kind": "steps",
"steps": [
"Review the governing policy section for the right to complain to a supervisory authority; retain the exact excerpt and source URL.",
"If relevant wording exists, record it for review and investigate extraction coverage. Unconfirmed evidence alone does not establish a missing disclosure.",
"Retest the same policy version or record the revised version; verify that the extracted passage supports this specific topic, rather than nearby or unrelated wording."
]
},
"signalObserved": "not_confirmed_canonical_projection_unavailable",
"missingEvidenceNeeded": [],
"selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
"weakerArtifactsIgnored": [],
"canonicalProjectionState": "normalized_concern_unavailable",
"policyEvidenceAssessment": {
"result": "extraction_incomplete",
"scoreEffect": "none",
"topicRelevance": "unknown",
"contractVersion": "certscore.policy-topic-evidence-assessment.v1"
},
"policyEvidenceProvenance": {
"sourceUrl": "https://ergoveritas.com/privacy",
"policyTitle": "Public-Web Evidence & Transparency Research | ErgoVeritas",
"artifactRefs": [
"policy_excerpt_80ec08a8",
"policy_surface_text_80ec08a8"
],
"bannerLanguage": "en",
"contractVersion": "certscore.policy-evidence-provenance.v1",
"discoveryMethod": "guessed_common_path",
"documentHeading": "Privacy Policy",
"lastUpdatedText": "Last updated August 6, 2026",
"detectedLanguage": "en",
"retrievalTimestamp": "2026-09-21T14:05:09.113Z",
"targetRelationship": "target_controller",
"translationApplied": false,
"documentOwnerEntity": "Public Web Evidence Transparency Research ErgoVeritas",
"ownershipConfidence": 0.98,
"directlyLinkedFromScannedPage": false
},
"selectedEvidenceStrength": "missing",
"policyTextExtractionHealth": {
"policyUrls": [
"https://ergoveritas.com/privacy"
],
"nanoInvoked": false,
"contractVersion": "certscore.policy-text-extraction-health.v2",
"policyTextQuality": {
"usable": true,
"codeSignalCount": 0,
"codeSymbolRatio": 0.0004752851711026616,
"policyTermCount": 7,
"alphabeticWordRatio": 0.8556701030927835,
"accessChallengeSignalCount": 0,
"naturalLanguageSentenceCount": 17
},
"policyUrlRetained": true,
"extractedTextLength": 2104,
"policySurfaceObserved": true,
"detectedPolicyLanguage": "en",
"minimumTextLengthRequired": 500,
"policyTextExtractionStatus": "ok",
"verifiedPolicyDocumentCount": 1,
"detectedPolicyLanguageSource": "policy_surface",
"supportedGdprTransparencyLocales": [
"en",
"de",
"fr",
"es",
"it",
"nl",
"pl",
"pt",
"ru",
"ja",
"zh",
"ar",
"sv",
"ro",
"cs",
"el",
"hu",
"da",
"fi",
"sk",
"bg",
"hr",
"nb",
"sl",
"lt",
"lv",
"et",
"uk",
"tr",
"fa",
"vi",
"id",
"ko",
"th",
"he",
"sr",
"ca",
"hi",
"az",
"gl"
],
"gdprTransparencyLanguageSupported": true,
"policyTextEvidenceProjectionStatus": "verified_complete",
"policyTextEvidenceProjectionContractVersion": "certscore.policy-text-evidence-projection.v1"
},
"selectedEvidenceArtifactId": "coverage_policy",
"article13CoverageAssessment": {
"topic": "supervisory_authority",
"status": "insufficient_retained_evidence",
"sourceUrls": [
"https://ergoveritas.com/privacy"
],
"reasonCodes": [
"policy_absence_coverage_preconditions_not_met",
"typed_topic_coverage_diagnostic_missing_or_limited",
"policy_document_content_coverage_incomplete"
],
"coverageStatus": "insufficient",
"policyDocumentIds": [
"policy_surface_80ec08a8"
],
"policyDocumentRoles": [
"policy_document"
],
"policyDocumentSha256": [
"3d75b37b603331ceeee86f3acaaca9784838998683345159a79b53ea2cdf2475"
],
"assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
"unresolvedMaterialPolicyChildUrls": []
},
"gdprTransparencyReportStatusContract": "observed_not_confirmed_no_match_found.v1"
},
"projectedFindings": [],
"missingOrIncompleteSourceSignals": []
}Policy source
Captured page title: Public-Web Evidence & Transparency Research | ErgoVeritas — https://ergoveritas.com/privacy
Document heading: Privacy Policy
Source policy language: en; banner/page language: en; translation applied: No.
Policy reached through: Guessed Common Path; directly linked from scanned page: No; retrieved during scan: 2026-09-21T14:05:09.113Z.
Section: Not retained; update text: Last updated August 6, 2026.
Open policy sourceNo production-approved topic match was established. This neutral result does not establish that the disclosure is absent.
{
"assessmentStatus": "coverage_limitation",
"checklistItemId": "automated_decision_making_profiling_disclosure",
"coverageArea": "Automated decision-making / profiling disclosure",
"evidenceState": "not_testable",
"explanation": "Whether adapter-approved Article 13 evidence retained automated decision-making or profiling disclosure context for review.",
"note": "Whether adapter-approved Article 13 evidence retained automated decision-making or profiling disclosure context for review.",
"status": "Not confirmed",
"tone": "neutral",
"pipeline": {
"projectionStage": "coverage_policy",
"concernPolicyKey": "gdpr_eprivacy_coverage.automated_decision_making_profiling_disclosure.not_confirmed",
"ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
"wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.automated_decision_making_profiling_disclosure"
},
"statusBasis": "No production-approved topic match was established. This neutral result does not establish that the disclosure is absent.",
"retainedEvidence": {
"remediation": {
"kind": "steps",
"steps": [
"Review the governing policy section for the applicable automated decision-making or profiling disclosures; retain the exact excerpt and source URL.",
"If relevant wording exists, record it for review and investigate extraction coverage. Unconfirmed evidence alone does not establish a missing disclosure.",
"Retest the same policy version or record the revised version; verify that the extracted passage supports this specific topic, rather than nearby or unrelated wording."
]
},
"signalObserved": "not_confirmed_canonical_projection_unavailable",
"missingEvidenceNeeded": [],
"selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
"weakerArtifactsIgnored": [],
"canonicalProjectionState": "normalized_concern_unavailable",
"policyEvidenceAssessment": {
"result": "extraction_incomplete",
"scoreEffect": "none",
"topicRelevance": "unknown",
"contractVersion": "certscore.policy-topic-evidence-assessment.v1"
},
"policyEvidenceProvenance": {
"sourceUrl": "https://ergoveritas.com/privacy",
"policyTitle": "Public-Web Evidence & Transparency Research | ErgoVeritas",
"artifactRefs": [
"policy_excerpt_80ec08a8",
"policy_surface_text_80ec08a8"
],
"bannerLanguage": "en",
"contractVersion": "certscore.policy-evidence-provenance.v1",
"discoveryMethod": "guessed_common_path",
"documentHeading": "Privacy Policy",
"lastUpdatedText": "Last updated August 6, 2026",
"detectedLanguage": "en",
"retrievalTimestamp": "2026-09-21T14:05:09.113Z",
"targetRelationship": "target_controller",
"translationApplied": false,
"documentOwnerEntity": "Public Web Evidence Transparency Research ErgoVeritas",
"ownershipConfidence": 0.98,
"directlyLinkedFromScannedPage": false
},
"selectedEvidenceStrength": "missing",
"policyTextExtractionHealth": {
"policyUrls": [
"https://ergoveritas.com/privacy"
],
"nanoInvoked": false,
"contractVersion": "certscore.policy-text-extraction-health.v2",
"policyTextQuality": {
"usable": true,
"codeSignalCount": 0,
"codeSymbolRatio": 0.0004752851711026616,
"policyTermCount": 7,
"alphabeticWordRatio": 0.8556701030927835,
"accessChallengeSignalCount": 0,
"naturalLanguageSentenceCount": 17
},
"policyUrlRetained": true,
"extractedTextLength": 2104,
"policySurfaceObserved": true,
"detectedPolicyLanguage": "en",
"minimumTextLengthRequired": 500,
"policyTextExtractionStatus": "ok",
"verifiedPolicyDocumentCount": 1,
"detectedPolicyLanguageSource": "policy_surface",
"supportedGdprTransparencyLocales": [
"en",
"de",
"fr",
"es",
"it",
"nl",
"pl",
"pt",
"ru",
"ja",
"zh",
"ar",
"sv",
"ro",
"cs",
"el",
"hu",
"da",
"fi",
"sk",
"bg",
"hr",
"nb",
"sl",
"lt",
"lv",
"et",
"uk",
"tr",
"fa",
"vi",
"id",
"ko",
"th",
"he",
"sr",
"ca",
"hi",
"az",
"gl"
],
"gdprTransparencyLanguageSupported": true,
"policyTextEvidenceProjectionStatus": "verified_complete",
"policyTextEvidenceProjectionContractVersion": "certscore.policy-text-evidence-projection.v1"
},
"selectedEvidenceArtifactId": "coverage_policy",
"article13CoverageAssessment": {
"topic": "automated_decision_making_or_profiling",
"status": "insufficient_retained_evidence",
"sourceUrls": [
"https://ergoveritas.com/privacy"
],
"reasonCodes": [
"policy_absence_coverage_preconditions_not_met",
"typed_topic_coverage_diagnostic_missing_or_limited",
"policy_document_content_coverage_incomplete"
],
"coverageStatus": "insufficient",
"policyDocumentIds": [
"policy_surface_80ec08a8"
],
"policyDocumentRoles": [
"policy_document"
],
"policyDocumentSha256": [
"3d75b37b603331ceeee86f3acaaca9784838998683345159a79b53ea2cdf2475"
],
"assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
"unresolvedMaterialPolicyChildUrls": []
},
"gdprTransparencyReportStatusContract": "observed_not_confirmed_no_match_found.v1"
},
"projectedFindings": [],
"missingOrIncompleteSourceSignals": []
}Storage & tracking techniques · Starting page
Aggregate pre-consent storage count: 0
Assessment reconciliation: reconciled
{
"assessmentStatus": "checked",
"checklistItemId": "pre_consent_cookies_storage",
"coverageArea": "Non-essential pre-consent cookies/storage",
"evidenceState": "not_observed",
"explanation": "Whether non-essential cookies or browser storage were observed before a recorded consent action.",
"note": "Whether non-essential cookies or browser storage were observed before a recorded consent action.",
"status": "Not observed",
"tone": "neutral",
"pipeline": {
"projectionStage": "coverage_policy",
"concernPolicyKey": "gdpr_eprivacy_coverage.pre_consent_cookies_storage.not_observed",
"ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
"wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.pre_consent_cookies_storage"
},
"statusBasis": "The retained pre-consent storage inventory was classified and did not contain eligible non-essential storage. Essential, consent-management, security, and functional storage remains contextual evidence only.",
"retainedEvidence": {
"remediation": {
"kind": "none",
"steps": [],
"message": "No remediation is established by this check alone. Retain its evidence and reassess after relevant changes."
},
"evidenceRefs": [
"Aggregate pre-consent storage count: 0",
"Assessment reconciliation: reconciled"
],
"cookiesSeenCount": 0,
"missingEvidenceNeeded": [],
"selectedEvidenceReason": "Selected retained concrete cookie/storage evidence for storage timing; request-only tracking evidence is not used as storage proof.",
"weakerArtifactsIgnored": [],
"selectedEvidenceStrength": "moderate",
"cookiesBeforeConsentCount": 0,
"selectedEvidenceArtifactId": "preConsentCookieOrStorageEvidence.missing",
"preConsentStorageAssessment": {
"status": "classified_zero",
"evidenceRows": [],
"provenWriteCount": 0,
"assessmentVersion": "pre-consent-storage-assessment-v1",
"unclassifiedCount": 0,
"reconciliationStatus": "reconciled",
"snapshotPresenceCount": 0,
"aggregateObservedCount": 0,
"classifiedEssentialCount": 0,
"classifiedNonEssentialCount": 0,
"attributedPreConsentRecordCount": 0,
"excludedFunctionalOrConsentCount": 0
},
"preConsentStorageAssessmentStatus": "classified_zero",
"rowLevelEssentialityEvidenceRetained": false,
"preConsentStorageClassificationLimitation": false,
"preconsentCookieOrStorageExactTimingRetained": false,
"eligibleNonEssentialCookieStorageFindingProjected": false
},
"projectedFindings": [],
"missingOrIncompleteSourceSignals": []
}No remediation is established by this check alone. Retain its evidence and reassess after relevant changes.
retained session replay / fingerprinting coverage summary
{
"assessmentStatus": "checked",
"checklistItemId": "session_replay_fingerprinting_review",
"coverageArea": "Session replay signal",
"evidenceState": "not_observed",
"explanation": "No eligible session replay, behavioral recording, or fingerprinting-like signal was observed in the tested context.",
"note": "No eligible session replay, behavioral recording, or fingerprinting-like signal was observed in the tested context.",
"status": "Not observed",
"tone": "neutral",
"pipeline": {
"projectionStage": "coverage_policy",
"concernPolicyKey": "gdpr_eprivacy_coverage.session_replay_fingerprinting_review.not_observed",
"ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
"wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.session_replay_fingerprinting_review"
},
"statusBasis": "Runtime vendor/fingerprinting checks completed for the tested context, and no eligible replay or fingerprinting finding was projected.",
"retainedEvidence": {
"remediation": {
"kind": "none",
"steps": [],
"message": "No remediation is established by this check alone. Retain its evidence and reassess after relevant changes."
},
"evidenceRefs": [
"Evidence: retained session replay / fingerprinting coverage summary"
],
"sessionReplayCount": 0,
"missingEvidenceNeeded": [],
"sessionReplayObserved": false,
"fingerprintingObserved": false,
"selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
"weakerArtifactsIgnored": [],
"runtimeCaptureCompleted": true,
"selectedEvidenceStrength": "missing",
"selectedEvidenceArtifactId": "coverage_policy",
"sessionReplayRuntimeCoverageRetained": true,
"fingerprintingRuntimeCoverageRetained": true
},
"projectedFindings": [],
"missingOrIncompleteSourceSignals": []
}No remediation is established by this check alone. Retain its evidence and reassess after relevant changes.
retained fingerprinting/browser API coverage summary
{
"assessmentStatus": "checked",
"checklistItemId": "device_identification_fingerprinting_signal_observed",
"coverageArea": "Device identification / fingerprinting signal",
"evidenceState": "not_observed",
"explanation": "Whether browser/device entropy, fingerprinting, or identifier-like device collection signals were observed in retained runtime evidence.",
"note": "Whether browser/device entropy, fingerprinting, or identifier-like device collection signals were observed in retained runtime evidence.",
"status": "Not observed",
"tone": "neutral",
"pipeline": {
"projectionStage": "coverage_policy",
"concernPolicyKey": "gdpr_eprivacy_coverage.device_identification_fingerprinting_signal_observed.not_observed",
"ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
"wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.device_identification_fingerprinting_signal_observed"
},
"statusBasis": "Runtime fingerprinting/device-identification checks completed for the tested context and did not retain an eligible signal.",
"retainedEvidence": {
"evidenceRefs": [
"Evidence: retained fingerprinting/browser API coverage summary"
],
"missingEvidenceNeeded": [],
"fingerprintingObserved": false,
"selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
"weakerArtifactsIgnored": [],
"runtimeCaptureCompleted": true,
"runtimeEvidenceRetained": true,
"selectedEvidenceStrength": "missing",
"selectedEvidenceArtifactId": "coverage_policy",
"fingerprintingRuntimeCoverageRetained": true
},
"projectedFindings": [],
"missingOrIncompleteSourceSignals": []
}Device identification / fingerprinting signal is currently rated Not observed. No site remediation is indicated from this row alone; rerun after material site, policy, or tag changes.
GPC observation and comparison · Starting page
Bounded GPC observation completed. GPC was observed on the main-document request and browser property. The CMP's sale/sharing opt-out state was unavailable. No qualifying classified requests were observed in this bounded capture. Paired activity comparison: no observable response.
Site response: No observable response. The matched passive comparison did not observe a qualifying reduction in classified tracking activity with GPC.
Bounded observation: complete. 1 retained request attempts; 0 blocked before transmission. Scope: main document and retained HTTP requests.
CMP GPC signal: unknown. Visible acknowledgment: not observed in the supported search.
| Signal | Baseline | GPC | Delta | Baseline only | Shared | GPC only |
|---|---|---|---|---|---|---|
| Cookies | 0 | 0 |
Transport security · Starting page
ref_transport_security
{
"assessmentStatus": "checked",
"checklistItemId": "transport_security_https_delivery",
"coverageArea": "HTTPS delivery for scanned pages",
"evidenceState": "observed",
"explanation": "Whether the retained scanned page was served over HTTPS.",
"note": "Whether the retained scanned page was served over HTTPS.",
"status": "Observed",
"tone": "warning",
"pipeline": {
"projectionStage": "coverage_policy",
"concernPolicyKey": "gdpr_eprivacy_coverage.transport_security_https_delivery.observed",
"ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
"wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.transport_security_https_delivery"
},
"statusBasis": "The scanned page was served over HTTPS in the retained transport observation.",
"retainedEvidence": {
"finalUrl": "https://ergoveritas.com/form-inventory-01/",
"finalScheme": "https",
"evidenceRefs": [
"ref_transport_security"
],
"httpProbeStatus": 200,
"sampledPageUrls": [
"https://ergoveritas.com/form-inventory-01/"
],
"httpProbeOutcome": "redirected_to_https",
"httpProbeFinalUrl": "https://ergoveritas.com/",
"pageHttpsObserved": true,
"tlsProbeAttempted": true,
"formTransportCount": 5,
"httpProbeAttempted": true,
"validTlsCertificate": true,
"httpProbeFinalScheme": "https",
"httpRedirectsToHttps": true,
"mixedContentObserved": false,
"missingEvidenceNeeded": [],
"httpProbeRedirectChain": [
"http://ergoveritas.com/",
"https://ergoveritas.com/"
],
"selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
"weakerArtifactsIgnored": [],
"selectedEvidenceStrength": "moderate",
"mixedContentObservedCount": 0,
"selectedEvidenceArtifactId": "coverage_policy",
"tlsCertificateObservations": [
{
"issuer": "CN=Amazon RSA 2048 M04, O=Amazon",
"subject": "CN=ergoveritas.com",
"validTo": "Feb 19 23:59:59 2027 GMT",
"inputUrl": "https://ergoveritas.com/",
"validFrom": "Aug 6 00:00:00 2026 GMT",
"validCertificate": true,
"chainCertificateCount": 4
}
],
"insecureFormTransportObserved": false
},
"projectedFindings": [],
"missingOrIncompleteSourceSignals": []
}HTTPS delivery for scanned pages is currently rated Observed. No site remediation is indicated from this row alone; rerun after material site, policy, or tag changes.
Company / Legal
Privacy rights requests can be submitted at certscore.ai/privacy-request or by emailing [email protected].
© 2026 CertScore.ai, LLC. All rights reserved.
| 0 |
| 0 |
| 0 |
| 0 |
| Web storage | 0 | 0 | 0 | 0 | 0 | 0 |
| Trackers | 0 | 0 | 0 | 0 | 0 | 0 |
| Advertising / measurement | 0 | 0 | 0 | 0 | 0 | 0 |
| Consent / CMP | 0 | 0 | 0 | 0 | 0 | 0 |
Cookie/storage and CMP identity differences are descriptive snapshots. The response uses classified activity within the matched window, not an inferred consent decision.
{
"assessment": {
"contractVersion": "certscore.gpc-response-assessment.v3",
"generatedAt": "2026-09-21T14:05:11.124Z",
"status": "no_observable_response",
"findingTitle": "No observable GPC response",
"scoreEffect": "none",
"legalInterpretation": "not_assessed",
"comparison": {
"comparable": true,
"protocol": "passive_baseline_with_sec_gpc",
"baselineArtifact": {
"lane": "runtime_evidence",
"sha256": "45fcd875987abcac36dae71a40409b62749072b1e0da655cc53a829e92bede87",
"sizeBytes": 50384,
"uri": "s3://certscore-v2-dag-local-artifacts-eu-west-1-199536052647/v2-dag-lambda/local/63b87ff5-07c5-4c7b-895a-028ea6bb43c9/lanes/runtime_evidence/CanonicalEvidenceBundle.json"
},
"gpcArtifact": {
"lane": "gpc_observation",
"sha256": "52e4a9bd48242e9ee2f0c89f4468c6d7def12874ad39f29d07e00df93eb84c9d",
"sizeBytes": 35277,
"uri": "s3://certscore-v2-dag-local-artifacts-eu-west-1-199536052647/v2-dag-lambda/local/63b87ff5-07c5-4c7b-895a-028ea6bb43c9/lanes/gpc_observation/CanonicalEvidenceBundle.json"
},
"enabledProof": {
"secGpcHeaderValue": "1",
"requestsWithSecGpc": 1,
"requestEventIds": [
"net_2"
],
"navigatorGlobalPrivacyControl": true
},
"delivery": {
"status": "verified",
"baseline": {
"contractVersion": "certscore.gpc-signal-observation.v1",
"expectedEnabled": false,
"documentUrlSha256": "4313185cc54850a63d3dead33d9ea14445359cacc015f8f4582dd5ffa315d209",
"contextConfigSha256": "2c01f9f29c0e012648bf492ecade8fa330858be6cd066f749be47e8cad0c572e",
"capturedAtMs": 2567,
"documentStartedAtMs": 2029,
"frameCount": 1,
"frames": [
{
"documentUrlSha256": "4313185cc54850a63d3dead33d9ea14445359cacc015f8f4582dd5ffa315d209",
"mainFrame": true,
"navigatorValue": false
}
],
"workerCount": 0,
"limitationKeys": []
},
"gpc": {
"contractVersion": "certscore.gpc-signal-observation.v1",
"expectedEnabled": true,
"documentUrlSha256": "4313185cc54850a63d3dead33d9ea14445359cacc015f8f4582dd5ffa315d209",
"contextConfigSha256": "2c01f9f29c0e012648bf492ecade8fa330858be6cd066f749be47e8cad0c572e",
"prototypeCaptureBinding": {
"captureId": "07a1419b-5824-4641-9184-e48a64883a1c",
"documentIdentitySource": "cdp_loader_id",
"documentToken": "E377C0FA31EB38B8F2F3E272E517570F"
},
"prototypeSessionSha256": "33984978c4d01bd0700dc95d0e6e9eb6b4b9db028df430b52b964e9233928723",
"capturedAtMs": 2350,
"documentStartedAtMs": 1840,
"frameCount": 1,
"frames": [
{
"documentUrlSha256": "4313185cc54850a63d3dead33d9ea14445359cacc015f8f4582dd5ffa315d209",
"mainFrame": true,
"navigatorValue": true
}
],
"workerCount": 0,
"limitationKeys": []
}
},
"coverage": {
"status": "complete",
"comparedThroughMs": 510
},
"responseBasis": "no_qualified_reduction",
"deltas": {
"cookies": {
"baselineCount": 0,
"gpcCount": 0,
"countDelta": 0,
"baselineOnly": [],
"gpcOnly": [],
"shared": [],
"baselineOnlyCount": 0,
"gpcOnlyCount": 0,
"sharedCount": 0,
"samplesTruncated": false
},
"webStorage": {
"baselineCount": 0,
"gpcCount": 0,
"countDelta": 0,
"baselineOnly": [],
"gpcOnly": [],
"shared": [],
"baselineOnlyCount": 0,
"gpcOnlyCount": 0,
"sharedCount": 0,
"samplesTruncated": false
},
"trackers": {
"baselineCount": 0,
"gpcCount": 0,
"countDelta": 0,
"baselineOnly": [],
"gpcOnly": [],
"shared": [],
"baselineOnlyCount": 0,
"gpcOnlyCount": 0,
"sharedCount": 0,
"samplesTruncated": false
},
"advertisingOrMeasurementActivity": {
"baselineCount": 0,
"gpcCount": 0,
"countDelta": 0,
"baselineOnly": [],
"gpcOnly": [],
"shared": [],
"baselineOnlyCount": 0,
"gpcOnlyCount": 0,
"sharedCount": 0,
"samplesTruncated": false
},
"advertisingOrMarketingActivity": {
"baselineCount": 0,
"gpcCount": 0,
"countDelta": 0,
"baselineOnly": [],
"gpcOnly": [],
"shared": [],
"baselineOnlyCount": 0,
"gpcOnlyCount": 0,
"sharedCount": 0,
"samplesTruncated": false
},
"consentOrCmpBehavior": {
"baselineCount": 0,
"gpcCount": 0,
"countDelta": 0,
"baselineOnly": [],
"gpcOnly": [],
"shared": [],
"baselineOnlyCount": 0,
"gpcOnlyCount": 0,
"sharedCount": 0,
"samplesTruncated": false
}
},
"evidenceRefs": [
"net_2",
"s3://certscore-v2-dag-local-artifacts-eu-west-1-199536052647/v2-dag-lambda/local/63b87ff5-07c5-4c7b-895a-028ea6bb43c9/lanes/gpc_observation/CanonicalEvidenceBundle.json",
"s3://certscore-v2-dag-local-artifacts-eu-west-1-199536052647/v2-dag-lambda/local/63b87ff5-07c5-4c7b-895a-028ea6bb43c9/lanes/runtime_evidence/CanonicalEvidenceBundle.json"
],
"limitationKeys": []
},
"observation": {
"contractVersion": "certscore.gpc-bounded-observation.v1",
"scope": "main_document_and_retained_http_requests",
"status": "complete",
"sourceSha256": "52e4a9bd48242e9ee2f0c89f4468c6d7def12874ad39f29d07e00df93eb84c9d",
"sessionSha256": "33984978c4d01bd0700dc95d0e6e9eb6b4b9db028df430b52b964e9233928723",
"documentUrlSha256": "4313185cc54850a63d3dead33d9ea14445359cacc015f8f4582dd5ffa315d209",
"delivery": {
"httpHeaderRetained": true,
"mainNavigatorReadbackRetained": true,
"fullContextVerified": true
},
"semanticProbe": "unavailable",
"registration": {
"basis": "current_recorded_state",
"sale": "unknown",
"sharing": "unknown",
"cmpGpcSignal": "unknown",
"causedByGpc": "not_established"
},
"acknowledgment": {
"observed": false,
"captureComplete": true
},
"requests": {
"count": 1,
"blockedBeforeTransmissionCount": 0,
"complete": true,
"fromMs": 1744,
"documentCommittedAtMs": 1923,
"throughMs": 2358,
"classifiedCount": 0,
"collectionCount": 0,
"evidenceIds": [],
"samplesTruncated": false
},
"limitationKeys": [],
"scoreEffect": "none",
"legalInterpretation": "not_assessed"
}
},
"californiaPolicy": {
"deductionPoints": 0,
"framework": "california"
},
"evidenceRefs": [
"s3://certscore-v2-dag-local-artifacts-eu-west-1-199536052647/v2-dag-lambda/local/63b87ff5-07c5-4c7b-895a-028ea6bb43c9/lanes/runtime_evidence/CanonicalEvidenceBundle.json",
"s3://certscore-v2-dag-local-artifacts-eu-west-1-199536052647/v2-dag-lambda/local/63b87ff5-07c5-4c7b-895a-028ea6bb43c9/lanes/gpc_observation/CanonicalEvidenceBundle.json",
"net_2"
]
}ref_transport_security
{
"assessmentStatus": "checked",
"checklistItemId": "transport_security_tls_certificate",
"coverageArea": "Valid SSL/TLS certificate",
"evidenceState": "observed",
"explanation": "Whether a strict TLS probe verified the HTTPS origin certificate separately from the normal scanner runtime.",
"note": "Whether a strict TLS probe verified the HTTPS origin certificate separately from the normal scanner runtime.",
"status": "Observed",
"tone": "warning",
"pipeline": {
"projectionStage": "coverage_policy",
"concernPolicyKey": "gdpr_eprivacy_coverage.transport_security_tls_certificate.observed",
"ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
"wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.transport_security_tls_certificate"
},
"statusBasis": "Retained certificate validation verified the HTTPS origin certificate. Retained certificate evidence: https://ergoveritas.com/ presented CN=ergoveritas.com certificate valid Aug 6, 2026–Feb 19, 2027.",
"retainedEvidence": {
"finalUrl": "https://ergoveritas.com/form-inventory-01/",
"finalScheme": "https",
"evidenceRefs": [
"ref_transport_security"
],
"httpProbeStatus": 200,
"sampledPageUrls": [
"https://ergoveritas.com/form-inventory-01/"
],
"httpProbeOutcome": "redirected_to_https",
"httpProbeFinalUrl": "https://ergoveritas.com/",
"pageHttpsObserved": true,
"tlsProbeAttempted": true,
"formTransportCount": 5,
"httpProbeAttempted": true,
"validTlsCertificate": true,
"httpProbeFinalScheme": "https",
"httpRedirectsToHttps": true,
"mixedContentObserved": false,
"missingEvidenceNeeded": [],
"httpProbeRedirectChain": [
"http://ergoveritas.com/",
"https://ergoveritas.com/"
],
"selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
"weakerArtifactsIgnored": [],
"selectedEvidenceStrength": "moderate",
"mixedContentObservedCount": 0,
"selectedEvidenceArtifactId": "coverage_policy",
"tlsCertificateObservations": [
{
"issuer": "CN=Amazon RSA 2048 M04, O=Amazon",
"subject": "CN=ergoveritas.com",
"validTo": "Feb 19 23:59:59 2027 GMT",
"inputUrl": "https://ergoveritas.com/",
"validFrom": "Aug 6 00:00:00 2026 GMT",
"validCertificate": true,
"chainCertificateCount": 4
}
],
"insecureFormTransportObserved": false
},
"projectedFindings": [],
"missingOrIncompleteSourceSignals": []
}Valid SSL/TLS certificate is currently rated Observed. No site remediation is indicated from this row alone; rerun after material site, policy, or tag changes.
ref_transport_security
{
"assessmentStatus": "checked",
"checklistItemId": "transport_security_http_redirect",
"coverageArea": "HTTP redirects to HTTPS",
"evidenceState": "observed",
"explanation": "Whether an explicit HTTP-origin probe redirected to HTTPS.",
"note": "Whether an explicit HTTP-origin probe redirected to HTTPS.",
"status": "Observed",
"tone": "warning",
"pipeline": {
"projectionStage": "coverage_policy",
"concernPolicyKey": "gdpr_eprivacy_coverage.transport_security_http_redirect.observed",
"ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
"wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.transport_security_http_redirect"
},
"statusBasis": "The explicit HTTP-origin probe redirected to HTTPS.",
"retainedEvidence": {
"finalUrl": "https://ergoveritas.com/form-inventory-01/",
"finalScheme": "https",
"evidenceRefs": [
"ref_transport_security"
],
"httpProbeStatus": 200,
"sampledPageUrls": [
"https://ergoveritas.com/form-inventory-01/"
],
"httpProbeOutcome": "redirected_to_https",
"httpProbeFinalUrl": "https://ergoveritas.com/",
"pageHttpsObserved": true,
"tlsProbeAttempted": true,
"formTransportCount": 5,
"httpProbeAttempted": true,
"validTlsCertificate": true,
"httpProbeFinalScheme": "https",
"httpRedirectsToHttps": true,
"mixedContentObserved": false,
"missingEvidenceNeeded": [],
"httpProbeRedirectChain": [
"http://ergoveritas.com/",
"https://ergoveritas.com/"
],
"selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
"weakerArtifactsIgnored": [],
"selectedEvidenceStrength": "moderate",
"mixedContentObservedCount": 0,
"selectedEvidenceArtifactId": "coverage_policy",
"tlsCertificateObservations": [
{
"issuer": "CN=Amazon RSA 2048 M04, O=Amazon",
"subject": "CN=ergoveritas.com",
"validTo": "Feb 19 23:59:59 2027 GMT",
"inputUrl": "https://ergoveritas.com/",
"validFrom": "Aug 6 00:00:00 2026 GMT",
"validCertificate": true,
"chainCertificateCount": 4
}
],
"insecureFormTransportObserved": false
},
"projectedFindings": [],
"missingOrIncompleteSourceSignals": []
}HTTP redirects to HTTPS is currently rated Observed. No site remediation is indicated from this row alone; rerun after material site, policy, or tag changes.
ref_transport_security
{
"assessmentStatus": "checked",
"checklistItemId": "transport_security_mixed_content",
"coverageArea": "Mixed content",
"evidenceState": "observed",
"explanation": "Whether HTTP subresources were observed or blocked on a retained HTTPS page.",
"note": "Whether HTTP subresources were observed or blocked on a retained HTTPS page.",
"status": "Observed",
"tone": "warning",
"pipeline": {
"projectionStage": "coverage_policy",
"concernPolicyKey": "gdpr_eprivacy_coverage.transport_security_mixed_content.observed",
"ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
"wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.transport_security_mixed_content"
},
"statusBasis": "No mixed-content HTTP subresources were retained for the scanned HTTPS page.",
"retainedEvidence": {
"finalUrl": "https://ergoveritas.com/form-inventory-01/",
"finalScheme": "https",
"evidenceRefs": [
"ref_transport_security"
],
"httpProbeStatus": 200,
"sampledPageUrls": [
"https://ergoveritas.com/form-inventory-01/"
],
"httpProbeOutcome": "redirected_to_https",
"httpProbeFinalUrl": "https://ergoveritas.com/",
"pageHttpsObserved": true,
"tlsProbeAttempted": true,
"formTransportCount": 5,
"httpProbeAttempted": true,
"validTlsCertificate": true,
"httpProbeFinalScheme": "https",
"httpRedirectsToHttps": true,
"mixedContentObserved": false,
"missingEvidenceNeeded": [],
"httpProbeRedirectChain": [
"http://ergoveritas.com/",
"https://ergoveritas.com/"
],
"selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
"weakerArtifactsIgnored": [],
"selectedEvidenceStrength": "moderate",
"mixedContentObservedCount": 0,
"selectedEvidenceArtifactId": "coverage_policy",
"tlsCertificateObservations": [
{
"issuer": "CN=Amazon RSA 2048 M04, O=Amazon",
"subject": "CN=ergoveritas.com",
"validTo": "Feb 19 23:59:59 2027 GMT",
"inputUrl": "https://ergoveritas.com/",
"validFrom": "Aug 6 00:00:00 2026 GMT",
"validCertificate": true,
"chainCertificateCount": 4
}
],
"insecureFormTransportObserved": false
},
"projectedFindings": [],
"missingOrIncompleteSourceSignals": []
}Mixed content is currently rated Observed. No site remediation is indicated from this row alone; rerun after material site, policy, or tag changes.
ref_transport_security
{
"assessmentStatus": "checked",
"checklistItemId": "transport_security_form_transport",
"coverageArea": "Observed form transport",
"evidenceState": "observed",
"explanation": "Whether observed forms resolved to HTTPS transport without submitting form data.",
"note": "Whether observed forms resolved to HTTPS transport without submitting form data.",
"status": "Observed",
"tone": "warning",
"pipeline": {
"projectionStage": "coverage_policy",
"concernPolicyKey": "gdpr_eprivacy_coverage.transport_security_form_transport.observed",
"ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
"wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.transport_security_form_transport"
},
"statusBasis": "No insecure observed form transport was retained for the scanned page.",
"retainedEvidence": {
"finalUrl": "https://ergoveritas.com/form-inventory-01/",
"finalScheme": "https",
"evidenceRefs": [
"ref_transport_security"
],
"httpProbeStatus": 200,
"sampledPageUrls": [
"https://ergoveritas.com/form-inventory-01/"
],
"httpProbeOutcome": "redirected_to_https",
"httpProbeFinalUrl": "https://ergoveritas.com/",
"pageHttpsObserved": true,
"tlsProbeAttempted": true,
"formTransportCount": 5,
"httpProbeAttempted": true,
"validTlsCertificate": true,
"httpProbeFinalScheme": "https",
"httpRedirectsToHttps": true,
"mixedContentObserved": false,
"missingEvidenceNeeded": [],
"httpProbeRedirectChain": [
"http://ergoveritas.com/",
"https://ergoveritas.com/"
],
"selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
"weakerArtifactsIgnored": [],
"selectedEvidenceStrength": "moderate",
"mixedContentObservedCount": 0,
"selectedEvidenceArtifactId": "coverage_policy",
"tlsCertificateObservations": [
{
"issuer": "CN=Amazon RSA 2048 M04, O=Amazon",
"subject": "CN=ergoveritas.com",
"validTo": "Feb 19 23:59:59 2027 GMT",
"inputUrl": "https://ergoveritas.com/",
"validFrom": "Aug 6 00:00:00 2026 GMT",
"validCertificate": true,
"chainCertificateCount": 4
}
],
"insecureFormTransportObserved": false
},
"projectedFindings": [],
"missingOrIncompleteSourceSignals": []
}Observed form transport is currently rated Observed. No site remediation is indicated from this row alone; rerun after material site, policy, or tag changes.