Loading report

CertScore.ai report

Loading report

The report is ready; we’re loading its retained findings and evidence.

deepmind.google tracking, cookie, consent, and accessibility scan | CertScore.ai

Scanned from EU-IR

Oct 12, 2026, 7:32:19 PM UTC(24 sec scan)

Coverage

CMS / generator: Not identified
Declared version: Not available

Coverage

Scan scope: Single page
Pages scanned: 1
Scan region: EU-IR

Timing

Observation window: 24 sec

Started: Oct 12, 2026, 7:32:19 PM UTC
Completed: Oct 12, 2026, 7:32:44 PM UTC

deepmind.google

https://deepmind.google/

Executive overview

59/ 100

Page score

2 priority issues

1 page scanned

Assessment highlights

This assessment needs work, with cookies and storage before consent the first area to review. “Classified non-essential pre-consent storage”: Cookies or browser storage were retained before consent. First retained item: __Secure-ROLLOUT_TOKEN (youtube.com): non_essential, first observed 1.950s after scan start. Essentiality was not confirmed for every item. Review the supporting evidence and recommended fixes in Detailed evidence. Could not complete: “Accept consent control”, “Options / settings / preferences control”, “Cookie notice / cookie policy availability”. Also review “Tracking and embedded content before consent”.

Pre-consent resource counts & classifications

Each resource is counted once. Services group requests, cookies/storage and frames.

Requests20

Non-essential: 3
Classification review: 17
Unknown purpose: 0
Contextual: 0
Essential: 0

Cookies & storage9

Non-essential: 5
Classification review: 2
Unknown purpose: 0
Contextual: 0
Essential: 2

Embedded frames5

Non-essential: 0
Classification review: 0
Unknown purpose: 0
Contextual: 5
Essential: 0

Services5

Google Analytics
Google Fonts
Google Static Assets
Google Tag Manager
YouTube

Forms1

generic form
1 field · post

View forms ↗

Hidden links0

Requests203 non-essential17 review

Cookies & storage95 non-essential2 review

Embedded frames50 non-essential0 review

Regulatory Risk Review

Top issues on this page

2 issues

01Classified non-essential pre-consent storageStarting pageCookies or browser storage were retained before consent. First retained item: __Secure-ROLLOUT_TOKEN (youtube.com): non_essential, first observed 1.950s after scan start. Essentiality was not confirmed for every item.Potential gapPotential gap

Affected pages

https://deepmind.google/ · Starting page

GDPR / ePrivacy: Classified non-essential pre-consent storage
5 non-essential cookie or browser-storage items were observed before consent. First observed at 1.95s after scan start. Direct write-level timing was captured for 3.

Recommended fixes

View supporting evidence ↓

Inspect the listed cookie and storage identities, their purposes, and the retained timing evidence. Distinguish a directly observed write from snapshot presence. For items confirmed to require consent, gate their creation and use on the relevant affirmative choice; check the responsible tag or integration. Retest the same page and location in a fresh session. Verify those items are absent before consent and after Reject, and appear only after the applicable Accept choice.

JSON evidence

{
  "assessmentStatus": "gap_observed",
  "checklistItemId": "pre_consent_cookies_storage",
  "coverageArea": "Classified non-essential pre-consent storage",
  "evidenceState": "observed",
  "explanation": "Storage or cookie evidence was observed before a recorded consent choice. This row is limited to concrete storage/cookie evidence and does not imply every observed runtime vendor wrote storage.",
  "note": "Storage or cookie evidence was observed before a recorded consent choice. This row is limited to concrete storage/cookie evidence and does not imply every observed runtime vendor wrote storage.",
  "status": "Gap observed",
  "tone": "warning",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.pre_consent_cookies_storage.gap_observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.pre_consent_cookies_storage"
  },
  "statusBasis": "5 classified non-essential storage records were retained before a recorded consent action.",
  "retainedEvidence": {
    "remediation": {
      "kind": "steps",
      "steps": [
        "Inspect the listed cookie and storage identities, their purposes, and the retained timing evidence. Distinguish a directly observed write from snapshot presence.",
        "For items confirmed to require consent, gate their creation and use on the relevant affirmative choice; check the responsible tag or integration.",
        "Retest the same page and location in a fresh session. Verify those items are absent before consent and after Reject, and appear only after the applicable Accept choice."
      ]
    },
    "evidenceRefs": [
      "__Secure-ROLLOUT_TOKEN (youtube.com): non_essential, first observed 1.950s after scan start",
      "__Secure-YNID (youtube.com): non_essential, first observed 1.950s after scan start",
      "VISITOR_INFO1_LIVE (youtube.com): non_essential, first observed 1.950s after scan start",
      "_ga (deepmind.google): non_essential, present in periodic pre-consent snapshot",
      "_ga_LS8HVHCNQ0 (deepmind.google): non_essential, present in periodic pre-consent snapshot",
      "__Secure-BUCKET (youtube.com): unknown, first observed 1.949s after scan start"
    ],
    "cookiesSeenCount": 9,
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected retained concrete cookie/storage evidence for storage timing; request-only tracking evidence is not used as storage proof.",
    "weakerArtifactsIgnored": [],
    "selectedEvidenceStrength": "strong",
    "cookiesBeforeConsentCount": 5,
    "selectedEvidenceArtifactId": "preConsentCookieOrStorageEvidence.missing",
    "preConsentStorageAssessment": {
      "status": "classified_nonessential_observed",
      "evidenceRows": [
        {
          "name": "__Secure-BUCKET",
          "party": "third_party",
          "domain": "youtube.com",
          "category": "unknown",
          "storageType": "cookie",
          "essentiality": "unknown",
          "timingEvidence": "before_consent_write",
          "exclusionReason": null,
          "firstObservedMs": 1949,
          "initiatorDomain": "deepmind.google",
          "initiatorVendor": null,
          "essentialitySource": "unknown"
        },
        {
          "name": "__Secure-YNID",
          "party": "third_party",
          "domain": "youtube.com",
          "category": "personalization",
          "storageType": "cookie",
          "essentiality": "non_essential",
          "timingEvidence": "before_consent_write",
          "exclusionReason": null,
          "firstObservedMs": 1950,
          "initiatorDomain": "deepmind.google",
          "initiatorVendor": null,
          "essentialitySource": "canonical_registry"
        },
        {
          "name": "YSC",
          "party": "third_party",
          "domain": "youtube.com",
          "category": "security",
          "storageType": "cookie",
          "essentiality": "essential",
          "timingEvidence": "before_consent_write",
          "exclusionReason": null,
          "firstObservedMs": 1950,
          "initiatorDomain": "deepmind.google",
          "initiatorVendor": null,
          "essentialitySource": "canonical_registry"
        },
        {
          "name": "__Secure-ROLLOUT_TOKEN",
          "party": "third_party",
          "domain": "youtube.com",
          "category": "analytics",
          "storageType": "cookie",
          "essentiality": "non_essential",
          "timingEvidence": "before_consent_write",
          "exclusionReason": null,
          "firstObservedMs": 1950,
          "initiatorDomain": "deepmind.google",
          "initiatorVendor": null,
          "essentialitySource": "canonical_registry"
        },
        {
          "name": "__Secure-YEC",
          "party": "third_party",
          "domain": "youtube.com",
          "category": "security",
          "storageType": "cookie",
          "essentiality": "essential",
          "timingEvidence": "before_consent_write",
          "exclusionReason": null,
          "firstObservedMs": 1950,
          "initiatorDomain": "deepmind.google",
          "initiatorVendor": null,
          "essentialitySource": "canonical_registry"
        },
        {
          "name": "VISITOR_INFO1_LIVE",
          "party": "third_party",
          "domain": "youtube.com",
          "category": "personalization",
          "storageType": "cookie",
          "essentiality": "non_essential",
          "timingEvidence": "before_consent_write",
          "exclusionReason": null,
          "firstObservedMs": 1950,
          "initiatorDomain": "deepmind.google",
          "initiatorVendor": null,
          "essentialitySource": "canonical_registry"
        },
        {
          "name": "VISITOR_PRIVACY_METADATA",
          "party": "third_party",
          "domain": "youtube.com",
          "category": "unknown",
          "storageType": "cookie",
          "essentiality": "unknown",
          "timingEvidence": "before_consent_write",
          "exclusionReason": null,
          "firstObservedMs": 1950,
          "initiatorDomain": "deepmind.google",
          "initiatorVendor": null,
          "essentialitySource": "unknown"
        },
        {
          "name": "_ga_LS8HVHCNQ0",
          "party": "first_party",
          "domain": "deepmind.google",
          "category": "analytics",
          "storageType": "cookie",
          "essentiality": "non_essential",
          "timingEvidence": "periodic_preconsent_snapshot",
          "exclusionReason": null,
          "firstObservedMs": 11650,
          "initiatorDomain": null,
          "initiatorVendor": null,
          "essentialitySource": "canonical_registry",
          "exactStorageIdentity": "[\"_ga_LS8HVHCNQ0\",\".deepmind.google\",\"/\",null]"
        },
        {
          "name": "_ga",
          "party": "first_party",
          "domain": "deepmind.google",
          "category": "analytics",
          "storageType": "cookie",
          "essentiality": "non_essential",
          "timingEvidence": "periodic_preconsent_snapshot",
          "exclusionReason": null,
          "firstObservedMs": 11650,
          "initiatorDomain": null,
          "initiatorVendor": null,
          "essentialitySource": "canonical_registry",
          "exactStorageIdentity": "[\"_ga\",\".deepmind.google\",\"/\",null]"
        }
      ],
      "provenWriteCount": 3,
      "assessmentVersion": "pre-consent-storage-assessment-v1",
      "unclassifiedCount": 2,
      "reconciliationStatus": "reconciled",
      "snapshotPresenceCount": 2,
      "aggregateObservedCount": 9,
      "classifiedEssentialCount": 2,
      "classifiedNonEssentialCount": 5,
      "attributedPreConsentRecordCount": 9,
      "excludedFunctionalOrConsentCount": 0
    },
    "excludedEssentialOrFunctionalRows": [
      {
        "name": "YSC",
        "party": "third_party",
        "domain": "youtube.com",
        "category": "security",
        "storageType": "cookie",
        "essentiality": "essential",
        "timingEvidence": "before_consent_write",
        "exclusionReason": null,
        "firstObservedMs": 1950,
        "initiatorDomain": "deepmind.google",
        "initiatorVendor": null,
        "essentialitySource": "canonical_registry"
      },
      {
        "name": "__Secure-YEC",
        "party": "third_party",
        "domain": "youtube.com",
        "category": "security",
        "storageType": "cookie",
        "essentiality": "essential",
        "timingEvidence": "before_consent_write",
        "exclusionReason": null,
        "firstObservedMs": 1950,
        "initiatorDomain": "deepmind.google",
        "initiatorVendor": null,
        "essentialitySource": "canonical_registry"
      }
    ],
    "preConsentStorageAssessmentStatus": "classified_nonessential_observed",
    "eligiblePreconsentCookieStorageRows": [
      {
        "name": "__Secure-YNID",
        "party": "third_party",
        "domain": "youtube.com",
        "category": "personalization",
        "storageType": "cookie",
        "essentiality": "non_essential",
        "timingEvidence": "before_consent_write",
        "exclusionReason": null,
        "firstObservedMs": 1950,
        "initiatorDomain": "deepmind.google",
        "initiatorVendor": null,
        "essentialitySource": "canonical_registry"
      },
      {
        "name": "__Secure-ROLLOUT_TOKEN",
        "party": "third_party",
        "domain": "youtube.com",
        "category": "analytics",
        "storageType": "cookie",
        "essentiality": "non_essential",
        "timingEvidence": "before_consent_write",
        "exclusionReason": null,
        "firstObservedMs": 1950,
        "initiatorDomain": "deepmind.google",
        "initiatorVendor": null,
        "essentialitySource": "canonical_registry"
      },
      {
        "name": "VISITOR_INFO1_LIVE",
        "party": "third_party",
        "domain": "youtube.com",
        "category": "personalization",
        "storageType": "cookie",
        "essentiality": "non_essential",
        "timingEvidence": "before_consent_write",
        "exclusionReason": null,
        "firstObservedMs": 1950,
        "initiatorDomain": "deepmind.google",
        "initiatorVendor": null,
        "essentialitySource": "canonical_registry"
      },
      {
        "name": "_ga_LS8HVHCNQ0",
        "party": "first_party",
        "domain": "deepmind.google",
        "category": "analytics",
        "storageType": "cookie",
        "essentiality": "non_essential",
        "timingEvidence": "periodic_preconsent_snapshot",
        "exclusionReason": null,
        "firstObservedMs": 11650,
        "initiatorDomain": null,
        "initiatorVendor": null,
        "essentialitySource": "canonical_registry",
        "exactStorageIdentity": "[\"_ga_LS8HVHCNQ0\",\".deepmind.google\",\"/\",null]"
      },
      {
        "name": "_ga",
        "party": "first_party",
        "domain": "deepmind.google",
        "category": "analytics",
        "storageType": "cookie",
        "essentiality": "non_essential",
        "timingEvidence": "periodic_preconsent_snapshot",
        "exclusionReason": null,
        "firstObservedMs": 11650,
        "initiatorDomain": null,
        "initiatorVendor": null,
        "essentialitySource": "canonical_registry",
        "exactStorageIdentity": "[\"_ga\",\".deepmind.google\",\"/\",null]"
      }
    ],
    "rowLevelEssentialityEvidenceRetained": true,
    "firstPreconsentCookieOrStorageObservedMs": 1950,
    "preConsentStorageClassificationLimitation": true,
    "preconsentCookieOrStorageExactTimingRetained": true,
    "eligibleNonEssentialCookieStorageFindingProjected": true
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": [],
  "groupedEvidence": [],
  "evidenceDetails": {
    "policyEvidenceDetails": {
      "assessmentStatus": "gap_observed",
      "evidenceRefs": [
        "__Secure-ROLLOUT_TOKEN (youtube.com): non_essential, first observed 1.950s after scan start",
        "__Secure-YNID (youtube.com): non_essential, first observed 1.950s after scan start",
        "VISITOR_INFO1_LIVE (youtube.com): non_essential, first observed 1.950s after scan start",
        "_ga (deepmind.google): non_essential, present in periodic pre-consent snapshot",
        "_ga_LS8HVHCNQ0 (deepmind.google): non_essential, present in periodic pre-consent snapshot",
        "__Secure-BUCKET (youtube.com): unknown, first observed 1.949s after scan start"
      ],
      "explanation": "Storage or cookie evidence was observed before a recorded consent choice. This row is limited to concrete storage/cookie evidence and does not imply every observed runtime vendor wrote storage.",
      "regulatoryAreaId": "gdpr_eprivacy",
      "regulatoryAreaTitle": "GDPR / ePrivacy",
      "regulatoryMapping": [],
      "missingOrIncompleteSourceSignals": [],
      "pipeline": {
        "projectionStage": "coverage_policy",
        "concernPolicyKey": "gdpr_eprivacy_coverage.pre_consent_cookies_storage.gap_observed",
        "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
        "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.pre_consent_cookies_storage"
      },
      "projectedFindings": [],
      "retainedEvidence": {
        "remediation": {
          "kind": "steps",
          "steps": [
            "Inspect the listed cookie and storage identities, their purposes, and the retained timing evidence. Distinguish a directly observed write from snapshot presence.",
            "For items confirmed to require consent, gate their creation and use on the relevant affirmative choice; check the responsible tag or integration.",
            "Retest the same page and location in a fresh session. Verify those items are absent before consent and after Reject, and appear only after the applicable Accept choice."
          ]
        },
        "evidenceRefs": [
          "__Secure-ROLLOUT_TOKEN (youtube.com): non_essential, first observed 1.950s after scan start",
          "__Secure-YNID (youtube.com): non_essential, first observed 1.950s after scan start",
          "VISITOR_INFO1_LIVE (youtube.com): non_essential, first observed 1.950s after scan start",
          "_ga (deepmind.google): non_essential, present in periodic pre-consent snapshot",
          "_ga_LS8HVHCNQ0 (deepmind.google): non_essential, present in periodic pre-consent snapshot",
          "__Secure-BUCKET (youtube.com): unknown, first observed 1.949s after scan start"
        ],
        "cookiesSeenCount": 9,
        "missingEvidenceNeeded": [],
        "selectedEvidenceReason": "Selected retained concrete cookie/storage evidence for storage timing; request-only tracking evidence is not used as storage proof.",
        "weakerArtifactsIgnored": [],
        "selectedEvidenceStrength": "strong",
        "cookiesBeforeConsentCount": 5,
        "selectedEvidenceArtifactId": "preConsentCookieOrStorageEvidence.missing",
        "preConsentStorageAssessment": {
          "status": "classified_nonessential_observed",
          "evidenceRows": [
            {
              "name": "__Secure-BUCKET",
              "party": "third_party",
              "domain": "youtube.com",
              "category": "unknown",
              "storageType": "cookie",
              "essentiality": "unknown",
              "timingEvidence": "before_consent_write",
              "exclusionReason": null,
              "firstObservedMs": 1949,
              "initiatorDomain": "deepmind.google",
              "initiatorVendor": null,
              "essentialitySource": "unknown"
            },
            {
              "name": "__Secure-YNID",
              "party": "third_party",
              "domain": "youtube.com",
              "category": "personalization",
              "storageType": "cookie",
              "essentiality": "non_essential",
              "timingEvidence": "before_consent_write",
              "exclusionReason": null,
              "firstObservedMs": 1950,
              "initiatorDomain": "deepmind.google",
              "initiatorVendor": null,
              "essentialitySource": "canonical_registry"
            },
            {
              "name": "YSC",
              "party": "third_party",
              "domain": "youtube.com",
              "category": "security",
              "storageType": "cookie",
              "essentiality": "essential",
              "timingEvidence": "before_consent_write",
              "exclusionReason": null,
              "firstObservedMs": 1950,
              "initiatorDomain": "deepmind.google",
              "initiatorVendor": null,
              "essentialitySource": "canonical_registry"
            },
            {
              "name": "__Secure-ROLLOUT_TOKEN",
              "party": "third_party",
              "domain": "youtube.com",
              "category": "analytics",
              "storageType": "cookie",
              "essentiality": "non_essential",
              "timingEvidence": "before_consent_write",
              "exclusionReason": null,
              "firstObservedMs": 1950,
              "initiatorDomain": "deepmind.google",
              "initiatorVendor": null,
              "essentialitySource": "canonical_registry"
            },
            {
              "name": "__Secure-YEC",
              "party": "third_party",
              "domain": "youtube.com",
              "category": "security",
              "storageType": "cookie",
              "essentiality": "essential",
              "timingEvidence": "before_consent_write",
              "exclusionReason": null,
              "firstObservedMs": 1950,
              "initiatorDomain": "deepmind.google",
              "initiatorVendor": null,
              "essentialitySource": "canonical_registry"
            },
            {
              "name": "VISITOR_INFO1_LIVE",
              "party": "third_party",
              "domain": "youtube.com",
              "category": "personalization",
              "storageType": "cookie",
              "essentiality": "non_essential",
              "timingEvidence": "before_consent_write",
              "exclusionReason": null,
              "firstObservedMs": 1950,
              "initiatorDomain": "deepmind.google",
              "initiatorVendor": null,
              "essentialitySource": "canonical_registry"
            },
            {
              "name": "VISITOR_PRIVACY_METADATA",
              "party": "third_party",
              "domain": "youtube.com",
              "category": "unknown",
              "storageType": "cookie",
              "essentiality": "unknown",
              "timingEvidence": "before_consent_write",
              "exclusionReason": null,
              "firstObservedMs": 1950,
              "initiatorDomain": "deepmind.google",
              "initiatorVendor": null,
              "essentialitySource": "unknown"
            },
            {
              "name": "_ga_LS8HVHCNQ0",
              "party": "first_party",
              "domain": "deepmind.google",
              "category": "analytics",
              "storageType": "cookie",
              "essentiality": "non_essential",
              "timingEvidence": "periodic_preconsent_snapshot",
              "exclusionReason": null,
              "firstObservedMs": 11650,
              "initiatorDomain": null,
              "initiatorVendor": null,
              "essentialitySource": "canonical_registry",
              "exactStorageIdentity": "[\"_ga_LS8HVHCNQ0\",\".deepmind.google\",\"/\",null]"
            },
            {
              "name": "_ga",
              "party": "first_party",
              "domain": "deepmind.google",
              "category": "analytics",
              "storageType": "cookie",
              "essentiality": "non_essential",
              "timingEvidence": "periodic_preconsent_snapshot",
              "exclusionReason": null,
              "firstObservedMs": 11650,
              "initiatorDomain": null,
              "initiatorVendor": null,
              "essentialitySource": "canonical_registry",
              "exactStorageIdentity": "[\"_ga\",\".deepmind.google\",\"/\",null]"
            }
          ],
          "provenWriteCount": 3,
          "assessmentVersion": "pre-consent-storage-assessment-v1",
          "unclassifiedCount": 2,
          "reconciliationStatus": "reconciled",
          "snapshotPresenceCount": 2,
          "aggregateObservedCount": 9,
          "classifiedEssentialCount": 2,
          "classifiedNonEssentialCount": 5,
          "attributedPreConsentRecordCount": 9,
          "excludedFunctionalOrConsentCount": 0
        },
        "excludedEssentialOrFunctionalRows": [
          {
            "name": "YSC",
            "party": "third_party",
            "domain": "youtube.com",
            "category": "security",
            "storageType": "cookie",
            "essentiality": "essential",
            "timingEvidence": "before_consent_write",
            "exclusionReason": null,
            "firstObservedMs": 1950,
            "initiatorDomain": "deepmind.google",
            "initiatorVendor": null,
            "essentialitySource": "canonical_registry"
          },
          {
            "name": "__Secure-YEC",
            "party": "third_party",
            "domain": "youtube.com",
            "category": "security",
            "storageType": "cookie",
            "essentiality": "essential",
            "timingEvidence": "before_consent_write",
            "exclusionReason": null,
            "firstObservedMs": 1950,
            "initiatorDomain": "deepmind.google",
            "initiatorVendor": null,
            "essentialitySource": "canonical_registry"
          }
        ],
        "preConsentStorageAssessmentStatus": "classified_nonessential_observed",
        "eligiblePreconsentCookieStorageRows": [
          {
            "name": "__Secure-YNID",
            "party": "third_party",
            "domain": "youtube.com",
            "category": "personalization",
            "storageType": "cookie",
            "essentiality": "non_essential",
            "timingEvidence": "before_consent_write",
            "exclusionReason": null,
            "firstObservedMs": 1950,
            "initiatorDomain": "deepmind.google",
            "initiatorVendor": null,
            "essentialitySource": "canonical_registry"
          },
          {
            "name": "__Secure-ROLLOUT_TOKEN",
            "party": "third_party",
            "domain": "youtube.com",
            "category": "analytics",
            "storageType": "cookie",
            "essentiality": "non_essential",
            "timingEvidence": "before_consent_write",
            "exclusionReason": null,
            "firstObservedMs": 1950,
            "initiatorDomain": "deepmind.google",
            "initiatorVendor": null,
            "essentialitySource": "canonical_registry"
          },
          {
            "name": "VISITOR_INFO1_LIVE",
            "party": "third_party",
            "domain": "youtube.com",
            "category": "personalization",
            "storageType": "cookie",
            "essentiality": "non_essential",
            "timingEvidence": "before_consent_write",
            "exclusionReason": null,
            "firstObservedMs": 1950,
            "initiatorDomain": "deepmind.google",
            "initiatorVendor": null,
            "essentialitySource": "canonical_registry"
          },
          {
            "name": "_ga_LS8HVHCNQ0",
            "party": "first_party",
            "domain": "deepmind.google",
            "category": "analytics",
            "storageType": "cookie",
            "essentiality": "non_essential",
            "timingEvidence": "periodic_preconsent_snapshot",
            "exclusionReason": null,
            "firstObservedMs": 11650,
            "initiatorDomain": null,
            "initiatorVendor": null,
            "essentialitySource": "canonical_registry",
            "exactStorageIdentity": "[\"_ga_LS8HVHCNQ0\",\".deepmind.google\",\"/\",null]"
          },
          {
            "name": "_ga",
            "party": "first_party",
            "domain": "deepmind.google",
            "category": "analytics",
            "storageType": "cookie",
            "essentiality": "non_essential",
            "timingEvidence": "periodic_preconsent_snapshot",
            "exclusionReason": null,
            "firstObservedMs": 11650,
            "initiatorDomain": null,
            "initiatorVendor": null,
            "essentialitySource": "canonical_registry",
            "exactStorageIdentity": "[\"_ga\",\".deepmind.google\",\"/\",null]"
          }
        ],
        "rowLevelEssentialityEvidenceRetained": true,
        "firstPreconsentCookieOrStorageObservedMs": 1950,
        "preConsentStorageClassificationLimitation": true,
        "preconsentCookieOrStorageExactTimingRetained": true,
        "eligibleNonEssentialCookieStorageFindingProjected": true
      },
      "rowId": "pre_consent_cookies_storage",
      "rowLabel": "Classified non-essential pre-consent storage",
      "rowNote": "5 non-essential cookie or browser-storage items were observed before consent. First observed at 1.95s after scan start. Direct write-level timing was captured for 3.",
      "statusBasis": "5 non-essential cookie or browser-storage items were observed before consent. First observed at 1.95s after scan start. Direct write-level timing was captured for 3.",
      "regulatoryConcernKind": "potential_gap",
      "status": "Gap observed"
    }
  },
  "evidenceRefs": [
    "__Secure-ROLLOUT_TOKEN (youtube.com): non_essential, first observed 1.950s after scan start",
    "__Secure-YNID (youtube.com): non_essential, first observed 1.950s after scan start",
    "VISITOR_INFO1_LIVE (youtube.com): non_essential, first observed 1.950s after scan start",
    "_ga (deepmind.google): non_essential, present in periodic pre-consent snapshot",
    "_ga_LS8HVHCNQ0 (deepmind.google): non_essential, present in periodic pre-consent snapshot",
    "__Secure-BUCKET (youtube.com): unknown, first observed 1.949s after scan start"
  ],
  "findingId": "regulatory_gap__gdpr_eprivacy__pre_consent_cookies_storage"
}

02Tracking and embedded content before consentStarting pageTracking requests and embedded content were observed before consent. Review each observation’s evidence, affected pages and consent requirements.Potential gapPotential gap

Affected pages

https://deepmind.google/ · Starting page

GDPR / ePrivacy: Pre-consent non-essential tracking
Tracking-classified requests were observed before consent: Google Analytics. The first retained qualifying request was Google Analytics at 5.27s after scan start.
Supporting signal: 3rd party iframes before consent
Supporting signal: Social/media embeds or plugins loaded before consent
Supporting signal: Embedded third-party services before consent
Tracking-classified requests were observed before consent: Google Analytics. The first retained qualifying request was Google Analytics at 5.27s after scan start.
Potential issue based on scan evidence; Known 3rd party iframe embeds were retained before a recorded consent action on the scanned page. This establishes pre-consent embedded-service activity, not tracking classification by itself.
A social/media embed, plugin, widget, or pixel loaded before any recorded consent action: YouTube; first seen 1.61s after scan start.
3rd party embedded content loaded before any recorded consent action, including media embed evidence (youtube.com and www.youtube.com). Review retained domains by purpose; first seen 1.61s after scan start.

Recommended fixes

View supporting evidence ↓

Review the retained vendor and request timing evidence, confirm purpose and necessity, and gate confirmed non-essential requests until the relevant consent state is available.

JSON evidence

{
  "assessmentStatus": "gap_observed",
  "checklistItemId": "pre_consent_third_party_tracking",
  "coverageArea": "Pre-consent non-essential tracking",
  "evidenceState": "observed",
  "explanation": "Analytics or performance-measurement requests fired before a recorded consent choice, including Google Analytics. Review whether the retained evidence reflects non-essential measurement rather than strictly necessary site operation.",
  "note": "Analytics or performance-measurement requests fired before a recorded consent choice, including Google Analytics. Review whether the retained evidence reflects non-essential measurement rather than strictly necessary site operation.",
  "status": "Gap observed",
  "tone": "warning",
  "pipeline": {
    "projectionStage": "unified_finding",
    "concernPolicyKey": "gdpr_eprivacy_coverage.pre_consent_third_party_tracking.gap_observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.pre_consent_third_party_tracking"
  },
  "statusBasis": "Classified non-essential tracking request timing evidence was retained before a recorded consent action.",
  "retainedEvidence": {
    "status": "Gap observed",
    "evidenceRefs": [
      "First pre-consent classified tracking request observation: 5.27s after scan start",
      "Third-party tracking observed before recorded consent",
      "Signal: Pre-consent tracking detected",
      "Review issue: Pre-consent tracking incidents detected",
      "Evidence flag: explicit_policy_snippet_retained",
      "Evidence flag: contradiction_runtime_artifact_retained"
    ],
    "findingEntities": [
      {
        "id": "preconsent_tracking",
        "entities": {
          "observedTrackingVendors": [
            "Google Analytics"
          ],
          "preconsent_cookie_names": [
            "__Secure-BUCKET",
            "__Secure-YNID",
            "YSC",
            "__Secure-ROLLOUT_TOKEN",
            "__Secure-YEC"
          ],
          "preconsent_cookie_categories": [
            "unknown",
            "personalization",
            "security",
            "analytics"
          ],
          "preconsent_cookie_set_methods": [
            "set_cookie_header",
            "browser_snapshot"
          ],
          "preconsent_cookie_initiator_domains": [
            "deepmind.google"
          ]
        },
        "sourceRefs": [
          "Signal: Pre-consent tracking detected",
          "Review issue: Pre-consent tracking incidents detected"
        ],
        "evidenceFlags": [
          "privacy.preconsent_tracking_detected",
          "privacy.tracking_before_consent_detected"
        ]
      }
    ],
    "evidenceHighlights": [
      "First pre-consent classified tracking request observation: 5.27s after scan start"
    ],
    "missingEvidenceNeeded": [],
    "trackingRequestTiming": {
      "version": "classified-request-timing.v1",
      "requests": [
        {
          "requestUrl": "https://region1.google-analytics.com/g/collect?redacted=1",
          "vendorName": "Google Analytics",
          "firstSeenMs": 5272,
          "evidenceRefs": [
            "net_370"
          ],
          "runtimePhase": "pre_consent",
          "vendorCategory": "analytics"
        }
      ]
    },
    "selectedEvidenceReason": "Selected retained pre-consent request/vendor timing evidence; storage evidence is evaluated separately.",
    "weakerArtifactsIgnored": [],
    "preconsentTimingEvidence": {
      "thirdPartyTracking": {
        "trackingRequestTiming": {
          "version": "classified-request-timing.v1",
          "requests": [
            {
              "requestUrl": "https://region1.google-analytics.com/g/collect?redacted=1",
              "vendorName": "Google Analytics",
              "firstSeenMs": 5272,
              "evidenceRefs": [
                "net_370"
              ],
              "runtimePhase": "pre_consent",
              "vendorCategory": "analytics"
            }
          ]
        },
        "preconsentThirdPartyTrackingObservedMs": [
          5272
        ],
        "firstPreconsentThirdPartyTrackingObservedMs": 5272,
        "firstPreconsentThirdPartyTrackingObservationBasis": "classified_request_timing.v1",
        "preconsentThirdPartyTrackingTimedObservationCount": 1
      }
    },
    "selectedEvidenceStrength": "strong",
    "selectedEvidenceArtifactId": "preConsentTrackingRequestEvidence",
    "preconsentThirdPartyTrackingObservedMs": [
      5272
    ],
    "firstPreconsentThirdPartyTrackingObservedMs": 5272,
    "firstPreconsentThirdPartyTrackingObservationBasis": "classified_request_timing.v1",
    "preconsentThirdPartyTrackingTimedObservationCount": 1
  },
  "projectedFindings": [
    {
      "id": "preconsent_tracking",
      "label": "Third-party tracking observed before recorded consent",
      "severity": "high"
    }
  ],
  "missingOrIncompleteSourceSignals": [],
  "groupedEvidence": [
    {
      "id": "third_party_iframe_pre_consent",
      "label": "3rd party iframes before consent",
      "evidence": {
        "assessmentStatus": "gap_observed",
        "checklistItemId": "third_party_iframe_pre_consent",
        "coverageArea": "3rd party iframes before consent",
        "evidenceState": "observed",
        "explanation": "Whether retained scanner evidence showed known 3rd party iframe embeds before a recorded consent action.",
        "note": "Whether retained scanner evidence showed known 3rd party iframe embeds before a recorded consent action.",
        "status": "Gap observed",
        "tone": "warning",
        "pipeline": {
          "projectionStage": "coverage_policy",
          "concernPolicyKey": "gdpr_eprivacy_coverage.third_party_iframe_pre_consent.gap_observed",
          "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
          "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.third_party_iframe_pre_consent"
        },
        "statusBasis": "Known 3rd party iframe embeds were retained before a recorded consent action on the scanned page. This establishes pre-consent embedded-service activity, not tracking classification by itself.",
        "retainedEvidence": {
          "evidenceRefs": [
            "3rd party iframe observations: 10",
            "Iframe host: youtube.com",
            "Iframe host: www.youtube.com",
            "Evidence: retained pre-consent iframe inventory"
          ],
          "embeddedContentHosts": [
            "youtube.com",
            "www.youtube.com"
          ],
          "embeddedFrameSources": [
            "https://www.youtube.com/embed/1DtMiRKg-cs",
            "https://www.youtube.com/embed/V04bm-3d6EQ",
            "https://www.youtube.com/embed/qoinGjj60Fo",
            "https://www.youtube.com/embed/PqVbypvxDto",
            "https://www.youtube.com/embed/l3u_FAv33G0"
          ],
          "missingEvidenceNeeded": [],
          "preConsentIframeCount": 5,
          "iframeObservationCount": 10,
          "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
          "weakerArtifactsIgnored": [],
          "selectedEvidenceStrength": "moderate",
          "embeddedContentObservedMs": [
            1614,
            4848,
            4969,
            4974,
            5009,
            5013
          ],
          "selectedEvidenceArtifactId": "coverage_policy",
          "embeddedContentPurposeBuckets": {
            "mapEmbed": [],
            "mediaEmbed": [
              "youtube.com",
              "www.youtube.com"
            ],
            "videoAdSdk": [],
            "socialEmbed": [],
            "formOrChatWidget": [],
            "fontStaticResource": [],
            "otherEmbeddedContent": []
          },
          "firstEmbeddedContentObservedMs": 1614
        },
        "projectedFindings": [],
        "missingOrIncompleteSourceSignals": []
      }
    },
    {
      "id": "social_media_embed_pre_consent",
      "label": "Social/media embeds or plugins loaded before consent",
      "evidence": {
        "assessmentStatus": "gap_observed",
        "checklistItemId": "social_media_embed_pre_consent",
        "coverageArea": "Social/media embeds or plugins loaded before consent",
        "evidenceState": "observed",
        "explanation": "Whether retained network/runtime evidence showed a social, video, media embed, social pixel, or plugin provider loading before a recorded consent action.",
        "note": "Whether retained network/runtime evidence showed a social, video, media embed, social pixel, or plugin provider loading before a recorded consent action.",
        "status": "Gap observed",
        "tone": "warning",
        "pipeline": {
          "projectionStage": "coverage_policy",
          "concernPolicyKey": "gdpr_eprivacy_coverage.social_media_embed_pre_consent.gap_observed",
          "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
          "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.social_media_embed_pre_consent"
        },
        "statusBasis": "A social/media embed, plugin, widget, or pixel provider loaded before any recorded consent choice in retained network/runtime evidence. Providers/domains observed: YouTube; first seen 1.61s after scan start.",
        "retainedEvidence": {
          "providers": [
            "YouTube"
          ],
          "evidenceRefs": [
            "Social/media provider observations: 5",
            "Provider: YouTube",
            "Domain: youtube.com",
            "Evidence: retained pre-consent social/media network or iframe observation"
          ],
          "providerCategories": [
            "mediaEmbed"
          ],
          "placeholderDetected": false,
          "missingEvidenceNeeded": [],
          "placeholderIneffective": false,
          "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
          "weakerArtifactsIgnored": [],
          "socialMediaEmbedDomains": [
            "youtube.com"
          ],
          "selectedEvidenceStrength": "moderate",
          "selectedEvidenceArtifactId": "coverage_policy",
          "socialMediaEmbedObservedMs": [
            1614,
            4848,
            4969,
            4974,
            5009,
            5013
          ],
          "socialMediaEmbedObservations": [
            {
              "domain": "youtube.com",
              "source": "preconsent_request_classification",
              "provider": "YouTube",
              "requestUrl": "https://www.youtube.com/embed/1DtMiRKg-cs?enablejsapi=1&rel=0&origin=https%3A%2F%2Fdeepmind.google&playsinline=1",
              "firstSeenMs": 4848,
              "referrerSent": true,
              "initiatorType": "document",
              "storageTouched": false,
              "staticAssetOnly": false,
              "strongInitiator": true,
              "providerCategory": "mediaEmbed",
              "placeholderDetected": false,
              "userActionBeforeLoad": false,
              "placeholderIneffective": false,
              "setCookieMetadataCount": 0,
              "pageUrlSharedViaReferrer": true
            },
            {
              "domain": "youtube.com",
              "source": "preconsent_request_classification",
              "provider": "YouTube",
              "requestUrl": "https://www.youtube.com/embed/V04bm-3d6EQ?enablejsapi=1&rel=0&origin=https%3A%2F%2Fdeepmind.google&playsinline=1",
              "firstSeenMs": 4969,
              "referrerSent": true,
              "initiatorType": "document",
              "storageTouched": false,
              "staticAssetOnly": false,
              "strongInitiator": true,
              "providerCategory": "mediaEmbed",
              "placeholderDetected": false,
              "userActionBeforeLoad": false,
              "placeholderIneffective": false,
              "setCookieMetadataCount": 0,
              "pageUrlSharedViaReferrer": true
            },
            {
              "domain": "youtube.com",
              "source": "preconsent_request_classification",
              "provider": "YouTube",
              "requestUrl": "https://www.youtube.com/embed/qoinGjj60Fo?enablejsapi=1&rel=0&origin=https%3A%2F%2Fdeepmind.google&playsinline=1",
              "firstSeenMs": 4974,
              "referrerSent": true,
              "initiatorType": "document",
              "storageTouched": false,
              "staticAssetOnly": false,
              "strongInitiator": true,
              "providerCategory": "mediaEmbed",
              "placeholderDetected": false,
              "userActionBeforeLoad": false,
              "placeholderIneffective": false,
              "setCookieMetadataCount": 0,
              "pageUrlSharedViaReferrer": true
            },
            {
              "domain": "youtube.com",
              "source": "preconsent_request_classification",
              "provider": "YouTube",
              "requestUrl": "https://www.youtube.com/embed/PqVbypvxDto?enablejsapi=1&rel=0&origin=https%3A%2F%2Fdeepmind.google&playsinline=1",
              "firstSeenMs": 5009,
              "referrerSent": true,
              "initiatorType": "document",
              "storageTouched": false,
              "staticAssetOnly": false,
              "strongInitiator": true,
              "providerCategory": "mediaEmbed",
              "placeholderDetected": false,
              "userActionBeforeLoad": false,
              "placeholderIneffective": false,
              "setCookieMetadataCount": 0,
              "pageUrlSharedViaReferrer": true
            },
            {
              "domain": "youtube.com",
              "source": "preconsent_request_classification",
              "provider": "YouTube",
              "requestUrl": "https://www.youtube.com/embed/l3u_FAv33G0?enablejsapi=1&rel=0&origin=https%3A%2F%2Fdeepmind.google&playsinline=1",
              "firstSeenMs": 5013,
              "referrerSent": true,
              "initiatorType": "document",
              "storageTouched": false,
              "staticAssetOnly": false,
              "strongInitiator": true,
              "providerCategory": "mediaEmbed",
              "placeholderDetected": false,
              "userActionBeforeLoad": false,
              "placeholderIneffective": false,
              "setCookieMetadataCount": 0,
              "pageUrlSharedViaReferrer": true
            },
            {
              "domain": "youtube.com",
              "source": "preconsent_request_classification",
              "provider": "YouTube",
              "requestUrl": "https://www.youtube.com/embed/1DtMiRKg-cs?enablejsapi=1&rel=0&origin=https%3A%2F%2Fdeepmind.google",
              "firstSeenMs": 1614,
              "referrerSent": true,
              "initiatorType": "document",
              "storageTouched": false,
              "staticAssetOnly": false,
              "strongInitiator": false,
              "providerCategory": "mediaEmbed",
              "placeholderDetected": false,
              "userActionBeforeLoad": false,
              "placeholderIneffective": false,
              "setCookieMetadataCount": 0,
              "pageUrlSharedViaReferrer": true
            },
            {
              "domain": "youtube.com",
              "source": "preconsent_request_classification",
              "provider": "YouTube",
              "requestUrl": "https://www.youtube.com/embed/1DtMiRKg-cs?enablejsapi=[redacted]&rel=[redacted]&origin=[redacted]",
              "firstSeenMs": 1614,
              "referrerSent": true,
              "initiatorType": "document",
              "storageTouched": false,
              "staticAssetOnly": false,
              "strongInitiator": false,
              "providerCategory": "mediaEmbed",
              "placeholderDetected": false,
              "userActionBeforeLoad": false,
              "placeholderIneffective": false,
              "setCookieMetadataCount": 0,
              "pageUrlSharedViaReferrer": true
            },
            {
              "domain": "youtube.com",
              "source": "preconsent_request_classification",
              "provider": "YouTube",
              "requestUrl": "https://www.youtube.com/embed/1DtMiRKg-cs?enablejsapi=[redacted]&rel=[redacted]&origin=[redacted]&playsinline=[redacted]",
              "firstSeenMs": 4848,
              "referrerSent": true,
              "initiatorType": "document",
              "storageTouched": false,
              "staticAssetOnly": false,
              "strongInitiator": false,
              "providerCategory": "mediaEmbed",
              "placeholderDetected": false,
              "userActionBeforeLoad": false,
              "placeholderIneffective": false,
              "setCookieMetadataCount": 0,
              "pageUrlSharedViaReferrer": true
            }
          ],
          "firstSocialMediaEmbedObservedMs": 1614
        },
        "projectedFindings": [],
        "missingOrIncompleteSourceSignals": []
      }
    },
    {
      "id": "embedded_content_pre_consent",
      "label": "Embedded third-party services before consent",
      "evidence": {
        "assessmentStatus": "review_signal",
        "checklistItemId": "embedded_content_pre_consent",
        "coverageArea": "Embedded third-party services before consent",
        "evidenceState": "observed",
        "explanation": "Whether retained scanner evidence showed iframe, embed, widget, or visibly integrated third-party services before a recorded consent action. This row does not represent all background analytics or network requests.",
        "note": "Whether retained scanner evidence showed iframe, embed, widget, or visibly integrated third-party services before a recorded consent action. This row does not represent all background analytics or network requests.",
        "status": "Review signal",
        "tone": "warning",
        "pipeline": {
          "projectionStage": "coverage_policy",
          "concernPolicyKey": "gdpr_eprivacy_coverage.embedded_content_pre_consent.review_signal",
          "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
          "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.embedded_content_pre_consent"
        },
        "statusBasis": "Review signal: concrete 3rd party embedded content was retained before consent in iframe/runtime evidence. This is potentially concerning runtime behavior, not a positive compliance result.",
        "retainedEvidence": {
          "evidenceRefs": [
            "Embedded 3rd party content observations: 11",
            "Embedded host: youtube.com",
            "Embedded host: www.youtube.com",
            "Evidence: retained pre-consent embedded-content observations"
          ],
          "embeddedContentHosts": [
            "youtube.com",
            "www.youtube.com"
          ],
          "missingEvidenceNeeded": [],
          "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
          "weakerArtifactsIgnored": [],
          "selectedEvidenceStrength": "missing",
          "embeddedContentObservedMs": [
            1614,
            4848,
            4969,
            4974,
            5009,
            5013
          ],
          "observedRuntimeSignalOnly": true,
          "selectedEvidenceArtifactId": "coverage_policy",
          "embeddedContentPurposeBuckets": {
            "mapEmbed": [],
            "mediaEmbed": [
              "youtube.com",
              "www.youtube.com"
            ],
            "videoAdSdk": [],
            "socialEmbed": [],
            "formOrChatWidget": [],
            "fontStaticResource": [],
            "otherEmbeddedContent": []
          },
          "firstEmbeddedContentObservedMs": 1614,
          "embeddedContentObservationCount": 11
        },
        "projectedFindings": [],
        "missingOrIncompleteSourceSignals": []
      }
    }
  ],
  "evidenceDetails": {
    "policyEvidenceDetails": {
      "assessmentStatus": "gap_observed",
      "evidenceRefs": [
        "Third-party tracking observed before recorded consent",
        "Signal: Pre-consent tracking detected",
        "Review issue: Pre-consent tracking incidents detected",
        "Evidence flag: explicit_policy_snippet_retained",
        "Evidence flag: contradiction_runtime_artifact_retained",
        "Evidence flag: privacy.preconsent_tracking_detected"
      ],
      "explanation": "Analytics or performance-measurement requests fired before a recorded consent choice, including Google Analytics. Review whether the retained evidence reflects non-essential measurement rather than strictly necessary site operation.",
      "regulatoryAreaId": "gdpr_eprivacy",
      "regulatoryAreaTitle": "GDPR / ePrivacy",
      "regulatoryMapping": [],
      "missingOrIncompleteSourceSignals": [],
      "pipeline": {
        "projectionStage": "unified_finding",
        "concernPolicyKey": "gdpr_eprivacy_coverage.pre_consent_third_party_tracking.gap_observed",
        "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
        "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.pre_consent_third_party_tracking"
      },
      "projectedFindings": [
        {
          "id": "preconsent_tracking",
          "label": "Third-party tracking observed before recorded consent",
          "severity": "high"
        }
      ],
      "retainedEvidence": {
        "status": "Gap observed",
        "evidenceRefs": [
          "First pre-consent classified tracking request observation: 5.27s after scan start",
          "Third-party tracking observed before recorded consent",
          "Signal: Pre-consent tracking detected",
          "Review issue: Pre-consent tracking incidents detected",
          "Evidence flag: explicit_policy_snippet_retained",
          "Evidence flag: contradiction_runtime_artifact_retained"
        ],
        "findingEntities": [
          {
            "id": "preconsent_tracking",
            "entities": {
              "observedTrackingVendors": [
                "Google Analytics"
              ],
              "preconsent_cookie_names": [
                "__Secure-BUCKET",
                "__Secure-YNID",
                "YSC",
                "__Secure-ROLLOUT_TOKEN",
                "__Secure-YEC"
              ],
              "preconsent_cookie_categories": [
                "unknown",
                "personalization",
                "security",
                "analytics"
              ],
              "preconsent_cookie_set_methods": [
                "set_cookie_header",
                "browser_snapshot"
              ],
              "preconsent_cookie_initiator_domains": [
                "deepmind.google"
              ]
            },
            "sourceRefs": [
              "Signal: Pre-consent tracking detected",
              "Review issue: Pre-consent tracking incidents detected"
            ],
            "evidenceFlags": [
              "privacy.preconsent_tracking_detected",
              "privacy.tracking_before_consent_detected"
            ]
          }
        ],
        "evidenceHighlights": [
          "First pre-consent classified tracking request observation: 5.27s after scan start"
        ],
        "missingEvidenceNeeded": [],
        "trackingRequestTiming": {
          "version": "classified-request-timing.v1",
          "requests": [
            {
              "requestUrl": "https://region1.google-analytics.com/g/collect?redacted=1",
              "vendorName": "Google Analytics",
              "firstSeenMs": 5272,
              "evidenceRefs": [
                "net_370"
              ],
              "runtimePhase": "pre_consent",
              "vendorCategory": "analytics"
            }
          ]
        },
        "selectedEvidenceReason": "Selected retained pre-consent request/vendor timing evidence; storage evidence is evaluated separately.",
        "weakerArtifactsIgnored": [],
        "preconsentTimingEvidence": {
          "thirdPartyTracking": {
            "trackingRequestTiming": {
              "version": "classified-request-timing.v1",
              "requests": [
                {
                  "requestUrl": "https://region1.google-analytics.com/g/collect?redacted=1",
                  "vendorName": "Google Analytics",
                  "firstSeenMs": 5272,
                  "evidenceRefs": [
                    "net_370"
                  ],
                  "runtimePhase": "pre_consent",
                  "vendorCategory": "analytics"
                }
              ]
            },
            "preconsentThirdPartyTrackingObservedMs": [
              5272
            ],
            "firstPreconsentThirdPartyTrackingObservedMs": 5272,
            "firstPreconsentThirdPartyTrackingObservationBasis": "classified_request_timing.v1",
            "preconsentThirdPartyTrackingTimedObservationCount": 1
          }
        },
        "selectedEvidenceStrength": "strong",
        "selectedEvidenceArtifactId": "preConsentTrackingRequestEvidence",
        "preconsentThirdPartyTrackingObservedMs": [
          5272
        ],
        "firstPreconsentThirdPartyTrackingObservedMs": 5272,
        "firstPreconsentThirdPartyTrackingObservationBasis": "classified_request_timing.v1",
        "preconsentThirdPartyTrackingTimedObservationCount": 1
      },
      "rowId": "pre_consent_third_party_tracking",
      "rowLabel": "Pre-consent non-essential tracking",
      "rowNote": "Tracking-classified requests were observed before consent: Google Analytics. The first retained qualifying request was Google Analytics at 5.27s after scan start.",
      "statusBasis": "Tracking-classified requests were observed before consent: Google Analytics. The first retained qualifying request was Google Analytics at 5.27s after scan start.",
      "regulatoryConcernKind": "potential_gap",
      "status": "Gap observed",
      "groupedRuntimeSignals": [
        {
          "id": "third_party_iframe_pre_consent",
          "label": "3rd party iframes before consent",
          "shortSummary": "Potential issue based on scan evidence; Known 3rd party iframe embeds were retained before a recorded consent action on the scanned page. This establishes pre-consent embedded-service activity, not tracking classification by itself."
        },
        {
          "id": "social_media_embed_pre_consent",
          "label": "Social/media embeds or plugins loaded before consent",
          "shortSummary": "A social/media embed, plugin, widget, or pixel loaded before any recorded consent action: YouTube; first seen 1.61s after scan start."
        },
        {
          "id": "embedded_content_pre_consent",
          "label": "Embedded third-party services before consent",
          "shortSummary": "3rd party embedded content loaded before any recorded consent action, including media embed evidence (youtube.com and www.youtube.com). Review retained domains by purpose; first seen 1.61s after scan start."
        }
      ],
      "primaryRuntimeSignal": {
        "id": "pre_consent_third_party_tracking",
        "label": "Pre-consent non-essential tracking",
        "shortSummary": "Tracking-classified requests were observed before consent: Google Analytics. The first retained qualifying request was Google Analytics at 5.27s after scan start."
      }
    }
  },
  "evidenceRefs": [
    "Third-party tracking observed before recorded consent",
    "Signal: Pre-consent tracking detected",
    "Review issue: Pre-consent tracking incidents detected",
    "Evidence flag: explicit_policy_snippet_retained",
    "Evidence flag: contradiction_runtime_artifact_retained",
    "Evidence flag: privacy.preconsent_tracking_detected",
    "3rd party iframe observations: 10",
    "Iframe host: youtube.com",
    "Iframe host: www.youtube.com",
    "Evidence: retained pre-consent iframe inventory",
    "Social/media provider observations: 5",
    "Provider: YouTube",
    "Domain: youtube.com",
    "Evidence: retained pre-consent social/media network or iframe observation",
    "Embedded 3rd party content observations: 11",
    "Embedded host: youtube.com",
    "Embedded host: www.youtube.com",
    "Evidence: retained pre-consent embedded-content observations"
  ],
  "findingId": "regulatory_gap__gdpr_eprivacy__pre_consent_third_party_tracking"
}

Pre-consent page event timeline

Scan start

Public page observation began

0.75s

3P request

3P request first observed

1.61s

Embedded content

Embedded content first observed

1.95s

Cookie observed

__Secure-BUCKET · retained observation

1.95s

Non-essential cookie/storage

Canonical pre-consent cookie/storage concern observed

5.27s

Analytics

Analytics first observed

5.27s

Non-essential request

Canonical pre-consent tracking concern observed

23.03s

Observation end

Retained scan window closed

Pre-consent supporting evidence

Services & Resources

Resource breakdowns

34 distinct resources = 20 requests + 9 cookies & storage + 5 embedded frames. Services group these resources.

Type mix

Requests20
Cookies & storage9
Embedded frames5

Evidence mix

Non-essential8
Classification review19
Contextual5
Essential2

Purpose mix

Infrastructure17
Embedded media5
Analytics3

Site relationship

Third party32
First party2

Services and their member resources
						Domain	Site relationship
3	Google Analytics	Analytics	Policy disclosure · Unknown Google Analytics Review scope: retained site policy from the homepage scan; this is a disclosure lookup, not a finding about compliance. No verified retained policy text is available for this lookup.	Location details Google Analytics Server locations describe the endpoint associated with the captured browser response. They may be CDN edges and do not establish subsequent processing or storage locations. United States 216.239.34.36 · Google LLC · AS15169 Approximate server country · Source: proxy connect iplocate Country database: 2026-10-07 Network database: 2026-10-07 1 of 1 request events assessed; 0 without a retained server IP. Provider headquarters: US Transfer mechanism: Mechanism not assessed US-controlled vendor; mechanism requires current vendor/legal verification. Registry reference date: 2026-07-23. This is registry context, not verification of this site's transfer arrangements. Corporate headquarters Google LLC Google identifies Mountain View, California as its headquarters. This does not identify a customer's regional Google contracting entity or Alphabet's headquarters. Sources checked 2026-09-07 Google company history Headquarters and network operator are distinct; neither establishes this site's contracting entity or subsequent data processing locations.	5.27s	deepmind.google Service domains deepmind.google region1.google-analytics.com	Mixed	Captured on 1 page https://deepmind.google/
2	Google Tag Manager	Tag management	Policy disclosure · Unknown Google Tag Manager Review scope: retained site policy from the homepage scan; this is a disclosure lookup, not a finding about compliance. No verified retained policy text is available for this lookup.	Location details Google Tag Manager Server locations describe the endpoint associated with the captured browser response. They may be CDN edges and do not establish subsequent processing or storage locations. United States 209.85.202.97 · Google LLC · AS15169 Approximate server country · Source: proxy connect iplocate Country database: 2026-10-07 Network database: 2026-10-07 2 of 2 request events assessed; 0 without a retained server IP. Provider headquarters: US Transfer mechanism: Mechanism not assessed US-controlled vendor; mechanism requires current vendor/legal verification. Registry reference date: 2026-07-23. This is registry context, not verification of this site's transfer arrangements. Corporate headquarters Google LLC Google identifies Mountain View, California as its headquarters. This does not identify a customer's regional Google contracting entity or Alphabet's headquarters. Sources checked 2026-09-07 Google company history Headquarters and network operator are distinct; neither establishes this site's contracting entity or subsequent data processing locations.	3.29s	www.googletagmanager.com	Third party	Captured on 1 page https://deepmind.google/
3	Google Static Assets	CDN	Policy disclosure · Unknown Google Static Assets Review scope: retained site policy from the homepage scan; this is a disclosure lookup, not a finding about compliance. No verified retained policy text is available for this lookup.	Location details Google Static Assets Server locations describe the endpoint associated with the captured browser response. They may be CDN edges and do not establish subsequent processing or storage locations. United States 209.85.203.94 · Google LLC · AS15169 Approximate server country · Source: proxy connect iplocate Country database: 2026-10-07 Network database: 2026-10-07 United States 209.85.203.94 · Google LLC · AS15169 Approximate server country · Source: proxy connect iplocate Country database: 2026-10-07 Network database: 2026-10-07 3 of 3 request events assessed; 0 without a retained server IP. Provider headquarters: US Transfer mechanism: Mechanism not assessed US-controlled vendor; mechanism requires current vendor/legal verification. Registry reference date: 2026-07-23. This is registry context, not verification of this site's transfer arrangements. Corporate headquarters Google LLC Google identifies Mountain View, California as its headquarters. This does not identify a customer's regional Google contracting entity or Alphabet's headquarters. Sources checked 2026-09-07 Google company history Headquarters and network operator are distinct; neither establishes this site's contracting entity or subsequent data processing locations.	0.77s	www.gstatic.com	Third party	Captured on 1 page https://deepmind.google/
8	YouTube	Embedded media	Policy disclosure · Unknown YouTube Review scope: retained site policy from the homepage scan; this is a disclosure lookup, not a finding about compliance. No verified retained policy text is available for this lookup.	Location details YouTube Server locations describe the endpoint associated with the captured browser response. They may be CDN edges and do not establish subsequent processing or storage locations. United States 142.251.153.4 · Google LLC · AS15169 Approximate server country · Source: proxy connect iplocate Country database: 2026-10-07 Network database: 2026-10-07 United States 142.251.153.4 · Google LLC · AS15169 Approximate server country · Source: proxy connect iplocate Country database: 2026-10-07 Network database: 2026-10-07 8 of 8 request events assessed; 0 without a retained server IP. Provider headquarters: US Transfer mechanism: Mechanism not assessed US-controlled vendor; mechanism requires current vendor/legal verification. Registry reference date: 2026-07-23. This is registry context, not verification of this site's transfer arrangements. Corporate headquarters Google LLC Google identifies Mountain View, California as its headquarters. This does not identify a customer's regional Google contracting entity or Alphabet's headquarters. Sources checked 2026-09-07 Google company history Headquarters and network operator are distinct; neither establishes this site's contracting entity or subsequent data processing locations.	1.61s	www.youtube.com	Third party	Captured on 1 page https://deepmind.google/

Unattributed resources (18)

5 distinct services, including child services and unattributed resources

Forms & fields

1 form

Form 1Page observation

ⓘPersonal contact

services.google.comthird party

deepmind.google/

Not captured

Form 1

POST · Checkboxes / toggles: —

Privacy disclosure Not captured

No disclosure text captured.

Fields in Form 1
Field	Input type	Data type	Required	Selection	State
Get the latest updates	email	ⓘPersonal contact	No		Enabled

Technical evidence

{
  "observationRef": "collection_form_0",
  "formRef": "collection_form_0",
  "method": "post",
  "confidence": 0.92,
  "directVsInferred": "direct",
  "evidenceRefs": [
    {
      "refId": "ref_collection_surface_form_0",
      "eventType": "main_document_dom_form",
      "artifactId": "collection_surface_inventory_pre_consent"
    }
  ],
  "fields": [
    {
      "label": "Get the latest updates",
      "review": {
        "version": "collection-field-review.v1",
        "category": "personal_contact",
        "preselectedMarketing": false
      },
      "disabled": false,
      "fieldRef": "collection_form_0_field_0",
      "readOnly": false,
      "required": false,
      "inputType": "email",
      "confidence": 0.9,
      "elementType": "input",
      "controlIndex": 0,
      "evidenceRefs": [
        {
          "refId": "ref_collection_surface_0_0",
          "eventType": "main_document_dom_control",
          "artifactId": "collection_surface_inventory_pre_consent"
        }
      ],
      "directVsInferred": "direct",
      "semanticCategory": "email",
      "autocompleteToken": "email"
    }
  ]
}

Detailed evidence

Privacy & security ratingsStarting page

29 rows

4concern2Needs review6positive13contextual4limited

CertScore.ai can make mistakes. Verify all findings.

CMP details

13 checks · 12 limited

Limited

Consent platform not i...

Consent management audit · 13 criteria

Reject optionNot enough verified evidence was captured.Not assessed

JSON evidence

{
  "scope": "starting_page",
  "scanId": "860c6f2d-7f46-4c66-8451-51e3f7405658",
  "assessmentSourceHash": "fnv1a-46631cb9",
  "criterion": {
    "id": "reject",
    "label": "Option to reject cookies available",
    "status": "Not assessed",
    "detail": "Sufficient verified evidence for this criterion was not retained in this scan.",
    "sourceIds": []
  }
}

Accept / Reject prominenceNot enough verified evidence was captured.Not assessed

JSON evidence

{
  "scope": "starting_page",
  "scanId": "860c6f2d-7f46-4c66-8451-51e3f7405658",
  "assessmentSourceHash": "fnv1a-46631cb9",
  "criterion": {
    "id": "prominence",
    "label": "Accept / Reject prominence comparison",
    "status": "Not assessed",
    "detail": "Sufficient verified evidence for this criterion was not retained in this scan.",
    "sourceIds": []
  }
}

Category choicesNot enough verified evidence was captured.Not assessed

JSON evidence

{
  "scope": "starting_page",
  "scanId": "860c6f2d-7f46-4c66-8451-51e3f7405658",
  "assessmentSourceHash": "fnv1a-46631cb9",
  "criterion": {
    "id": "categories",
    "label": "Selection by categories available",
    "status": "Not assessed",
    "detail": "Sufficient verified evidence for this criterion was not retained in this scan.",
    "sourceIds": []
  }
}

CMP service listNot enough verified evidence was captured.Not assessed

JSON evidence

{
  "scope": "starting_page",
  "scanId": "860c6f2d-7f46-4c66-8451-51e3f7405658",
  "assessmentSourceHash": "fnv1a-46631cb9",
  "criterion": {
    "id": "services",
    "label": "Individual services identified in the CMP",
    "status": "Not assessed",
    "detail": "Sufficient verified evidence for this criterion was not retained in this scan.",
    "sourceIds": []
  }
}

Privacy-policy linkA privacy-policy link or page was found.Observed

View privacy-policy discovery evidence ↓

Privacy link before consentNot enough verified evidence was captured.Not assessed

JSON evidence

{
  "scope": "starting_page",
  "scanId": "860c6f2d-7f46-4c66-8451-51e3f7405658",
  "assessmentSourceHash": "fnv1a-46631cb9",
  "criterion": {
    "id": "privacy_access",
    "label": "Privacy-policy link reachable before consent interaction",
    "status": "Not assessed",
    "detail": "Sufficient verified evidence for this criterion was not retained in this scan.",
    "sourceIds": []
  }
}

Browser consent recordNot enough verified evidence was captured.Not assessed

JSON evidence

{
  "scope": "starting_page",
  "scanId": "860c6f2d-7f46-4c66-8451-51e3f7405658",
  "assessmentSourceHash": "fnv1a-46631cb9",
  "criterion": {
    "id": "consent_record",
    "label": "Client-side consent decision recorded",
    "status": "Not assessed",
    "detail": "Sufficient verified evidence for this criterion was not retained in this scan.",
    "sourceIds": []
  }
}

Tracking after consent choicesAction evidence was insufficient to assess implementation.Not assessed

JSON evidence

{
  "scope": "starting_page",
  "scanId": "860c6f2d-7f46-4c66-8451-51e3f7405658",
  "assessmentSourceHash": "fnv1a-46631cb9",
  "criterion": {
    "id": "implementation",
    "label": "Tracking activity after consent choices",
    "status": "Not assessed",
    "detail": "The retained action evidence does not establish whether settings are implemented correctly. No implementation pass is inferred from an absence of findings.",
    "sourceIds": []
  }
}

Consent-cookie expiryNot enough verified evidence was captured.Not assessed

JSON evidence

{
  "scope": "starting_page",
  "scanId": "860c6f2d-7f46-4c66-8451-51e3f7405658",
  "assessmentSourceHash": "fnv1a-46631cb9",
  "criterion": {
    "id": "duration",
    "label": "Consent-cookie expiry observed",
    "status": "Not assessed",
    "detail": "Sufficient verified evidence for this criterion was not retained in this scan.",
    "sourceIds": []
  }
}

Pre-consent cookie comparisonNot enough verified evidence was captured.Not assessed

JSON evidence

{
  "scope": "starting_page",
  "scanId": "860c6f2d-7f46-4c66-8451-51e3f7405658",
  "assessmentSourceHash": "fnv1a-46631cb9",
  "criterion": {
    "id": "declared_not_found",
    "label": "CMP cookie declarations compared with pre-consent capture",
    "status": "Not assessed",
    "detail": "Sufficient verified evidence for this criterion was not retained in this scan.",
    "sourceIds": []
  }
}

Unmatched cookie namesNot enough verified evidence was captured.Not assessed

JSON evidence

{
  "scope": "starting_page",
  "scanId": "860c6f2d-7f46-4c66-8451-51e3f7405658",
  "assessmentSourceHash": "fnv1a-46631cb9",
  "criterion": {
    "id": "found_not_declared",
    "label": "Observed cookie names missing from CMP declarations",
    "status": "Not assessed",
    "detail": "Sufficient verified evidence for this criterion was not retained in this scan.",
    "sourceIds": []
  }
}

Cookie detailsNot enough verified evidence was captured.Not assessed

View cookie-disclosure availability ↓

JSON evidence

{
  "scope": "starting_page",
  "scanId": "860c6f2d-7f46-4c66-8451-51e3f7405658",
  "assessmentSourceHash": "fnv1a-46631cb9",
  "criterion": {
    "id": "cookie_information",
    "label": "Information about cookies available (e.g., storage duration)",
    "status": "Not assessed",
    "detail": "Sufficient verified evidence for this criterion was not retained in this scan.",
    "sourceIds": []
  }
}

Tracking & embeds

4 checks · 4 to review

Review

Pre-consent non-essential trackingTracking-classified requests were observed before consent: Google Analytics. The first retained qualifying request was Google Analytics at 5.27s after scan start.Potential gap

JSON evidence

First pre-consent classified tracking request observation: 5.27s after scan start

Full evidence JSON

{
  "assessmentStatus": "gap_observed",
  "checklistItemId": "pre_consent_third_party_tracking",
  "coverageArea": "Pre-consent non-essential tracking",
  "evidenceState": "observed",
  "explanation": "Analytics or performance-measurement requests fired before a recorded consent choice, including Google Analytics. Review whether the retained evidence reflects non-essential measurement rather than strictly necessary site operation.",
  "note": "Analytics or performance-measurement requests fired before a recorded consent choice, including Google Analytics. Review whether the retained evidence reflects non-essential measurement rather than strictly necessary site operation.",
  "status": "Gap observed",
  "tone": "warning",
  "pipeline": {
    "projectionStage": "unified_finding",
    "concernPolicyKey": "gdpr_eprivacy_coverage.pre_consent_third_party_tracking.gap_observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.pre_consent_third_party_tracking"
  },
  "statusBasis": "Classified non-essential tracking request timing evidence was retained before a recorded consent action.",
  "retainedEvidence": {
    "status": "Gap observed",
    "evidenceRefs": [
      "First pre-consent classified tracking request observation: 5.27s after scan start",
      "Third-party tracking observed before recorded consent",
      "Signal: Pre-consent tracking detected",
      "Review issue: Pre-consent tracking incidents detected",
      "Evidence flag: explicit_policy_snippet_retained",
      "Evidence flag: contradiction_runtime_artifact_retained"
    ],
    "findingEntities": [
      {
        "id": "preconsent_tracking",
        "entities": {
          "observedTrackingVendors": [
            "Google Analytics"
          ],
          "preconsent_cookie_names": [
            "__Secure-BUCKET",
            "__Secure-YNID",
            "YSC",
            "__Secure-ROLLOUT_TOKEN",
            "__Secure-YEC"
          ],
          "preconsent_cookie_categories": [
            "unknown",
            "personalization",
            "security",
            "analytics"
          ],
          "preconsent_cookie_set_methods": [
            "set_cookie_header",
            "browser_snapshot"
          ],
          "preconsent_cookie_initiator_domains": [
            "deepmind.google"
          ]
        },
        "sourceRefs": [
          "Signal: Pre-consent tracking detected",
          "Review issue: Pre-consent tracking incidents detected"
        ],
        "evidenceFlags": [
          "privacy.preconsent_tracking_detected",
          "privacy.tracking_before_consent_detected"
        ]
      }
    ],
    "evidenceHighlights": [
      "First pre-consent classified tracking request observation: 5.27s after scan start"
    ],
    "missingEvidenceNeeded": [],
    "trackingRequestTiming": {
      "version": "classified-request-timing.v1",
      "requests": [
        {
          "requestUrl": "https://region1.google-analytics.com/g/collect?redacted=1",
          "vendorName": "Google Analytics",
          "firstSeenMs": 5272,
          "evidenceRefs": [
            "net_370"
          ],
          "runtimePhase": "pre_consent",
          "vendorCategory": "analytics"
        }
      ]
    },
    "selectedEvidenceReason": "Selected retained pre-consent request/vendor timing evidence; storage evidence is evaluated separately.",
    "weakerArtifactsIgnored": [],
    "preconsentTimingEvidence": {
      "thirdPartyTracking": {
        "trackingRequestTiming": {
          "version": "classified-request-timing.v1",
          "requests": [
            {
              "requestUrl": "https://region1.google-analytics.com/g/collect?redacted=1",
              "vendorName": "Google Analytics",
              "firstSeenMs": 5272,
              "evidenceRefs": [
                "net_370"
              ],
              "runtimePhase": "pre_consent",
              "vendorCategory": "analytics"
            }
          ]
        },
        "preconsentThirdPartyTrackingObservedMs": [
          5272
        ],
        "firstPreconsentThirdPartyTrackingObservedMs": 5272,
        "firstPreconsentThirdPartyTrackingObservationBasis": "classified_request_timing.v1",
        "preconsentThirdPartyTrackingTimedObservationCount": 1
      }
    },
    "selectedEvidenceStrength": "strong",
    "selectedEvidenceArtifactId": "preConsentTrackingRequestEvidence",
    "preconsentThirdPartyTrackingObservedMs": [
      5272
    ],
    "firstPreconsentThirdPartyTrackingObservedMs": 5272,
    "firstPreconsentThirdPartyTrackingObservationBasis": "classified_request_timing.v1",
    "preconsentThirdPartyTrackingTimedObservationCount": 1
  },
  "projectedFindings": [
    {
      "id": "preconsent_tracking",
      "label": "Third-party tracking observed before recorded consent",
      "severity": "high"
    }
  ],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

1Review the listed tracking requests, initiating integrations, and purposes against the retained pre-consent timing.
2Gate consent-dependent tracking at the tag or integration and verify that essential traffic remains separately classified.
3Retest the same page in fresh sessions before consent, after Reject, and after Accept; compare the listed endpoints and retain the results.

Third-party iframes before consentKnown third-party iframes were detected before a consent choice. This establishes pre-consent embedded-service activity, not tracking classification by itself.Potential gap

JSON evidence

3rd party iframe observations: 10

Iframe host: youtube.com

Iframe host: www.youtube.com

Full evidence JSON

{
  "assessmentStatus": "gap_observed",
  "checklistItemId": "third_party_iframe_pre_consent",
  "coverageArea": "3rd party iframes before consent",
  "evidenceState": "observed",
  "explanation": "Whether retained scanner evidence showed known 3rd party iframe embeds before a recorded consent action.",
  "note": "Whether retained scanner evidence showed known 3rd party iframe embeds before a recorded consent action.",
  "status": "Gap observed",
  "tone": "warning",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.third_party_iframe_pre_consent.gap_observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.third_party_iframe_pre_consent"
  },
  "statusBasis": "Known 3rd party iframe embeds were retained before a recorded consent action on the scanned page. This establishes pre-consent embedded-service activity, not tracking classification by itself.",
  "retainedEvidence": {
    "evidenceRefs": [
      "3rd party iframe observations: 10",
      "Iframe host: youtube.com",
      "Iframe host: www.youtube.com",
      "Evidence: retained pre-consent iframe inventory"
    ],
    "embeddedContentHosts": [
      "youtube.com",
      "www.youtube.com"
    ],
    "embeddedFrameSources": [
      "https://www.youtube.com/embed/1DtMiRKg-cs",
      "https://www.youtube.com/embed/V04bm-3d6EQ",
      "https://www.youtube.com/embed/qoinGjj60Fo",
      "https://www.youtube.com/embed/PqVbypvxDto",
      "https://www.youtube.com/embed/l3u_FAv33G0"
    ],
    "missingEvidenceNeeded": [],
    "preConsentIframeCount": 5,
    "iframeObservationCount": 10,
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "selectedEvidenceStrength": "moderate",
    "embeddedContentObservedMs": [
      1614,
      4848,
      4969,
      4974,
      5009,
      5013
    ],
    "selectedEvidenceArtifactId": "coverage_policy",
    "embeddedContentPurposeBuckets": {
      "mapEmbed": [],
      "mediaEmbed": [
        "youtube.com",
        "www.youtube.com"
      ],
      "videoAdSdk": [],
      "socialEmbed": [],
      "formOrChatWidget": [],
      "fontStaticResource": [],
      "otherEmbeddedContent": []
    },
    "firstEmbeddedContentObservedMs": 1614
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

1Review the evidence details for the specific signal behind 3rd party iframes before consent.
2Update the affected consent, policy, tag-manager, vendor, or user-choice implementation.
3Retest in a fresh browser context so prior cookies or preferences do not hide the change.
4Rerun the scan and confirm the result reflects the change or clearly explains why the page could not be fully evaluated.
5Keep a short internal record of what changed so the next scan can be compared with the same page and settings.

Social/media services before consentA social/media embed, plugin, widget, or pixel loaded before any recorded consent action: YouTube; first seen 1.61s after scan start.Potential gap

JSON evidence

Social/media provider observations: 5

Provider: YouTube

Domain: youtube.com

Full evidence JSON

{
  "assessmentStatus": "gap_observed",
  "checklistItemId": "social_media_embed_pre_consent",
  "coverageArea": "Social/media embeds or plugins loaded before consent",
  "evidenceState": "observed",
  "explanation": "Whether retained network/runtime evidence showed a social, video, media embed, social pixel, or plugin provider loading before a recorded consent action.",
  "note": "Whether retained network/runtime evidence showed a social, video, media embed, social pixel, or plugin provider loading before a recorded consent action.",
  "status": "Gap observed",
  "tone": "warning",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.social_media_embed_pre_consent.gap_observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.social_media_embed_pre_consent"
  },
  "statusBasis": "A social/media embed, plugin, widget, or pixel provider loaded before any recorded consent choice in retained network/runtime evidence. Providers/domains observed: YouTube; first seen 1.61s after scan start.",
  "retainedEvidence": {
    "providers": [
      "YouTube"
    ],
    "evidenceRefs": [
      "Social/media provider observations: 5",
      "Provider: YouTube",
      "Domain: youtube.com",
      "Evidence: retained pre-consent social/media network or iframe observation"
    ],
    "providerCategories": [
      "mediaEmbed"
    ],
    "placeholderDetected": false,
    "missingEvidenceNeeded": [],
    "placeholderIneffective": false,
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "socialMediaEmbedDomains": [
      "youtube.com"
    ],
    "selectedEvidenceStrength": "moderate",
    "selectedEvidenceArtifactId": "coverage_policy",
    "socialMediaEmbedObservedMs": [
      1614,
      4848,
      4969,
      4974,
      5009,
      5013
    ],
    "socialMediaEmbedObservations": [
      {
        "domain": "youtube.com",
        "source": "preconsent_request_classification",
        "provider": "YouTube",
        "requestUrl": "https://www.youtube.com/embed/1DtMiRKg-cs?enablejsapi=1&rel=0&origin=https%3A%2F%2Fdeepmind.google&playsinline=1",
        "firstSeenMs": 4848,
        "referrerSent": true,
        "initiatorType": "document",
        "storageTouched": false,
        "staticAssetOnly": false,
        "strongInitiator": true,
        "providerCategory": "mediaEmbed",
        "placeholderDetected": false,
        "userActionBeforeLoad": false,
        "placeholderIneffective": false,
        "setCookieMetadataCount": 0,
        "pageUrlSharedViaReferrer": true
      },
      {
        "domain": "youtube.com",
        "source": "preconsent_request_classification",
        "provider": "YouTube",
        "requestUrl": "https://www.youtube.com/embed/V04bm-3d6EQ?enablejsapi=1&rel=0&origin=https%3A%2F%2Fdeepmind.google&playsinline=1",
        "firstSeenMs": 4969,
        "referrerSent": true,
        "initiatorType": "document",
        "storageTouched": false,
        "staticAssetOnly": false,
        "strongInitiator": true,
        "providerCategory": "mediaEmbed",
        "placeholderDetected": false,
        "userActionBeforeLoad": false,
        "placeholderIneffective": false,
        "setCookieMetadataCount": 0,
        "pageUrlSharedViaReferrer": true
      },
      {
        "domain": "youtube.com",
        "source": "preconsent_request_classification",
        "provider": "YouTube",
        "requestUrl": "https://www.youtube.com/embed/qoinGjj60Fo?enablejsapi=1&rel=0&origin=https%3A%2F%2Fdeepmind.google&playsinline=1",
        "firstSeenMs": 4974,
        "referrerSent": true,
        "initiatorType": "document",
        "storageTouched": false,
        "staticAssetOnly": false,
        "strongInitiator": true,
        "providerCategory": "mediaEmbed",
        "placeholderDetected": false,
        "userActionBeforeLoad": false,
        "placeholderIneffective": false,
        "setCookieMetadataCount": 0,
        "pageUrlSharedViaReferrer": true
      },
      {
        "domain": "youtube.com",
        "source": "preconsent_request_classification",
        "provider": "YouTube",
        "requestUrl": "https://www.youtube.com/embed/PqVbypvxDto?enablejsapi=1&rel=0&origin=https%3A%2F%2Fdeepmind.google&playsinline=1",
        "firstSeenMs": 5009,
        "referrerSent": true,
        "initiatorType": "document",
        "storageTouched": false,
        "staticAssetOnly": false,
        "strongInitiator": true,
        "providerCategory": "mediaEmbed",
        "placeholderDetected": false,
        "userActionBeforeLoad": false,
        "placeholderIneffective": false,
        "setCookieMetadataCount": 0,
        "pageUrlSharedViaReferrer": true
      },
      {
        "domain": "youtube.com",
        "source": "preconsent_request_classification",
        "provider": "YouTube",
        "requestUrl": "https://www.youtube.com/embed/l3u_FAv33G0?enablejsapi=1&rel=0&origin=https%3A%2F%2Fdeepmind.google&playsinline=1",
        "firstSeenMs": 5013,
        "referrerSent": true,
        "initiatorType": "document",
        "storageTouched": false,
        "staticAssetOnly": false,
        "strongInitiator": true,
        "providerCategory": "mediaEmbed",
        "placeholderDetected": false,
        "userActionBeforeLoad": false,
        "placeholderIneffective": false,
        "setCookieMetadataCount": 0,
        "pageUrlSharedViaReferrer": true
      },
      {
        "domain": "youtube.com",
        "source": "preconsent_request_classification",
        "provider": "YouTube",
        "requestUrl": "https://www.youtube.com/embed/1DtMiRKg-cs?enablejsapi=1&rel=0&origin=https%3A%2F%2Fdeepmind.google",
        "firstSeenMs": 1614,
        "referrerSent": true,
        "initiatorType": "document",
        "storageTouched": false,
        "staticAssetOnly": false,
        "strongInitiator": false,
        "providerCategory": "mediaEmbed",
        "placeholderDetected": false,
        "userActionBeforeLoad": false,
        "placeholderIneffective": false,
        "setCookieMetadataCount": 0,
        "pageUrlSharedViaReferrer": true
      },
      {
        "domain": "youtube.com",
        "source": "preconsent_request_classification",
        "provider": "YouTube",
        "requestUrl": "https://www.youtube.com/embed/1DtMiRKg-cs?enablejsapi=[redacted]&rel=[redacted]&origin=[redacted]",
        "firstSeenMs": 1614,
        "referrerSent": true,
        "initiatorType": "document",
        "storageTouched": false,
        "staticAssetOnly": false,
        "strongInitiator": false,
        "providerCategory": "mediaEmbed",
        "placeholderDetected": false,
        "userActionBeforeLoad": false,
        "placeholderIneffective": false,
        "setCookieMetadataCount": 0,
        "pageUrlSharedViaReferrer": true
      },
      {
        "domain": "youtube.com",
        "source": "preconsent_request_classification",
        "provider": "YouTube",
        "requestUrl": "https://www.youtube.com/embed/1DtMiRKg-cs?enablejsapi=[redacted]&rel=[redacted]&origin=[redacted]&playsinline=[redacted]",
        "firstSeenMs": 4848,
        "referrerSent": true,
        "initiatorType": "document",
        "storageTouched": false,
        "staticAssetOnly": false,
        "strongInitiator": false,
        "providerCategory": "mediaEmbed",
        "placeholderDetected": false,
        "userActionBeforeLoad": false,
        "placeholderIneffective": false,
        "setCookieMetadataCount": 0,
        "pageUrlSharedViaReferrer": true
      }
    ],
    "firstSocialMediaEmbedObservedMs": 1614
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

1Review the evidence details for the specific signal behind Social/media embeds or plugins loaded before consent.
2Update the affected consent, policy, tag-manager, vendor, or user-choice implementation.
3Retest in a fresh browser context so prior cookies or preferences do not hide the change.
4Rerun the scan and confirm the result reflects the change or clearly explains why the page could not be fully evaluated.
5Keep a short internal record of what changed so the next scan can be compared with the same page and settings.

Third-party embeds before consent3rd party embedded content loaded before any recorded consent action, including media embed evidence (youtube.com and www.youtube.com). Review retained domains by purpose; first seen 1.61s after scan start.Partial concern

JSON evidence

Embedded 3rd party content observed: youtube.com, www.youtube.com; first observed 1.61s after scan start.

EmbeddedContentObservationCount: 11

Full evidence JSON

{
  "assessmentStatus": "review_signal",
  "checklistItemId": "embedded_content_pre_consent",
  "coverageArea": "Embedded third-party services before consent",
  "evidenceState": "observed",
  "explanation": "Whether retained scanner evidence showed iframe, embed, widget, or visibly integrated third-party services before a recorded consent action. This row does not represent all background analytics or network requests.",
  "note": "Whether retained scanner evidence showed iframe, embed, widget, or visibly integrated third-party services before a recorded consent action. This row does not represent all background analytics or network requests.",
  "status": "Review signal",
  "tone": "warning",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.embedded_content_pre_consent.review_signal",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.embedded_content_pre_consent"
  },
  "statusBasis": "Review signal: concrete 3rd party embedded content was retained before consent in iframe/runtime evidence. This is potentially concerning runtime behavior, not a positive compliance result.",
  "retainedEvidence": {
    "evidenceRefs": [
      "Embedded 3rd party content observations: 11",
      "Embedded host: youtube.com",
      "Embedded host: www.youtube.com",
      "Evidence: retained pre-consent embedded-content observations"
    ],
    "embeddedContentHosts": [
      "youtube.com",
      "www.youtube.com"
    ],
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "selectedEvidenceStrength": "missing",
    "embeddedContentObservedMs": [
      1614,
      4848,
      4969,
      4974,
      5009,
      5013
    ],
    "observedRuntimeSignalOnly": true,
    "selectedEvidenceArtifactId": "coverage_policy",
    "embeddedContentPurposeBuckets": {
      "mapEmbed": [],
      "mediaEmbed": [
        "youtube.com",
        "www.youtube.com"
      ],
      "videoAdSdk": [],
      "socialEmbed": [],
      "formOrChatWidget": [],
      "fontStaticResource": [],
      "otherEmbeddedContent": []
    },
    "firstEmbeddedContentObservedMs": 1614,
    "embeddedContentObservationCount": 11
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

1Review the evidence details for the specific signal behind Embedded third-party services before consent.
2Update the affected consent, policy, tag-manager, vendor, or user-choice implementation.
3Retest in a fresh browser context so prior cookies or preferences do not hide the change.
4Rerun the scan and confirm the result reflects the change or clearly explains why the page could not be fully evaluated.
5Keep a short internal record of what changed so the next scan can be compared with the same page and settings.

Policies & disclosures

12 checks · 11 limited

Limited

JSON evidence

Policy source

Captured page title: Policy source — URL not retained

Source policy language: Unknown; banner/page language: en; translation applied: No.

Policy reached through: Unknown; directly linked from scanned page: Unknown.

Section: Not retained.

privacy notice link/surface retained

Limitation: substantive policy body not retained

Full evidence JSON

{
  "assessmentStatus": "checked",
  "checklistItemId": "privacy_notice_availability",
  "coverageArea": "Privacy notice link/surface discovered",
  "evidenceState": "observed",
  "explanation": "Whether a reachable privacy notice or privacy policy link/surface was retained. This row does not by itself confirm that substantive notice content was available.",
  "note": "Whether a reachable privacy notice or privacy policy link/surface was retained. This row does not by itself confirm that substantive notice content was available.",
  "status": "Observed",
  "tone": "warning",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.privacy_notice_availability.observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.privacy_notice_availability"
  },
  "statusBasis": "A privacy-notice link or page surface was reachable, but substantive notice content was not available in the retained rendered text. Row-specific transparency disclosures remain unconfirmed.",
  "retainedEvidence": {
    "remediation": {
      "kind": "none",
      "steps": [],
      "message": "No remediation is established by this check alone. Retain its evidence and reassess after relevant changes."
    },
    "evidenceRefs": [
      "Evidence: privacy notice link/surface retained",
      "Limitation: substantive policy body not retained"
    ],
    "signalObserved": "surface_only_substantive_content_unavailable",
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "policyEvidenceAssessment": {
      "result": "disclosure_observed",
      "scoreEffect": "canonical_policy",
      "topicRelevance": "direct",
      "contractVersion": "certscore.policy-topic-evidence-assessment.v1"
    },
    "policyEvidenceProvenance": {
      "bannerLanguage": "en",
      "contractVersion": "certscore.policy-evidence-provenance.v1",
      "translationApplied": false
    },
    "selectedEvidenceStrength": "moderate",
    "policyTextExtractionHealth": {
      "policyUrls": [],
      "nanoInvoked": false,
      "nanoSkipReason": "policy_text_input_limited",
      "contractVersion": "certscore.policy-text-extraction-health.v2",
      "policyTextQuality": {
        "reason": "empty_policy_text",
        "usable": false,
        "codeSignalCount": 0,
        "codeSymbolRatio": 0,
        "policyTermCount": 0,
        "alphabeticWordRatio": 0,
        "naturalLanguageSentenceCount": 0
      },
      "policyUrlRetained": false,
      "extractedTextLength": 0,
      "policySurfaceObserved": false,
      "detectedPolicyLanguage": "en",
      "extractionFailureReason": "privacy_policy_surface_not_observed",
      "minimumTextLengthRequired": 500,
      "policyTextExtractionStatus": "not_attempted",
      "verifiedPolicyDocumentCount": 0,
      "detectedPolicyLanguageSource": "site_fallback",
      "supportedGdprTransparencyLocales": [
        "en",
        "de",
        "fr",
        "es",
        "it",
        "nl",
        "pl",
        "pt",
        "ru",
        "ja",
        "zh",
        "ar",
        "sv",
        "ro",
        "cs",
        "el",
        "hu",
        "da",
        "fi",
        "sk",
        "bg",
        "hr",
        "nb",
        "sl",
        "lt",
        "lv",
        "et",
        "uk",
        "tr",
        "fa",
        "vi",
        "id",
        "ko",
        "th",
        "he",
        "sr",
        "ca",
        "hi",
        "az",
        "gl"
      ],
      "gdprTransparencyLanguageSupported": true,
      "policyTextEvidenceProjectionStatus": "verified_partial",
      "policyTextEvidenceProjectionContractVersion": "certscore.policy-text-evidence-projection.v1"
    },
    "selectedEvidenceArtifactId": "coverage_policy",
    "policySurfaceSummary": {
      "scanStartedAt": "2026-10-12T19:32:20.595Z",
      "observedTopics": [],
      "cookiePolicyUrls": [],
      "cookieDisclosures": [],
      "mentionedControls": [],
      "privacyPolicySize": null,
      "privacyPolicyUrls": [],
      "cookie_disclosures": [],
      "policySectionCount": 0,
      "policySurfaceCount": 1,
      "cookiePolicyPresent": false,
      "scannedPageLanguage": "en",
      "privacyPolicyPresent": false,
      "policyPrimaryLanguage": null,
      "policyLastUpdatedTexts": [],
      "policyTextCoverageMode": "none",
      "retainedPolicySections": [],
      "cookieDisclosurePresent": false,
      "policyCookieDisclosures": [],
      "privacyPolicyDiscovered": false,
      "processingErrorObserved": false,
      "observedPolicyTopicHints": [],
      "policyDocumentProvenance": [],
      "policy_cookie_disclosures": [],
      "article13DisclosureSignals": [],
      "policyTextExtractionHealth": {
        "policyUrls": [],
        "nanoInvoked": false,
        "nanoSkipReason": "policy_text_input_limited",
        "contractVersion": "certscore.policy-text-extraction-health.v2",
        "policyTextQuality": {
          "reason": "empty_policy_text",
          "usable": false,
          "codeSignalCount": 0,
          "codeSymbolRatio": 0,
          "policyTermCount": 0,
          "alphabeticWordRatio": 0,
          "naturalLanguageSentenceCount": 0
        },
        "policyUrlRetained": false,
        "extractedTextLength": 0,
        "policySurfaceObserved": false,
        "detectedPolicyLanguage": "en",
        "extractionFailureReason": "privacy_policy_surface_not_observed",
        "minimumTextLengthRequired": 500,
        "policyTextExtractionStatus": "not_attempted",
        "verifiedPolicyDocumentCount": 0,
        "detectedPolicyLanguageSource": "site_fallback",
        "supportedGdprTransparencyLocales": [
          "en",
          "de",
          "fr",
          "es",
          "it",
          "nl",
          "pl",
          "pt",
          "ru",
          "ja",
          "zh",
          "ar",
          "sv",
          "ro",
          "cs",
          "el",
          "hu",
          "da",
          "fi",
          "sk",
          "bg",
          "hr",
          "nb",
          "sl",
          "lt",
          "lv",
          "et",
          "uk",
          "tr",
          "fa",
          "vi",
          "id",
          "ko",
          "th",
          "he",
          "sr",
          "ca",
          "hi",
          "az",
          "gl"
        ],
        "gdprTransparencyLanguageSupported": true,
        "policyTextEvidenceProjectionStatus": "verified_partial",
        "policyTextEvidenceProjectionContractVersion": "certscore.policy-text-evidence-projection.v1"
      },
      "privacyPolicyEvidencePaths": [],
      "discoveredPrivacyPolicyUrls": [],
      "article13CoverageAssessments": [
        {
          "topic": "automated_decision_making_or_profiling",
          "status": "insufficient_retained_evidence",
          "sourceUrls": [],
          "reasonCodes": [
            "policy_absence_coverage_preconditions_not_met",
            "typed_topic_coverage_diagnostic_missing_or_limited"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [],
          "policyDocumentRoles": [],
          "policyDocumentSha256": [],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "controller_contact",
          "status": "insufficient_retained_evidence",
          "sourceUrls": [],
          "reasonCodes": [
            "policy_absence_coverage_preconditions_not_met",
            "typed_topic_coverage_diagnostic_missing_or_limited"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [],
          "policyDocumentRoles": [],
          "policyDocumentSha256": [],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "data_retention",
          "status": "insufficient_retained_evidence",
          "sourceUrls": [],
          "reasonCodes": [
            "policy_absence_coverage_preconditions_not_met",
            "typed_topic_coverage_diagnostic_missing_or_limited"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [],
          "policyDocumentRoles": [],
          "policyDocumentSha256": [],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "data_subject_rights",
          "status": "insufficient_retained_evidence",
          "sourceUrls": [],
          "reasonCodes": [
            "policy_absence_coverage_preconditions_not_met",
            "typed_topic_coverage_diagnostic_missing_or_limited"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [],
          "policyDocumentRoles": [],
          "policyDocumentSha256": [],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "dpo_contact",
          "status": "insufficient_retained_evidence",
          "sourceUrls": [],
          "reasonCodes": [
            "policy_absence_coverage_preconditions_not_met",
            "typed_topic_coverage_diagnostic_missing_or_limited"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [],
          "policyDocumentRoles": [],
          "policyDocumentSha256": [],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "international_transfers",
          "status": "insufficient_retained_evidence",
          "sourceUrls": [],
          "reasonCodes": [
            "policy_absence_coverage_preconditions_not_met",
            "typed_topic_coverage_diagnostic_missing_or_limited"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [],
          "policyDocumentRoles": [],
          "policyDocumentSha256": [],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "legal_basis",
          "status": "insufficient_retained_evidence",
          "sourceUrls": [],
          "reasonCodes": [
            "policy_absence_coverage_preconditions_not_met",
            "typed_topic_coverage_diagnostic_missing_or_limited"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [],
          "policyDocumentRoles": [],
          "policyDocumentSha256": [],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "processing_purposes",
          "status": "insufficient_retained_evidence",
          "sourceUrls": [],
          "reasonCodes": [
            "policy_absence_coverage_preconditions_not_met",
            "typed_topic_coverage_diagnostic_missing_or_limited"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [],
          "policyDocumentRoles": [],
          "policyDocumentSha256": [],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "recipients_or_vendor_categories",
          "status": "insufficient_retained_evidence",
          "sourceUrls": [],
          "reasonCodes": [
            "policy_absence_coverage_preconditions_not_met",
            "typed_topic_coverage_diagnostic_missing_or_limited"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [],
          "policyDocumentRoles": [],
          "policyDocumentSha256": [],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "supervisory_authority",
          "status": "insufficient_retained_evidence",
          "sourceUrls": [],
          "reasonCodes": [
            "policy_absence_coverage_preconditions_not_met",
            "typed_topic_coverage_diagnostic_missing_or_limited"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [],
          "policyDocumentRoles": [],
          "policyDocumentSha256": [],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        }
      ],
      "dedicatedCookiePolicyPresent": false,
      "policyTextEvidenceProjection": {
        "scanId": "860c6f2d-7f46-4c66-8451-51e3f7405658",
        "documents": [],
        "generatedAt": "2026-10-12T19:32:43.623Z",
        "sourceBundle": {
          "uri": "s3://certscore-v2-dag-local-artifacts-eu-west-1-199536052647/v2-dag-lambda/local/860c6f2d-7f46-4c66-8451-51e3f7405658/CanonicalEvidenceBundle.json",
          "sha256": "bb27a716bf3bea28f1b66737f7ff103b42a9b425e389cc4c00e89618e8c0bf4b",
          "sizeBytes": 1428861,
          "schemaVersion": "certscore.v2.alpha.1",
          "verificationStatus": "verified"
        },
        "limitationKeys": [
          "verified_owned_complete_policy_document_unavailable"
        ],
        "contractVersion": "certscore.policy-text-evidence-projection.v1",
        "projectionStatus": "verified_partial"
      },
      "privacyPolicyEvaluationState": "not_discovered",
      "legalFrameworkValidityMatches": [],
      "missingExpectedPolicySections": [
        "Your privacy controls",
        "Exporting and deleting your information",
        "Retaining your information",
        "Compliance and cooperation with regulators",
        "European requirements",
        "Data transfers"
      ],
      "policy_text_extraction_health": {
        "policyUrls": [],
        "nanoInvoked": false,
        "nanoSkipReason": "policy_text_input_limited",
        "contractVersion": "certscore.policy-text-extraction-health.v2",
        "policyTextQuality": {
          "reason": "empty_policy_text",
          "usable": false,
          "codeSignalCount": 0,
          "codeSymbolRatio": 0,
          "policyTermCount": 0,
          "alphabeticWordRatio": 0,
          "naturalLanguageSentenceCount": 0
        },
        "policyUrlRetained": false,
        "extractedTextLength": 0,
        "policySurfaceObserved": false,
        "detectedPolicyLanguage": "en",
        "extractionFailureReason": "privacy_policy_surface_not_observed",
        "minimumTextLengthRequired": 500,
        "policyTextExtractionStatus": "not_attempted",
        "verifiedPolicyDocumentCount": 0,
        "detectedPolicyLanguageSource": "site_fallback",
        "supportedGdprTransparencyLocales": [
          "en",
          "de",
          "fr",
          "es",
          "it",
          "nl",
          "pl",
          "pt",
          "ru",
          "ja",
          "zh",
          "ar",
          "sv",
          "ro",
          "cs",
          "el",
          "hu",
          "da",
          "fi",
          "sk",
          "bg",
          "hr",
          "nb",
          "sl",
          "lt",
          "lv",
          "et",
          "uk",
          "tr",
          "fa",
          "vi",
          "id",
          "ko",
          "th",
          "he",
          "sr",
          "ca",
          "hi",
          "az",
          "gl"
        ],
        "gdprTransparencyLanguageSupported": true,
        "policyTextEvidenceProjectionStatus": "verified_partial",
        "policyTextEvidenceProjectionContractVersion": "certscore.policy-text-evidence-projection.v1"
      },
      "retainedPolicySectionHeadings": [],
      "selectedPrivacyPolicyDocument": null,
      "article13_coverage_assessments": [
        {
          "topic": "automated_decision_making_or_profiling",
          "status": "insufficient_retained_evidence",
          "sourceUrls": [],
          "reasonCodes": [
            "policy_absence_coverage_preconditions_not_met",
            "typed_topic_coverage_diagnostic_missing_or_limited"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [],
          "policyDocumentRoles": [],
          "policyDocumentSha256": [],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "controller_contact",
          "status": "insufficient_retained_evidence",
          "sourceUrls": [],
          "reasonCodes": [
            "policy_absence_coverage_preconditions_not_met",
            "typed_topic_coverage_diagnostic_missing_or_limited"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [],
          "policyDocumentRoles": [],
          "policyDocumentSha256": [],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "data_retention",
          "status": "insufficient_retained_evidence",
          "sourceUrls": [],
          "reasonCodes": [
            "policy_absence_coverage_preconditions_not_met",
            "typed_topic_coverage_diagnostic_missing_or_limited"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [],
          "policyDocumentRoles": [],
          "policyDocumentSha256": [],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "data_subject_rights",
          "status": "insufficient_retained_evidence",
          "sourceUrls": [],
          "reasonCodes": [
            "policy_absence_coverage_preconditions_not_met",
            "typed_topic_coverage_diagnostic_missing_or_limited"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [],
          "policyDocumentRoles": [],
          "policyDocumentSha256": [],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "dpo_contact",
          "status": "insufficient_retained_evidence",
          "sourceUrls": [],
          "reasonCodes": [
            "policy_absence_coverage_preconditions_not_met",
            "typed_topic_coverage_diagnostic_missing_or_limited"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [],
          "policyDocumentRoles": [],
          "policyDocumentSha256": [],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "international_transfers",
          "status": "insufficient_retained_evidence",
          "sourceUrls": [],
          "reasonCodes": [
            "policy_absence_coverage_preconditions_not_met",
            "typed_topic_coverage_diagnostic_missing_or_limited"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [],
          "policyDocumentRoles": [],
          "policyDocumentSha256": [],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "legal_basis",
          "status": "insufficient_retained_evidence",
          "sourceUrls": [],
          "reasonCodes": [
            "policy_absence_coverage_preconditions_not_met",
            "typed_topic_coverage_diagnostic_missing_or_limited"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [],
          "policyDocumentRoles": [],
          "policyDocumentSha256": [],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "processing_purposes",
          "status": "insufficient_retained_evidence",
          "sourceUrls": [],
          "reasonCodes": [
            "policy_absence_coverage_preconditions_not_met",
            "typed_topic_coverage_diagnostic_missing_or_limited"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [],
          "policyDocumentRoles": [],
          "policyDocumentSha256": [],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "recipients_or_vendor_categories",
          "status": "insufficient_retained_evidence",
          "sourceUrls": [],
          "reasonCodes": [
            "policy_absence_coverage_preconditions_not_met",
            "typed_topic_coverage_diagnostic_missing_or_limited"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [],
          "policyDocumentRoles": [],
          "policyDocumentSha256": [],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "supervisory_authority",
          "status": "insufficient_retained_evidence",
          "sourceUrls": [],
          "reasonCodes": [
            "policy_absence_coverage_preconditions_not_met",
            "typed_topic_coverage_diagnostic_missing_or_limited"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [],
          "policyDocumentRoles": [],
          "policyDocumentSha256": [],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        }
      ],
      "discoveredPrivacyPolicyDetails": [],
      "article13DisclosureTypesPartial": [],
      "discoveredPrivacyPolicyStatuses": [],
      "gdprTransparencyEvidenceProfile": "gdpr_transparency_multilingual_article13_v1",
      "policy_text_evidence_projection": {
        "scanId": "860c6f2d-7f46-4c66-8451-51e3f7405658",
        "documents": [],
        "generatedAt": "2026-10-12T19:32:43.623Z",
        "sourceBundle": {
          "uri": "s3://certscore-v2-dag-local-artifacts-eu-west-1-199536052647/v2-dag-lambda/local/860c6f2d-7f46-4c66-8451-51e3f7405658/CanonicalEvidenceBundle.json",
          "sha256": "bb27a716bf3bea28f1b66737f7ff103b42a9b425e389cc4c00e89618e8c0bf4b",
          "sizeBytes": 1428861,
          "schemaVersion": "certscore.v2.alpha.1",
          "verificationStatus": "verified"
        },
        "limitationKeys": [
          "verified_owned_complete_policy_document_unavailable"
        ],
        "contractVersion": "certscore.policy-text-evidence-projection.v1",
        "projectionStatus": "verified_partial"
      },
      "privacyPolicyTextCharacterCount": 0,
      "retainedCookiePolicyTextExcerpt": "",
      "validatedDisclosureTypesPartial": [],
      "article13DisclosureTypesObserved": [],
      "retainedArticle13SectionEvidence": [],
      "retainedPrivacyPolicyTextExcerpt": "",
      "validatedDisclosureTypesObserved": [],
      "privacyNoticeAvailabilityObserved": true,
      "evaluatedPrivacyPolicySurfaceCount": 0,
      "discardedArticle13DisclosureSignals": [],
      "staleLegalFrameworkReferenceObserved": false,
      "policyEvidenceProvenanceContractVersion": "certscore.policy-evidence-provenance.v1",
      "gdprTransparencyProductionEvidenceEnabled": true,
      "gdprTransparencyProductionEvidenceDiagnostics": {
        "sourceCandidateCount": 0,
        "candidateDispositions": [],
        "acceptedCandidateCount": 0,
        "rejectedCandidateCount": 0,
        "discardedCandidateCount": 0,
        "diagnosticCandidateCount": 0,
        "productionCreditSignalCount": 0
      }
    }
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Legal basisCoverage was limited by scan evidence; No production-approved topic match was established. This neutral result does not establish that the disclosure is absent; policy text extraction not_attempted; 0 characters retained; 500 required.Not confirmed

JSON evidence

Policy source

Captured page title: Policy source — URL not retained

Source policy language: Unknown; banner/page language: en; translation applied: No.

Policy reached through: Unknown; directly linked from scanned page: Unknown.

Section: Not retained.

No production-approved topic match was established. This neutral result does not establish that the disclosure is absent.

Full evidence JSON

{
  "assessmentStatus": "coverage_limitation",
  "checklistItemId": "legal_basis_disclosure_observed",
  "coverageArea": "Legal basis disclosure",
  "evidenceState": "not_testable",
  "explanation": "Whether retained privacy-policy evidence included a canonical legal-basis disclosure signal.",
  "note": "Whether retained privacy-policy evidence included a canonical legal-basis disclosure signal.",
  "status": "Not confirmed",
  "tone": "neutral",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.legal_basis_disclosure_observed.not_confirmed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.legal_basis_disclosure_observed"
  },
  "statusBasis": "No production-approved topic match was established. This neutral result does not establish that the disclosure is absent.",
  "retainedEvidence": {
    "remediation": {
      "kind": "steps",
      "steps": [
        "Review the governing policy section for the legal basis stated for each processing purpose; retain the exact excerpt and source URL.",
        "If relevant wording exists, record it for review and investigate extraction coverage. Unconfirmed evidence alone does not establish a missing disclosure.",
        "Retest the same policy version or record the revised version; verify that the extracted passage supports this specific topic, rather than nearby or unrelated wording."
      ]
    },
    "signalObserved": "not_confirmed_canonical_projection_unavailable",
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "canonicalProjectionState": "normalized_concern_unavailable",
    "policyEvidenceAssessment": {
      "result": "extraction_incomplete",
      "scoreEffect": "none",
      "topicRelevance": "unknown",
      "contractVersion": "certscore.policy-topic-evidence-assessment.v1"
    },
    "policyEvidenceProvenance": {
      "bannerLanguage": "en",
      "contractVersion": "certscore.policy-evidence-provenance.v1",
      "translationApplied": false
    },
    "selectedEvidenceStrength": "missing",
    "policyTextExtractionHealth": {
      "policyUrls": [],
      "nanoInvoked": false,
      "nanoSkipReason": "policy_text_input_limited",
      "contractVersion": "certscore.policy-text-extraction-health.v2",
      "policyTextQuality": {
        "reason": "empty_policy_text",
        "usable": false,
        "codeSignalCount": 0,
        "codeSymbolRatio": 0,
        "policyTermCount": 0,
        "alphabeticWordRatio": 0,
        "naturalLanguageSentenceCount": 0
      },
      "policyUrlRetained": false,
      "extractedTextLength": 0,
      "policySurfaceObserved": false,
      "detectedPolicyLanguage": "en",
      "extractionFailureReason": "privacy_policy_surface_not_observed",
      "minimumTextLengthRequired": 500,
      "policyTextExtractionStatus": "not_attempted",
      "verifiedPolicyDocumentCount": 0,
      "detectedPolicyLanguageSource": "site_fallback",
      "supportedGdprTransparencyLocales": [
        "en",
        "de",
        "fr",
        "es",
        "it",
        "nl",
        "pl",
        "pt",
        "ru",
        "ja",
        "zh",
        "ar",
        "sv",
        "ro",
        "cs",
        "el",
        "hu",
        "da",
        "fi",
        "sk",
        "bg",
        "hr",
        "nb",
        "sl",
        "lt",
        "lv",
        "et",
        "uk",
        "tr",
        "fa",
        "vi",
        "id",
        "ko",
        "th",
        "he",
        "sr",
        "ca",
        "hi",
        "az",
        "gl"
      ],
      "gdprTransparencyLanguageSupported": true,
      "policyTextEvidenceProjectionStatus": "verified_partial",
      "policyTextEvidenceProjectionContractVersion": "certscore.policy-text-evidence-projection.v1"
    },
    "selectedEvidenceArtifactId": "coverage_policy",
    "article13CoverageAssessment": {
      "topic": "legal_basis",
      "status": "insufficient_retained_evidence",
      "sourceUrls": [],
      "reasonCodes": [
        "policy_absence_coverage_preconditions_not_met",
        "typed_topic_coverage_diagnostic_missing_or_limited"
      ],
      "coverageStatus": "insufficient",
      "policyDocumentIds": [],
      "policyDocumentRoles": [],
      "policyDocumentSha256": [],
      "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
      "unresolvedMaterialPolicyChildUrls": []
    },
    "gdprTransparencyReportStatusContract": "observed_not_confirmed_no_match_found.v1"
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

1Review the governing policy section for the legal basis stated for each processing purpose; retain the exact excerpt and source URL.
2If relevant wording exists, record it for review and investigate extraction coverage. Unconfirmed evidence alone does not establish a missing disclosure.
3Retest the same policy version or record the revised version; verify that the extracted passage supports this specific topic, rather than nearby or unrelated wording.

Data retentionCoverage was limited by scan evidence; No production-approved topic match was established. This neutral result does not establish that the disclosure is absent; policy text extraction not_attempted; 0 characters retained; 500 required.Not confirmed

JSON evidence

Policy source

Captured page title: Policy source — URL not retained

Source policy language: Unknown; banner/page language: en; translation applied: No.

Policy reached through: Unknown; directly linked from scanned page: Unknown.

Section: Not retained.

No production-approved topic match was established. This neutral result does not establish that the disclosure is absent.

Full evidence JSON

{
  "assessmentStatus": "coverage_limitation",
  "checklistItemId": "retention_disclosure_observed",
  "coverageArea": "Retention disclosure",
  "evidenceState": "not_testable",
  "explanation": "Whether retained privacy-policy evidence included a data-retention disclosure signal.",
  "note": "Whether retained privacy-policy evidence included a data-retention disclosure signal.",
  "status": "Not confirmed",
  "tone": "neutral",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.retention_disclosure_observed.not_confirmed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.retention_disclosure_observed"
  },
  "statusBasis": "No production-approved topic match was established. This neutral result does not establish that the disclosure is absent.",
  "retainedEvidence": {
    "remediation": {
      "kind": "steps",
      "steps": [
        "Review the governing policy section for the retention period or substantive criteria for each relevant data category; retain the exact excerpt and source URL.",
        "If relevant wording exists, record it for review and investigate extraction coverage. Unconfirmed evidence alone does not establish a missing disclosure.",
        "Retest the same policy version or record the revised version; verify that the extracted passage supports this specific topic, rather than nearby or unrelated wording."
      ]
    },
    "signalObserved": "not_confirmed_canonical_projection_unavailable",
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "canonicalProjectionState": "normalized_concern_unavailable",
    "policyEvidenceAssessment": {
      "result": "extraction_incomplete",
      "scoreEffect": "none",
      "topicRelevance": "unknown",
      "contractVersion": "certscore.policy-topic-evidence-assessment.v1"
    },
    "policyEvidenceProvenance": {
      "bannerLanguage": "en",
      "contractVersion": "certscore.policy-evidence-provenance.v1",
      "translationApplied": false
    },
    "selectedEvidenceStrength": "missing",
    "policyTextExtractionHealth": {
      "policyUrls": [],
      "nanoInvoked": false,
      "nanoSkipReason": "policy_text_input_limited",
      "contractVersion": "certscore.policy-text-extraction-health.v2",
      "policyTextQuality": {
        "reason": "empty_policy_text",
        "usable": false,
        "codeSignalCount": 0,
        "codeSymbolRatio": 0,
        "policyTermCount": 0,
        "alphabeticWordRatio": 0,
        "naturalLanguageSentenceCount": 0
      },
      "policyUrlRetained": false,
      "extractedTextLength": 0,
      "policySurfaceObserved": false,
      "detectedPolicyLanguage": "en",
      "extractionFailureReason": "privacy_policy_surface_not_observed",
      "minimumTextLengthRequired": 500,
      "policyTextExtractionStatus": "not_attempted",
      "verifiedPolicyDocumentCount": 0,
      "detectedPolicyLanguageSource": "site_fallback",
      "supportedGdprTransparencyLocales": [
        "en",
        "de",
        "fr",
        "es",
        "it",
        "nl",
        "pl",
        "pt",
        "ru",
        "ja",
        "zh",
        "ar",
        "sv",
        "ro",
        "cs",
        "el",
        "hu",
        "da",
        "fi",
        "sk",
        "bg",
        "hr",
        "nb",
        "sl",
        "lt",
        "lv",
        "et",
        "uk",
        "tr",
        "fa",
        "vi",
        "id",
        "ko",
        "th",
        "he",
        "sr",
        "ca",
        "hi",
        "az",
        "gl"
      ],
      "gdprTransparencyLanguageSupported": true,
      "policyTextEvidenceProjectionStatus": "verified_partial",
      "policyTextEvidenceProjectionContractVersion": "certscore.policy-text-evidence-projection.v1"
    },
    "selectedEvidenceArtifactId": "coverage_policy",
    "article13CoverageAssessment": {
      "topic": "data_retention",
      "status": "insufficient_retained_evidence",
      "sourceUrls": [],
      "reasonCodes": [
        "policy_absence_coverage_preconditions_not_met",
        "typed_topic_coverage_diagnostic_missing_or_limited"
      ],
      "coverageStatus": "insufficient",
      "policyDocumentIds": [],
      "policyDocumentRoles": [],
      "policyDocumentSha256": [],
      "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
      "unresolvedMaterialPolicyChildUrls": []
    },
    "gdprTransparencyReportStatusContract": "observed_not_confirmed_no_match_found.v1"
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

1Review the governing policy section for the retention period or substantive criteria for each relevant data category; retain the exact excerpt and source URL.
2If relevant wording exists, record it for review and investigate extraction coverage. Unconfirmed evidence alone does not establish a missing disclosure.
3Retest the same policy version or record the revised version; verify that the extracted passage supports this specific topic, rather than nearby or unrelated wording.

Controller and contact detailsCoverage was limited by scan evidence; No production-approved topic match was established. This neutral result does not establish that the disclosure is absent; policy text extraction not_attempted; 0 characters retained; 500 required.Not confirmed

JSON evidence

Policy source

Captured page title: Policy source — URL not retained

Source policy language: Unknown; banner/page language: en; translation applied: No.

Policy reached through: Unknown; directly linked from scanned page: Unknown.

Section: Not retained.

No production-approved topic match was established. This neutral result does not establish that the disclosure is absent.

Full evidence JSON

{
  "assessmentStatus": "coverage_limitation",
  "checklistItemId": "controller_contact_disclosure",
  "coverageArea": "Controller/contact disclosure",
  "evidenceState": "not_testable",
  "explanation": "Whether retained privacy-policy evidence included a controller, privacy contact, or equivalent contact point.",
  "note": "Whether retained privacy-policy evidence included a controller, privacy contact, or equivalent contact point.",
  "status": "Not confirmed",
  "tone": "neutral",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.controller_contact_disclosure.not_confirmed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.controller_contact_disclosure"
  },
  "statusBasis": "No production-approved topic match was established. This neutral result does not establish that the disclosure is absent.",
  "retainedEvidence": {
    "remediation": {
      "kind": "steps",
      "steps": [
        "Review the governing policy section for the controller identity and contact details; retain the exact excerpt and source URL.",
        "If relevant wording exists, record it for review and investigate extraction coverage. Unconfirmed evidence alone does not establish a missing disclosure.",
        "Retest the same policy version or record the revised version; verify that the extracted passage supports this specific topic, rather than nearby or unrelated wording."
      ]
    },
    "signalObserved": "not_confirmed_canonical_projection_unavailable",
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "canonicalProjectionState": "normalized_concern_unavailable",
    "policyEvidenceAssessment": {
      "result": "extraction_incomplete",
      "scoreEffect": "none",
      "topicRelevance": "unknown",
      "contractVersion": "certscore.policy-topic-evidence-assessment.v1"
    },
    "policyEvidenceProvenance": {
      "bannerLanguage": "en",
      "contractVersion": "certscore.policy-evidence-provenance.v1",
      "translationApplied": false
    },
    "selectedEvidenceStrength": "missing",
    "policyTextExtractionHealth": {
      "policyUrls": [],
      "nanoInvoked": false,
      "nanoSkipReason": "policy_text_input_limited",
      "contractVersion": "certscore.policy-text-extraction-health.v2",
      "policyTextQuality": {
        "reason": "empty_policy_text",
        "usable": false,
        "codeSignalCount": 0,
        "codeSymbolRatio": 0,
        "policyTermCount": 0,
        "alphabeticWordRatio": 0,
        "naturalLanguageSentenceCount": 0
      },
      "policyUrlRetained": false,
      "extractedTextLength": 0,
      "policySurfaceObserved": false,
      "detectedPolicyLanguage": "en",
      "extractionFailureReason": "privacy_policy_surface_not_observed",
      "minimumTextLengthRequired": 500,
      "policyTextExtractionStatus": "not_attempted",
      "verifiedPolicyDocumentCount": 0,
      "detectedPolicyLanguageSource": "site_fallback",
      "supportedGdprTransparencyLocales": [
        "en",
        "de",
        "fr",
        "es",
        "it",
        "nl",
        "pl",
        "pt",
        "ru",
        "ja",
        "zh",
        "ar",
        "sv",
        "ro",
        "cs",
        "el",
        "hu",
        "da",
        "fi",
        "sk",
        "bg",
        "hr",
        "nb",
        "sl",
        "lt",
        "lv",
        "et",
        "uk",
        "tr",
        "fa",
        "vi",
        "id",
        "ko",
        "th",
        "he",
        "sr",
        "ca",
        "hi",
        "az",
        "gl"
      ],
      "gdprTransparencyLanguageSupported": true,
      "policyTextEvidenceProjectionStatus": "verified_partial",
      "policyTextEvidenceProjectionContractVersion": "certscore.policy-text-evidence-projection.v1"
    },
    "selectedEvidenceArtifactId": "coverage_policy",
    "article13CoverageAssessment": {
      "topic": "controller_contact",
      "status": "insufficient_retained_evidence",
      "sourceUrls": [],
      "reasonCodes": [
        "policy_absence_coverage_preconditions_not_met",
        "typed_topic_coverage_diagnostic_missing_or_limited"
      ],
      "coverageStatus": "insufficient",
      "policyDocumentIds": [],
      "policyDocumentRoles": [],
      "policyDocumentSha256": [],
      "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
      "unresolvedMaterialPolicyChildUrls": []
    },
    "gdprTransparencyReportStatusContract": "observed_not_confirmed_no_match_found.v1"
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

1Review the governing policy section for the controller identity and contact details; retain the exact excerpt and source URL.
2If relevant wording exists, record it for review and investigate extraction coverage. Unconfirmed evidence alone does not establish a missing disclosure.
3Retest the same policy version or record the revised version; verify that the extracted passage supports this specific topic, rather than nearby or unrelated wording.

Data use purposesCoverage was limited by scan evidence; No production-approved topic match was established. This neutral result does not establish that the disclosure is absent; policy text extraction not_attempted; 0 characters retained; 500 required.Not confirmed

JSON evidence

Policy source

Captured page title: Policy source — URL not retained

Source policy language: Unknown; banner/page language: en; translation applied: No.

Policy reached through: Unknown; directly linked from scanned page: Unknown.

Section: Not retained.

No production-approved topic match was established. This neutral result does not establish that the disclosure is absent.

Full evidence JSON

{
  "assessmentStatus": "coverage_limitation",
  "checklistItemId": "processing_purposes_disclosure",
  "coverageArea": "Processing purposes disclosure",
  "evidenceState": "not_testable",
  "explanation": "Whether retained privacy-policy evidence described the purposes for processing personal data.",
  "note": "Whether retained privacy-policy evidence described the purposes for processing personal data.",
  "status": "Not confirmed",
  "tone": "neutral",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.processing_purposes_disclosure.not_confirmed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.processing_purposes_disclosure"
  },
  "statusBasis": "No production-approved topic match was established. This neutral result does not establish that the disclosure is absent.",
  "retainedEvidence": {
    "remediation": {
      "kind": "steps",
      "steps": [
        "Review the governing policy section for the purposes for each described processing activity; retain the exact excerpt and source URL.",
        "If relevant wording exists, record it for review and investigate extraction coverage. Unconfirmed evidence alone does not establish a missing disclosure.",
        "Retest the same policy version or record the revised version; verify that the extracted passage supports this specific topic, rather than nearby or unrelated wording."
      ]
    },
    "signalObserved": "not_confirmed_canonical_projection_unavailable",
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "canonicalProjectionState": "normalized_concern_unavailable",
    "policyEvidenceAssessment": {
      "result": "extraction_incomplete",
      "scoreEffect": "none",
      "topicRelevance": "unknown",
      "contractVersion": "certscore.policy-topic-evidence-assessment.v1"
    },
    "policyEvidenceProvenance": {
      "bannerLanguage": "en",
      "contractVersion": "certscore.policy-evidence-provenance.v1",
      "translationApplied": false
    },
    "selectedEvidenceStrength": "missing",
    "policyTextExtractionHealth": {
      "policyUrls": [],
      "nanoInvoked": false,
      "nanoSkipReason": "policy_text_input_limited",
      "contractVersion": "certscore.policy-text-extraction-health.v2",
      "policyTextQuality": {
        "reason": "empty_policy_text",
        "usable": false,
        "codeSignalCount": 0,
        "codeSymbolRatio": 0,
        "policyTermCount": 0,
        "alphabeticWordRatio": 0,
        "naturalLanguageSentenceCount": 0
      },
      "policyUrlRetained": false,
      "extractedTextLength": 0,
      "policySurfaceObserved": false,
      "detectedPolicyLanguage": "en",
      "extractionFailureReason": "privacy_policy_surface_not_observed",
      "minimumTextLengthRequired": 500,
      "policyTextExtractionStatus": "not_attempted",
      "verifiedPolicyDocumentCount": 0,
      "detectedPolicyLanguageSource": "site_fallback",
      "supportedGdprTransparencyLocales": [
        "en",
        "de",
        "fr",
        "es",
        "it",
        "nl",
        "pl",
        "pt",
        "ru",
        "ja",
        "zh",
        "ar",
        "sv",
        "ro",
        "cs",
        "el",
        "hu",
        "da",
        "fi",
        "sk",
        "bg",
        "hr",
        "nb",
        "sl",
        "lt",
        "lv",
        "et",
        "uk",
        "tr",
        "fa",
        "vi",
        "id",
        "ko",
        "th",
        "he",
        "sr",
        "ca",
        "hi",
        "az",
        "gl"
      ],
      "gdprTransparencyLanguageSupported": true,
      "policyTextEvidenceProjectionStatus": "verified_partial",
      "policyTextEvidenceProjectionContractVersion": "certscore.policy-text-evidence-projection.v1"
    },
    "selectedEvidenceArtifactId": "coverage_policy",
    "article13CoverageAssessment": {
      "topic": "processing_purposes",
      "status": "insufficient_retained_evidence",
      "sourceUrls": [],
      "reasonCodes": [
        "policy_absence_coverage_preconditions_not_met",
        "typed_topic_coverage_diagnostic_missing_or_limited"
      ],
      "coverageStatus": "insufficient",
      "policyDocumentIds": [],
      "policyDocumentRoles": [],
      "policyDocumentSha256": [],
      "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
      "unresolvedMaterialPolicyChildUrls": []
    },
    "gdprTransparencyReportStatusContract": "observed_not_confirmed_no_match_found.v1"
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

1Review the governing policy section for the purposes for each described processing activity; retain the exact excerpt and source URL.
2If relevant wording exists, record it for review and investigate extraction coverage. Unconfirmed evidence alone does not establish a missing disclosure.
3Retest the same policy version or record the revised version; verify that the extracted passage supports this specific topic, rather than nearby or unrelated wording.

Recipients and vendor categoriesCoverage was limited by scan evidence; No production-approved topic match was established. This neutral result does not establish that the disclosure is absent; policy text extraction not_attempted; 0 characters retained; 500 required.Not confirmed

JSON evidence

Policy source

Captured page title: Policy source — URL not retained

Source policy language: Unknown; banner/page language: en; translation applied: No.

Policy reached through: Unknown; directly linked from scanned page: Unknown.

Section: Not retained.

No production-approved topic match was established. This neutral result does not establish that the disclosure is absent.

Full evidence JSON

{
  "assessmentStatus": "coverage_limitation",
  "checklistItemId": "recipients_vendor_categories_disclosure",
  "coverageArea": "Recipients/vendor categories disclosed",
  "evidenceState": "not_testable",
  "explanation": "Whether retained privacy-policy evidence described recipient, vendor, or 3rd party categories.",
  "note": "Whether retained privacy-policy evidence described recipient, vendor, or 3rd party categories.",
  "status": "Not confirmed",
  "tone": "neutral",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.recipients_vendor_categories_disclosure.not_confirmed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.recipients_vendor_categories_disclosure"
  },
  "statusBasis": "No production-approved topic match was established. This neutral result does not establish that the disclosure is absent.",
  "retainedEvidence": {
    "remediation": {
      "kind": "steps",
      "steps": [
        "Review the governing policy section for the recipients or recipient categories that receive personal data; retain the exact excerpt and source URL.",
        "If relevant wording exists, record it for review and investigate extraction coverage. Unconfirmed evidence alone does not establish a missing disclosure.",
        "Retest the same policy version or record the revised version; verify that the extracted passage supports this specific topic, rather than nearby or unrelated wording."
      ]
    },
    "signalObserved": "not_confirmed_canonical_projection_unavailable",
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "canonicalProjectionState": "normalized_concern_unavailable",
    "policyEvidenceAssessment": {
      "result": "extraction_incomplete",
      "scoreEffect": "none",
      "topicRelevance": "unknown",
      "contractVersion": "certscore.policy-topic-evidence-assessment.v1"
    },
    "policyEvidenceProvenance": {
      "bannerLanguage": "en",
      "contractVersion": "certscore.policy-evidence-provenance.v1",
      "translationApplied": false
    },
    "selectedEvidenceStrength": "missing",
    "policyTextExtractionHealth": {
      "policyUrls": [],
      "nanoInvoked": false,
      "nanoSkipReason": "policy_text_input_limited",
      "contractVersion": "certscore.policy-text-extraction-health.v2",
      "policyTextQuality": {
        "reason": "empty_policy_text",
        "usable": false,
        "codeSignalCount": 0,
        "codeSymbolRatio": 0,
        "policyTermCount": 0,
        "alphabeticWordRatio": 0,
        "naturalLanguageSentenceCount": 0
      },
      "policyUrlRetained": false,
      "extractedTextLength": 0,
      "policySurfaceObserved": false,
      "detectedPolicyLanguage": "en",
      "extractionFailureReason": "privacy_policy_surface_not_observed",
      "minimumTextLengthRequired": 500,
      "policyTextExtractionStatus": "not_attempted",
      "verifiedPolicyDocumentCount": 0,
      "detectedPolicyLanguageSource": "site_fallback",
      "supportedGdprTransparencyLocales": [
        "en",
        "de",
        "fr",
        "es",
        "it",
        "nl",
        "pl",
        "pt",
        "ru",
        "ja",
        "zh",
        "ar",
        "sv",
        "ro",
        "cs",
        "el",
        "hu",
        "da",
        "fi",
        "sk",
        "bg",
        "hr",
        "nb",
        "sl",
        "lt",
        "lv",
        "et",
        "uk",
        "tr",
        "fa",
        "vi",
        "id",
        "ko",
        "th",
        "he",
        "sr",
        "ca",
        "hi",
        "az",
        "gl"
      ],
      "gdprTransparencyLanguageSupported": true,
      "policyTextEvidenceProjectionStatus": "verified_partial",
      "policyTextEvidenceProjectionContractVersion": "certscore.policy-text-evidence-projection.v1"
    },
    "selectedEvidenceArtifactId": "coverage_policy",
    "article13CoverageAssessment": {
      "topic": "recipients_or_vendor_categories",
      "status": "insufficient_retained_evidence",
      "sourceUrls": [],
      "reasonCodes": [
        "policy_absence_coverage_preconditions_not_met",
        "typed_topic_coverage_diagnostic_missing_or_limited"
      ],
      "coverageStatus": "insufficient",
      "policyDocumentIds": [],
      "policyDocumentRoles": [],
      "policyDocumentSha256": [],
      "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
      "unresolvedMaterialPolicyChildUrls": []
    },
    "gdprTransparencyReportStatusContract": "observed_not_confirmed_no_match_found.v1"
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

1Review the governing policy section for the recipients or recipient categories that receive personal data; retain the exact excerpt and source URL.
2If relevant wording exists, record it for review and investigate extraction coverage. Unconfirmed evidence alone does not establish a missing disclosure.
3Retest the same policy version or record the revised version; verify that the extracted passage supports this specific topic, rather than nearby or unrelated wording.

Privacy rightsCoverage was limited by scan evidence; No production-approved topic match was established. This neutral result does not establish that the disclosure is absent; policy text extraction not_attempted; 0 characters retained; 500 required.Not confirmed

JSON evidence

Policy source

Captured page title: Policy source — URL not retained

Source policy language: Unknown; banner/page language: en; translation applied: No.

Policy reached through: Unknown; directly linked from scanned page: Unknown.

Section: Not retained.

No production-approved topic match was established. This neutral result does not establish that the disclosure is absent.

Full evidence JSON

{
  "assessmentStatus": "coverage_limitation",
  "checklistItemId": "data_subject_rights_disclosure",
  "coverageArea": "Data subject rights disclosure",
  "evidenceState": "not_testable",
  "explanation": "Whether retained privacy-policy evidence described data subject rights or a rights request path.",
  "note": "Whether retained privacy-policy evidence described data subject rights or a rights request path.",
  "status": "Not confirmed",
  "tone": "neutral",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.data_subject_rights_disclosure.not_confirmed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.data_subject_rights_disclosure"
  },
  "statusBasis": "No production-approved topic match was established. This neutral result does not establish that the disclosure is absent.",
  "retainedEvidence": {
    "remediation": {
      "kind": "steps",
      "steps": [
        "Review the governing policy section for the applicable rights and how to exercise them; retain the exact excerpt and source URL.",
        "If relevant wording exists, record it for review and investigate extraction coverage. Unconfirmed evidence alone does not establish a missing disclosure.",
        "Retest the same policy version or record the revised version; verify that the extracted passage supports this specific topic, rather than nearby or unrelated wording."
      ]
    },
    "signalObserved": "not_confirmed_canonical_projection_unavailable",
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "canonicalProjectionState": "normalized_concern_unavailable",
    "policyEvidenceAssessment": {
      "result": "extraction_incomplete",
      "scoreEffect": "none",
      "topicRelevance": "unknown",
      "contractVersion": "certscore.policy-topic-evidence-assessment.v1"
    },
    "policyEvidenceProvenance": {
      "bannerLanguage": "en",
      "contractVersion": "certscore.policy-evidence-provenance.v1",
      "translationApplied": false
    },
    "selectedEvidenceStrength": "missing",
    "policyTextExtractionHealth": {
      "policyUrls": [],
      "nanoInvoked": false,
      "nanoSkipReason": "policy_text_input_limited",
      "contractVersion": "certscore.policy-text-extraction-health.v2",
      "policyTextQuality": {
        "reason": "empty_policy_text",
        "usable": false,
        "codeSignalCount": 0,
        "codeSymbolRatio": 0,
        "policyTermCount": 0,
        "alphabeticWordRatio": 0,
        "naturalLanguageSentenceCount": 0
      },
      "policyUrlRetained": false,
      "extractedTextLength": 0,
      "policySurfaceObserved": false,
      "detectedPolicyLanguage": "en",
      "extractionFailureReason": "privacy_policy_surface_not_observed",
      "minimumTextLengthRequired": 500,
      "policyTextExtractionStatus": "not_attempted",
      "verifiedPolicyDocumentCount": 0,
      "detectedPolicyLanguageSource": "site_fallback",
      "supportedGdprTransparencyLocales": [
        "en",
        "de",
        "fr",
        "es",
        "it",
        "nl",
        "pl",
        "pt",
        "ru",
        "ja",
        "zh",
        "ar",
        "sv",
        "ro",
        "cs",
        "el",
        "hu",
        "da",
        "fi",
        "sk",
        "bg",
        "hr",
        "nb",
        "sl",
        "lt",
        "lv",
        "et",
        "uk",
        "tr",
        "fa",
        "vi",
        "id",
        "ko",
        "th",
        "he",
        "sr",
        "ca",
        "hi",
        "az",
        "gl"
      ],
      "gdprTransparencyLanguageSupported": true,
      "policyTextEvidenceProjectionStatus": "verified_partial",
      "policyTextEvidenceProjectionContractVersion": "certscore.policy-text-evidence-projection.v1"
    },
    "selectedEvidenceArtifactId": "coverage_policy",
    "article13CoverageAssessment": {
      "topic": "data_subject_rights",
      "status": "insufficient_retained_evidence",
      "sourceUrls": [],
      "reasonCodes": [
        "policy_absence_coverage_preconditions_not_met",
        "typed_topic_coverage_diagnostic_missing_or_limited"
      ],
      "coverageStatus": "insufficient",
      "policyDocumentIds": [],
      "policyDocumentRoles": [],
      "policyDocumentSha256": [],
      "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
      "unresolvedMaterialPolicyChildUrls": []
    },
    "gdprTransparencyReportStatusContract": "observed_not_confirmed_no_match_found.v1"
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

1Review the governing policy section for the applicable rights and how to exercise them; retain the exact excerpt and source URL.
2If relevant wording exists, record it for review and investigate extraction coverage. Unconfirmed evidence alone does not establish a missing disclosure.
3Retest the same policy version or record the revised version; verify that the extracted passage supports this specific topic, rather than nearby or unrelated wording.

International data transfersCoverage was limited by scan evidence; No production-approved topic match was established. This neutral result does not establish that the disclosure is absent; policy text extraction not_attempted; 0 characters retained; 500 required.Not confirmed

JSON evidence

Policy source

Captured page title: Policy source — URL not retained

Source policy language: Unknown; banner/page language: en; translation applied: No.

Policy reached through: Unknown; directly linked from scanned page: Unknown.

Section: Not retained.

No production-approved topic match was established. This neutral result does not establish that the disclosure is absent.

Full evidence JSON

{
  "assessmentStatus": "coverage_limitation",
  "checklistItemId": "international_transfers_disclosure",
  "coverageArea": "International transfer disclosure",
  "evidenceState": "not_testable",
  "explanation": "Whether retained privacy-policy evidence described international transfers or transfer-relevant endpoint/vendor context.",
  "note": "Whether retained privacy-policy evidence described international transfers or transfer-relevant endpoint/vendor context.",
  "status": "Not confirmed",
  "tone": "neutral",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.international_transfers_disclosure.not_confirmed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.international_transfers_disclosure"
  },
  "statusBasis": "No production-approved topic match was established. This neutral result does not establish that the disclosure is absent.",
  "retainedEvidence": {
    "remediation": {
      "kind": "steps",
      "steps": [
        "Review the governing policy section for the intended international transfers and applicable safeguard information; retain the exact excerpt and source URL.",
        "If relevant wording exists, record it for review and investigate extraction coverage. Unconfirmed evidence alone does not establish a missing disclosure.",
        "Retest the same policy version or record the revised version; verify that the extracted passage supports this specific topic, rather than nearby or unrelated wording."
      ]
    },
    "signalObserved": "not_confirmed_canonical_projection_unavailable",
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "canonicalProjectionState": "normalized_concern_unavailable",
    "policyEvidenceAssessment": {
      "result": "extraction_incomplete",
      "scoreEffect": "none",
      "topicRelevance": "unknown",
      "contractVersion": "certscore.policy-topic-evidence-assessment.v1"
    },
    "policyEvidenceProvenance": {
      "bannerLanguage": "en",
      "contractVersion": "certscore.policy-evidence-provenance.v1",
      "translationApplied": false
    },
    "selectedEvidenceStrength": "missing",
    "policyTextExtractionHealth": {
      "policyUrls": [],
      "nanoInvoked": false,
      "nanoSkipReason": "policy_text_input_limited",
      "contractVersion": "certscore.policy-text-extraction-health.v2",
      "policyTextQuality": {
        "reason": "empty_policy_text",
        "usable": false,
        "codeSignalCount": 0,
        "codeSymbolRatio": 0,
        "policyTermCount": 0,
        "alphabeticWordRatio": 0,
        "naturalLanguageSentenceCount": 0
      },
      "policyUrlRetained": false,
      "extractedTextLength": 0,
      "policySurfaceObserved": false,
      "detectedPolicyLanguage": "en",
      "extractionFailureReason": "privacy_policy_surface_not_observed",
      "minimumTextLengthRequired": 500,
      "policyTextExtractionStatus": "not_attempted",
      "verifiedPolicyDocumentCount": 0,
      "detectedPolicyLanguageSource": "site_fallback",
      "supportedGdprTransparencyLocales": [
        "en",
        "de",
        "fr",
        "es",
        "it",
        "nl",
        "pl",
        "pt",
        "ru",
        "ja",
        "zh",
        "ar",
        "sv",
        "ro",
        "cs",
        "el",
        "hu",
        "da",
        "fi",
        "sk",
        "bg",
        "hr",
        "nb",
        "sl",
        "lt",
        "lv",
        "et",
        "uk",
        "tr",
        "fa",
        "vi",
        "id",
        "ko",
        "th",
        "he",
        "sr",
        "ca",
        "hi",
        "az",
        "gl"
      ],
      "gdprTransparencyLanguageSupported": true,
      "policyTextEvidenceProjectionStatus": "verified_partial",
      "policyTextEvidenceProjectionContractVersion": "certscore.policy-text-evidence-projection.v1"
    },
    "selectedEvidenceArtifactId": "coverage_policy",
    "article13CoverageAssessment": {
      "topic": "international_transfers",
      "status": "insufficient_retained_evidence",
      "sourceUrls": [],
      "reasonCodes": [
        "policy_absence_coverage_preconditions_not_met",
        "typed_topic_coverage_diagnostic_missing_or_limited"
      ],
      "coverageStatus": "insufficient",
      "policyDocumentIds": [],
      "policyDocumentRoles": [],
      "policyDocumentSha256": [],
      "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
      "unresolvedMaterialPolicyChildUrls": []
    },
    "gdprTransparencyReportStatusContract": "observed_not_confirmed_no_match_found.v1"
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

1Review the governing policy section for the intended international transfers and applicable safeguard information; retain the exact excerpt and source URL.
2If relevant wording exists, record it for review and investigate extraction coverage. Unconfirmed evidence alone does not establish a missing disclosure.
3Retest the same policy version or record the revised version; verify that the extracted passage supports this specific topic, rather than nearby or unrelated wording.

DPO contact (if applicable)Coverage was limited by scan evidence; No production-approved topic match was established. This neutral result does not establish that the disclosure is absent; policy text extraction not_attempted; 0 characters retained; 500 required.Not confirmed

JSON evidence

Policy source

Captured page title: Policy source — URL not retained

Source policy language: Unknown; banner/page language: en; translation applied: No.

Policy reached through: Unknown; directly linked from scanned page: Unknown.

Section: Not retained.

No production-approved topic match was established. This neutral result does not establish that the disclosure is absent.

Full evidence JSON

{
  "assessmentStatus": "coverage_limitation",
  "checklistItemId": "dpo_contact_point_disclosure",
  "coverageArea": "DPO contact point (where applicable)",
  "evidenceState": "not_testable",
  "explanation": "Whether retained privacy-policy evidence identified a designated data protection officer or equivalent statutory DPO contact. A generic privacy mailbox is credited under controller/contact disclosure and does not by itself establish a DPO designation.",
  "note": "Whether retained privacy-policy evidence identified a designated data protection officer or equivalent statutory DPO contact. A generic privacy mailbox is credited under controller/contact disclosure and does not by itself establish a DPO designation.",
  "status": "Not confirmed",
  "tone": "neutral",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.dpo_contact_point_disclosure.not_confirmed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.dpo_contact_point_disclosure"
  },
  "statusBasis": "No production-approved topic match was established. This neutral result does not establish that the disclosure is absent.",
  "retainedEvidence": {
    "remediation": {
      "kind": "steps",
      "steps": [
        "Review the governing policy section for an expressly designated Data Protection Officer and contact route, where applicable; retain the exact excerpt and source URL.",
        "Determine whether DPO designation is required separately. A generic privacy mailbox does not prove a designation.",
        "If relevant wording exists, record it for review and investigate extraction coverage. Unconfirmed evidence alone does not establish a missing disclosure.",
        "Retest the same policy version or record the revised version; verify that the extracted passage supports this specific topic, rather than nearby or unrelated wording."
      ]
    },
    "signalObserved": "not_confirmed_canonical_projection_unavailable",
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "canonicalProjectionState": "normalized_concern_unavailable",
    "policyEvidenceAssessment": {
      "result": "extraction_incomplete",
      "scoreEffect": "none",
      "topicRelevance": "unknown",
      "contractVersion": "certscore.policy-topic-evidence-assessment.v1"
    },
    "policyEvidenceProvenance": {
      "bannerLanguage": "en",
      "contractVersion": "certscore.policy-evidence-provenance.v1",
      "translationApplied": false
    },
    "selectedEvidenceStrength": "missing",
    "policyTextExtractionHealth": {
      "policyUrls": [],
      "nanoInvoked": false,
      "nanoSkipReason": "policy_text_input_limited",
      "contractVersion": "certscore.policy-text-extraction-health.v2",
      "policyTextQuality": {
        "reason": "empty_policy_text",
        "usable": false,
        "codeSignalCount": 0,
        "codeSymbolRatio": 0,
        "policyTermCount": 0,
        "alphabeticWordRatio": 0,
        "naturalLanguageSentenceCount": 0
      },
      "policyUrlRetained": false,
      "extractedTextLength": 0,
      "policySurfaceObserved": false,
      "detectedPolicyLanguage": "en",
      "extractionFailureReason": "privacy_policy_surface_not_observed",
      "minimumTextLengthRequired": 500,
      "policyTextExtractionStatus": "not_attempted",
      "verifiedPolicyDocumentCount": 0,
      "detectedPolicyLanguageSource": "site_fallback",
      "supportedGdprTransparencyLocales": [
        "en",
        "de",
        "fr",
        "es",
        "it",
        "nl",
        "pl",
        "pt",
        "ru",
        "ja",
        "zh",
        "ar",
        "sv",
        "ro",
        "cs",
        "el",
        "hu",
        "da",
        "fi",
        "sk",
        "bg",
        "hr",
        "nb",
        "sl",
        "lt",
        "lv",
        "et",
        "uk",
        "tr",
        "fa",
        "vi",
        "id",
        "ko",
        "th",
        "he",
        "sr",
        "ca",
        "hi",
        "az",
        "gl"
      ],
      "gdprTransparencyLanguageSupported": true,
      "policyTextEvidenceProjectionStatus": "verified_partial",
      "policyTextEvidenceProjectionContractVersion": "certscore.policy-text-evidence-projection.v1"
    },
    "selectedEvidenceArtifactId": "coverage_policy",
    "article13CoverageAssessment": {
      "topic": "dpo_contact",
      "status": "insufficient_retained_evidence",
      "sourceUrls": [],
      "reasonCodes": [
        "policy_absence_coverage_preconditions_not_met",
        "typed_topic_coverage_diagnostic_missing_or_limited"
      ],
      "coverageStatus": "insufficient",
      "policyDocumentIds": [],
      "policyDocumentRoles": [],
      "policyDocumentSha256": [],
      "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
      "unresolvedMaterialPolicyChildUrls": []
    },
    "gdprTransparencyReportStatusContract": "observed_not_confirmed_no_match_found.v1"
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

1Review the governing policy section for an expressly designated Data Protection Officer and contact route, where applicable; retain the exact excerpt and source URL.
2Determine whether DPO designation is required separately. A generic privacy mailbox does not prove a designation.
3If relevant wording exists, record it for review and investigate extraction coverage. Unconfirmed evidence alone does not establish a missing disclosure.
4Retest the same policy version or record the revised version; verify that the extracted passage supports this specific topic, rather than nearby or unrelated wording.

Complaints to a regulatorCoverage was limited by scan evidence; No production-approved topic match was established. This neutral result does not establish that the disclosure is absent; policy text extraction not_attempted; 0 characters retained; 500 required.Not confirmed

JSON evidence

Policy source

Captured page title: Policy source — URL not retained

Source policy language: Unknown; banner/page language: en; translation applied: No.

Policy reached through: Unknown; directly linked from scanned page: Unknown.

Section: Not retained.

No production-approved topic match was established. This neutral result does not establish that the disclosure is absent.

Full evidence JSON

{
  "assessmentStatus": "coverage_limitation",
  "checklistItemId": "supervisory_authority_complaint_disclosure",
  "coverageArea": "Supervisory authority complaint",
  "evidenceState": "not_testable",
  "explanation": "Whether retained privacy-policy evidence referenced a right to complain to a supervisory authority.",
  "note": "Whether retained privacy-policy evidence referenced a right to complain to a supervisory authority.",
  "status": "Not confirmed",
  "tone": "neutral",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.supervisory_authority_complaint_disclosure.not_confirmed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.supervisory_authority_complaint_disclosure"
  },
  "statusBasis": "No production-approved topic match was established. This neutral result does not establish that the disclosure is absent.",
  "retainedEvidence": {
    "remediation": {
      "kind": "steps",
      "steps": [
        "Review the governing policy section for the right to complain to a supervisory authority; retain the exact excerpt and source URL.",
        "If relevant wording exists, record it for review and investigate extraction coverage. Unconfirmed evidence alone does not establish a missing disclosure.",
        "Retest the same policy version or record the revised version; verify that the extracted passage supports this specific topic, rather than nearby or unrelated wording."
      ]
    },
    "signalObserved": "not_confirmed_canonical_projection_unavailable",
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "canonicalProjectionState": "normalized_concern_unavailable",
    "policyEvidenceAssessment": {
      "result": "extraction_incomplete",
      "scoreEffect": "none",
      "topicRelevance": "unknown",
      "contractVersion": "certscore.policy-topic-evidence-assessment.v1"
    },
    "policyEvidenceProvenance": {
      "bannerLanguage": "en",
      "contractVersion": "certscore.policy-evidence-provenance.v1",
      "translationApplied": false
    },
    "selectedEvidenceStrength": "missing",
    "policyTextExtractionHealth": {
      "policyUrls": [],
      "nanoInvoked": false,
      "nanoSkipReason": "policy_text_input_limited",
      "contractVersion": "certscore.policy-text-extraction-health.v2",
      "policyTextQuality": {
        "reason": "empty_policy_text",
        "usable": false,
        "codeSignalCount": 0,
        "codeSymbolRatio": 0,
        "policyTermCount": 0,
        "alphabeticWordRatio": 0,
        "naturalLanguageSentenceCount": 0
      },
      "policyUrlRetained": false,
      "extractedTextLength": 0,
      "policySurfaceObserved": false,
      "detectedPolicyLanguage": "en",
      "extractionFailureReason": "privacy_policy_surface_not_observed",
      "minimumTextLengthRequired": 500,
      "policyTextExtractionStatus": "not_attempted",
      "verifiedPolicyDocumentCount": 0,
      "detectedPolicyLanguageSource": "site_fallback",
      "supportedGdprTransparencyLocales": [
        "en",
        "de",
        "fr",
        "es",
        "it",
        "nl",
        "pl",
        "pt",
        "ru",
        "ja",
        "zh",
        "ar",
        "sv",
        "ro",
        "cs",
        "el",
        "hu",
        "da",
        "fi",
        "sk",
        "bg",
        "hr",
        "nb",
        "sl",
        "lt",
        "lv",
        "et",
        "uk",
        "tr",
        "fa",
        "vi",
        "id",
        "ko",
        "th",
        "he",
        "sr",
        "ca",
        "hi",
        "az",
        "gl"
      ],
      "gdprTransparencyLanguageSupported": true,
      "policyTextEvidenceProjectionStatus": "verified_partial",
      "policyTextEvidenceProjectionContractVersion": "certscore.policy-text-evidence-projection.v1"
    },
    "selectedEvidenceArtifactId": "coverage_policy",
    "article13CoverageAssessment": {
      "topic": "supervisory_authority",
      "status": "insufficient_retained_evidence",
      "sourceUrls": [],
      "reasonCodes": [
        "policy_absence_coverage_preconditions_not_met",
        "typed_topic_coverage_diagnostic_missing_or_limited"
      ],
      "coverageStatus": "insufficient",
      "policyDocumentIds": [],
      "policyDocumentRoles": [],
      "policyDocumentSha256": [],
      "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
      "unresolvedMaterialPolicyChildUrls": []
    },
    "gdprTransparencyReportStatusContract": "observed_not_confirmed_no_match_found.v1"
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

1Review the governing policy section for the right to complain to a supervisory authority; retain the exact excerpt and source URL.
2If relevant wording exists, record it for review and investigate extraction coverage. Unconfirmed evidence alone does not establish a missing disclosure.
3Retest the same policy version or record the revised version; verify that the extracted passage supports this specific topic, rather than nearby or unrelated wording.

Profiling and automated decisionsCoverage was limited by scan evidence; No production-approved topic match was established. This neutral result does not establish that the disclosure is absent; policy text extraction not_attempted; 0 characters retained; 500 required.Not confirmed

JSON evidence

Policy source

Captured page title: Policy source — URL not retained

Source policy language: Unknown; banner/page language: en; translation applied: No.

Policy reached through: Unknown; directly linked from scanned page: Unknown.

Section: Not retained.

No production-approved topic match was established. This neutral result does not establish that the disclosure is absent.

Full evidence JSON

{
  "assessmentStatus": "coverage_limitation",
  "checklistItemId": "automated_decision_making_profiling_disclosure",
  "coverageArea": "Profiling / automated decisions disclosure",
  "evidenceState": "not_testable",
  "explanation": "Whether adapter-approved Article 13 evidence retained automated decision-making or profiling disclosure context for review.",
  "note": "Whether adapter-approved Article 13 evidence retained automated decision-making or profiling disclosure context for review.",
  "status": "Not confirmed",
  "tone": "neutral",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.automated_decision_making_profiling_disclosure.not_confirmed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.automated_decision_making_profiling_disclosure"
  },
  "statusBasis": "No production-approved topic match was established. This neutral result does not establish that the disclosure is absent.",
  "retainedEvidence": {
    "remediation": {
      "kind": "steps",
      "steps": [
        "Review the governing policy section for the applicable automated decision-making or profiling disclosures; retain the exact excerpt and source URL.",
        "If relevant wording exists, record it for review and investigate extraction coverage. Unconfirmed evidence alone does not establish a missing disclosure.",
        "Retest the same policy version or record the revised version; verify that the extracted passage supports this specific topic, rather than nearby or unrelated wording."
      ]
    },
    "signalObserved": "not_confirmed_canonical_projection_unavailable",
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "canonicalProjectionState": "normalized_concern_unavailable",
    "policyEvidenceAssessment": {
      "result": "extraction_incomplete",
      "scoreEffect": "none",
      "topicRelevance": "unknown",
      "contractVersion": "certscore.policy-topic-evidence-assessment.v1"
    },
    "policyEvidenceProvenance": {
      "bannerLanguage": "en",
      "contractVersion": "certscore.policy-evidence-provenance.v1",
      "translationApplied": false
    },
    "selectedEvidenceStrength": "missing",
    "policyTextExtractionHealth": {
      "policyUrls": [],
      "nanoInvoked": false,
      "nanoSkipReason": "policy_text_input_limited",
      "contractVersion": "certscore.policy-text-extraction-health.v2",
      "policyTextQuality": {
        "reason": "empty_policy_text",
        "usable": false,
        "codeSignalCount": 0,
        "codeSymbolRatio": 0,
        "policyTermCount": 0,
        "alphabeticWordRatio": 0,
        "naturalLanguageSentenceCount": 0
      },
      "policyUrlRetained": false,
      "extractedTextLength": 0,
      "policySurfaceObserved": false,
      "detectedPolicyLanguage": "en",
      "extractionFailureReason": "privacy_policy_surface_not_observed",
      "minimumTextLengthRequired": 500,
      "policyTextExtractionStatus": "not_attempted",
      "verifiedPolicyDocumentCount": 0,
      "detectedPolicyLanguageSource": "site_fallback",
      "supportedGdprTransparencyLocales": [
        "en",
        "de",
        "fr",
        "es",
        "it",
        "nl",
        "pl",
        "pt",
        "ru",
        "ja",
        "zh",
        "ar",
        "sv",
        "ro",
        "cs",
        "el",
        "hu",
        "da",
        "fi",
        "sk",
        "bg",
        "hr",
        "nb",
        "sl",
        "lt",
        "lv",
        "et",
        "uk",
        "tr",
        "fa",
        "vi",
        "id",
        "ko",
        "th",
        "he",
        "sr",
        "ca",
        "hi",
        "az",
        "gl"
      ],
      "gdprTransparencyLanguageSupported": true,
      "policyTextEvidenceProjectionStatus": "verified_partial",
      "policyTextEvidenceProjectionContractVersion": "certscore.policy-text-evidence-projection.v1"
    },
    "selectedEvidenceArtifactId": "coverage_policy",
    "article13CoverageAssessment": {
      "topic": "automated_decision_making_or_profiling",
      "status": "insufficient_retained_evidence",
      "sourceUrls": [],
      "reasonCodes": [
        "policy_absence_coverage_preconditions_not_met",
        "typed_topic_coverage_diagnostic_missing_or_limited"
      ],
      "coverageStatus": "insufficient",
      "policyDocumentIds": [],
      "policyDocumentRoles": [],
      "policyDocumentSha256": [],
      "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
      "unresolvedMaterialPolicyChildUrls": []
    },
    "gdprTransparencyReportStatusContract": "observed_not_confirmed_no_match_found.v1"
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

1Review the governing policy section for the applicable automated decision-making or profiling disclosures; retain the exact excerpt and source URL.
2If relevant wording exists, record it for review and investigate extraction coverage. Unconfirmed evidence alone does not establish a missing disclosure.
3Retest the same policy version or record the revised version; verify that the extracted passage supports this specific topic, rather than nearby or unrelated wording.

Cookie disclosureCould not be fully evaluated using source-signal coverage evidence; Missing or incomplete source signal: expected complete; retained complete; expected complete; retained limited.Limited

JSON evidence

Evidence limitation: incomplete canonical cookie-notice/policy coverage

Full evidence JSON

{
  "assessmentStatus": "coverage_limitation",
  "checklistItemId": "cookie_notice_policy_availability",
  "coverageArea": "Cookie notice / cookie policy availability",
  "evidenceState": "not_testable",
  "explanation": "Whether a cookie notice, cookie policy, cookie settings surface, or equivalent cookie disclosure surface was retained.",
  "note": "Whether a cookie notice, cookie policy, cookie settings surface, or equivalent cookie disclosure surface was retained.",
  "status": "Not testable",
  "tone": "neutral",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.cookie_notice_policy_availability.not_testable",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.cookie_notice_policy_availability"
  },
  "statusBasis": "Cookie notice/policy absence cannot be determined because policy-surface link discovery and pre-interaction consent-surface inspection did not retain complete typed coverage.",
  "retainedEvidence": {
    "evidenceRefs": [
      "Evidence limitation: incomplete canonical cookie-notice/policy coverage"
    ],
    "cookiePolicyPresent": false,
    "cookieNoticeObserved": false,
    "missingEvidenceNeeded": [
      "runtimeArtifacts.policySurfaceInspection.linkDiscoveryCoverageStatus: Complete typed policy-surface discovery is required before projecting cookie-policy absence.",
      "runtimeArtifacts.consentControlAssessment.coverage.status: Complete typed pre-interaction consent-surface coverage is required before projecting cookie-notice absence."
    ],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "policySurfaceInspection": {
      "outcome": "privacy_policy_observed",
      "coverageStatus": "limited",
      "limitationKeys": [
        "privacy_policy_link_observed_document_not_retained"
      ],
      "inspectionCompleted": true,
      "observedSurfaceTypes": [
        "privacy_policy",
        "terms"
      ],
      "retrievalDiagnostics": {
        "failureReasons": [
          "insufficient_policy_text",
          "http_error"
        ],
        "failedDocumentCount": 5,
        "attemptedDocumentCount": 6,
        "observedLinkFailureCount": 1
      },
      "privacyPolicyObserved": true,
      "linkDiscoveryCoverageStatus": "complete",
      "documentRetrievalCoverageStatus": "insufficient"
    },
    "selectedEvidenceStrength": "limited",
    "preConsentRuntimeEvidence": true,
    "selectedEvidenceArtifactId": "coverage_policy",
    "policyLinkDiscoveryComplete": false,
    "consentSurfaceCoverageComplete": false
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": [
    {
      "field": "runtimeArtifacts.policySurfaceInspection.linkDiscoveryCoverageStatus",
      "actual": "complete",
      "source": "scanner",
      "expected": "complete",
      "whyNeeded": "Complete typed policy-surface discovery is required before projecting cookie-policy absence."
    },
    {
      "field": "runtimeArtifacts.consentControlAssessment.coverage.status",
      "actual": "limited",
      "source": "scanner",
      "expected": "complete",
      "whyNeeded": "Complete typed pre-interaction consent-surface coverage is required before projecting cookie-notice absence."
    }
  ]
}

Correction steps

1The scan could not fully evaluate Cookie notice / cookie policy availability, so improve access to the relevant page or feature before treating this as a confirmed issue.
2Resolve any blocked or unavailable page or path noted in the evidence details.
3Confirm the relevant page, policy, or user-choice control is reachable without authentication or bot challenge.
4Rerun the scan with the same location and settings so the result can be compared consistently.
5Keep a short internal record of what changed so the next scan can be compared with the same page and settings.

Accessibility (WCAG)

0 issues · 2 to review

Review

WCAG 2.2 A/AA automated checks on the starting page.

axe-core 4.11.3 · 62 rules evaluated

Coverage is limited: 2 checks need manual review.

No failures detected in the evaluated checks.

Checks needing manual review

Low text contrast87 elements to reviewReview

Text must have sufficient contrast against its background.

Impact: Serious

WCAG criteria: 1.4.3

WCAG guidance & remediation ↗

Examples (5 of 87)

#glue-cookie-notification-bar-1-label

Element's background color could not be determined because element contains an image node

Contrast ratio: 0; required: 4.5.

<span id></span>

Show more examples (4)

.glue-cookie-notification-bar__more

Element's background color could not be determined because element contains an image node

Contrast ratio: 0; required: 4.5.

<a href class rel aria-describedby target aria-label></a>

a[data-event-nav-name]

Element's background color could not be determined because element contains an image node

Contrast ratio: 0; required: 4.5.

<a class data-event-nav-name data-event-nav-type data-gtm-event data-title href></a>

a[data-event-nav-name]

Element's background color could not be determined because element contains an image node

Contrast ratio: 0; required: 4.5.

<a class data-event-nav-name data-event-nav-type data-gtm-event data-title href></a>

a[data-event-nav-name]

Element's background color could not be determined because element contains an image node

Contrast ratio: 0; required: 4.5.

<a class data-event-nav-name data-event-nav-type data-gtm-event data-title href></a>

JSON evidence

{
  "accessibilityRule": {
    "ruleId": "color-contrast",
    "impact": "serious",
    "tags": [
      "cat.color",
      "wcag2aa",
      "wcag143",
      "TTv5",
      "TT13.c",
      "EN-301-549",
      "EN-9.1.4.3",
      "ACT",
      "RGAAv4",
      "RGAA-3.2.1"
    ],
    "help": "Elements must meet minimum color contrast ratio thresholds",
    "description": "Ensure the contrast between foreground and background colors meets WCAG 2 AA minimum contrast ratio thresholds",
    "helpUrl": "https://dequeuniversity.com/rules/axe/4.11/color-contrast?application=axeAPI",
    "nodeCount": 87,
    "representativeNodes": [
      {
        "selectors": [
          "#glue-cookie-notification-bar-1-label"
        ],
        "htmlSnippet": "<span id></span>",
        "failureSummary": "Fix any of the following: Element's background color could not be determined because element contains an image node",
        "colorContrast": {
          "contrastRatio": 0,
          "requiredContrastRatio": 4.5,
          "fontSize": "10.9pt (14.5px)",
          "fontWeight": "normal"
        }
      },
      {
        "selectors": [
          ".glue-cookie-notification-bar__more"
        ],
        "htmlSnippet": "<a href class rel aria-describedby target aria-label></a>",
        "failureSummary": "Fix any of the following: Element's background color could not be determined because element contains an image node",
        "colorContrast": {
          "contrastRatio": 0,
          "requiredContrastRatio": 4.5,
          "fontSize": "10.9pt (14.5px)",
          "fontWeight": "normal"
        }
      },
      {
        "selectors": [
          "a[data-event-nav-name]"
        ],
        "htmlSnippet": "<a class data-event-nav-name data-event-nav-type data-gtm-event data-title href></a>",
        "failureSummary": "Fix any of the following: Element's background color could not be determined because element contains an image node",
        "colorContrast": {
          "contrastRatio": 0,
          "requiredContrastRatio": 4.5,
          "fontSize": "10.9pt (14.5px)",
          "fontWeight": "normal"
        }
      },
      {
        "selectors": [
          "a[data-event-nav-name]"
        ],
        "htmlSnippet": "<a class data-event-nav-name data-event-nav-type data-gtm-event data-title href></a>",
        "failureSummary": "Fix any of the following: Element's background color could not be determined because element contains an image node",
        "colorContrast": {
          "contrastRatio": 0,
          "requiredContrastRatio": 4.5,
          "fontSize": "10.9pt (14.5px)",
          "fontWeight": "normal"
        }
      },
      {
        "selectors": [
          "a[data-event-nav-name]"
        ],
        "htmlSnippet": "<a class data-event-nav-name data-event-nav-type data-gtm-event data-title href></a>",
        "failureSummary": "Fix any of the following: Element's background color could not be determined because element contains an image node",
        "colorContrast": {
          "contrastRatio": 0,
          "requiredContrastRatio": 4.5,
          "fontSize": "10.9pt (14.5px)",
          "fontWeight": "normal"
        }
      }
    ]
  }
}

Correction steps

01Check the text against its actual background. If it falls below the required ratio, adjust the colors and retest.

Video captions9 elements to reviewReview

Media needs an appropriate accessible text alternative for its audio.

Impact: Critical

WCAG criteria: 1.2.2

WCAG guidance & remediation ↗

Examples (5 of 9)

div[data-height] > .video-wrapper > video[preload][data-media-video-init][data-has-alt-videos]

Check that captions are available for the element

<video class autoplay data-has-alt-videos loop muted playsinline poster preload data-media-video-ini>

Show more examples (4)

div[data-height] > .video-wrapper > video[preload][data-media-video-init]

Check that captions are available for the element

<video class autoplay loop muted playsinline poster preload data-media-video-init>

div[data-height] > .video-wrapper > video[preload][data-media-video-init]

Check that captions are available for the element

<video class autoplay loop muted playsinline poster preload data-media-video-init>

div[data-height] > .video-wrapper > video[preload][data-media-video-init][data-has-alt-videos]

Check that captions are available for the element

<video class autoplay data-has-alt-videos loop muted playsinline poster preload data-media-video-ini>

div[data-height] > .video-wrapper > .media-video--lazy[data-preload][preload]

Check that captions are available for the element

<video class autoplay data-preload loop muted playsinline poster preload>

JSON evidence

{
  "accessibilityRule": {
    "ruleId": "video-caption",
    "impact": "critical",
    "tags": [
      "cat.text-alternatives",
      "wcag2a",
      "wcag122",
      "section508",
      "section508.22.a",
      "TTv5",
      "TT17.a",
      "EN-301-549",
      "EN-9.1.2.2",
      "RGAAv4",
      "RGAA-4.3.1"
    ],
    "help": "<video> elements must have captions",
    "description": "Ensure <video> elements have captions",
    "helpUrl": "https://dequeuniversity.com/rules/axe/4.11/video-caption?application=axeAPI",
    "nodeCount": 9,
    "representativeNodes": [
      {
        "selectors": [
          "div[data-height] > .video-wrapper > video[preload][data-media-video-init][data-has-alt-videos]"
        ],
        "htmlSnippet": "<video class autoplay data-has-alt-videos loop muted playsinline poster preload data-media-video-ini>",
        "failureSummary": "Fix all of the following: Check that captions are available for the element"
      },
      {
        "selectors": [
          "div[data-height] > .video-wrapper > video[preload][data-media-video-init]"
        ],
        "htmlSnippet": "<video class autoplay loop muted playsinline poster preload data-media-video-init>",
        "failureSummary": "Fix all of the following: Check that captions are available for the element"
      },
      {
        "selectors": [
          "div[data-height] > .video-wrapper > video[preload][data-media-video-init]"
        ],
        "htmlSnippet": "<video class autoplay loop muted playsinline poster preload data-media-video-init>",
        "failureSummary": "Fix all of the following: Check that captions are available for the element"
      },
      {
        "selectors": [
          "div[data-height] > .video-wrapper > video[preload][data-media-video-init][data-has-alt-videos]"
        ],
        "htmlSnippet": "<video class autoplay data-has-alt-videos loop muted playsinline poster preload data-media-video-ini>",
        "failureSummary": "Fix all of the following: Check that captions are available for the element"
      },
      {
        "selectors": [
          "div[data-height] > .video-wrapper > .media-video--lazy[data-preload][preload]"
        ],
        "htmlSnippet": "<video class autoplay data-preload loop muted playsinline poster preload>",
        "failureSummary": "Fix all of the following: Check that captions are available for the element"
      }
    ]
  }
}

Correction steps

01Verify the flagged elements first. If the issue is confirmed, review the flagged media and provide the captions or text alternative required by the linked guidance. Check the text for accuracy and availability during playback.

Cookies & tracking

3 checks · 1 to review

Review

Classified non-essential pre-consent storage5 non-essential cookie or browser-storage items were observed before consent. First observed at 1.95s after scan start. Direct write-level timing was captured for 3.Potential gap

JSON evidence

__Secure-YNID (youtube.com) non-essential, present in a check performed before consent, first seen at 1.95s.

__Secure-ROLLOUT_TOKEN (youtube.com) non-essential, present in a check performed before consent, first seen at 1.95s.

VISITOR_INFO1_LIVE (youtube.com) non-essential, present in a check performed before consent, first seen at 1.95s.

Full evidence JSON

{
  "assessmentStatus": "gap_observed",
  "checklistItemId": "pre_consent_cookies_storage",
  "coverageArea": "Classified non-essential pre-consent storage",
  "evidenceState": "observed",
  "explanation": "Storage or cookie evidence was observed before a recorded consent choice. This row is limited to concrete storage/cookie evidence and does not imply every observed runtime vendor wrote storage.",
  "note": "Storage or cookie evidence was observed before a recorded consent choice. This row is limited to concrete storage/cookie evidence and does not imply every observed runtime vendor wrote storage.",
  "status": "Gap observed",
  "tone": "warning",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.pre_consent_cookies_storage.gap_observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.pre_consent_cookies_storage"
  },
  "statusBasis": "5 classified non-essential storage records were retained before a recorded consent action.",
  "retainedEvidence": {
    "remediation": {
      "kind": "steps",
      "steps": [
        "Inspect the listed cookie and storage identities, their purposes, and the retained timing evidence. Distinguish a directly observed write from snapshot presence.",
        "For items confirmed to require consent, gate their creation and use on the relevant affirmative choice; check the responsible tag or integration.",
        "Retest the same page and location in a fresh session. Verify those items are absent before consent and after Reject, and appear only after the applicable Accept choice."
      ]
    },
    "evidenceRefs": [
      "__Secure-ROLLOUT_TOKEN (youtube.com): non_essential, first observed 1.950s after scan start",
      "__Secure-YNID (youtube.com): non_essential, first observed 1.950s after scan start",
      "VISITOR_INFO1_LIVE (youtube.com): non_essential, first observed 1.950s after scan start",
      "_ga (deepmind.google): non_essential, present in periodic pre-consent snapshot",
      "_ga_LS8HVHCNQ0 (deepmind.google): non_essential, present in periodic pre-consent snapshot",
      "__Secure-BUCKET (youtube.com): unknown, first observed 1.949s after scan start"
    ],
    "cookiesSeenCount": 9,
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected retained concrete cookie/storage evidence for storage timing; request-only tracking evidence is not used as storage proof.",
    "weakerArtifactsIgnored": [],
    "selectedEvidenceStrength": "strong",
    "cookiesBeforeConsentCount": 5,
    "selectedEvidenceArtifactId": "preConsentCookieOrStorageEvidence.missing",
    "preConsentStorageAssessment": {
      "status": "classified_nonessential_observed",
      "evidenceRows": [
        {
          "name": "__Secure-BUCKET",
          "party": "third_party",
          "domain": "youtube.com",
          "category": "unknown",
          "storageType": "cookie",
          "essentiality": "unknown",
          "timingEvidence": "before_consent_write",
          "exclusionReason": null,
          "firstObservedMs": 1949,
          "initiatorDomain": "deepmind.google",
          "initiatorVendor": null,
          "essentialitySource": "unknown"
        },
        {
          "name": "__Secure-YNID",
          "party": "third_party",
          "domain": "youtube.com",
          "category": "personalization",
          "storageType": "cookie",
          "essentiality": "non_essential",
          "timingEvidence": "before_consent_write",
          "exclusionReason": null,
          "firstObservedMs": 1950,
          "initiatorDomain": "deepmind.google",
          "initiatorVendor": null,
          "essentialitySource": "canonical_registry"
        },
        {
          "name": "YSC",
          "party": "third_party",
          "domain": "youtube.com",
          "category": "security",
          "storageType": "cookie",
          "essentiality": "essential",
          "timingEvidence": "before_consent_write",
          "exclusionReason": null,
          "firstObservedMs": 1950,
          "initiatorDomain": "deepmind.google",
          "initiatorVendor": null,
          "essentialitySource": "canonical_registry"
        },
        {
          "name": "__Secure-ROLLOUT_TOKEN",
          "party": "third_party",
          "domain": "youtube.com",
          "category": "analytics",
          "storageType": "cookie",
          "essentiality": "non_essential",
          "timingEvidence": "before_consent_write",
          "exclusionReason": null,
          "firstObservedMs": 1950,
          "initiatorDomain": "deepmind.google",
          "initiatorVendor": null,
          "essentialitySource": "canonical_registry"
        },
        {
          "name": "__Secure-YEC",
          "party": "third_party",
          "domain": "youtube.com",
          "category": "security",
          "storageType": "cookie",
          "essentiality": "essential",
          "timingEvidence": "before_consent_write",
          "exclusionReason": null,
          "firstObservedMs": 1950,
          "initiatorDomain": "deepmind.google",
          "initiatorVendor": null,
          "essentialitySource": "canonical_registry"
        },
        {
          "name": "VISITOR_INFO1_LIVE",
          "party": "third_party",
          "domain": "youtube.com",
          "category": "personalization",
          "storageType": "cookie",
          "essentiality": "non_essential",
          "timingEvidence": "before_consent_write",
          "exclusionReason": null,
          "firstObservedMs": 1950,
          "initiatorDomain": "deepmind.google",
          "initiatorVendor": null,
          "essentialitySource": "canonical_registry"
        },
        {
          "name": "VISITOR_PRIVACY_METADATA",
          "party": "third_party",
          "domain": "youtube.com",
          "category": "unknown",
          "storageType": "cookie",
          "essentiality": "unknown",
          "timingEvidence": "before_consent_write",
          "exclusionReason": null,
          "firstObservedMs": 1950,
          "initiatorDomain": "deepmind.google",
          "initiatorVendor": null,
          "essentialitySource": "unknown"
        },
        {
          "name": "_ga_LS8HVHCNQ0",
          "party": "first_party",
          "domain": "deepmind.google",
          "category": "analytics",
          "storageType": "cookie",
          "essentiality": "non_essential",
          "timingEvidence": "periodic_preconsent_snapshot",
          "exclusionReason": null,
          "firstObservedMs": 11650,
          "initiatorDomain": null,
          "initiatorVendor": null,
          "essentialitySource": "canonical_registry",
          "exactStorageIdentity": "[\"_ga_LS8HVHCNQ0\",\".deepmind.google\",\"/\",null]"
        },
        {
          "name": "_ga",
          "party": "first_party",
          "domain": "deepmind.google",
          "category": "analytics",
          "storageType": "cookie",
          "essentiality": "non_essential",
          "timingEvidence": "periodic_preconsent_snapshot",
          "exclusionReason": null,
          "firstObservedMs": 11650,
          "initiatorDomain": null,
          "initiatorVendor": null,
          "essentialitySource": "canonical_registry",
          "exactStorageIdentity": "[\"_ga\",\".deepmind.google\",\"/\",null]"
        }
      ],
      "provenWriteCount": 3,
      "assessmentVersion": "pre-consent-storage-assessment-v1",
      "unclassifiedCount": 2,
      "reconciliationStatus": "reconciled",
      "snapshotPresenceCount": 2,
      "aggregateObservedCount": 9,
      "classifiedEssentialCount": 2,
      "classifiedNonEssentialCount": 5,
      "attributedPreConsentRecordCount": 9,
      "excludedFunctionalOrConsentCount": 0
    },
    "excludedEssentialOrFunctionalRows": [
      {
        "name": "YSC",
        "party": "third_party",
        "domain": "youtube.com",
        "category": "security",
        "storageType": "cookie",
        "essentiality": "essential",
        "timingEvidence": "before_consent_write",
        "exclusionReason": null,
        "firstObservedMs": 1950,
        "initiatorDomain": "deepmind.google",
        "initiatorVendor": null,
        "essentialitySource": "canonical_registry"
      },
      {
        "name": "__Secure-YEC",
        "party": "third_party",
        "domain": "youtube.com",
        "category": "security",
        "storageType": "cookie",
        "essentiality": "essential",
        "timingEvidence": "before_consent_write",
        "exclusionReason": null,
        "firstObservedMs": 1950,
        "initiatorDomain": "deepmind.google",
        "initiatorVendor": null,
        "essentialitySource": "canonical_registry"
      }
    ],
    "preConsentStorageAssessmentStatus": "classified_nonessential_observed",
    "eligiblePreconsentCookieStorageRows": [
      {
        "name": "__Secure-YNID",
        "party": "third_party",
        "domain": "youtube.com",
        "category": "personalization",
        "storageType": "cookie",
        "essentiality": "non_essential",
        "timingEvidence": "before_consent_write",
        "exclusionReason": null,
        "firstObservedMs": 1950,
        "initiatorDomain": "deepmind.google",
        "initiatorVendor": null,
        "essentialitySource": "canonical_registry"
      },
      {
        "name": "__Secure-ROLLOUT_TOKEN",
        "party": "third_party",
        "domain": "youtube.com",
        "category": "analytics",
        "storageType": "cookie",
        "essentiality": "non_essential",
        "timingEvidence": "before_consent_write",
        "exclusionReason": null,
        "firstObservedMs": 1950,
        "initiatorDomain": "deepmind.google",
        "initiatorVendor": null,
        "essentialitySource": "canonical_registry"
      },
      {
        "name": "VISITOR_INFO1_LIVE",
        "party": "third_party",
        "domain": "youtube.com",
        "category": "personalization",
        "storageType": "cookie",
        "essentiality": "non_essential",
        "timingEvidence": "before_consent_write",
        "exclusionReason": null,
        "firstObservedMs": 1950,
        "initiatorDomain": "deepmind.google",
        "initiatorVendor": null,
        "essentialitySource": "canonical_registry"
      },
      {
        "name": "_ga_LS8HVHCNQ0",
        "party": "first_party",
        "domain": "deepmind.google",
        "category": "analytics",
        "storageType": "cookie",
        "essentiality": "non_essential",
        "timingEvidence": "periodic_preconsent_snapshot",
        "exclusionReason": null,
        "firstObservedMs": 11650,
        "initiatorDomain": null,
        "initiatorVendor": null,
        "essentialitySource": "canonical_registry",
        "exactStorageIdentity": "[\"_ga_LS8HVHCNQ0\",\".deepmind.google\",\"/\",null]"
      },
      {
        "name": "_ga",
        "party": "first_party",
        "domain": "deepmind.google",
        "category": "analytics",
        "storageType": "cookie",
        "essentiality": "non_essential",
        "timingEvidence": "periodic_preconsent_snapshot",
        "exclusionReason": null,
        "firstObservedMs": 11650,
        "initiatorDomain": null,
        "initiatorVendor": null,
        "essentialitySource": "canonical_registry",
        "exactStorageIdentity": "[\"_ga\",\".deepmind.google\",\"/\",null]"
      }
    ],
    "rowLevelEssentialityEvidenceRetained": true,
    "firstPreconsentCookieOrStorageObservedMs": 1950,
    "preConsentStorageClassificationLimitation": true,
    "preconsentCookieOrStorageExactTimingRetained": true,
    "eligibleNonEssentialCookieStorageFindingProjected": true
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

1Inspect the listed cookie and storage identities, their purposes, and the retained timing evidence. Distinguish a directly observed write from snapshot presence.
2For items confirmed to require consent, gate their creation and use on the relevant affirmative choice; check the responsible tag or integration.
3Retest the same page and location in a fresh session. Verify those items are absent before consent and after Reject, and appear only after the applicable Accept choice.

Session recordingNo session-recording service was detected during this scan.Not observed

JSON evidence

retained session replay / fingerprinting coverage summary

Full evidence JSON

{
  "assessmentStatus": "checked",
  "checklistItemId": "session_replay_fingerprinting_review",
  "coverageArea": "Session replay signal",
  "evidenceState": "not_observed",
  "explanation": "No eligible session replay, behavioral recording, or fingerprinting-like signal was observed in the tested context.",
  "note": "No eligible session replay, behavioral recording, or fingerprinting-like signal was observed in the tested context.",
  "status": "Not observed",
  "tone": "neutral",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.session_replay_fingerprinting_review.not_observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.session_replay_fingerprinting_review"
  },
  "statusBasis": "Runtime vendor/fingerprinting checks completed for the tested context, and no eligible replay or fingerprinting finding was projected.",
  "retainedEvidence": {
    "remediation": {
      "kind": "none",
      "steps": [],
      "message": "No remediation is established by this check alone. Retain its evidence and reassess after relevant changes."
    },
    "evidenceRefs": [
      "Evidence: retained session replay / fingerprinting coverage summary"
    ],
    "sessionReplayCount": 0,
    "missingEvidenceNeeded": [],
    "sessionReplayObserved": false,
    "fingerprintingObserved": false,
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "runtimeCaptureCompleted": true,
    "selectedEvidenceStrength": "missing",
    "selectedEvidenceArtifactId": "coverage_policy",
    "sessionReplayRuntimeCoverageRetained": true,
    "fingerprintingRuntimeCoverageRetained": true
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Device fingerprintingNo device-fingerprinting activity was detected during this scan.Not observed

JSON evidence

retained fingerprinting/browser API coverage summary

Full evidence JSON

{
  "assessmentStatus": "checked",
  "checklistItemId": "device_identification_fingerprinting_signal_observed",
  "coverageArea": "Device identification / fingerprinting signal",
  "evidenceState": "not_observed",
  "explanation": "Whether browser/device entropy, fingerprinting, or identifier-like device collection signals were observed in retained runtime evidence.",
  "note": "Whether browser/device entropy, fingerprinting, or identifier-like device collection signals were observed in retained runtime evidence.",
  "status": "Not observed",
  "tone": "neutral",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.device_identification_fingerprinting_signal_observed.not_observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.device_identification_fingerprinting_signal_observed"
  },
  "statusBasis": "Runtime fingerprinting/device-identification checks completed for the tested context and did not retain an eligible signal.",
  "retainedEvidence": {
    "evidenceRefs": [
      "Evidence: retained fingerprinting/browser API coverage summary"
    ],
    "missingEvidenceNeeded": [],
    "fingerprintingObserved": false,
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "runtimeCaptureCompleted": true,
    "runtimeEvidenceRetained": true,
    "selectedEvidenceStrength": "missing",
    "selectedEvidenceArtifactId": "coverage_policy",
    "fingerprintingRuntimeCoverageRetained": true
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Connection security

5 checks · 5 observed

HTTPS deliveryThe scanned page used HTTPS.Observed

JSON evidence

ref_transport_security

Full evidence JSON

{
  "assessmentStatus": "checked",
  "checklistItemId": "transport_security_https_delivery",
  "coverageArea": "HTTPS delivery for scanned pages",
  "evidenceState": "observed",
  "explanation": "Whether the retained scanned page was served over HTTPS.",
  "note": "Whether the retained scanned page was served over HTTPS.",
  "status": "Observed",
  "tone": "warning",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.transport_security_https_delivery.observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.transport_security_https_delivery"
  },
  "statusBasis": "The scanned page was served over HTTPS in the retained transport observation.",
  "retainedEvidence": {
    "finalUrl": "https://deepmind.google/",
    "finalScheme": "https",
    "evidenceRefs": [
      "ref_transport_security"
    ],
    "httpProbeStatus": 200,
    "sampledPageUrls": [
      "https://deepmind.google/"
    ],
    "httpProbeOutcome": "redirected_to_https",
    "httpProbeFinalUrl": "https://deepmind.google/",
    "pageHttpsObserved": true,
    "tlsProbeAttempted": true,
    "formInventoryState": "complete",
    "formTransportCount": 2,
    "httpProbeAttempted": true,
    "validTlsCertificate": true,
    "httpProbeFinalScheme": "https",
    "httpRedirectsToHttps": true,
    "mixedContentObserved": false,
    "missingEvidenceNeeded": [],
    "httpProbeRedirectChain": [
      "http://deepmind.google/",
      "https://deepmind.google/"
    ],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "selectedEvidenceStrength": "moderate",
    "mixedContentObservedCount": 0,
    "selectedEvidenceArtifactId": "coverage_policy",
    "tlsCertificateObservations": [
      {
        "issuer": "CN=WR3, O=Google Trust Services",
        "subject": "CN=deepmind.google",
        "validTo": "Jan  9 06:15:55 2027 GMT",
        "inputUrl": "https://deepmind.google/",
        "validFrom": "Oct 11 05:26:06 2026 GMT",
        "validCertificate": true,
        "chainCertificateCount": 3
      }
    ],
    "insecureFormTransportObserved": false
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

HTTPS certificateThe website's HTTPS certificate passed validation.Observed

JSON evidence

ref_transport_security

Full evidence JSON

{
  "assessmentStatus": "checked",
  "checklistItemId": "transport_security_tls_certificate",
  "coverageArea": "Valid SSL/TLS certificate",
  "evidenceState": "observed",
  "explanation": "Whether a strict TLS probe verified the HTTPS origin certificate separately from the normal scanner runtime.",
  "note": "Whether a strict TLS probe verified the HTTPS origin certificate separately from the normal scanner runtime.",
  "status": "Observed",
  "tone": "warning",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.transport_security_tls_certificate.observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.transport_security_tls_certificate"
  },
  "statusBasis": "Retained certificate validation verified the HTTPS origin certificate. Retained certificate evidence: https://deepmind.google/ presented CN=deepmind.google certificate valid Oct 11, 2026–Jan 9, 2027.",
  "retainedEvidence": {
    "finalUrl": "https://deepmind.google/",
    "finalScheme": "https",
    "evidenceRefs": [
      "ref_transport_security"
    ],
    "httpProbeStatus": 200,
    "sampledPageUrls": [
      "https://deepmind.google/"
    ],
    "httpProbeOutcome": "redirected_to_https",
    "httpProbeFinalUrl": "https://deepmind.google/",
    "pageHttpsObserved": true,
    "tlsProbeAttempted": true,
    "formInventoryState": "complete",
    "formTransportCount": 2,
    "httpProbeAttempted": true,
    "validTlsCertificate": true,
    "httpProbeFinalScheme": "https",
    "httpRedirectsToHttps": true,
    "mixedContentObserved": false,
    "missingEvidenceNeeded": [],
    "httpProbeRedirectChain": [
      "http://deepmind.google/",
      "https://deepmind.google/"
    ],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "selectedEvidenceStrength": "moderate",
    "mixedContentObservedCount": 0,
    "selectedEvidenceArtifactId": "coverage_policy",
    "tlsCertificateObservations": [
      {
        "issuer": "CN=WR3, O=Google Trust Services",
        "subject": "CN=deepmind.google",
        "validTo": "Jan  9 06:15:55 2027 GMT",
        "inputUrl": "https://deepmind.google/",
        "validFrom": "Oct 11 05:26:06 2026 GMT",
        "validCertificate": true,
        "chainCertificateCount": 3
      }
    ],
    "insecureFormTransportObserved": false
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

HTTP-to-HTTPS redirectHTTP redirected to HTTPS.Observed

JSON evidence

ref_transport_security

Full evidence JSON

{
  "assessmentStatus": "checked",
  "checklistItemId": "transport_security_http_redirect",
  "coverageArea": "HTTP redirects to HTTPS",
  "evidenceState": "observed",
  "explanation": "Whether an explicit HTTP-origin probe redirected to HTTPS.",
  "note": "Whether an explicit HTTP-origin probe redirected to HTTPS.",
  "status": "Observed",
  "tone": "warning",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.transport_security_http_redirect.observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.transport_security_http_redirect"
  },
  "statusBasis": "The explicit HTTP-origin probe redirected to HTTPS.",
  "retainedEvidence": {
    "finalUrl": "https://deepmind.google/",
    "finalScheme": "https",
    "evidenceRefs": [
      "ref_transport_security"
    ],
    "httpProbeStatus": 200,
    "sampledPageUrls": [
      "https://deepmind.google/"
    ],
    "httpProbeOutcome": "redirected_to_https",
    "httpProbeFinalUrl": "https://deepmind.google/",
    "pageHttpsObserved": true,
    "tlsProbeAttempted": true,
    "formInventoryState": "complete",
    "formTransportCount": 2,
    "httpProbeAttempted": true,
    "validTlsCertificate": true,
    "httpProbeFinalScheme": "https",
    "httpRedirectsToHttps": true,
    "mixedContentObserved": false,
    "missingEvidenceNeeded": [],
    "httpProbeRedirectChain": [
      "http://deepmind.google/",
      "https://deepmind.google/"
    ],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "selectedEvidenceStrength": "moderate",
    "mixedContentObservedCount": 0,
    "selectedEvidenceArtifactId": "coverage_policy",
    "tlsCertificateObservations": [
      {
        "issuer": "CN=WR3, O=Google Trust Services",
        "subject": "CN=deepmind.google",
        "validTo": "Jan  9 06:15:55 2027 GMT",
        "inputUrl": "https://deepmind.google/",
        "validFrom": "Oct 11 05:26:06 2026 GMT",
        "validCertificate": true,
        "chainCertificateCount": 3
      }
    ],
    "insecureFormTransportObserved": false
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Mixed contentNo insecure HTTP resources were found on the scanned HTTPS page.Observed

JSON evidence

ref_transport_security

Full evidence JSON

{
  "assessmentStatus": "checked",
  "checklistItemId": "transport_security_mixed_content",
  "coverageArea": "Mixed content",
  "evidenceState": "observed",
  "explanation": "Whether HTTP subresources were observed or blocked on a retained HTTPS page.",
  "note": "Whether HTTP subresources were observed or blocked on a retained HTTPS page.",
  "status": "Observed",
  "tone": "warning",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.transport_security_mixed_content.observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.transport_security_mixed_content"
  },
  "statusBasis": "No mixed-content HTTP subresources were retained for the scanned HTTPS page.",
  "retainedEvidence": {
    "finalUrl": "https://deepmind.google/",
    "finalScheme": "https",
    "evidenceRefs": [
      "ref_transport_security"
    ],
    "httpProbeStatus": 200,
    "sampledPageUrls": [
      "https://deepmind.google/"
    ],
    "httpProbeOutcome": "redirected_to_https",
    "httpProbeFinalUrl": "https://deepmind.google/",
    "pageHttpsObserved": true,
    "tlsProbeAttempted": true,
    "formInventoryState": "complete",
    "formTransportCount": 2,
    "httpProbeAttempted": true,
    "validTlsCertificate": true,
    "httpProbeFinalScheme": "https",
    "httpRedirectsToHttps": true,
    "mixedContentObserved": false,
    "missingEvidenceNeeded": [],
    "httpProbeRedirectChain": [
      "http://deepmind.google/",
      "https://deepmind.google/"
    ],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "selectedEvidenceStrength": "moderate",
    "mixedContentObservedCount": 0,
    "selectedEvidenceArtifactId": "coverage_policy",
    "tlsCertificateObservations": [
      {
        "issuer": "CN=WR3, O=Google Trust Services",
        "subject": "CN=deepmind.google",
        "validTo": "Jan  9 06:15:55 2027 GMT",
        "inputUrl": "https://deepmind.google/",
        "validFrom": "Oct 11 05:26:06 2026 GMT",
        "validCertificate": true,
        "chainCertificateCount": 3
      }
    ],
    "insecureFormTransportObserved": false
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Form transport securityNo insecure form destinations were found during this scan.Observed

JSON evidence

ref_transport_security

Full evidence JSON

{
  "assessmentStatus": "checked",
  "checklistItemId": "transport_security_form_transport",
  "coverageArea": "Observed form transport",
  "evidenceState": "observed",
  "explanation": "Whether observed forms resolved to HTTPS transport without submitting form data.",
  "note": "Whether observed forms resolved to HTTPS transport without submitting form data.",
  "status": "Observed",
  "tone": "warning",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.transport_security_form_transport.observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.transport_security_form_transport"
  },
  "statusBasis": "No insecure observed form transport was retained for the scanned page.",
  "retainedEvidence": {
    "finalUrl": "https://deepmind.google/",
    "finalScheme": "https",
    "evidenceRefs": [
      "ref_transport_security"
    ],
    "httpProbeStatus": 200,
    "sampledPageUrls": [
      "https://deepmind.google/"
    ],
    "httpProbeOutcome": "redirected_to_https",
    "httpProbeFinalUrl": "https://deepmind.google/",
    "pageHttpsObserved": true,
    "tlsProbeAttempted": true,
    "formInventoryState": "complete",
    "formTransportCount": 2,
    "httpProbeAttempted": true,
    "validTlsCertificate": true,
    "httpProbeFinalScheme": "https",
    "httpRedirectsToHttps": true,
    "mixedContentObserved": false,
    "missingEvidenceNeeded": [],
    "httpProbeRedirectChain": [
      "http://deepmind.google/",
      "https://deepmind.google/"
    ],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "selectedEvidenceStrength": "moderate",
    "mixedContentObservedCount": 0,
    "selectedEvidenceArtifactId": "coverage_policy",
    "tlsCertificateObservations": [
      {
        "issuer": "CN=WR3, O=Google Trust Services",
        "subject": "CN=deepmind.google",
        "validTo": "Jan  9 06:15:55 2027 GMT",
        "inputUrl": "https://deepmind.google/",
        "validFrom": "Oct 11 05:26:06 2026 GMT",
        "validCertificate": true,
        "chainCertificateCount": 3
      }
    ],
    "insecureFormTransportObserved": false
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Global Privacy Control

Response not determined

Limited

GPC comparisonThe paired scan could not determine whether classified tracking activity changed with GPC.Limited

With GPC enabled, we observed 4 classified tracking requests, including 3 collection requests.

How we measured this

Page request: Sec-GPC 1; browser setting: true.

122 retained request attempts; 80 retained requests with Sec-GPC.

GPC signal delivery or its paired evidence was not fully verified. Neither passive lane reached the required 250 ms quiet period within the existing capture cap, so no response conclusion was made.

JSON evidence

{
  "assessment": {
    "contractVersion": "certscore.gpc-response-assessment.v3",
    "generatedAt": "2026-10-12T19:32:43.835Z",
    "status": "indeterminate",
    "findingTitle": "GPC response",
    "scoreEffect": "none",
    "legalInterpretation": "not_assessed",
    "comparison": {
      "comparable": false,
      "protocol": "passive_baseline_with_sec_gpc",
      "baselineArtifact": {
        "lane": "runtime_evidence",
        "sha256": "c7809df68855482e10dcb2bdece41f0fba53eb3eecbe5b652431c7741a1d0dc9",
        "sizeBytes": 863441,
        "uri": "s3://certscore-v2-dag-local-artifacts-eu-west-1-199536052647/v2-dag-lambda/local/860c6f2d-7f46-4c66-8451-51e3f7405658/lanes/runtime_evidence/CanonicalEvidenceBundle.json"
      },
      "gpcArtifact": {
        "lane": "gpc_observation",
        "sha256": "76664bb7b84253d1804d09d2f5818029979ab6598dc58d2db31301d749442ede",
        "sizeBytes": 798369,
        "uri": "s3://certscore-v2-dag-local-artifacts-eu-west-1-199536052647/v2-dag-lambda/local/860c6f2d-7f46-4c66-8451-51e3f7405658/lanes/gpc_observation/CanonicalEvidenceBundle.json"
      },
      "enabledProof": {
        "secGpcHeaderValue": "1",
        "requestsWithSecGpc": 80,
        "requestEventIds": [
          "net_13",
          "net_15",
          "net_151",
          "net_153",
          "net_156",
          "net_158",
          "net_160",
          "net_162",
          "net_169",
          "net_175",
          "net_179",
          "net_181",
          "net_183",
          "net_193",
          "net_196",
          "net_205",
          "net_207",
          "net_209",
          "net_21",
          "net_229",
          "net_23",
          "net_232",
          "net_234",
          "net_236",
          "net_238",
          "net_240",
          "net_243",
          "net_25",
          "net_252",
          "net_254",
          "net_256",
          "net_258",
          "net_27",
          "net_271",
          "net_273",
          "net_282",
          "net_284",
          "net_286",
          "net_288",
          "net_29",
          "net_304",
          "net_306",
          "net_308",
          "net_31",
          "net_310",
          "net_312",
          "net_314",
          "net_316",
          "net_318",
          "net_320",
          "net_322",
          "net_324",
          "net_326",
          "net_328",
          "net_330",
          "net_332",
          "net_334",
          "net_336",
          "net_338",
          "net_342",
          "net_344",
          "net_346",
          "net_348",
          "net_350",
          "net_352",
          "net_354",
          "net_356",
          "net_362",
          "net_399",
          "net_409",
          "net_411",
          "net_413",
          "net_415",
          "net_5",
          "net_7",
          "net_79",
          "net_81",
          "net_83",
          "net_9",
          "net_95"
        ],
        "navigatorGlobalPrivacyControl": true
      },
      "delivery": {
        "status": "limited",
        "baseline": {
          "contractVersion": "certscore.gpc-signal-observation.v1",
          "expectedEnabled": false,
          "documentUrlSha256": "0ef9b0fe0f3c92b4cf35b49204136edf6dd65440fbb6703f32cf8444ae92b150",
          "contextConfigSha256": "7a20ef851f83cb76f7294dc01169581c10ca30d0e11e444c9ec76cbcd4fd1bb3",
          "capturedAtMs": 11610,
          "documentStartedAtMs": 615,
          "frameCount": 11,
          "frames": [
            {
              "documentUrlSha256": "0ef9b0fe0f3c92b4cf35b49204136edf6dd65440fbb6703f32cf8444ae92b150",
              "mainFrame": true,
              "navigatorValue": false
            },
            {
              "documentUrlSha256": "2fb42bdef5e3f72bcb81231332d37a9a2862b8a0ef62202a155031fc01cc99fa",
              "mainFrame": false,
              "navigatorValue": false
            },
            {
              "documentUrlSha256": "fb95052ad2206d2b6ff1ca59949841da33eb61e9b030f9c93859b25c354abdfa",
              "mainFrame": false,
              "navigatorValue": false
            },
            {
              "documentUrlSha256": "d5d8520a12155c7049ac8d23ae8ef997aad94efeb4777f29ed90f196fbe444e3",
              "mainFrame": false,
              "navigatorValue": false
            },
            {
              "documentUrlSha256": "775b418b6ccef45fae47e8e0caf5e70830b34bdbbbd7ebe96dfcef4684b64979",
              "mainFrame": false,
              "navigatorValue": false
            },
            {
              "documentUrlSha256": "9cc67656b43bacf73bb8a9dd1fa6abafe39f18ab01f7bbfdbcb1fd3b70d1db0d",
              "mainFrame": false,
              "navigatorValue": false
            },
            {
              "documentUrlSha256": "4fa72d735a519ee13d4174f6b71c7ea92a1faa30cb445faf2dcacdf1ac343354",
              "mainFrame": false,
              "navigatorValue": false
            },
            {
              "documentUrlSha256": "4fa72d735a519ee13d4174f6b71c7ea92a1faa30cb445faf2dcacdf1ac343354",
              "mainFrame": false,
              "navigatorValue": false
            },
            {
              "documentUrlSha256": "4fa72d735a519ee13d4174f6b71c7ea92a1faa30cb445faf2dcacdf1ac343354",
              "mainFrame": false,
              "navigatorValue": false
            },
            {
              "documentUrlSha256": "4fa72d735a519ee13d4174f6b71c7ea92a1faa30cb445faf2dcacdf1ac343354",
              "mainFrame": false,
              "navigatorValue": false
            }
          ],
          "workerCount": 0,
          "limitationKeys": [
            "frame_signal_readback_incomplete",
            "frames_changed_during_readback",
            "frame_detached_during_readback"
          ]
        },
        "gpc": {
          "contractVersion": "certscore.gpc-signal-observation.v1",
          "expectedEnabled": true,
          "documentUrlSha256": "0ef9b0fe0f3c92b4cf35b49204136edf6dd65440fbb6703f32cf8444ae92b150",
          "contextConfigSha256": "7a20ef851f83cb76f7294dc01169581c10ca30d0e11e444c9ec76cbcd4fd1bb3",
          "prototypeCaptureBinding": {
            "captureId": "d34fa314-5a86-4e03-8b41-710962260c54",
            "documentIdentitySource": "cdp_loader_id",
            "documentToken": "617CA6695697E7BB513C47C04C54E56F"
          },
          "prototypeSessionSha256": "ec853ff2b30a2209342eade7fcf733c6b71b77a543c5b3bca2f4bfaafbf5049e",
          "capturedAtMs": 5341,
          "documentStartedAtMs": 665,
          "frameCount": 7,
          "frames": [
            {
              "documentUrlSha256": "0ef9b0fe0f3c92b4cf35b49204136edf6dd65440fbb6703f32cf8444ae92b150",
              "mainFrame": true,
              "navigatorValue": true
            },
            {
              "documentUrlSha256": "2fb42bdef5e3f72bcb81231332d37a9a2862b8a0ef62202a155031fc01cc99fa",
              "mainFrame": false,
              "navigatorValue": true
            },
            {
              "documentUrlSha256": "fb95052ad2206d2b6ff1ca59949841da33eb61e9b030f9c93859b25c354abdfa",
              "mainFrame": false,
              "navigatorValue": true
            },
            {
              "documentUrlSha256": "d5d8520a12155c7049ac8d23ae8ef997aad94efeb4777f29ed90f196fbe444e3",
              "mainFrame": false,
              "navigatorValue": true
            },
            {
              "documentUrlSha256": "775b418b6ccef45fae47e8e0caf5e70830b34bdbbbd7ebe96dfcef4684b64979",
              "mainFrame": false,
              "navigatorValue": true
            },
            {
              "documentUrlSha256": "9cc67656b43bacf73bb8a9dd1fa6abafe39f18ab01f7bbfdbcb1fd3b70d1db0d",
              "mainFrame": false,
              "navigatorValue": true
            }
          ],
          "workerCount": 0,
          "limitationKeys": [
            "frame_signal_readback_incomplete",
            "frames_changed_during_readback",
            "frame_detached_during_readback"
          ]
        }
      },
      "coverage": {
        "status": "limited",
        "comparedThroughMs": 4676
      },
      "responseBasis": "insufficient_evidence",
      "deltas": {
        "cookies": {
          "baselineCount": 10,
          "gpcCount": 10,
          "countDelta": 0,
          "baselineOnly": [],
          "gpcOnly": [],
          "shared": [
            "[\"__Secure-BUCKET\",\"youtube.com\",\"/\"]",
            "[\"__Secure-ROLLOUT_TOKEN\",\".youtube.com\",\"/\"]",
            "[\"__Secure-ROLLOUT_TOKEN\",\"youtube.com\",\"/\"]",
            "[\"__Secure-YEC\",\"youtube.com\",\"/\"]",
            "[\"__Secure-YNID\",\"youtube.com\",\"/\"]",
            "[\"_ga_LS8HVHCNQ0\",\".deepmind.google\",\"/\"]",
            "[\"_ga\",\".deepmind.google\",\"/\"]",
            "[\"VISITOR_INFO1_LIVE\",\"youtube.com\",\"/\"]",
            "[\"VISITOR_PRIVACY_METADATA\",\"youtube.com\",\"/\"]",
            "[\"YSC\",\"youtube.com\",\"/\"]"
          ],
          "baselineOnlyCount": 0,
          "gpcOnlyCount": 0,
          "sharedCount": 10,
          "samplesTruncated": false
        },
        "webStorage": {
          "baselineCount": 0,
          "gpcCount": 0,
          "countDelta": 0,
          "baselineOnly": [],
          "gpcOnly": [],
          "shared": [],
          "baselineOnlyCount": 0,
          "gpcOnlyCount": 0,
          "sharedCount": 0,
          "samplesTruncated": false
        },
        "trackers": {
          "baselineCount": 3,
          "gpcCount": 2,
          "countDelta": -1,
          "baselineOnly": [
            "Google|Google Analytics|analytics"
          ],
          "gpcOnly": [],
          "shared": [
            "Google|Google Ads / DoubleClick|advertising",
            "Google|Google|advertising"
          ],
          "baselineOnlyCount": 1,
          "gpcOnlyCount": 0,
          "sharedCount": 2,
          "samplesTruncated": false
        },
        "advertisingOrMeasurementActivity": {
          "baselineCount": 3,
          "gpcCount": 2,
          "countDelta": -1,
          "baselineOnly": [
            "Google|Google Analytics|analytics"
          ],
          "gpcOnly": [],
          "shared": [
            "Google|Google Ads / DoubleClick|advertising",
            "Google|Google|advertising"
          ],
          "baselineOnlyCount": 1,
          "gpcOnlyCount": 0,
          "sharedCount": 2,
          "samplesTruncated": false
        },
        "advertisingOrMarketingActivity": {
          "baselineCount": 2,
          "gpcCount": 2,
          "countDelta": 0,
          "baselineOnly": [],
          "gpcOnly": [],
          "shared": [
            "Google|Google Ads / DoubleClick|advertising",
            "Google|Google|advertising"
          ],
          "baselineOnlyCount": 0,
          "gpcOnlyCount": 0,
          "sharedCount": 2,
          "samplesTruncated": false
        },
        "consentOrCmpBehavior": {
          "baselineCount": 0,
          "gpcCount": 0,
          "countDelta": 0,
          "baselineOnly": [],
          "gpcOnly": [],
          "shared": [],
          "baselineOnlyCount": 0,
          "gpcOnlyCount": 0,
          "sharedCount": 0,
          "samplesTruncated": false
        }
      },
      "evidenceRefs": [
        "net_13",
        "net_15",
        "net_151",
        "net_153",
        "net_156",
        "net_158",
        "net_160",
        "net_162",
        "net_169",
        "net_175",
        "net_179",
        "net_181",
        "net_183",
        "net_193",
        "net_196",
        "net_205",
        "net_207",
        "net_21",
        "net_23",
        "net_25",
        "net_27",
        "net_29",
        "net_31",
        "net_5",
        "net_7",
        "net_79",
        "net_81",
        "net_83",
        "net_9",
        "net_95",
        "s3://certscore-v2-dag-local-artifacts-eu-west-1-199536052647/v2-dag-lambda/local/860c6f2d-7f46-4c66-8451-51e3f7405658/lanes/gpc_observation/CanonicalEvidenceBundle.json",
        "s3://certscore-v2-dag-local-artifacts-eu-west-1-199536052647/v2-dag-lambda/local/860c6f2d-7f46-4c66-8451-51e3f7405658/lanes/runtime_evidence/CanonicalEvidenceBundle.json"
      ],
      "limitationKeys": [
        "baseline_signal_readback_unverified",
        "gpc_signal_readback_unverified",
        "baseline_gpc_off_not_verified",
        "main_document_sec_gpc_not_retained",
        "baseline_gpc_document_mismatch",
        "baseline_settle_not_completed",
        "gpc_settle_not_completed"
      ]
    },
    "observation": {
      "contractVersion": "certscore.gpc-bounded-observation.v1",
      "scope": "main_document_and_retained_http_requests",
      "status": "complete",
      "sourceSha256": "76664bb7b84253d1804d09d2f5818029979ab6598dc58d2db31301d749442ede",
      "sessionSha256": "ec853ff2b30a2209342eade7fcf733c6b71b77a543c5b3bca2f4bfaafbf5049e",
      "documentUrlSha256": "0ef9b0fe0f3c92b4cf35b49204136edf6dd65440fbb6703f32cf8444ae92b150",
      "delivery": {
        "httpHeaderRetained": true,
        "mainNavigatorReadbackRetained": true,
        "fullContextVerified": false
      },
      "semanticProbe": "unavailable",
      "registration": {
        "basis": "current_recorded_state",
        "sale": "unknown",
        "sharing": "unknown",
        "cmpGpcSignal": "unknown",
        "causedByGpc": "not_established"
      },
      "acknowledgment": {
        "observed": false,
        "captureComplete": true
      },
      "requests": {
        "count": 122,
        "blockedBeforeTransmissionCount": 0,
        "complete": true,
        "fromMs": 615,
        "documentCommittedAtMs": 738,
        "throughMs": 5701,
        "classifiedCount": 4,
        "collectionCount": 3,
        "evidenceIds": [
          "net_179",
          "net_181",
          "net_209",
          "net_399"
        ],
        "samplesTruncated": false
      },
      "limitationKeys": [],
      "scoreEffect": "none",
      "legalInterpretation": "not_assessed"
    }
  },
  "evidenceRefs": [
    "s3://certscore-v2-dag-local-artifacts-eu-west-1-199536052647/v2-dag-lambda/local/860c6f2d-7f46-4c66-8451-51e3f7405658/lanes/runtime_evidence/CanonicalEvidenceBundle.json",
    "s3://certscore-v2-dag-local-artifacts-eu-west-1-199536052647/v2-dag-lambda/local/860c6f2d-7f46-4c66-8451-51e3f7405658/lanes/gpc_observation/CanonicalEvidenceBundle.json",
    "net_13",
    "net_15",
    "net_151",
    "net_153",
    "net_156",
    "net_158",
    "net_160",
    "net_162",
    "net_169",
    "net_175",
    "net_179",
    "net_181",
    "net_183",
    "net_193",
    "net_196",
    "net_205",
    "net_207",
    "net_21",
    "net_23",
    "net_25",
    "net_27",
    "net_29",
    "net_31",
    "net_5",
    "net_7",
    "net_79",
    "net_81",
    "net_83",
    "net_9",
    "net_95"
  ]
}

Loading report

Executive overview

Assessment highlights

Top issues on this page

Pre-consent page event timeline

Services & Resources

Type mix

Evidence mix

Purpose mix

Site relationship

Policy disclosure · Unknown

Policy disclosure · Unknown

Policy disclosure · Unknown

Policy disclosure · Unknown

Forms & fields

Form 1

Detailed evidence

CMP details

Consent management audit · 13 criteria

Consent choices

Tracking & embeds

Policies & disclosures

Accessibility (WCAG)

Cookies & tracking

Connection security

Global Privacy Control