Loading report

{
  "assessmentStatus": "checked",
  "checklistItemId": "privacy_notice_availability",
  "coverageArea": "Privacy notice link/surface discovered",
  "evidenceState": "observed",
  "explanation": "Whether a reachable privacy notice or privacy policy link/surface was retained. This row does not by itself confirm that substantive notice content was available.",
  "note": "Whether a reachable privacy notice or privacy policy link/surface was retained. This row does not by itself confirm that substantive notice content was available.",
  "status": "Observed",
  "tone": "warning",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.privacy_notice_availability.observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.privacy_notice_availability"
  },
  "statusBasis": "Privacy notice evidence was retained in public policy-surface evidence.",
  "retainedEvidence": {
    "remediation": {
      "kind": "none",
      "steps": [],
      "message": "No remediation is established by this check alone. Retain its evidence and reassess after relevant changes."
    },
    "evidenceRefs": [
      "Excerpt: approved by the UK, European Commission, and Switzerland. We share parts of Input Data with Brave Software, Inc., so we can include Brave’s search results in the Service. Brave’s privacy policy is linked here. We have Google Payments, Apple Pay and Stripe conduct payment processing services (respective privacy policies linked). They do not share your credit card information with us. 13.4 Your rights You may access, correct, update, or request deletion of your personal information. Please note that we cannot guaran",
      "Evidence: privacy policy surface retained",
      "Policy URL: https://x.ai/legal/europe-privacy-policy-addendum"
    ],
    "signalObserved": true,
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "policyEvidenceAssessment": {
      "result": "disclosure_observed",
      "scoreEffect": "canonical_policy",
      "topicRelevance": "direct",
      "contractVersion": "certscore.policy-topic-evidence-assessment.v1"
    },
    "policyEvidenceProvenance": {
      "sourceUrl": "https://x.ai/legal/europe-privacy-policy-addendum",
      "policyTitle": "SpaceXSI’s Europe Privacy Policy Addendum | SpaceXSI",
      "artifactRefs": [
        "policy_excerpt_40f9cdb5_a054dce3",
        "policy_surface_text_40f9cdb5_21b1bdd4"
      ],
      "bannerLanguage": "en",
      "contractVersion": "certscore.policy-evidence-provenance.v1",
      "discoveryMethod": "page_text_link",
      "documentHeading": "SpaceXSI’s Europe Privacy Policy Addendum",
      "detectedLanguage": "en",
      "retrievalTimestamp": "2026-10-12T19:33:57.483Z",
      "targetRelationship": "target_controller",
      "translationApplied": false,
      "documentOwnerEntity": "SpaceXSI s Europe Addendum SpaceXSI",
      "ownershipConfidence": 0.98,
      "directlyLinkedFromScannedPage": false
    },
    "selectedEvidenceStrength": "moderate",
    "selectedEvidenceArtifactId": "coverage_policy",
    "policySurfaceSummary": {
      "scanStartedAt": "2026-10-12T19:33:43.239Z",
      "observedTopics": [
        "cookies",
        "sale_or_share",
        "do_not_sell_or_share",
        "sensitive_personal_information",
        "profiling_or_automated_decision_making",
        "vendor_list",
        "consent_withdrawal",
        "controller_contact",
        "processing_purposes",
        "legal_basis",
        "recipients_or_vendor_categories",
        "international_transfers",
        "supervisory_authority",
        "ai_features",
        "contact_privacy"
      ],
      "cookiePolicyUrls": [],
      "cookieDisclosures": [],
      "mentionedControls": [
        "consent_withdrawal",
        "cookie_settings"
      ],
      "privacyPolicySize": {
        "url": "https://x.ai/legal/europe-privacy-policy-addendum",
        "completeness": "complete",
        "documentFormat": "text",
        "compressedBytes": 145502,
        "measurementScope": "selected_usable_privacy_policy",
        "decompressedBytes": 145502
      },
      "privacyPolicyUrls": [
        "https://x.ai/legal/europe-privacy-policy-addendum"
      ],
      "cookie_disclosures": [],
      "policySectionCount": 13,
      "policySurfaceCount": 5,
      "cookiePolicyPresent": false,
      "scannedPageLanguage": "en",
      "privacyPolicyPresent": true,
      "policyPrimaryLanguage": "en",
      "policyLastUpdatedTexts": [
        "Last Updated: October 11, 2026",
        "Last Updated: August 14, 2026"
      ],
      "policyTextCoverageMode": "section_targeted",
      "retainedPolicySections": [
        {
          "charEnd": 17421,
          "heading": "SpaceXSI’s Europe Privacy Policy Addendum",
          "quality": "strong",
          "charStart": 5440,
          "sourceUrl": "https://x.ai/legal/europe-privacy-policy-addendum",
          "textExcerpt": "Effective: August 24, 2026 ( previous version ) SpaceXSI’s main Privacy Policy outlines how SpaceXSI collects and uses your personal information. If you are outside the European Economic Area, United Kingdom, and Switzerland (“Europe”), you only need to read the main Privacy Policy . If you are in Europe, this Europe Privacy Policy Addendum is a continuation of the main Privacy Policy and adds information that is specific to Europe. 13. Additional information for individuals in Europe If you are located in the European Economic Area (\" EEA \"), United Kingdom (\" UK \") or Switzerland (collectively, \" Europe \") the following disclosures apply: 13.1 Data controller SpaceXAI LLC, which is based in the USA, is the controller of your personal information as described in this Privacy Policy, unless otherwise specified. See section 12 of the main Privacy Policy for how to contact SpaceXSI. 13.2 Legal basis We provide below more details on the purposes for which we process your personal information, what information we process for each purpose, and the related legal bases."
        },
        {
          "charEnd": 17421,
          "heading": "13. Additional information for individuals in Europe",
          "quality": "strong",
          "charStart": 6306,
          "sourceUrl": "https://x.ai/legal/europe-privacy-policy-addendum",
          "textExcerpt": "If you are located in the European Economic Area (\" EEA \"), United Kingdom (\" UK \") or Switzerland (collectively, \" Europe \") the following disclosures apply: 13.1 Data controller SpaceXAI LLC, which is based in the USA, is the controller of your personal information as described in this Privacy Policy, unless otherwise specified. See section 12 of the main Privacy Policy for how to contact SpaceXSI. 13.2 Legal basis We provide below more details on the purposes for which we process your personal information, what information we process for each purpose, and the related legal bases. To process payments for our Service We process Account Data, Communication Data, and Payment Data This is necessary to perform our contract with you, or - if there is no contract - this is necessary for our legitimate interest in processing a payment at your request To provide our Service (including to provide Output in response to Input) We process Account Data, Communication Data, User Content, Public X Posts and internet search data and Technical Usage Data This is necessary to perform our contract; otherwise this is necessary for our legitimate interests (to provide and maintain our Service,"
        },
        {
          "charEnd": 7182,
          "heading": "13.1 Data controller",
          "quality": "partial",
          "charStart": 6773,
          "sourceUrl": "https://x.ai/legal/europe-privacy-policy-addendum",
          "textExcerpt": "SpaceXAI LLC, which is based in the USA, is the controller of your personal information as described in this Privacy Policy, unless otherwise specified. See section 12 of the main Privacy Policy for how to contact SpaceXSI."
        },
        {
          "charEnd": 11620,
          "heading": "13.2 Legal basis",
          "quality": "strong",
          "charStart": 7182,
          "sourceUrl": "https://x.ai/legal/europe-privacy-policy-addendum",
          "textExcerpt": "We provide below more details on the purposes for which we process your personal information, what information we process for each purpose, and the related legal bases. To process payments for our Service We process Account Data, Communication Data, and Payment Data This is necessary to perform our contract with you, or - if there is no contract - this is necessary for our legitimate interest in processing a payment at your request To provide our Service (including to provide Output in response to Input) We process Account Data, Communication Data, User Content, Public X Posts and internet search data and Technical Usage Data This is necessary to perform our contract; otherwise this is necessary for our legitimate interests (to provide and maintain our Service, including customising Output in response to your prompts and- for over-18 users who use X to sign in to our Service - personalising the interaction with the Service) To provide support and assistance in relation to our Service We process Account Data, Communication Data, Technical Usage Data, User Content and Feedback Data This is necessary to perform our contract with you; otherwise, this is necessary for our legitimate"
        },
        {
          "charEnd": 13359,
          "heading": "13.3 Our service providers with whom we may share personal information and where personal information is processed",
          "quality": "strong",
          "charStart": 11620,
          "sourceUrl": "https://x.ai/legal/europe-privacy-policy-addendum",
          "textExcerpt": "We process all of your personal information in the United States, where we maintain our primary data centers. We use service providers that may be involved in processing personal information as listed on our subprocessor page . These companies either participate in the EU-US Data Privacy Framework, the Swiss-US Data Privacy Framework and the UK extension to the EU-US Data Privacy Framework, which offer adequate protection for European personal information; or we have standard contractual clauses in place with them (including text from modules 1 and 2) which have been approved by the UK, European Commission, and Switzerland. We share parts of Input Data with Brave Software, Inc., so we can include Brave’s search results in the Service. Brave’s privacy policy is linked here . We have Google Payments , Apple Pay and Stripe conduct payment processing services (respective privacy policies linked). They do not share your credit card information with us."
        },
        {
          "charEnd": 17421,
          "heading": "13.4 Your rights",
          "quality": "strong",
          "charStart": 13359,
          "sourceUrl": "https://x.ai/legal/europe-privacy-policy-addendum",
          "textExcerpt": "You may access, correct, update, or request deletion of your personal information. Please note that we cannot guarantee the factual accuracy of Output from our models. If Output contains factually inaccurate personal information relating to you, you can submit a correction request and we will make reasonable efforts to correct this information — but due to the technical complexity of our models, it may not be feasible for us to do so. You can object to processing of your personal information when our processing is based on our legitimate interests, ask us to restrict processing of your personal information or request portability of your personal information, (i.e., your data to be transferred in a readable and standardized format). Please note you can object to our use of your information to train our models in your settings. See Consumer FAQs . You have the right to opt-out of any marketing communications we may send at any time and to opt-out of profiling for purposes of direct marketing. We may still send you non-promotional emails, such as emails about your Grok access, legally required notices, or our ongoing business relations."
        },
        {
          "charEnd": 1386,
          "heading": "data controller",
          "quality": "strong",
          "charStart": 748,
          "sourceUrl": "https://x.ai/legal/europe-privacy-policy-addendum",
          "textExcerpt": "Additional information for individuals in Europe If you are located in the European Economic Area (\" EEA \"), United Kingdom (\" UK \") or Switzerland (collectively, \" Europe \") the following disclosures apply: 13.1 Data controller SpaceXAI LLC, which is based in the USA, is the controller of your personal information as described in this Privacy Policy, unless otherwise specified. See section 12 of the main Privacy Policy for how to contact SpaceXSI. 13.2 Legal basis We provide below more details on the purposes for which we process your personal information, what information we process for each purpose, and the related legal bases."
        },
        {
          "charEnd": 8663,
          "heading": "right to complain to a supervisory authority",
          "quality": "strong",
          "charStart": 7730,
          "sourceUrl": "https://x.ai/legal/europe-privacy-policy-addendum",
          "textExcerpt": "You have the right to complain to a supervisory authority about our collection and use of your personal information. For more information, please contact your local supervisory authority. Contact details for supervisory authorities in the EEA and the UK are available here . Certain supervisory authorities may require that you exhaust our own internal complaints process before looking into your complaint. In France, you can choose to ask us to keep or destroy your personal information, after your death, to a nominated third party. You may also be able to ask us to disclose your personal information, after your death, to a specified recipient. If you have a SpaceXSI account to access the Service, some of these rights may be exercised through your account. See Consumer FAQs . Rights not exercisable through your account to the extent they may be applicable, can be exercised by contacting us at https://x.ai/privacy-portal/ ."
        },
        {
          "charEnd": 6374,
          "heading": "eu-us data privacy framework",
          "quality": "strong",
          "charStart": 5456,
          "sourceUrl": "https://x.ai/legal/europe-privacy-policy-addendum",
          "textExcerpt": "These companies either participate in the EU-US Data Privacy Framework, the Swiss-US Data Privacy Framework and the UK extension to the EU-US Data Privacy Framework, which offer adequate protection for European personal information; or we have standard contractual clauses in place with them (including text from modules 1 and 2) which have been approved by the UK, European Commission, and Switzerland. We share parts of Input Data with Brave Software, Inc., so we can include Brave’s search results in the Service. Brave’s privacy policy is linked here . We have Google Payments , Apple Pay and Stripe conduct payment processing services (respective privacy policies linked). They do not share your credit card information with us. 13.4 Your rights You may access, correct, update, or request deletion of your personal information. Please note that we cannot guarantee the factual accuracy of Output from our models."
        },
        {
          "charEnd": 6012,
          "heading": "Policy section",
          "quality": "strong",
          "charStart": 5113,
          "sourceUrl": "https://x.ai/legal/europe-privacy-policy-addendum",
          "textExcerpt": "13.3 Our service providers with whom we may share personal information and where personal information is processed We process all of your personal information in the United States, where we maintain our primary data centers. We use service providers that may be involved in processing personal information as listed on our subprocessor page . These companies either participate in the EU-US Data Privacy Framework, the Swiss-US Data Privacy Framework and the UK extension to the EU-US Data Privacy Framework, which offer adequate protection for European personal information; or we have standard contractual clauses in place with them (including text from modules 1 and 2) which have been approved by the UK, European Commission, and Switzerland. We share parts of Input Data with Brave Software, Inc., so we can include Brave’s search results in the Service. Brave’s privacy policy is linked here ."
        },
        {
          "charEnd": 2201,
          "heading": "Policy section",
          "quality": "strong",
          "charStart": 1201,
          "sourceUrl": "https://x.ai/legal/europe-privacy-policy-addendum",
          "textExcerpt": "13.2 Legal basis We provide below more details on the purposes for which we process your personal information, what information we process for each purpose, and the related legal bases. To process payments for our Service We process Account Data, Communication Data, and Payment Data This is necessary to perform our contract with you, or - if there is no contract - this is necessary for our legitimate interest in processing a payment at your request To provide our Service (including to provide Output in response to Input) We process Account Data, Communication Data, User Content, Public X Posts and internet search data and Technical Usage Data This is necessary to perform our contract; otherwise this is necessary for our legitimate interests (to provide and maintain our Service, including customising Output in response to your prompts and- for over-18 users who use X to sign in to our Service - personalising the interaction with the Service) To provide support and assistance in relation"
        },
        {
          "charEnd": 7486,
          "heading": "Policy section",
          "quality": "strong",
          "charStart": 6646,
          "sourceUrl": "https://x.ai/legal/europe-privacy-policy-addendum",
          "textExcerpt": "You can object to processing of your personal information when our processing is based on our legitimate interests, ask us to restrict processing of your personal information or request portability of your personal information, (i.e., your data to be transferred in a readable and standardized format). Please note you can object to our use of your information to train our models in your settings. See Consumer FAQs . You have the right to opt-out of any marketing communications we may send at any time and to opt-out of profiling for purposes of direct marketing. We may still send you non-promotional emails, such as emails about your Grok access, legally required notices, or our ongoing business relations. If we have collected and processed your personal information with your consent, then you can withdraw your consent at any time."
        },
        {
          "charEnd": 8663,
          "heading": "Policy section",
          "quality": "strong",
          "charStart": 7730,
          "sourceUrl": "https://x.ai/legal/europe-privacy-policy-addendum",
          "textExcerpt": "You have the right to complain to a supervisory authority about our collection and use of your personal information. For more information, please contact your local supervisory authority. Contact details for supervisory authorities in the EEA and the UK are available here . Certain supervisory authorities may require that you exhaust our own internal complaints process before looking into your complaint. In France, you can choose to ask us to keep or destroy your personal information, after your death, to a nominated third party. You may also be able to ask us to disclose your personal information, after your death, to a specified recipient. If you have a SpaceXSI account to access the Service, some of these rights may be exercised through your account. See Consumer FAQs . Rights not exercisable through your account to the extent they may be applicable, can be exercised by contacting us at https://x.ai/privacy-portal/ ."
        }
      ],
      "cookieDisclosurePresent": true,
      "policyCookieDisclosures": [],
      "privacyPolicyDiscovered": true,
      "processingErrorObserved": false,
      "observedPolicyTopicHints": [
        "cookies",
        "sale_or_share",
        "do_not_sell_or_share",
        "sensitive_personal_information",
        "profiling_or_automated_decision_making",
        "vendor_list",
        "consent_withdrawal",
        "controller_contact",
        "processing_purposes",
        "legal_basis",
        "recipients_or_vendor_categories",
        "international_transfers",
        "supervisory_authority",
        "ai_features",
        "contact_privacy"
      ],
      "policyDocumentProvenance": [
        {
          "sourceUrl": "https://x.ai/legal/europe-privacy-policy-addendum",
          "policyTitle": "SpaceXSI’s Europe Privacy Policy Addendum | SpaceXSI",
          "artifactRefs": [
            "policy_excerpt_40f9cdb5_a054dce3",
            "policy_surface_text_40f9cdb5_21b1bdd4"
          ],
          "effectiveDate": null,
          "observationId": "policy_surface_40f9cdb5",
          "discoveryMethod": "page_text_link",
          "documentHeading": "SpaceXSI’s Europe Privacy Policy Addendum",
          "lastUpdatedText": null,
          "detectedLanguage": "en",
          "retrievalTimestamp": "2026-10-12T19:33:57.483Z",
          "targetRelationship": "target_controller",
          "translationApplied": false,
          "documentOwnerEntity": "SpaceXSI s Europe Addendum SpaceXSI",
          "ownershipConfidence": 0.98,
          "translationTargetLanguage": null,
          "directlyLinkedFromScannedPage": false
        }
      ],
      "policy_cookie_disclosures": [],
      "article13DisclosureSignals": [
        {
          "source": "deterministic",
          "status": "observed",
          "confidence": 0.86,
          "surfaceUrl": "https://x.ai/legal/europe-privacy-policy-addendum",
          "matchedTerm": "enumerated data-subject rights disclosure",
          "evidenceText": ", Apple Pay and Stripe conduct payment processing services (respective privacy policies linked). They do not share your credit card information with us. 13.4 Your rights You may access, correct, update, or request deletion of your personal information. Please note that we cannot guarantee the factual accuracy of Output from our models.",
          "matchStrength": "equivalent",
          "matchedLocale": "en",
          "disclosureType": "data_subject_rights",
          "evidenceSource": "canonical_retained_article13_signal",
          "productionCredit": true,
          "classifierProvenance": "gdpr_transparency_topic_classifier.v1",
          "classifierReasonCodes": [
            "matched_data_subject_rights",
            "match_strength_equivalent",
            "variant_semantic_clause"
          ],
          "productionCreditProfile": "gdpr_transparency_multilingual_article13_v1",
          "selectedEvidenceStrength": "strong",
          "selectedPolicySectionUrl": "https://x.ai/legal/europe-privacy-policy-addendum",
          "selectedPolicySectionExcerpt": ", Apple Pay and Stripe conduct payment processing services (respective privacy policies linked). They do not share your credit card information with us. 13.4 Your rights You may access, correct, update, or request deletion of your personal information. Please note that we cannot guarantee the factual accuracy of Output from our models.",
          "sourceCandidateProductionCredit": false
        },
        {
          "source": "deterministic",
          "status": "observed",
          "confidence": 0.82,
          "surfaceUrl": "https://x.ai/legal/europe-privacy-policy-addendum",
          "matchedTerm": "eu-us data privacy framework",
          "evidenceText": "13.3 Our service providers with whom we may share personal information and where personal information is processed We process all of your personal information in the United States, where we maintain our primary data centers.",
          "matchStrength": "equivalent",
          "matchedLocale": "de",
          "disclosureType": "international_transfers",
          "evidenceSource": "canonical_retained_article13_signal",
          "productionCredit": true,
          "classifierProvenance": "gdpr_transparency_topic_classifier.v1",
          "classifierReasonCodes": [
            "matched_international_transfers",
            "match_strength_equivalent",
            "variant_requires_privacy_context"
          ],
          "productionCreditProfile": "gdpr_transparency_multilingual_article13_v1",
          "selectedEvidenceStrength": "strong",
          "selectedPolicySectionUrl": "https://x.ai/legal/europe-privacy-policy-addendum",
          "selectedPolicySectionExcerpt": "13.3 Our service providers with whom we may share personal information and where personal information is processed We process all of your personal information in the United States, where we maintain our primary data centers.",
          "selectedPolicySectionHeading": "13.3 Our service providers with whom we may share personal information and where personal information is processed",
          "sourceCandidateProductionCredit": false
        },
        {
          "source": "deterministic",
          "status": "observed",
          "confidence": 0.82,
          "surfaceUrl": "https://x.ai/legal/europe-privacy-policy-addendum",
          "matchedTerm": "right to complain to a supervisory authority",
          "evidenceText": "You have the right to complain to a supervisory authority about our collection and use of your personal information.",
          "matchStrength": "equivalent",
          "matchedLocale": "en",
          "disclosureType": "supervisory_authority",
          "evidenceSource": "canonical_retained_article13_signal",
          "productionCredit": true,
          "classifierProvenance": "gdpr_transparency_topic_classifier.v1",
          "classifierReasonCodes": [
            "matched_supervisory_authority",
            "match_strength_equivalent"
          ],
          "productionCreditProfile": "gdpr_transparency_multilingual_article13_v1",
          "selectedEvidenceStrength": "strong",
          "selectedPolicySectionUrl": "https://x.ai/legal/europe-privacy-policy-addendum",
          "selectedPolicySectionExcerpt": "You have the right to complain to a supervisory authority about our collection and use of your personal information.",
          "sourceCandidateProductionCredit": false
        },
        {
          "source": "deterministic",
          "status": "observed",
          "confidence": 0.9,
          "surfaceUrl": "https://x.ai/legal/europe-privacy-policy-addendum",
          "matchedTerm": "data controller",
          "evidenceText": "13.1 Data controller SpaceXAI LLC, which is based in the USA, is the controller of your personal information as described in this Privacy Policy, unless otherwise specified. See section 12 of the main Privacy Policy for how to contact SpaceXSI.",
          "matchStrength": "direct",
          "matchedLocale": "en",
          "disclosureType": "controller_contact",
          "evidenceSource": "canonical_retained_article13_signal",
          "productionCredit": true,
          "classifierProvenance": "gdpr_transparency_topic_classifier.v1",
          "classifierReasonCodes": [
            "matched_controller_contact",
            "match_strength_direct"
          ],
          "productionCreditProfile": "gdpr_transparency_multilingual_article13_v1",
          "selectedEvidenceStrength": "strong",
          "selectedPolicySectionUrl": "https://x.ai/legal/europe-privacy-policy-addendum",
          "selectedPolicySectionExcerpt": "13.1 Data controller SpaceXAI LLC, which is based in the USA, is the controller of your personal information as described in this Privacy Policy, unless otherwise specified. See section 12 of the main Privacy Policy for how to contact SpaceXSI.",
          "sourceCandidateProductionCredit": false
        },
        {
          "source": "deterministic",
          "status": "observed",
          "confidence": 0.86,
          "surfaceUrl": "https://x.ai/legal/europe-privacy-policy-addendum",
          "matchedTerm": "specific personal-data processing purpose",
          "evidenceText": "13.2 Legal basis We provide below more details on the purposes for which we process your personal information, what information we process for each purpose, and the related legal bases.",
          "matchStrength": "equivalent",
          "matchedLocale": "en",
          "disclosureType": "processing_purposes",
          "evidenceSource": "canonical_retained_article13_signal",
          "productionCredit": true,
          "classifierProvenance": "gdpr_transparency_topic_classifier.v1",
          "classifierReasonCodes": [
            "matched_processing_purposes",
            "match_strength_equivalent",
            "variant_semantic_clause"
          ],
          "productionCreditProfile": "gdpr_transparency_multilingual_article13_v1",
          "selectedEvidenceStrength": "strong",
          "selectedPolicySectionUrl": "https://x.ai/legal/europe-privacy-policy-addendum",
          "selectedPolicySectionExcerpt": "13.2 Legal basis We provide below more details on the purposes for which we process your personal information, what information we process for each purpose, and the related legal bases.",
          "sourceCandidateProductionCredit": false
        },
        {
          "source": "deterministic",
          "status": "observed",
          "confidence": 0.86,
          "surfaceUrl": "https://x.ai/legal/europe-privacy-policy-addendum",
          "matchedTerm": "processing legal-basis clause",
          "evidenceText": "You can object to processing of your personal information when our processing is based on our legitimate interests, ask us to restrict processing of your personal information or request portability of your personal information, (i.e., your data to be transferred in a readable and standardized format).",
          "matchStrength": "equivalent",
          "matchedLocale": "en",
          "disclosureType": "legal_basis",
          "evidenceSource": "canonical_retained_article13_signal",
          "productionCredit": true,
          "classifierProvenance": "gdpr_transparency_topic_classifier.v1",
          "classifierReasonCodes": [
            "matched_legal_basis",
            "match_strength_equivalent",
            "variant_semantic_clause"
          ],
          "productionCreditProfile": "gdpr_transparency_multilingual_article13_v1",
          "selectedEvidenceStrength": "strong",
          "selectedPolicySectionUrl": "https://x.ai/legal/europe-privacy-policy-addendum",
          "selectedPolicySectionExcerpt": "You can object to processing of your personal information when our processing is based on our legitimate interests, ask us to restrict processing of your personal information or request portability of your personal information, (i.e., your data to be transferred in a readable and standardized format).",
          "selectedPolicySectionHeading": "13.4 Your rights",
          "sourceCandidateProductionCredit": false
        },
        {
          "source": "deterministic",
          "status": "observed",
          "confidence": 0.86,
          "surfaceUrl": "https://x.ai/legal/europe-privacy-policy-addendum",
          "matchedTerm": "named recipient or meaningful recipient category",
          "evidenceText": "13.3 Our service providers with whom we may share personal information and where personal information is processed We process all of your personal information in the United States, where we maintain our primary data centers.",
          "matchStrength": "equivalent",
          "matchedLocale": "en",
          "disclosureType": "recipients_or_vendor_categories",
          "evidenceSource": "canonical_retained_article13_signal",
          "productionCredit": true,
          "classifierProvenance": "gdpr_transparency_topic_classifier.v1",
          "classifierReasonCodes": [
            "matched_recipients_or_vendor_categories",
            "match_strength_equivalent",
            "variant_semantic_clause"
          ],
          "productionCreditProfile": "gdpr_transparency_multilingual_article13_v1",
          "selectedEvidenceStrength": "strong",
          "selectedPolicySectionUrl": "https://x.ai/legal/europe-privacy-policy-addendum",
          "selectedPolicySectionExcerpt": "13.3 Our service providers with whom we may share personal information and where personal information is processed We process all of your personal information in the United States, where we maintain our primary data centers.",
          "selectedPolicySectionHeading": "13.3 Our service providers with whom we may share personal information and where personal information is processed",
          "sourceCandidateProductionCredit": false
        }
      ],
      "policyTextExtractionHealth": {
        "policyUrls": [
          "https://x.ai/legal/europe-privacy-policy-addendum",
          "https://x.ai/legal/cookie-policy",
          "https://x.ai/legal/privacy-policy"
        ],
        "nanoInvoked": false,
        "contractVersion": "certscore.policy-text-extraction-health.v2",
        "policyTextQuality": {
          "usable": true,
          "codeSignalCount": 0,
          "codeSymbolRatio": 0.00039856516540454366,
          "policyTermCount": 12,
          "alphabeticWordRatio": 0.7957259585166562,
          "accessChallengeSignalCount": 0,
          "naturalLanguageSentenceCount": 44
        },
        "policyUrlRetained": true,
        "extractedTextLength": 10036,
        "policySurfaceObserved": true,
        "detectedPolicyLanguage": "en",
        "minimumTextLengthRequired": 500,
        "policyTextExtractionStatus": "ok",
        "verifiedPolicyDocumentCount": 3,
        "detectedPolicyLanguageSource": "policy_surface",
        "supportedGdprTransparencyLocales": [
          "en",
          "de",
          "fr",
          "es",
          "it",
          "nl",
          "pl",
          "pt",
          "ru",
          "ja",
          "zh",
          "ar",
          "sv",
          "ro",
          "cs",
          "el",
          "hu",
          "da",
          "fi",
          "sk",
          "bg",
          "hr",
          "nb",
          "sl",
          "lt",
          "lv",
          "et",
          "uk",
          "tr",
          "fa",
          "vi",
          "id",
          "ko",
          "th",
          "he",
          "sr",
          "ca",
          "hi",
          "az",
          "gl"
        ],
        "gdprTransparencyLanguageSupported": true,
        "policyTextEvidenceProjectionStatus": "verified_complete",
        "policyTextEvidenceProjectionContractVersion": "certscore.policy-text-evidence-projection.v1"
      },
      "privacyPolicyEvidencePaths": [
        {
          "documentUrl": "https://x.ai/legal/europe-privacy-policy-addendum",
          "traversalDepth": 1,
          "parentSurfaceUrl": "https://x.ai/legal/privacy-policy",
          "childObservationId": "policy_surface_40f9cdb5",
          "documentFetchState": "fetched",
          "parentObservationId": "policy_surface_7cdbd94f",
          "selectionReasonCodes": [
            "linked_from_retained_privacy_surface",
            "linked_from_retained_privacy_policy_index",
            "one_hop_policy_document_candidate",
            "bounded_same_origin_policy_supplement",
            "single_supplement_fetch_limit",
            "supplement_rendered_fallback_disabled",
            "scan_region_policy_route_match",
            "deterministic_one_hop_selection",
            "supplement_total_fetch_resolution_cap_5000ms"
          ],
          "documentEvaluationState": "usable"
        }
      ],
      "discoveredPrivacyPolicyUrls": [
        "https://x.ai/legal/privacy-policy",
        "https://x.ai/privacy-portal",
        "https://x.ai/legal/privacy-policy/previous-2026-08-24",
        "https://x.ai/legal/europe-privacy-policy-addendum",
        "https://x.ai/legal/cookie-policy"
      ],
      "article13CoverageAssessments": [
        {
          "topic": "automated_decision_making_or_profiling",
          "status": "insufficient_retained_evidence",
          "sourceUrls": [
            "https://x.ai/legal/europe-privacy-policy-addendum"
          ],
          "reasonCodes": [
            "policy_absence_coverage_preconditions_not_met",
            "typed_topic_coverage_diagnostic_missing_or_limited",
            "policy_document_content_coverage_incomplete",
            "policy_index_is_not_substantive_policy_document",
            "material_linked_policy_supplements_not_fully_evaluated"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_40f9cdb5"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "bcce01c43f1938279457d6313cf8ca74a8869e58d21ccb19d6080b4d7454f8c3"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": [
            "https://x.ai/privacy-portal",
            "https://x.ai/legal/privacy-policy/previous-2026-08-24"
          ]
        },
        {
          "topic": "controller_contact",
          "status": "observed",
          "sourceUrls": [
            "https://x.ai/legal/europe-privacy-policy-addendum"
          ],
          "reasonCodes": [
            "row_specific_disclosure_observed"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_40f9cdb5"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "bcce01c43f1938279457d6313cf8ca74a8869e58d21ccb19d6080b4d7454f8c3"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": [
            "https://x.ai/privacy-portal",
            "https://x.ai/legal/privacy-policy/previous-2026-08-24"
          ]
        },
        {
          "topic": "data_retention",
          "status": "insufficient_retained_evidence",
          "sourceUrls": [
            "https://x.ai/legal/europe-privacy-policy-addendum"
          ],
          "reasonCodes": [
            "policy_absence_coverage_preconditions_not_met",
            "typed_topic_coverage_diagnostic_missing_or_limited",
            "policy_document_content_coverage_incomplete",
            "policy_index_is_not_substantive_policy_document",
            "material_linked_policy_supplements_not_fully_evaluated"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_40f9cdb5"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "bcce01c43f1938279457d6313cf8ca74a8869e58d21ccb19d6080b4d7454f8c3"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": [
            "https://x.ai/privacy-portal",
            "https://x.ai/legal/privacy-policy/previous-2026-08-24"
          ]
        },
        {
          "topic": "data_subject_rights",
          "status": "observed",
          "sourceUrls": [
            "https://x.ai/legal/europe-privacy-policy-addendum"
          ],
          "reasonCodes": [
            "row_specific_disclosure_observed"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_40f9cdb5"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "bcce01c43f1938279457d6313cf8ca74a8869e58d21ccb19d6080b4d7454f8c3"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": [
            "https://x.ai/privacy-portal",
            "https://x.ai/legal/privacy-policy/previous-2026-08-24"
          ]
        },
        {
          "topic": "dpo_contact",
          "status": "insufficient_retained_evidence",
          "sourceUrls": [
            "https://x.ai/legal/europe-privacy-policy-addendum"
          ],
          "reasonCodes": [
            "policy_absence_coverage_preconditions_not_met",
            "typed_topic_coverage_diagnostic_missing_or_limited",
            "policy_document_content_coverage_incomplete",
            "policy_index_is_not_substantive_policy_document",
            "material_linked_policy_supplements_not_fully_evaluated"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_40f9cdb5"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "bcce01c43f1938279457d6313cf8ca74a8869e58d21ccb19d6080b4d7454f8c3"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": [
            "https://x.ai/privacy-portal",
            "https://x.ai/legal/privacy-policy/previous-2026-08-24"
          ]
        },
        {
          "topic": "international_transfers",
          "status": "observed",
          "sourceUrls": [
            "https://x.ai/legal/europe-privacy-policy-addendum"
          ],
          "reasonCodes": [
            "row_specific_disclosure_observed"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_40f9cdb5"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "bcce01c43f1938279457d6313cf8ca74a8869e58d21ccb19d6080b4d7454f8c3"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": [
            "https://x.ai/privacy-portal",
            "https://x.ai/legal/privacy-policy/previous-2026-08-24"
          ]
        },
        {
          "topic": "legal_basis",
          "status": "observed",
          "sourceUrls": [
            "https://x.ai/legal/europe-privacy-policy-addendum"
          ],
          "reasonCodes": [
            "row_specific_disclosure_observed"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_40f9cdb5"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "bcce01c43f1938279457d6313cf8ca74a8869e58d21ccb19d6080b4d7454f8c3"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": [
            "https://x.ai/privacy-portal",
            "https://x.ai/legal/privacy-policy/previous-2026-08-24"
          ]
        },
        {
          "topic": "processing_purposes",
          "status": "observed",
          "sourceUrls": [
            "https://x.ai/legal/europe-privacy-policy-addendum"
          ],
          "reasonCodes": [
            "row_specific_disclosure_observed"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_40f9cdb5"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "bcce01c43f1938279457d6313cf8ca74a8869e58d21ccb19d6080b4d7454f8c3"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": [
            "https://x.ai/privacy-portal",
            "https://x.ai/legal/privacy-policy/previous-2026-08-24"
          ]
        },
        {
          "topic": "recipients_or_vendor_categories",
          "status": "observed",
          "sourceUrls": [
            "https://x.ai/legal/europe-privacy-policy-addendum"
          ],
          "reasonCodes": [
            "row_specific_disclosure_observed"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_40f9cdb5"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "bcce01c43f1938279457d6313cf8ca74a8869e58d21ccb19d6080b4d7454f8c3"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": [
            "https://x.ai/privacy-portal",
            "https://x.ai/legal/privacy-policy/previous-2026-08-24"
          ]
        },
        {
          "topic": "supervisory_authority",
          "status": "observed",
          "sourceUrls": [
            "https://x.ai/legal/europe-privacy-policy-addendum"
          ],
          "reasonCodes": [
            "row_specific_disclosure_observed"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_40f9cdb5"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "bcce01c43f1938279457d6313cf8ca74a8869e58d21ccb19d6080b4d7454f8c3"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": [
            "https://x.ai/privacy-portal",
            "https://x.ai/legal/privacy-policy/previous-2026-08-24"
          ]
        }
      ],
      "dedicatedCookiePolicyPresent": false,
      "policyTextEvidenceProjection": {
        "scanId": "91cbeb92-2d29-474b-b60c-86d767f5caeb",
        "documents": [
          {
            "finalUrl": "https://x.ai/legal/europe-privacy-policy-addendum",
            "artifactId": "policy_surface_text_40f9cdb5_21b1bdd4",
            "artifactUri": "s3://certscore-v2-dag-local-artifacts-eu-west-1-199536052647/v2-dag-lambda/local/91cbeb92-2d29-474b-b60c-86d767f5caeb/auxiliary/policy_surface_text_40f9cdb5_21b1bdd4.txt",
            "contentType": "text/html; charset=utf-8",
            "documentRole": "policy_document",
            "requestedUrl": "https://x.ai/legal/europe-privacy-policy-addendum",
            "observationId": "policy_surface_40f9cdb5",
            "redirectChain": [
              "https://x.ai/legal/europe-privacy-policy-addendum"
            ],
            "artifactSha256": "bcce01c43f1938279457d6313cf8ca74a8869e58d21ccb19d6080b4d7454f8c3",
            "documentFormat": "text",
            "limitationKeys": [
              "policy_section_text_bounded"
            ],
            "contentCoverage": {
              "status": "truncated",
              "limitationKeys": [
                "policy_section_text_bounded"
              ],
              "sourceTextChars": 10036,
              "retainedSectionCount": 13,
              "extractedSectionCount": 13,
              "retainedTableRowCount": 0
            },
            "artifactFileName": "policy_surface_text_40f9cdb5_21b1bdd4.txt",
            "extractionStatus": "complete",
            "artifactSizeBytes": 10057,
            "retainedTextChars": 10036,
            "documentFetchState": "fetched",
            "retainedTextSha256": "bcce01c43f1938279457d6313cf8ca74a8869e58d21ccb19d6080b4d7454f8c3",
            "targetRelationship": "target_controller",
            "documentOwnerEntity": "SpaceXSI s Europe Addendum SpaceXSI",
            "ownershipConfidence": 0.98,
            "documentTextCoverage": {
              "status": "complete",
              "limitationKeys": [],
              "sourceTextChars": 10036,
              "retainedTextChars": 10036
            },
            "documentEvaluationState": "usable",
            "documentRoleReasonCodes": [
              "multiple_substantive_disclosure_signals_retained"
            ],
            "governingPolicySelection": {
              "rank": 1,
              "score": 85,
              "state": "primary",
              "reasonCodes": [
                "highest_ranked_eligible_governing_policy",
                "target_controller_document",
                "policy_content_coverage_truncated",
                "complete_policy_text_retention",
                "multiple_substantive_disclosure_signals_retained"
              ],
              "contractVersion": "governing_policy_selection.v1"
            },
            "artifactVerificationStatus": "verified",
            "gdprTransparencyTopicCoverageDiagnostics": [
              {
                "topic": "controller_contact",
                "reasonCodes": [
                  "row_specific_disclosure_observed",
                  "evidence_hash_binding_verified",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "observed",
                "sourceDocumentSha256": "69397ae8f17b94d6f1b2052b6d7349781fa7a762adb3addbcb18cdc78a9cfb67",
                "evidenceSectionSha256": "4e9e30d5df4a1194c6e40dc5a0c2bc4e847965b6c9b43ad0f02302ac14040906",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated",
                "sectionExtractionMethod": "html_heading_hierarchy"
              },
              {
                "topic": "processing_purposes",
                "reasonCodes": [
                  "row_specific_disclosure_observed",
                  "evidence_hash_binding_verified",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "observed",
                "sourceDocumentSha256": "69397ae8f17b94d6f1b2052b6d7349781fa7a762adb3addbcb18cdc78a9cfb67",
                "evidenceSectionSha256": "93ac1b00579aec17f78316e4742506bd19f9b8605e7ebfcc8ba5cfb23ab88829",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated",
                "sectionExtractionMethod": "html_heading_hierarchy"
              },
              {
                "topic": "legal_basis",
                "reasonCodes": [
                  "row_specific_disclosure_observed",
                  "evidence_hash_binding_verified",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "observed",
                "sourceDocumentSha256": "69397ae8f17b94d6f1b2052b6d7349781fa7a762adb3addbcb18cdc78a9cfb67",
                "evidenceSectionSha256": "6fa365bbf8b18de8cc91d02dfc0603cbfb2c1db409eda2f70b072f76717b8072",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated",
                "sectionExtractionMethod": "html_heading_hierarchy"
              },
              {
                "topic": "recipients_or_vendor_categories",
                "reasonCodes": [
                  "row_specific_disclosure_observed",
                  "evidence_hash_binding_verified",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "observed",
                "sourceDocumentSha256": "bcce01c43f1938279457d6313cf8ca74a8869e58d21ccb19d6080b4d7454f8c3",
                "evidenceSectionSha256": "c5e3abb65ef042df31657648428865c650513b280fdc209683490c0a097f1f14",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated",
                "sectionExtractionMethod": "canonical_topic_window"
              },
              {
                "topic": "data_retention",
                "reasonCodes": [
                  "row_specific_disclosure_not_confirmed",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "unknown",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated"
              },
              {
                "topic": "data_subject_rights",
                "reasonCodes": [
                  "row_specific_disclosure_observed",
                  "evidence_hash_binding_verified",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "observed",
                "sourceDocumentSha256": "bcce01c43f1938279457d6313cf8ca74a8869e58d21ccb19d6080b4d7454f8c3",
                "evidenceSectionSha256": "22b15779762a54d715d7560228b0a5f1f6422479cb436651ea845e2edbcd8aae",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated",
                "sectionExtractionMethod": "canonical_topic_window"
              },
              {
                "topic": "international_transfers",
                "reasonCodes": [
                  "row_specific_disclosure_observed",
                  "evidence_hash_binding_verified",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "observed",
                "sourceDocumentSha256": "bcce01c43f1938279457d6313cf8ca74a8869e58d21ccb19d6080b4d7454f8c3",
                "evidenceSectionSha256": "c5e3abb65ef042df31657648428865c650513b280fdc209683490c0a097f1f14",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated",
                "sectionExtractionMethod": "canonical_topic_window"
              },
              {
                "topic": "dpo_contact",
                "reasonCodes": [
                  "row_specific_disclosure_not_confirmed",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "unknown",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated"
              },
              {
                "topic": "supervisory_authority",
                "reasonCodes": [
                  "row_specific_disclosure_observed",
                  "evidence_hash_binding_verified",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "observed",
                "sourceDocumentSha256": "bcce01c43f1938279457d6313cf8ca74a8869e58d21ccb19d6080b4d7454f8c3",
                "evidenceSectionSha256": "f1c1574d685c0a5fea9a4cf75885e0b5b077021baf45140eecff0d5ec71b3e06",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated",
                "sectionExtractionMethod": "canonical_topic_window"
              },
              {
                "topic": "automated_decision_making_or_profiling",
                "reasonCodes": [
                  "row_specific_disclosure_not_confirmed",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "unknown",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated"
              }
            ]
          },
          {
            "finalUrl": "https://x.ai/legal/cookie-policy",
            "artifactId": "policy_surface_text_ccc42f83_8da00019",
            "artifactUri": "s3://certscore-v2-dag-local-artifacts-eu-west-1-199536052647/v2-dag-lambda/local/91cbeb92-2d29-474b-b60c-86d767f5caeb/auxiliary/policy_surface_text_ccc42f83_8da00019.txt",
            "contentType": "text/html; charset=utf-8",
            "documentRole": "unknown",
            "requestedUrl": "/legal/cookie-policy",
            "observationId": "policy_surface_ccc42f83_privacy_alias",
            "redirectChain": [
              "https://x.ai/legal/cookie-policy"
            ],
            "artifactSha256": "20f3fdf97b5c98aeccd11c1b45fa705dfe5a4bd3cfdfd6dcbd3cc9fd2687c3a2",
            "documentFormat": "text",
            "limitationKeys": [
              "policy_section_inventory_bounded",
              "policy_section_text_bounded"
            ],
            "contentCoverage": {
              "status": "truncated",
              "limitationKeys": [
                "policy_section_inventory_bounded",
                "policy_section_text_bounded"
              ],
              "sourceTextChars": 10628,
              "retainedSectionCount": 22,
              "extractedSectionCount": 77,
              "retainedTableRowCount": 18
            },
            "artifactFileName": "policy_surface_text_ccc42f83_8da00019.txt",
            "extractionStatus": "complete",
            "artifactSizeBytes": 10637,
            "retainedTextChars": 10628,
            "documentFetchState": "fetched",
            "retainedTextSha256": "20f3fdf97b5c98aeccd11c1b45fa705dfe5a4bd3cfdfd6dcbd3cc9fd2687c3a2",
            "targetRelationship": "target_controller",
            "documentOwnerEntity": "SpaceXSI",
            "ownershipConfidence": 0.98,
            "documentTextCoverage": {
              "status": "complete",
              "limitationKeys": [],
              "sourceTextChars": 10628,
              "retainedTextChars": 10628
            },
            "documentEvaluationState": "usable",
            "documentRoleReasonCodes": [
              "non_privacy_surface_document_role_unknown"
            ],
            "governingPolicySelection": {
              "score": 0,
              "state": "ineligible",
              "reasonCodes": [
                "policy_document_role_unknown"
              ],
              "contractVersion": "governing_policy_selection.v1"
            },
            "artifactVerificationStatus": "verified",
            "gdprTransparencyTopicCoverageDiagnostics": []
          },
          {
            "finalUrl": "https://x.ai/legal/privacy-policy",
            "artifactId": "policy_surface_text_7cdbd94f_ac207438",
            "artifactUri": "s3://certscore-v2-dag-local-artifacts-eu-west-1-199536052647/v2-dag-lambda/local/91cbeb92-2d29-474b-b60c-86d767f5caeb/auxiliary/policy_surface_text_7cdbd94f_ac207438.txt",
            "contentType": "text/html; charset=utf-8",
            "documentRole": "policy_index",
            "requestedUrl": "/legal/privacy-policy",
            "observationId": "policy_surface_7cdbd94f",
            "redirectChain": [
              "https://x.ai/legal/privacy-policy"
            ],
            "artifactSha256": "e77c65b02ffa6db2a6de23fe0e4b1d53e1a49e56263ed14649a928cf4c7a965f",
            "documentFormat": "text",
            "limitationKeys": [
              "policy_index_not_substantive_policy_document",
              "policy_section_text_bounded"
            ],
            "contentCoverage": {
              "status": "truncated",
              "limitationKeys": [
                "policy_section_text_bounded"
              ],
              "sourceTextChars": 27083,
              "retainedSectionCount": 21,
              "extractedSectionCount": 21,
              "retainedTableRowCount": 0
            },
            "artifactFileName": "policy_surface_text_7cdbd94f_ac207438.txt",
            "extractionStatus": "complete",
            "artifactSizeBytes": 27118,
            "retainedTextChars": 27083,
            "documentFetchState": "fetched",
            "retainedTextSha256": "e77c65b02ffa6db2a6de23fe0e4b1d53e1a49e56263ed14649a928cf4c7a965f",
            "targetRelationship": "target_controller",
            "documentOwnerEntity": "SpaceXSI",
            "ownershipConfidence": 0.98,
            "documentTextCoverage": {
              "status": "complete",
              "limitationKeys": [],
              "sourceTextChars": 27083,
              "retainedTextChars": 27083
            },
            "documentEvaluationState": "usable",
            "documentRoleReasonCodes": [
              "scan_region_privacy_document_child_selected"
            ],
            "governingPolicySelection": {
              "score": 0,
              "state": "ineligible",
              "reasonCodes": [
                "policy_document_role_policy_index"
              ],
              "contractVersion": "governing_policy_selection.v1"
            },
            "artifactVerificationStatus": "verified",
            "gdprTransparencyTopicCoverageDiagnostics": [
              {
                "topic": "controller_contact",
                "reasonCodes": [
                  "row_specific_disclosure_observed",
                  "evidence_hash_binding_verified",
                  "document_role_policy_index",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "observed",
                "sourceDocumentSha256": "e77c65b02ffa6db2a6de23fe0e4b1d53e1a49e56263ed14649a928cf4c7a965f",
                "evidenceSectionSha256": "25580573eb5b754f34de272c4ba0f089796ccb46f0f5fcb96b3a1b399ac6a0a9",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated",
                "sectionExtractionMethod": "canonical_topic_window"
              },
              {
                "topic": "processing_purposes",
                "reasonCodes": [
                  "row_specific_disclosure_observed",
                  "evidence_hash_binding_verified",
                  "document_role_policy_index",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "observed",
                "sourceDocumentSha256": "b825fe4c1543d6c4c29bbfc76961b446fd4638aad5d59224bf9274644d3fb9c4",
                "evidenceSectionSha256": "b4d3f037e83cd3b4637313837380ca3d47ecbcb35ff2afd8cceec46a49185c58",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated",
                "sectionExtractionMethod": "html_labeled_block"
              },
              {
                "topic": "legal_basis",
                "reasonCodes": [
                  "row_specific_disclosure_not_confirmed",
                  "document_role_policy_index",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "unknown",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated"
              },
              {
                "topic": "recipients_or_vendor_categories",
                "reasonCodes": [
                  "row_specific_disclosure_observed",
                  "evidence_hash_binding_verified",
                  "document_role_policy_index",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "observed",
                "sourceDocumentSha256": "b825fe4c1543d6c4c29bbfc76961b446fd4638aad5d59224bf9274644d3fb9c4",
                "evidenceSectionSha256": "006eb17cb70eb35488c945d7d2e4c7343ec3c01a3c5580ebb8db0fcef293f938",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated",
                "sectionExtractionMethod": "html_heading_hierarchy"
              },
              {
                "topic": "data_retention",
                "reasonCodes": [
                  "row_specific_disclosure_not_confirmed",
                  "document_role_policy_index",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "unknown",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated"
              },
              {
                "topic": "data_subject_rights",
                "reasonCodes": [
                  "row_specific_disclosure_observed",
                  "evidence_hash_binding_verified",
                  "document_role_policy_index",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "observed",
                "sourceDocumentSha256": "b825fe4c1543d6c4c29bbfc76961b446fd4638aad5d59224bf9274644d3fb9c4",
                "evidenceSectionSha256": "6b56fb81828e7d83142370c148e9a061f3fa4029c03bfaa0923574bffa9ab6d0",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated",
                "sectionExtractionMethod": "html_heading_hierarchy"
              },
              {
                "topic": "international_transfers",
                "reasonCodes": [
                  "row_specific_disclosure_not_confirmed",
                  "document_role_policy_index",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "unknown",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated"
              },
              {
                "topic": "dpo_contact",
                "reasonCodes": [
                  "row_specific_disclosure_observed",
                  "evidence_hash_binding_verified",
                  "document_role_policy_index",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "observed",
                "sourceDocumentSha256": "b825fe4c1543d6c4c29bbfc76961b446fd4638aad5d59224bf9274644d3fb9c4",
                "evidenceSectionSha256": "91c3f44e459d7fb41e162185501f91e040cd366b53f2787ba1919e2f0a7fce3a",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated",
                "sectionExtractionMethod": "html_heading_hierarchy"
              },
              {
                "topic": "supervisory_authority",
                "reasonCodes": [
                  "row_specific_disclosure_not_confirmed",
                  "document_role_policy_index",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "unknown",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated"
              },
              {
                "topic": "automated_decision_making_or_profiling",
                "reasonCodes": [
                  "row_specific_disclosure_not_confirmed",
                  "document_role_policy_index",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "unknown",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated"
              }
            ]
          }
        ],
        "generatedAt": "2026-10-12T19:34:05.205Z",
        "sourceBundle": {
          "uri": "s3://certscore-v2-dag-local-artifacts-eu-west-1-199536052647/v2-dag-lambda/local/91cbeb92-2d29-474b-b60c-86d767f5caeb/CanonicalEvidenceBundle.json",
          "sha256": "d17948eb4085ad591ca924e4ae61830cd273279ca6d1280b675f332bb690b6ce",
          "sizeBytes": 1375293,
          "schemaVersion": "certscore.v2.alpha.1",
          "verificationStatus": "verified"
        },
        "limitationKeys": [
          "policy_section_text_bounded",
          "policy_section_inventory_bounded",
          "policy_index_not_substantive_policy_document"
        ],
        "contractVersion": "certscore.policy-text-evidence-projection.v1",
        "projectionStatus": "verified_complete"
      },
      "privacyPolicyEvaluationState": "fetched_usable",
      "legalFrameworkValidityMatches": [
        {
          "sourceUrl": "https://x.ai/legal/europe-privacy-policy-addendum",
          "canonicalId": "eu_us_data_privacy_framework",
          "subjectArea": "international_data_transfers",
          "evidenceText": "13.3 Our service providers with whom we may share personal information and where personal information is processed We process all of your personal information in the United States, where we maintain our primary data centers. We use service providers that may be involved in processing personal information as listed on our subprocessor page . These companies either participate in the EU-US Data Privacy Framework, the Swiss-US Data Privacy Framework and the UK extension to the EU-US Data Privacy Framework, which offer adequate protection for European personal information; or we have standard contractual clauses in place with them (including text from modules 1 and 2) which have been approved by the UK, European Commission, and Switzerland. We share parts of Input Data with Brave Software, Inc., so we can include Brave’s search results in the Service. Brave’s privacy policy is linked here .",
          "matchedAlias": "EU-US Data Privacy Framework",
          "statusAtScan": "current",
          "canonicalName": "EU-US Data Privacy Framework",
          "effectiveFrom": "2023-07-10",
          "canonicalStatus": "current"
        }
      ],
      "missingExpectedPolicySections": [
        "Your privacy controls",
        "Exporting and deleting your information",
        "Retaining your information",
        "Compliance and cooperation with regulators",
        "European requirements",
        "Data transfers"
      ],
      "policy_text_extraction_health": {
        "policyUrls": [
          "https://x.ai/legal/europe-privacy-policy-addendum",
          "https://x.ai/legal/cookie-policy",
          "https://x.ai/legal/privacy-policy"
        ],
        "nanoInvoked": false,
        "contractVersion": "certscore.policy-text-extraction-health.v2",
        "policyTextQuality": {
          "usable": true,
          "codeSignalCount": 0,
          "codeSymbolRatio": 0.00039856516540454366,
          "policyTermCount": 12,
          "alphabeticWordRatio": 0.7957259585166562,
          "accessChallengeSignalCount": 0,
          "naturalLanguageSentenceCount": 44
        },
        "policyUrlRetained": true,
        "extractedTextLength": 10036,
        "policySurfaceObserved": true,
        "detectedPolicyLanguage": "en",
        "minimumTextLengthRequired": 500,
        "policyTextExtractionStatus": "ok",
        "verifiedPolicyDocumentCount": 3,
        "detectedPolicyLanguageSource": "policy_surface",
        "supportedGdprTransparencyLocales": [
          "en",
          "de",
          "fr",
          "es",
          "it",
          "nl",
          "pl",
          "pt",
          "ru",
          "ja",
          "zh",
          "ar",
          "sv",
          "ro",
          "cs",
          "el",
          "hu",
          "da",
          "fi",
          "sk",
          "bg",
          "hr",
          "nb",
          "sl",
          "lt",
          "lv",
          "et",
          "uk",
          "tr",
          "fa",
          "vi",
          "id",
          "ko",
          "th",
          "he",
          "sr",
          "ca",
          "hi",
          "az",
          "gl"
        ],
        "gdprTransparencyLanguageSupported": true,
        "policyTextEvidenceProjectionStatus": "verified_complete",
        "policyTextEvidenceProjectionContractVersion": "certscore.policy-text-evidence-projection.v1"
      },
      "retainedPolicySectionHeadings": [
        "SpaceXSI’s Europe Privacy Policy Addendum",
        "13. Additional information for individuals in Europe",
        "13.1 Data controller",
        "13.2 Legal basis",
        "13.3 Our service providers with whom we may share personal information and where personal information is processed",
        "13.4 Your rights",
        "data controller",
        "right to complain to a supervisory authority",
        "eu-us data privacy framework",
        "Policy section"
      ],
      "selectedPrivacyPolicyDocument": {
        "documentUrl": "https://x.ai/legal/europe-privacy-policy-addendum",
        "observationId": "policy_surface_40f9cdb5",
        "traversalDepth": 1,
        "parentSurfaceUrl": "https://x.ai/legal/privacy-policy",
        "parentObservationId": "policy_surface_7cdbd94f",
        "selectionReasonCodes": [
          "linked_from_retained_privacy_surface",
          "linked_from_retained_privacy_policy_index",
          "one_hop_policy_document_candidate",
          "bounded_same_origin_policy_supplement",
          "single_supplement_fetch_limit",
          "supplement_rendered_fallback_disabled",
          "scan_region_policy_route_match",
          "deterministic_one_hop_selection",
          "supplement_total_fetch_resolution_cap_5000ms"
        ]
      },
      "article13_coverage_assessments": [
        {
          "topic": "automated_decision_making_or_profiling",
          "status": "insufficient_retained_evidence",
          "sourceUrls": [
            "https://x.ai/legal/europe-privacy-policy-addendum"
          ],
          "reasonCodes": [
            "policy_absence_coverage_preconditions_not_met",
            "typed_topic_coverage_diagnostic_missing_or_limited",
            "policy_document_content_coverage_incomplete",
            "policy_index_is_not_substantive_policy_document",
            "material_linked_policy_supplements_not_fully_evaluated"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_40f9cdb5"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "bcce01c43f1938279457d6313cf8ca74a8869e58d21ccb19d6080b4d7454f8c3"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": [
            "https://x.ai/privacy-portal",
            "https://x.ai/legal/privacy-policy/previous-2026-08-24"
          ]
        },
        {
          "topic": "controller_contact",
          "status": "observed",
          "sourceUrls": [
            "https://x.ai/legal/europe-privacy-policy-addendum"
          ],
          "reasonCodes": [
            "row_specific_disclosure_observed"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_40f9cdb5"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "bcce01c43f1938279457d6313cf8ca74a8869e58d21ccb19d6080b4d7454f8c3"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": [
            "https://x.ai/privacy-portal",
            "https://x.ai/legal/privacy-policy/previous-2026-08-24"
          ]
        },
        {
          "topic": "data_retention",
          "status": "insufficient_retained_evidence",
          "sourceUrls": [
            "https://x.ai/legal/europe-privacy-policy-addendum"
          ],
          "reasonCodes": [
            "policy_absence_coverage_preconditions_not_met",
            "typed_topic_coverage_diagnostic_missing_or_limited",
            "policy_document_content_coverage_incomplete",
            "policy_index_is_not_substantive_policy_document",
            "material_linked_policy_supplements_not_fully_evaluated"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_40f9cdb5"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "bcce01c43f1938279457d6313cf8ca74a8869e58d21ccb19d6080b4d7454f8c3"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": [
            "https://x.ai/privacy-portal",
            "https://x.ai/legal/privacy-policy/previous-2026-08-24"
          ]
        },
        {
          "topic": "data_subject_rights",
          "status": "observed",
          "sourceUrls": [
            "https://x.ai/legal/europe-privacy-policy-addendum"
          ],
          "reasonCodes": [
            "row_specific_disclosure_observed"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_40f9cdb5"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "bcce01c43f1938279457d6313cf8ca74a8869e58d21ccb19d6080b4d7454f8c3"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": [
            "https://x.ai/privacy-portal",
            "https://x.ai/legal/privacy-policy/previous-2026-08-24"
          ]
        },
        {
          "topic": "dpo_contact",
          "status": "insufficient_retained_evidence",
          "sourceUrls": [
            "https://x.ai/legal/europe-privacy-policy-addendum"
          ],
          "reasonCodes": [
            "policy_absence_coverage_preconditions_not_met",
            "typed_topic_coverage_diagnostic_missing_or_limited",
            "policy_document_content_coverage_incomplete",
            "policy_index_is_not_substantive_policy_document",
            "material_linked_policy_supplements_not_fully_evaluated"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_40f9cdb5"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "bcce01c43f1938279457d6313cf8ca74a8869e58d21ccb19d6080b4d7454f8c3"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": [
            "https://x.ai/privacy-portal",
            "https://x.ai/legal/privacy-policy/previous-2026-08-24"
          ]
        },
        {
          "topic": "international_transfers",
          "status": "observed",
          "sourceUrls": [
            "https://x.ai/legal/europe-privacy-policy-addendum"
          ],
          "reasonCodes": [
            "row_specific_disclosure_observed"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_40f9cdb5"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "bcce01c43f1938279457d6313cf8ca74a8869e58d21ccb19d6080b4d7454f8c3"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": [
            "https://x.ai/privacy-portal",
            "https://x.ai/legal/privacy-policy/previous-2026-08-24"
          ]
        },
        {
          "topic": "legal_basis",
          "status": "observed",
          "sourceUrls": [
            "https://x.ai/legal/europe-privacy-policy-addendum"
          ],
          "reasonCodes": [
            "row_specific_disclosure_observed"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_40f9cdb5"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "bcce01c43f1938279457d6313cf8ca74a8869e58d21ccb19d6080b4d7454f8c3"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": [
            "https://x.ai/privacy-portal",
            "https://x.ai/legal/privacy-policy/previous-2026-08-24"
          ]
        },
        {
          "topic": "processing_purposes",
          "status": "observed",
          "sourceUrls": [
            "https://x.ai/legal/europe-privacy-policy-addendum"
          ],
          "reasonCodes": [
            "row_specific_disclosure_observed"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_40f9cdb5"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "bcce01c43f1938279457d6313cf8ca74a8869e58d21ccb19d6080b4d7454f8c3"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": [
            "https://x.ai/privacy-portal",
            "https://x.ai/legal/privacy-policy/previous-2026-08-24"
          ]
        },
        {
          "topic": "recipients_or_vendor_categories",
          "status": "observed",
          "sourceUrls": [
            "https://x.ai/legal/europe-privacy-policy-addendum"
          ],
          "reasonCodes": [
            "row_specific_disclosure_observed"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_40f9cdb5"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "bcce01c43f1938279457d6313cf8ca74a8869e58d21ccb19d6080b4d7454f8c3"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": [
            "https://x.ai/privacy-portal",
            "https://x.ai/legal/privacy-policy/previous-2026-08-24"
          ]
        },
        {
          "topic": "supervisory_authority",
          "status": "observed",
          "sourceUrls": [
            "https://x.ai/legal/europe-privacy-policy-addendum"
          ],
          "reasonCodes": [
            "row_specific_disclosure_observed"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_40f9cdb5"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "bcce01c43f1938279457d6313cf8ca74a8869e58d21ccb19d6080b4d7454f8c3"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": [
            "https://x.ai/privacy-portal",
            "https://x.ai/legal/privacy-policy/previous-2026-08-24"
          ]
        }
      ],
      "discoveredPrivacyPolicyDetails": [
        {
          "url": "https://x.ai/legal/privacy-policy",
          "status": "fetched",
          "documentFetchState": "fetched",
          "fetchFailureReason": null,
          "linkObservationState": "observed",
          "documentEvaluationState": "usable"
        },
        {
          "url": "https://x.ai/privacy-portal",
          "status": "observed",
          "documentFetchState": "not_attempted",
          "fetchFailureReason": null,
          "linkObservationState": "observed",
          "documentEvaluationState": "not_attempted"
        },
        {
          "url": "https://x.ai/legal/privacy-policy/previous-2026-08-24",
          "status": "observed",
          "documentFetchState": "not_attempted",
          "fetchFailureReason": null,
          "linkObservationState": "observed",
          "documentEvaluationState": "not_attempted"
        },
        {
          "url": "https://x.ai/legal/europe-privacy-policy-addendum",
          "status": "fetched",
          "documentFetchState": "fetched",
          "fetchFailureReason": null,
          "linkObservationState": "observed",
          "documentEvaluationState": "usable"
        },
        {
          "url": "https://x.ai/legal/cookie-policy",
          "status": "fetched",
          "documentFetchState": "fetched",
          "fetchFailureReason": null,
          "linkObservationState": "observed",
          "documentEvaluationState": "usable"
        }
      ],
      "article13DisclosureTypesPartial": [],
      "discoveredPrivacyPolicyStatuses": [
        "fetched",
        "observed"
      ],
      "gdprTransparencyEvidenceProfile": "gdpr_transparency_multilingual_article13_v1",
      "policy_text_evidence_projection": {
        "scanId": "91cbeb92-2d29-474b-b60c-86d767f5caeb",
        "documents": [
          {
            "finalUrl": "https://x.ai/legal/europe-privacy-policy-addendum",
            "artifactId": "policy_surface_text_40f9cdb5_21b1bdd4",
            "artifactUri": "s3://certscore-v2-dag-local-artifacts-eu-west-1-199536052647/v2-dag-lambda/local/91cbeb92-2d29-474b-b60c-86d767f5caeb/auxiliary/policy_surface_text_40f9cdb5_21b1bdd4.txt",
            "contentType": "text/html; charset=utf-8",
            "documentRole": "policy_document",
            "requestedUrl": "https://x.ai/legal/europe-privacy-policy-addendum",
            "observationId": "policy_surface_40f9cdb5",
            "redirectChain": [
              "https://x.ai/legal/europe-privacy-policy-addendum"
            ],
            "artifactSha256": "bcce01c43f1938279457d6313cf8ca74a8869e58d21ccb19d6080b4d7454f8c3",
            "documentFormat": "text",
            "limitationKeys": [
              "policy_section_text_bounded"
            ],
            "contentCoverage": {
              "status": "truncated",
              "limitationKeys": [
                "policy_section_text_bounded"
              ],
              "sourceTextChars": 10036,
              "retainedSectionCount": 13,
              "extractedSectionCount": 13,
              "retainedTableRowCount": 0
            },
            "artifactFileName": "policy_surface_text_40f9cdb5_21b1bdd4.txt",
            "extractionStatus": "complete",
            "artifactSizeBytes": 10057,
            "retainedTextChars": 10036,
            "documentFetchState": "fetched",
            "retainedTextSha256": "bcce01c43f1938279457d6313cf8ca74a8869e58d21ccb19d6080b4d7454f8c3",
            "targetRelationship": "target_controller",
            "documentOwnerEntity": "SpaceXSI s Europe Addendum SpaceXSI",
            "ownershipConfidence": 0.98,
            "documentTextCoverage": {
              "status": "complete",
              "limitationKeys": [],
              "sourceTextChars": 10036,
              "retainedTextChars": 10036
            },
            "documentEvaluationState": "usable",
            "documentRoleReasonCodes": [
              "multiple_substantive_disclosure_signals_retained"
            ],
            "governingPolicySelection": {
              "rank": 1,
              "score": 85,
              "state": "primary",
              "reasonCodes": [
                "highest_ranked_eligible_governing_policy",
                "target_controller_document",
                "policy_content_coverage_truncated",
                "complete_policy_text_retention",
                "multiple_substantive_disclosure_signals_retained"
              ],
              "contractVersion": "governing_policy_selection.v1"
            },
            "artifactVerificationStatus": "verified",
            "gdprTransparencyTopicCoverageDiagnostics": [
              {
                "topic": "controller_contact",
                "reasonCodes": [
                  "row_specific_disclosure_observed",
                  "evidence_hash_binding_verified",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "observed",
                "sourceDocumentSha256": "69397ae8f17b94d6f1b2052b6d7349781fa7a762adb3addbcb18cdc78a9cfb67",
                "evidenceSectionSha256": "4e9e30d5df4a1194c6e40dc5a0c2bc4e847965b6c9b43ad0f02302ac14040906",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated",
                "sectionExtractionMethod": "html_heading_hierarchy"
              },
              {
                "topic": "processing_purposes",
                "reasonCodes": [
                  "row_specific_disclosure_observed",
                  "evidence_hash_binding_verified",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "observed",
                "sourceDocumentSha256": "69397ae8f17b94d6f1b2052b6d7349781fa7a762adb3addbcb18cdc78a9cfb67",
                "evidenceSectionSha256": "93ac1b00579aec17f78316e4742506bd19f9b8605e7ebfcc8ba5cfb23ab88829",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated",
                "sectionExtractionMethod": "html_heading_hierarchy"
              },
              {
                "topic": "legal_basis",
                "reasonCodes": [
                  "row_specific_disclosure_observed",
                  "evidence_hash_binding_verified",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "observed",
                "sourceDocumentSha256": "69397ae8f17b94d6f1b2052b6d7349781fa7a762adb3addbcb18cdc78a9cfb67",
                "evidenceSectionSha256": "6fa365bbf8b18de8cc91d02dfc0603cbfb2c1db409eda2f70b072f76717b8072",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated",
                "sectionExtractionMethod": "html_heading_hierarchy"
              },
              {
                "topic": "recipients_or_vendor_categories",
                "reasonCodes": [
                  "row_specific_disclosure_observed",
                  "evidence_hash_binding_verified",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "observed",
                "sourceDocumentSha256": "bcce01c43f1938279457d6313cf8ca74a8869e58d21ccb19d6080b4d7454f8c3",
                "evidenceSectionSha256": "c5e3abb65ef042df31657648428865c650513b280fdc209683490c0a097f1f14",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated",
                "sectionExtractionMethod": "canonical_topic_window"
              },
              {
                "topic": "data_retention",
                "reasonCodes": [
                  "row_specific_disclosure_not_confirmed",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "unknown",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated"
              },
              {
                "topic": "data_subject_rights",
                "reasonCodes": [
                  "row_specific_disclosure_observed",
                  "evidence_hash_binding_verified",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "observed",
                "sourceDocumentSha256": "bcce01c43f1938279457d6313cf8ca74a8869e58d21ccb19d6080b4d7454f8c3",
                "evidenceSectionSha256": "22b15779762a54d715d7560228b0a5f1f6422479cb436651ea845e2edbcd8aae",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated",
                "sectionExtractionMethod": "canonical_topic_window"
              },
              {
                "topic": "international_transfers",
                "reasonCodes": [
                  "row_specific_disclosure_observed",
                  "evidence_hash_binding_verified",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "observed",
                "sourceDocumentSha256": "bcce01c43f1938279457d6313cf8ca74a8869e58d21ccb19d6080b4d7454f8c3",
                "evidenceSectionSha256": "c5e3abb65ef042df31657648428865c650513b280fdc209683490c0a097f1f14",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated",
                "sectionExtractionMethod": "canonical_topic_window"
              },
              {
                "topic": "dpo_contact",
                "reasonCodes": [
                  "row_specific_disclosure_not_confirmed",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "unknown",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated"
              },
              {
                "topic": "supervisory_authority",
                "reasonCodes": [
                  "row_specific_disclosure_observed",
                  "evidence_hash_binding_verified",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "observed",
                "sourceDocumentSha256": "bcce01c43f1938279457d6313cf8ca74a8869e58d21ccb19d6080b4d7454f8c3",
                "evidenceSectionSha256": "f1c1574d685c0a5fea9a4cf75885e0b5b077021baf45140eecff0d5ec71b3e06",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated",
                "sectionExtractionMethod": "canonical_topic_window"
              },
              {
                "topic": "automated_decision_making_or_profiling",
                "reasonCodes": [
                  "row_specific_disclosure_not_confirmed",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "unknown",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated"
              }
            ]
          },
          {
            "finalUrl": "https://x.ai/legal/cookie-policy",
            "artifactId": "policy_surface_text_ccc42f83_8da00019",
            "artifactUri": "s3://certscore-v2-dag-local-artifacts-eu-west-1-199536052647/v2-dag-lambda/local/91cbeb92-2d29-474b-b60c-86d767f5caeb/auxiliary/policy_surface_text_ccc42f83_8da00019.txt",
            "contentType": "text/html; charset=utf-8",
            "documentRole": "unknown",
            "requestedUrl": "/legal/cookie-policy",
            "observationId": "policy_surface_ccc42f83_privacy_alias",
            "redirectChain": [
              "https://x.ai/legal/cookie-policy"
            ],
            "artifactSha256": "20f3fdf97b5c98aeccd11c1b45fa705dfe5a4bd3cfdfd6dcbd3cc9fd2687c3a2",
            "documentFormat": "text",
            "limitationKeys": [
              "policy_section_inventory_bounded",
              "policy_section_text_bounded"
            ],
            "contentCoverage": {
              "status": "truncated",
              "limitationKeys": [
                "policy_section_inventory_bounded",
                "policy_section_text_bounded"
              ],
              "sourceTextChars": 10628,
              "retainedSectionCount": 22,
              "extractedSectionCount": 77,
              "retainedTableRowCount": 18
            },
            "artifactFileName": "policy_surface_text_ccc42f83_8da00019.txt",
            "extractionStatus": "complete",
            "artifactSizeBytes": 10637,
            "retainedTextChars": 10628,
            "documentFetchState": "fetched",
            "retainedTextSha256": "20f3fdf97b5c98aeccd11c1b45fa705dfe5a4bd3cfdfd6dcbd3cc9fd2687c3a2",
            "targetRelationship": "target_controller",
            "documentOwnerEntity": "SpaceXSI",
            "ownershipConfidence": 0.98,
            "documentTextCoverage": {
              "status": "complete",
              "limitationKeys": [],
              "sourceTextChars": 10628,
              "retainedTextChars": 10628
            },
            "documentEvaluationState": "usable",
            "documentRoleReasonCodes": [
              "non_privacy_surface_document_role_unknown"
            ],
            "governingPolicySelection": {
              "score": 0,
              "state": "ineligible",
              "reasonCodes": [
                "policy_document_role_unknown"
              ],
              "contractVersion": "governing_policy_selection.v1"
            },
            "artifactVerificationStatus": "verified",
            "gdprTransparencyTopicCoverageDiagnostics": []
          },
          {
            "finalUrl": "https://x.ai/legal/privacy-policy",
            "artifactId": "policy_surface_text_7cdbd94f_ac207438",
            "artifactUri": "s3://certscore-v2-dag-local-artifacts-eu-west-1-199536052647/v2-dag-lambda/local/91cbeb92-2d29-474b-b60c-86d767f5caeb/auxiliary/policy_surface_text_7cdbd94f_ac207438.txt",
            "contentType": "text/html; charset=utf-8",
            "documentRole": "policy_index",
            "requestedUrl": "/legal/privacy-policy",
            "observationId": "policy_surface_7cdbd94f",
            "redirectChain": [
              "https://x.ai/legal/privacy-policy"
            ],
            "artifactSha256": "e77c65b02ffa6db2a6de23fe0e4b1d53e1a49e56263ed14649a928cf4c7a965f",
            "documentFormat": "text",
            "limitationKeys": [
              "policy_index_not_substantive_policy_document",
              "policy_section_text_bounded"
            ],
            "contentCoverage": {
              "status": "truncated",
              "limitationKeys": [
                "policy_section_text_bounded"
              ],
              "sourceTextChars": 27083,
              "retainedSectionCount": 21,
              "extractedSectionCount": 21,
              "retainedTableRowCount": 0
            },
            "artifactFileName": "policy_surface_text_7cdbd94f_ac207438.txt",
            "extractionStatus": "complete",
            "artifactSizeBytes": 27118,
            "retainedTextChars": 27083,
            "documentFetchState": "fetched",
            "retainedTextSha256": "e77c65b02ffa6db2a6de23fe0e4b1d53e1a49e56263ed14649a928cf4c7a965f",
            "targetRelationship": "target_controller",
            "documentOwnerEntity": "SpaceXSI",
            "ownershipConfidence": 0.98,
            "documentTextCoverage": {
              "status": "complete",
              "limitationKeys": [],
              "sourceTextChars": 27083,
              "retainedTextChars": 27083
            },
            "documentEvaluationState": "usable",
            "documentRoleReasonCodes": [
              "scan_region_privacy_document_child_selected"
            ],
            "governingPolicySelection": {
              "score": 0,
              "state": "ineligible",
              "reasonCodes": [
                "policy_document_role_policy_index"
              ],
              "contractVersion": "governing_policy_selection.v1"
            },
            "artifactVerificationStatus": "verified",
            "gdprTransparencyTopicCoverageDiagnostics": [
              {
                "topic": "controller_contact",
                "reasonCodes": [
                  "row_specific_disclosure_observed",
                  "evidence_hash_binding_verified",
                  "document_role_policy_index",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "observed",
                "sourceDocumentSha256": "e77c65b02ffa6db2a6de23fe0e4b1d53e1a49e56263ed14649a928cf4c7a965f",
                "evidenceSectionSha256": "25580573eb5b754f34de272c4ba0f089796ccb46f0f5fcb96b3a1b399ac6a0a9",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated",
                "sectionExtractionMethod": "canonical_topic_window"
              },
              {
                "topic": "processing_purposes",
                "reasonCodes": [
                  "row_specific_disclosure_observed",
                  "evidence_hash_binding_verified",
                  "document_role_policy_index",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "observed",
                "sourceDocumentSha256": "b825fe4c1543d6c4c29bbfc76961b446fd4638aad5d59224bf9274644d3fb9c4",
                "evidenceSectionSha256": "b4d3f037e83cd3b4637313837380ca3d47ecbcb35ff2afd8cceec46a49185c58",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated",
                "sectionExtractionMethod": "html_labeled_block"
              },
              {
                "topic": "legal_basis",
                "reasonCodes": [
                  "row_specific_disclosure_not_confirmed",
                  "document_role_policy_index",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "unknown",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated"
              },
              {
                "topic": "recipients_or_vendor_categories",
                "reasonCodes": [
                  "row_specific_disclosure_observed",
                  "evidence_hash_binding_verified",
                  "document_role_policy_index",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "observed",
                "sourceDocumentSha256": "b825fe4c1543d6c4c29bbfc76961b446fd4638aad5d59224bf9274644d3fb9c4",
                "evidenceSectionSha256": "006eb17cb70eb35488c945d7d2e4c7343ec3c01a3c5580ebb8db0fcef293f938",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated",
                "sectionExtractionMethod": "html_heading_hierarchy"
              },
              {
                "topic": "data_retention",
                "reasonCodes": [
                  "row_specific_disclosure_not_confirmed",
                  "document_role_policy_index",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "unknown",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated"
              },
              {
                "topic": "data_subject_rights",
                "reasonCodes": [
                  "row_specific_disclosure_observed",
                  "evidence_hash_binding_verified",
                  "document_role_policy_index",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "observed",
                "sourceDocumentSha256": "b825fe4c1543d6c4c29bbfc76961b446fd4638aad5d59224bf9274644d3fb9c4",
                "evidenceSectionSha256": "6b56fb81828e7d83142370c148e9a061f3fa4029c03bfaa0923574bffa9ab6d0",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated",
                "sectionExtractionMethod": "html_heading_hierarchy"
              },
              {
                "topic": "international_transfers",
                "reasonCodes": [
                  "row_specific_disclosure_not_confirmed",
                  "document_role_policy_index",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "unknown",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated"
              },
              {
                "topic": "dpo_contact",
                "reasonCodes": [
                  "row_specific_disclosure_observed",
                  "evidence_hash_binding_verified",
                  "document_role_policy_index",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "observed",
                "sourceDocumentSha256": "b825fe4c1543d6c4c29bbfc76961b446fd4638aad5d59224bf9274644d3fb9c4",
                "evidenceSectionSha256": "91c3f44e459d7fb41e162185501f91e040cd366b53f2787ba1919e2f0a7fce3a",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated",
                "sectionExtractionMethod": "html_heading_hierarchy"
              },
              {
                "topic": "supervisory_authority",
                "reasonCodes": [
                  "row_specific_disclosure_not_confirmed",
                  "document_role_policy_index",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "unknown",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated"
              },
              {
                "topic": "automated_decision_making_or_profiling",
                "reasonCodes": [
                  "row_specific_disclosure_not_confirmed",
                  "document_role_policy_index",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "unknown",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated"
              }
            ]
          }
        ],
        "generatedAt": "2026-10-12T19:34:05.205Z",
        "sourceBundle": {
          "uri": "s3://certscore-v2-dag-local-artifacts-eu-west-1-199536052647/v2-dag-lambda/local/91cbeb92-2d29-474b-b60c-86d767f5caeb/CanonicalEvidenceBundle.json",
          "sha256": "d17948eb4085ad591ca924e4ae61830cd273279ca6d1280b675f332bb690b6ce",
          "sizeBytes": 1375293,
          "schemaVersion": "certscore.v2.alpha.1",
          "verificationStatus": "verified"
        },
        "limitationKeys": [
          "policy_section_text_bounded",
          "policy_section_inventory_bounded",
          "policy_index_not_substantive_policy_document"
        ],
        "contractVersion": "certscore.policy-text-evidence-projection.v1",
        "projectionStatus": "verified_complete"
      },
      "privacyPolicyTextCharacterCount": 10036,
      "retainedCookiePolicyTextExcerpt": "",
      "validatedDisclosureTypesPartial": [],
      "article13DisclosureTypesObserved": [
        "data_subject_rights",
        "international_transfers",
        "supervisory_authority",
        "controller_contact",
        "processing_purposes",
        "legal_basis",
        "recipients_or_vendor_categories"
      ],
      "retainedArticle13SectionEvidence": [
        {
          "surfaceUrl": "https://x.ai/legal/europe-privacy-policy-addendum",
          "coverageArea": "data_retention",
          "evidenceSource": "deterministic",
          "signalObserved": "not_confirmed",
          "extractionLimitation": "selected_policy_section_truncated_by_retention_limit",
          "selectedEvidenceStrength": "limited",
          "selectedPolicySectionUrl": "https://x.ai/legal/europe-privacy-policy-addendum",
          "selectedPolicySectionExcerpt": "You may access, correct, update, or request deletion of your personal information. Please note that we cannot guarantee the factual accuracy of Output from our models. If Output contains factually inaccurate personal information relating to you, you can submit a correction request and we will make reasonable efforts to correct this information — but due to the technical complexity of our models, it may not be feasible for us to do so. You can object to processing of your personal information when our processing is based on our legitimate interests, ask us to restrict processing of your personal information or request portability of your personal information, (i.e., your data to be transferred in a readable and standardized format). Please note you can object to our use of your information to train our models in your settings. See Consumer FAQs . You have the right to opt-out of any marketing communications we may send at any time and to opt-out of profiling for purposes of direct marketing. We may still send you non-promotional emails, such as emails about your Grok access, legally required notices, or our ongoing business relations.",
          "selectedPolicySectionHeading": "13.4 Your rights"
        },
        {
          "surfaceUrl": "https://x.ai/legal/europe-privacy-policy-addendum",
          "coverageArea": "data_subject_rights",
          "evidenceSource": "deterministic",
          "signalObserved": "observed",
          "selectedEvidenceStrength": "strong",
          "selectedPolicySectionUrl": "https://x.ai/legal/europe-privacy-policy-addendum",
          "selectedPolicySectionExcerpt": ", Apple Pay and Stripe conduct payment processing services (respective privacy policies linked). They do not share your credit card information with us. 13.4 Your rights You may access, correct, update, or request deletion of your personal information. Please note that we cannot guarantee the factual accuracy of Output from our models.",
          "selectedPolicySectionHeading": "eu-us data privacy framework"
        },
        {
          "surfaceUrl": "https://x.ai/legal/europe-privacy-policy-addendum",
          "coverageArea": "international_transfers",
          "evidenceSource": "deterministic",
          "signalObserved": "observed",
          "selectedEvidenceStrength": "strong",
          "selectedPolicySectionUrl": "https://x.ai/legal/europe-privacy-policy-addendum",
          "selectedPolicySectionExcerpt": "13.3 Our service providers with whom we may share personal information and where personal information is processed We process all of your personal information in the United States, where we maintain our primary data centers.",
          "selectedPolicySectionHeading": "Policy section"
        },
        {
          "surfaceUrl": "https://x.ai/legal/europe-privacy-policy-addendum",
          "coverageArea": "supervisory_authority",
          "evidenceSource": "deterministic",
          "signalObserved": "observed",
          "selectedEvidenceStrength": "strong",
          "selectedPolicySectionUrl": "https://x.ai/legal/europe-privacy-policy-addendum",
          "selectedPolicySectionExcerpt": "You have the right to complain to a supervisory authority about our collection and use of your personal information.",
          "selectedPolicySectionHeading": "right to complain to a supervisory authority"
        },
        {
          "surfaceUrl": "https://x.ai/legal/europe-privacy-policy-addendum",
          "coverageArea": "dpo_contact",
          "evidenceSource": "deterministic",
          "signalObserved": "not_confirmed",
          "extractionLimitation": "section_retained_without_row_specific_disclosure",
          "selectedEvidenceStrength": "limited",
          "selectedPolicySectionUrl": "https://x.ai/legal/europe-privacy-policy-addendum",
          "selectedPolicySectionExcerpt": "You have the right to complain to a supervisory authority about our collection and use of your personal information. For more information, please contact your local supervisory authority. Contact details for supervisory authorities in the EEA and the UK are available here . Certain supervisory authorities may require that you exhaust our own internal complaints process before looking into your complaint. In France, you can choose to ask us to keep or destroy your personal information, after your death, to a nominated third party. You may also be able to ask us to disclose your personal information, after your death, to a specified recipient. If you have a SpaceXSI account to access the Service, some of these rights may be exercised through your account. See Consumer FAQs . Rights not exercisable through your account to the extent they may be applicable, can be exercised by contacting us at",
          "selectedPolicySectionHeading": "right to complain to a supervisory authority"
        },
        {
          "surfaceUrl": "https://x.ai/legal/europe-privacy-policy-addendum",
          "coverageArea": "controller_contact",
          "evidenceSource": "deterministic",
          "signalObserved": "observed",
          "selectedEvidenceStrength": "strong",
          "selectedPolicySectionUrl": "https://x.ai/legal/europe-privacy-policy-addendum",
          "selectedPolicySectionExcerpt": "13.1 Data controller SpaceXAI LLC, which is based in the USA, is the controller of your personal information as described in this Privacy Policy, unless otherwise specified. See section 12 of the main Privacy Policy for how to contact SpaceXSI.",
          "selectedPolicySectionHeading": "13.1 Data controller"
        },
        {
          "surfaceUrl": "https://x.ai/legal/europe-privacy-policy-addendum",
          "coverageArea": "processing_purposes",
          "evidenceSource": "deterministic",
          "signalObserved": "observed",
          "extractionLimitation": "selected_policy_section_truncated_by_retention_limit",
          "selectedEvidenceStrength": "strong",
          "selectedPolicySectionUrl": "https://x.ai/legal/europe-privacy-policy-addendum",
          "selectedPolicySectionExcerpt": "13.2 Legal basis We provide below more details on the purposes for which we process your personal information, what information we process for each purpose, and the related legal bases.",
          "selectedPolicySectionHeading": "13. Additional information for individuals in Europe"
        },
        {
          "surfaceUrl": "https://x.ai/legal/europe-privacy-policy-addendum",
          "coverageArea": "legal_basis",
          "evidenceSource": "deterministic",
          "signalObserved": "observed",
          "extractionLimitation": "selected_policy_section_truncated_by_retention_limit",
          "selectedEvidenceStrength": "strong",
          "selectedPolicySectionUrl": "https://x.ai/legal/europe-privacy-policy-addendum",
          "selectedPolicySectionExcerpt": "You can object to processing of your personal information when our processing is based on our legitimate interests, ask us to restrict processing of your personal information or request portability of your personal information, (i.e., your data to be transferred in a readable and standardized format).",
          "selectedPolicySectionHeading": "13.4 Your rights"
        },
        {
          "surfaceUrl": "https://x.ai/legal/europe-privacy-policy-addendum",
          "coverageArea": "recipients_or_vendor_categories",
          "evidenceSource": "deterministic",
          "signalObserved": "observed",
          "selectedEvidenceStrength": "strong",
          "selectedPolicySectionUrl": "https://x.ai/legal/europe-privacy-policy-addendum",
          "selectedPolicySectionExcerpt": "13.3 Our service providers with whom we may share personal information and where personal information is processed We process all of your personal information in the United States, where we maintain our primary data centers.",
          "selectedPolicySectionHeading": "Policy section"
        }
      ],
      "retainedPrivacyPolicyTextExcerpt": "SpaceXSI’s Europe Privacy Policy Addendum | SpaceXSI Products Solutions Developer Company Pricing News Contact Sales Try for free Products Grok Business Government Download iOS Android Grok on X Grok Bot Developers API Console Documentation Grok Build Try for free SpaceXSI’s Europe Privacy Policy Addendum Effective: August 24, 2026 ( previous version ) SpaceXSI’s main Privacy Policy outlines how SpaceXSI collects and uses your personal information. If you are outside the European Economic Area, United Kingdom, and Switzerland (“Europe”), you only need to read the main Privacy Policy . If you are in Europe, this Europe Privacy Policy Addendum is a continuation of the main Privacy Policy and adds information that is specific to Europe. 13. Additional information for individuals in Europe If you are located in the European Economic Area (\" EEA \"), United Kingdom (\" UK \") or Switzerland (collectively, \" Europe \") the following disclosures apply: 13.1 Data controller SpaceXAI LLC, which is based in the USA, is the controller of your personal information as described in this Privacy Policy, unless otherwise specified. See section 12 of the main Privacy Policy for how to contact SpaceXSI. 13.2 Legal basis We provide below more details on the purposes for which we process your personal information, what information we process for each purpose, and the related legal bases. To process payments for our Service We process Account Data, Communication Data, and Payment Data This is necessary to perform our contract with you, or - if there is no contract - this is necessary for our legitimate interest in processing a payment at your request To provide our Service (including to provide Output in response to Input) We process Account Data, Communication Data, User Content, Public X Posts and internet search data and Technical Usage Data This is necessary to perform our contract; otherwise this is necessary for our legitimate interests (to provide and maintain our Service, including customising Output in response to your prompts and- for over-18 users who use X to sign in to our Service - personalising the interaction with the Service) To provide support and assistance in relation to our Service We process Account Data, Communication Data, Technical Usage Data, User Content and Feedback Data This is necessary to perform our contract with you; otherwise, this is necessary for our legitimate interest to operate, provide and improve our business and to communicate with you To develop and improve our Service We process Communication Data, User Content, Feedback Data and Technical Usage Data This is necessary for our legitimate interest in improving and developing our Service To train and improve our models We process Publicly available data, User Content, X Public posts for over 18 year olds and Feedback Data This is necessary for our legitimate interests in improving the accuracy and performance of our models used to power the Services and to train more advanced models To ensure the security and integrity of our Service We process Account Data, Communication Data, User Content, Feedback Data and Technical Usage Data This is necessary for our and others’ legitimate interests (to detect or prevent activities which are illegal or breach our Terms of Service or Authorized Use Policy, and/or to manage the security of our IT infrastructure, and the safety and security of our employees, customers and vendors) To comply with our legal obligations We process Account Data, Communications Data, User Content, Feedback Data and Technical Usage Data This is necessary to comply with legal obligations in Europe (such as for age assurance or to protect our IT infrastructure); otherwise, this is necessary for our legitimate Interests in protecting against misuse or abuse of our Service, protecting personal property or safety, pursuing remedies available to us and limiting our damages, complying with judicial proceedings, court orders or legal processes, or to respond to lawful requests For our business or commercial purposes We process Account Data, Communication Data, Social Data, User Content, Feedback Data and Technical Usage Data This is necessary for our legitimate interests (to identify new customers, data analysis, developing new products, identifying usage trends, and operating and expanding our business activities) We do not aim to collect sensitive personal information (e.g., information related to racial or ethnic origin, political opinions, religion or other beliefs, health, biometric scans, criminal background, or trade union membership) and ask that you do NOT provide us with any such information. When we process your personal information because this is necessary for our, or someone else’s legitimate interests, we have carried out a balancing test to document our interests, to consider what the impact of the processing is on individuals, and to determine if those interests outweigh our interests in the processing taking place. You can find out more information about this balancing test by using the contact details at the end of this notice. 13.3 Our service providers with whom we may share personal information and where personal information is processed We process all of your personal information in the United States, where we maintain our primary data centers. We use service providers that may be involved in processing personal information as listed on our subprocessor page . These companies either participate in the EU-US Data Privacy Framework, the Swiss-US Data Privacy Framework and the UK extension to the EU-US Data Privacy Framework, which offer adequate protection for European personal information; or we have standard contractual clauses in place with them (including text from modules 1 and 2) which have been approved by the UK, European Commission, and Switzerland. We share parts of Input Data with Brave Software, Inc., so we can include Brave’s search results in the Service. Brave’s privacy policy is linked here . We have Google Payments , Apple Pay and Stripe conduct payment processing services (respective privacy policies linked). They do not share your credit card information with us. 13.4 Your rights You may access, correct, update, or request deletion of your personal information. Please note that we cannot guarantee the factual accuracy of Output from our models. If Output contains factually inaccurate personal information relating to you, you can submit a correction request and we will make reasonable efforts to correct this information — but due to the technical complexity of our models, it may not be feasible for us to do so. You can object to processing of your personal information when our processing is based on our legitimate interests, ask us to restrict processing of your personal information or request portability of your personal information, (i.e., your data to be transferred in a readable and standardized format). Please note you can object to our use of your information to train our models in your settings. See Consumer FAQs . You have the right to opt-out of any marketing communications we may send at any time and to opt-out of profiling for purposes of direct marketing. We may still send you non-promotional emails, such as emails about your Grok access, legally required notices, or our ongoing business relations. If we have collected and processed your personal information with your consent, then you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal information conducted in reliance on lawful processing grounds other than consent. You have the right to complain to a supervisory authority about our collection and use of your personal information. For more information, please contact your local supervisory authority. Contact details for supervisory authorities in the EEA and the UK are available here . Certain supervisory authorities may require that you exhaust our own internal complaints process before looking into your complaint. In France, you can choose to ask us to keep or destroy your personal information, after your death, to a nominated third party. You may also be able to ask us to disclose your personal information, after your death, to a specified recipient. If you have a SpaceXSI account to access the Service, some of these rights may be exercised through your account. See Consumer FAQs . Rights not exercisable through your account to the extent they may be applicable, can be exercised by contacting us at https://x.ai/privacy-portal/ . If you are not a user of the Service but wish to exercise any of the above rights to the extent that they may be applicable, you can do so by contacting us at https://x.ai/privacy-portal/ . Sometimes your personal information may be exempt from such requests, for example if we need to keep using your information to comply with our own legal obligations or to establish, exercise or defend legal claims. If an exception applies, we will inform you when responding to your request. We may request that you provide us with information necessary to confirm your identity before responding to your request. For more information on your rights with respect to data we use to train our models, please read these Consumer FAQs . To contact us, please see Section 12 in the main Privacy Policy . © 2026 SpaceXAI LLC Built with Grok Products Chat Build Imagine Voice Bot Grokipedia Download grok.com iOS Android Grok on X Solutions Business Government Customer Support Legal Security Use Cases Grok Bot Overview Marketplace Guides Use Cases Changelog Developers API Overview Pricing Models Console Changelog Docs Status Enterprise Contact Sales FAQs BAA DPA Company About Colossus Careers News Contact Trust Safety Security Privacy Portal Subprocessors Help Center Legal Terms Enterprise Terms Startup Terms Privacy Cookies AUP Brand Social @SpaceXSI @grok Discord Built with Grok",
      "validatedDisclosureTypesObserved": [
        "data_subject_rights",
        "international_transfers",
        "supervisory_authority",
        "controller_contact",
        "processing_purposes",
        "legal_basis",
        "recipients_or_vendor_categories"
      ],
      "privacyNoticeAvailabilityObserved": true,
      "evaluatedPrivacyPolicySurfaceCount": 2,
      "discardedArticle13DisclosureSignals": [
        {
          "source": "deterministic",
          "confidence": 0.7,
          "surfaceUrl": "https://x.ai/legal/europe-privacy-policy-addendum",
          "evidenceText": "of your personal information as described in this Privacy Policy, unless otherwise specified. See section 12 of the main Privacy Policy for how to contact SpaceXSI.",
          "rejectReason": "insufficient_row_specific_terms",
          "disclosureType": "legal_basis"
        },
        {
          "source": "deterministic",
          "confidence": 0.76,
          "surfaceUrl": "https://x.ai/legal/europe-privacy-policy-addendum",
          "evidenceText": "our interests in the processing taking place. You can find out more information about this balancing test by using the contact details at the end of this notice.",
          "rejectReason": "insufficient_row_specific_terms",
          "disclosureType": "recipients_or_vendor_categories"
        },
        {
          "source": "deterministic",
          "confidence": 0.76,
          "surfaceUrl": "https://x.ai/legal/europe-privacy-policy-addendum",
          "evidenceText": "your information to train our models in your settings. See Consumer FAQs . You have the right to opt-out of any marketing communications we may send at any time and to opt-out of profiling for purposes of direct marketing.",
          "rejectReason": "insufficient_row_specific_terms",
          "disclosureType": "automated_decision_making_or_profiling"
        }
      ],
      "staleLegalFrameworkReferenceObserved": false,
      "policyEvidenceProvenanceContractVersion": "certscore.policy-evidence-provenance.v1",
      "gdprTransparencyProductionEvidenceEnabled": true,
      "gdprTransparencyProductionEvidenceDiagnostics": {
        "sourceCandidateCount": 7,
        "candidateDispositions": [
          {
            "topic": "controller_contact",
            "confidence": 0.9,
            "disposition": "accepted",
            "matchStrength": "direct",
            "matchedLocale": "en",
            "rejectionReason": null,
            "sourceObservationId": "policy_surface_40f9cdb5"
          },
          {
            "topic": "supervisory_authority",
            "confidence": 0.82,
            "disposition": "accepted",
            "matchStrength": "equivalent",
            "matchedLocale": "en",
            "rejectionReason": null,
            "sourceObservationId": "policy_surface_40f9cdb5"
          },
          {
            "topic": "international_transfers",
            "confidence": 0.82,
            "disposition": "accepted",
            "matchStrength": "equivalent",
            "matchedLocale": "de",
            "rejectionReason": null,
            "sourceObservationId": "policy_surface_40f9cdb5"
          },
          {
            "topic": "legal_basis",
            "confidence": 0.86,
            "disposition": "accepted",
            "matchStrength": "equivalent",
            "matchedLocale": "en",
            "rejectionReason": null,
            "sourceObservationId": "policy_surface_40f9cdb5"
          },
          {
            "topic": "recipients_or_vendor_categories",
            "confidence": 0.86,
            "disposition": "accepted",
            "matchStrength": "equivalent",
            "matchedLocale": "en",
            "rejectionReason": null,
            "sourceObservationId": "policy_surface_40f9cdb5"
          },
          {
            "topic": "processing_purposes",
            "confidence": 0.86,
            "disposition": "accepted",
            "matchStrength": "equivalent",
            "matchedLocale": "en",
            "rejectionReason": null,
            "sourceObservationId": "policy_surface_40f9cdb5"
          },
          {
            "topic": "data_subject_rights",
            "confidence": 0.86,
            "disposition": "accepted",
            "matchStrength": "equivalent",
            "matchedLocale": "en",
            "rejectionReason": null,
            "sourceObservationId": "policy_surface_40f9cdb5"
          }
        ],
        "acceptedCandidateCount": 7,
        "rejectedCandidateCount": 0,
        "discardedCandidateCount": 0,
        "diagnosticCandidateCount": 0,
        "productionCreditSignalCount": 7
      }
    }
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

{
  "assessmentStatus": "checked",
  "checklistItemId": "legal_basis_disclosure_observed",
  "coverageArea": "Legal basis disclosure",
  "evidenceState": "observed",
  "explanation": "Whether retained privacy-policy evidence included a canonical legal-basis disclosure signal.",
  "note": "Whether retained privacy-policy evidence included a canonical legal-basis disclosure signal.",
  "status": "Observed",
  "tone": "warning",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.legal_basis_disclosure_observed.observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.legal_basis_disclosure_observed"
  },
  "statusBasis": "Legal basis disclosure evidence was retained through adapter-approved multilingual GDPR Transparency Article 13 evidence.",
  "retainedEvidence": {
    "remediation": {
      "kind": "none",
      "steps": [],
      "message": "No remediation is established by this check alone. Retain its evidence and reassess after relevant changes."
    },
    "evidenceRefs": [
      "Evidence: Legal basis disclosure",
      "Excerpt: You can object to processing of your personal information when our processing is based on our legitimate interests, ask us to restrict processing of your personal information or request portability of your personal information, (i.e., your data to be transferred in a readable and standardized format).",
      "Locale: en",
      "Policy URL: https://x.ai/legal/europe-privacy-policy-addendum"
    ],
    "signalObserved": true,
    "article13Signal": {
      "source": "normalized_concern",
      "status": "observed",
      "confidence": 0.86,
      "surfaceUrl": "https://x.ai/legal/europe-privacy-policy-addendum",
      "evidenceText": "You can object to processing of your personal information when our processing is based on our legitimate interests, ask us to restrict processing of your personal information or request portability of your personal information, (i.e., your data to be transferred in a readable and standardized format).",
      "matchStrength": "equivalent",
      "matchedLocale": "en",
      "disclosureType": "legal_basis",
      "evidenceSource": "normalized_gdpr_transparency_article13_concern",
      "productionCredit": true,
      "classifierProvenance": "gdpr_transparency_topic_classifier.v1",
      "classifierReasonCodes": [
        "matched_legal_basis",
        "match_strength_equivalent",
        "variant_semantic_clause"
      ],
      "productionCreditProfile": "gdpr_transparency_multilingual_article13_v1",
      "selectedEvidenceStrength": "strong",
      "selectedPolicySectionUrl": "https://x.ai/legal/europe-privacy-policy-addendum",
      "selectedPolicySectionHeading": "13.4 Your rights"
    },
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "policyEvidenceAssessment": {
      "result": "disclosure_observed",
      "scoreEffect": "canonical_policy",
      "topicRelevance": "direct",
      "contractVersion": "certscore.policy-topic-evidence-assessment.v1"
    },
    "policyEvidenceProvenance": {
      "sourceUrl": "https://x.ai/legal/europe-privacy-policy-addendum",
      "policyTitle": "SpaceXSI’s Europe Privacy Policy Addendum | SpaceXSI",
      "artifactRefs": [
        "policy_excerpt_40f9cdb5_a054dce3",
        "policy_surface_text_40f9cdb5_21b1bdd4"
      ],
      "bannerLanguage": "en",
      "sectionHeading": "13.4 Your rights",
      "contractVersion": "certscore.policy-evidence-provenance.v1",
      "discoveryMethod": "page_text_link",
      "documentHeading": "SpaceXSI’s Europe Privacy Policy Addendum",
      "detectedLanguage": "en",
      "retrievalTimestamp": "2026-10-12T19:33:57.483Z",
      "targetRelationship": "target_controller",
      "translationApplied": false,
      "documentOwnerEntity": "SpaceXSI s Europe Addendum SpaceXSI",
      "ownershipConfidence": 0.98,
      "directlyLinkedFromScannedPage": false
    },
    "selectedEvidenceStrength": "moderate",
    "selectedEvidenceArtifactId": "coverage_policy",
    "gdprTransparencyArticle13Concern": {
      "state": "sufficient",
      "topic": "legal_basis",
      "originKey": "gdpr_transparency.article13.legal_basis",
      "canonicalConcernKey": "runtime_artifact:gdpr_transparency.article13.legal_basis",
      "regulatoryChecklistEligibility": "observed"
    }
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

{
  "assessmentStatus": "coverage_limitation",
  "checklistItemId": "retention_disclosure_observed",
  "coverageArea": "Retention disclosure",
  "evidenceState": "not_testable",
  "explanation": "Whether retained privacy-policy evidence included a data-retention disclosure signal.",
  "note": "Whether retained privacy-policy evidence included a data-retention disclosure signal.",
  "status": "Not confirmed",
  "tone": "neutral",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.retention_disclosure_observed.not_confirmed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.retention_disclosure_observed"
  },
  "statusBasis": "No production-approved topic match was established. This neutral result does not establish that the disclosure is absent.",
  "retainedEvidence": {
    "remediation": {
      "kind": "steps",
      "steps": [
        "Review the governing policy section for the retention period or substantive criteria for each relevant data category; retain the exact excerpt and source URL.",
        "If relevant wording exists, record it for review and investigate extraction coverage. Unconfirmed evidence alone does not establish a missing disclosure.",
        "Retest the same policy version or record the revised version; verify that the extracted passage supports this specific topic, rather than nearby or unrelated wording."
      ]
    },
    "signalObserved": "not_confirmed_canonical_projection_unavailable",
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "canonicalProjectionState": "normalized_concern_unavailable",
    "policyEvidenceAssessment": {
      "result": "extraction_incomplete",
      "scoreEffect": "none",
      "topicRelevance": "unknown",
      "contractVersion": "certscore.policy-topic-evidence-assessment.v1"
    },
    "policyEvidenceProvenance": {
      "sourceUrl": "https://x.ai/legal/europe-privacy-policy-addendum",
      "policyTitle": "SpaceXSI’s Europe Privacy Policy Addendum | SpaceXSI",
      "artifactRefs": [
        "policy_excerpt_40f9cdb5_a054dce3",
        "policy_surface_text_40f9cdb5_21b1bdd4"
      ],
      "bannerLanguage": "en",
      "contractVersion": "certscore.policy-evidence-provenance.v1",
      "discoveryMethod": "page_text_link",
      "documentHeading": "SpaceXSI’s Europe Privacy Policy Addendum",
      "detectedLanguage": "en",
      "retrievalTimestamp": "2026-10-12T19:33:57.483Z",
      "targetRelationship": "target_controller",
      "translationApplied": false,
      "documentOwnerEntity": "SpaceXSI s Europe Addendum SpaceXSI",
      "ownershipConfidence": 0.98,
      "directlyLinkedFromScannedPage": false
    },
    "selectedEvidenceStrength": "missing",
    "policyTextExtractionHealth": {
      "policyUrls": [
        "https://x.ai/legal/europe-privacy-policy-addendum",
        "https://x.ai/legal/cookie-policy",
        "https://x.ai/legal/privacy-policy"
      ],
      "nanoInvoked": false,
      "contractVersion": "certscore.policy-text-extraction-health.v2",
      "policyTextQuality": {
        "usable": true,
        "codeSignalCount": 0,
        "codeSymbolRatio": 0.00039856516540454366,
        "policyTermCount": 12,
        "alphabeticWordRatio": 0.7957259585166562,
        "accessChallengeSignalCount": 0,
        "naturalLanguageSentenceCount": 44
      },
      "policyUrlRetained": true,
      "extractedTextLength": 10036,
      "policySurfaceObserved": true,
      "detectedPolicyLanguage": "en",
      "minimumTextLengthRequired": 500,
      "policyTextExtractionStatus": "ok",
      "verifiedPolicyDocumentCount": 3,
      "detectedPolicyLanguageSource": "policy_surface",
      "supportedGdprTransparencyLocales": [
        "en",
        "de",
        "fr",
        "es",
        "it",
        "nl",
        "pl",
        "pt",
        "ru",
        "ja",
        "zh",
        "ar",
        "sv",
        "ro",
        "cs",
        "el",
        "hu",
        "da",
        "fi",
        "sk",
        "bg",
        "hr",
        "nb",
        "sl",
        "lt",
        "lv",
        "et",
        "uk",
        "tr",
        "fa",
        "vi",
        "id",
        "ko",
        "th",
        "he",
        "sr",
        "ca",
        "hi",
        "az",
        "gl"
      ],
      "gdprTransparencyLanguageSupported": true,
      "policyTextEvidenceProjectionStatus": "verified_complete",
      "policyTextEvidenceProjectionContractVersion": "certscore.policy-text-evidence-projection.v1"
    },
    "selectedEvidenceArtifactId": "coverage_policy",
    "article13CoverageAssessment": {
      "topic": "data_retention",
      "status": "insufficient_retained_evidence",
      "sourceUrls": [
        "https://x.ai/legal/europe-privacy-policy-addendum"
      ],
      "reasonCodes": [
        "policy_absence_coverage_preconditions_not_met",
        "typed_topic_coverage_diagnostic_missing_or_limited",
        "policy_document_content_coverage_incomplete",
        "policy_index_is_not_substantive_policy_document",
        "material_linked_policy_supplements_not_fully_evaluated"
      ],
      "coverageStatus": "insufficient",
      "policyDocumentIds": [
        "policy_surface_40f9cdb5"
      ],
      "policyDocumentRoles": [
        "policy_document"
      ],
      "policyDocumentSha256": [
        "bcce01c43f1938279457d6313cf8ca74a8869e58d21ccb19d6080b4d7454f8c3"
      ],
      "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
      "unresolvedMaterialPolicyChildUrls": [
        "https://x.ai/privacy-portal",
        "https://x.ai/legal/privacy-policy/previous-2026-08-24"
      ]
    },
    "gdprTransparencyReportStatusContract": "observed_not_confirmed_no_match_found.v1"
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

{
  "assessmentStatus": "checked",
  "checklistItemId": "controller_contact_disclosure",
  "coverageArea": "Controller/contact disclosure",
  "evidenceState": "observed",
  "explanation": "Whether retained privacy-policy evidence included a controller, privacy contact, or equivalent contact point.",
  "note": "Whether retained privacy-policy evidence included a controller, privacy contact, or equivalent contact point.",
  "status": "Observed",
  "tone": "warning",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.controller_contact_disclosure.observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.controller_contact_disclosure"
  },
  "statusBasis": "Controller/contact disclosure evidence was retained through adapter-approved multilingual GDPR Transparency Article 13 evidence.",
  "retainedEvidence": {
    "remediation": {
      "kind": "none",
      "steps": [],
      "message": "No remediation is established by this check alone. Retain its evidence and reassess after relevant changes."
    },
    "evidenceRefs": [
      "Evidence: Controller/contact disclosure",
      "Excerpt: 13.1 Data controller SpaceXAI LLC, which is based in the USA, is the controller of your personal information as described in this Privacy Policy, unless otherwise specified. See section 12 of the main Privacy Policy for how to contact SpaceXSI.",
      "Locale: en",
      "Policy URL: https://x.ai/legal/europe-privacy-policy-addendum"
    ],
    "signalObserved": true,
    "article13Signal": {
      "source": "normalized_concern",
      "status": "observed",
      "confidence": 0.9,
      "surfaceUrl": "https://x.ai/legal/europe-privacy-policy-addendum",
      "evidenceText": "13.1 Data controller SpaceXAI LLC, which is based in the USA, is the controller of your personal information as described in this Privacy Policy, unless otherwise specified. See section 12 of the main Privacy Policy for how to contact SpaceXSI.",
      "matchStrength": "direct",
      "matchedLocale": "en",
      "disclosureType": "controller_contact",
      "evidenceSource": "normalized_gdpr_transparency_article13_concern",
      "productionCredit": true,
      "classifierProvenance": "gdpr_transparency_topic_classifier.v1",
      "classifierReasonCodes": [
        "matched_controller_contact",
        "match_strength_direct"
      ],
      "productionCreditProfile": "gdpr_transparency_multilingual_article13_v1",
      "selectedEvidenceStrength": "strong",
      "selectedPolicySectionUrl": "https://x.ai/legal/europe-privacy-policy-addendum",
      "selectedPolicySectionHeading": null
    },
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "policyEvidenceAssessment": {
      "result": "disclosure_observed",
      "scoreEffect": "canonical_policy",
      "topicRelevance": "direct",
      "contractVersion": "certscore.policy-topic-evidence-assessment.v1"
    },
    "policyEvidenceProvenance": {
      "sourceUrl": "https://x.ai/legal/europe-privacy-policy-addendum",
      "policyTitle": "SpaceXSI’s Europe Privacy Policy Addendum | SpaceXSI",
      "artifactRefs": [
        "policy_excerpt_40f9cdb5_a054dce3",
        "policy_surface_text_40f9cdb5_21b1bdd4"
      ],
      "bannerLanguage": "en",
      "contractVersion": "certscore.policy-evidence-provenance.v1",
      "discoveryMethod": "page_text_link",
      "documentHeading": "SpaceXSI’s Europe Privacy Policy Addendum",
      "detectedLanguage": "en",
      "retrievalTimestamp": "2026-10-12T19:33:57.483Z",
      "targetRelationship": "target_controller",
      "translationApplied": false,
      "documentOwnerEntity": "SpaceXSI s Europe Addendum SpaceXSI",
      "ownershipConfidence": 0.98,
      "directlyLinkedFromScannedPage": false
    },
    "selectedEvidenceStrength": "moderate",
    "selectedEvidenceArtifactId": "coverage_policy",
    "gdprTransparencyArticle13Concern": {
      "state": "sufficient",
      "topic": "controller_contact",
      "originKey": "gdpr_transparency.article13.controller_contact",
      "canonicalConcernKey": "runtime_artifact:gdpr_transparency.article13.controller_contact",
      "regulatoryChecklistEligibility": "observed"
    }
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

{
  "assessmentStatus": "checked",
  "checklistItemId": "processing_purposes_disclosure",
  "coverageArea": "Processing purposes disclosure",
  "evidenceState": "observed",
  "explanation": "Whether retained privacy-policy evidence described the purposes for processing personal data.",
  "note": "Whether retained privacy-policy evidence described the purposes for processing personal data.",
  "status": "Observed",
  "tone": "warning",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.processing_purposes_disclosure.observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.processing_purposes_disclosure"
  },
  "statusBasis": "Processing purposes disclosure evidence was retained through adapter-approved multilingual GDPR Transparency Article 13 evidence.",
  "retainedEvidence": {
    "remediation": {
      "kind": "none",
      "steps": [],
      "message": "No remediation is established by this check alone. Retain its evidence and reassess after relevant changes."
    },
    "evidenceRefs": [
      "Evidence: Processing purposes disclosure",
      "Excerpt: 13.2 Legal basis We provide below more details on the purposes for which we process your personal information, what information we process for each purpose, and the related legal bases.",
      "Locale: en",
      "Policy URL: https://x.ai/legal/europe-privacy-policy-addendum"
    ],
    "signalObserved": true,
    "article13Signal": {
      "source": "normalized_concern",
      "status": "observed",
      "confidence": 0.86,
      "surfaceUrl": "https://x.ai/legal/europe-privacy-policy-addendum",
      "evidenceText": "13.2 Legal basis We provide below more details on the purposes for which we process your personal information, what information we process for each purpose, and the related legal bases.",
      "matchStrength": "equivalent",
      "matchedLocale": "en",
      "disclosureType": "processing_purposes",
      "evidenceSource": "normalized_gdpr_transparency_article13_concern",
      "productionCredit": true,
      "classifierProvenance": "gdpr_transparency_topic_classifier.v1",
      "classifierReasonCodes": [
        "matched_processing_purposes",
        "match_strength_equivalent",
        "variant_semantic_clause"
      ],
      "productionCreditProfile": "gdpr_transparency_multilingual_article13_v1",
      "selectedEvidenceStrength": "strong",
      "selectedPolicySectionUrl": "https://x.ai/legal/europe-privacy-policy-addendum",
      "selectedPolicySectionHeading": null
    },
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "policyEvidenceAssessment": {
      "result": "disclosure_observed",
      "scoreEffect": "canonical_policy",
      "topicRelevance": "direct",
      "contractVersion": "certscore.policy-topic-evidence-assessment.v1"
    },
    "policyEvidenceProvenance": {
      "sourceUrl": "https://x.ai/legal/europe-privacy-policy-addendum",
      "policyTitle": "SpaceXSI’s Europe Privacy Policy Addendum | SpaceXSI",
      "artifactRefs": [
        "policy_excerpt_40f9cdb5_a054dce3",
        "policy_surface_text_40f9cdb5_21b1bdd4"
      ],
      "bannerLanguage": "en",
      "contractVersion": "certscore.policy-evidence-provenance.v1",
      "discoveryMethod": "page_text_link",
      "documentHeading": "SpaceXSI’s Europe Privacy Policy Addendum",
      "detectedLanguage": "en",
      "retrievalTimestamp": "2026-10-12T19:33:57.483Z",
      "targetRelationship": "target_controller",
      "translationApplied": false,
      "documentOwnerEntity": "SpaceXSI s Europe Addendum SpaceXSI",
      "ownershipConfidence": 0.98,
      "directlyLinkedFromScannedPage": false
    },
    "selectedEvidenceStrength": "moderate",
    "selectedEvidenceArtifactId": "coverage_policy",
    "gdprTransparencyArticle13Concern": {
      "state": "sufficient",
      "topic": "processing_purposes",
      "originKey": "gdpr_transparency.article13.processing_purposes",
      "canonicalConcernKey": "runtime_artifact:gdpr_transparency.article13.processing_purposes",
      "regulatoryChecklistEligibility": "observed"
    }
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

{
  "assessmentStatus": "checked",
  "checklistItemId": "recipients_vendor_categories_disclosure",
  "coverageArea": "Recipients/vendor categories disclosed",
  "evidenceState": "observed",
  "explanation": "Whether retained privacy-policy evidence described recipient, vendor, or 3rd party categories.",
  "note": "Whether retained privacy-policy evidence described recipient, vendor, or 3rd party categories.",
  "status": "Observed",
  "tone": "warning",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.recipients_vendor_categories_disclosure.observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.recipients_vendor_categories_disclosure"
  },
  "statusBasis": "Recipients/vendor categories disclosure evidence was retained through adapter-approved multilingual GDPR Transparency Article 13 evidence.",
  "retainedEvidence": {
    "remediation": {
      "kind": "none",
      "steps": [],
      "message": "No remediation is established by this check alone. Retain its evidence and reassess after relevant changes."
    },
    "evidenceRefs": [
      "Evidence: Recipients/vendor categories disclosure",
      "Excerpt: 13.3 Our service providers with whom we may share personal information and where personal information is processed We process all of your personal information in the United States, where we maintain our primary data centers.",
      "Locale: en",
      "Policy URL: https://x.ai/legal/europe-privacy-policy-addendum"
    ],
    "signalObserved": true,
    "article13Signal": {
      "source": "normalized_concern",
      "status": "observed",
      "confidence": 0.86,
      "surfaceUrl": "https://x.ai/legal/europe-privacy-policy-addendum",
      "evidenceText": "13.3 Our service providers with whom we may share personal information and where personal information is processed We process all of your personal information in the United States, where we maintain our primary data centers.",
      "matchStrength": "equivalent",
      "matchedLocale": "en",
      "disclosureType": "recipients_or_vendor_categories",
      "evidenceSource": "normalized_gdpr_transparency_article13_concern",
      "productionCredit": true,
      "classifierProvenance": "gdpr_transparency_topic_classifier.v1",
      "classifierReasonCodes": [
        "matched_recipients_or_vendor_categories",
        "match_strength_equivalent",
        "variant_semantic_clause"
      ],
      "productionCreditProfile": "gdpr_transparency_multilingual_article13_v1",
      "selectedEvidenceStrength": "strong",
      "selectedPolicySectionUrl": "https://x.ai/legal/europe-privacy-policy-addendum",
      "selectedPolicySectionHeading": "13.3 Our service providers with whom we may share personal information and where personal information is processed"
    },
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "policyEvidenceAssessment": {
      "result": "disclosure_observed",
      "scoreEffect": "canonical_policy",
      "topicRelevance": "direct",
      "contractVersion": "certscore.policy-topic-evidence-assessment.v1"
    },
    "policyEvidenceProvenance": {
      "sourceUrl": "https://x.ai/legal/europe-privacy-policy-addendum",
      "policyTitle": "SpaceXSI’s Europe Privacy Policy Addendum | SpaceXSI",
      "artifactRefs": [
        "policy_excerpt_40f9cdb5_a054dce3",
        "policy_surface_text_40f9cdb5_21b1bdd4"
      ],
      "bannerLanguage": "en",
      "sectionHeading": "13.3 Our service providers with whom we may share personal information and where personal information is processed",
      "contractVersion": "certscore.policy-evidence-provenance.v1",
      "discoveryMethod": "page_text_link",
      "documentHeading": "SpaceXSI’s Europe Privacy Policy Addendum",
      "detectedLanguage": "en",
      "retrievalTimestamp": "2026-10-12T19:33:57.483Z",
      "targetRelationship": "target_controller",
      "translationApplied": false,
      "documentOwnerEntity": "SpaceXSI s Europe Addendum SpaceXSI",
      "ownershipConfidence": 0.98,
      "directlyLinkedFromScannedPage": false
    },
    "selectedEvidenceStrength": "moderate",
    "selectedEvidenceArtifactId": "coverage_policy",
    "gdprTransparencyArticle13Concern": {
      "state": "sufficient",
      "topic": "recipients_or_vendor_categories",
      "originKey": "gdpr_transparency.article13.recipients_or_vendor_categories",
      "canonicalConcernKey": "runtime_artifact:gdpr_transparency.article13.recipients_or_vendor_categories",
      "regulatoryChecklistEligibility": "observed"
    }
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

{
  "assessmentStatus": "checked",
  "checklistItemId": "data_subject_rights_disclosure",
  "coverageArea": "Data subject rights disclosure",
  "evidenceState": "observed",
  "explanation": "Whether retained privacy-policy evidence described data subject rights or a rights request path.",
  "note": "Whether retained privacy-policy evidence described data subject rights or a rights request path.",
  "status": "Observed",
  "tone": "warning",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.data_subject_rights_disclosure.observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.data_subject_rights_disclosure"
  },
  "statusBasis": "Data subject rights disclosure evidence was retained through adapter-approved multilingual GDPR Transparency Article 13 evidence.",
  "retainedEvidence": {
    "remediation": {
      "kind": "none",
      "steps": [],
      "message": "No remediation is established by this check alone. Retain its evidence and reassess after relevant changes."
    },
    "evidenceRefs": [
      "Evidence: Data subject rights disclosure",
      "Excerpt: , Apple Pay and Stripe conduct payment processing services (respective privacy policies linked). They do not share your credit card information with us. 13.4 Your rights You may access, correct, update, or request deletion of your personal information. Please note that we cannot guarantee the factual accuracy of Output from our models.",
      "Locale: en",
      "Policy URL: https://x.ai/legal/europe-privacy-policy-addendum"
    ],
    "signalObserved": true,
    "article13Signal": {
      "source": "normalized_concern",
      "status": "observed",
      "confidence": 0.86,
      "surfaceUrl": "https://x.ai/legal/europe-privacy-policy-addendum",
      "evidenceText": ", Apple Pay and Stripe conduct payment processing services (respective privacy policies linked). They do not share your credit card information with us. 13.4 Your rights You may access, correct, update, or request deletion of your personal information. Please note that we cannot guarantee the factual accuracy of Output from our models.",
      "matchStrength": "equivalent",
      "matchedLocale": "en",
      "disclosureType": "data_subject_rights",
      "evidenceSource": "normalized_gdpr_transparency_article13_concern",
      "productionCredit": true,
      "classifierProvenance": "gdpr_transparency_topic_classifier.v1",
      "classifierReasonCodes": [
        "matched_data_subject_rights",
        "match_strength_equivalent",
        "variant_semantic_clause"
      ],
      "productionCreditProfile": "gdpr_transparency_multilingual_article13_v1",
      "selectedEvidenceStrength": "strong",
      "selectedPolicySectionUrl": "https://x.ai/legal/europe-privacy-policy-addendum",
      "selectedPolicySectionHeading": null
    },
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "policyEvidenceAssessment": {
      "result": "disclosure_observed",
      "scoreEffect": "canonical_policy",
      "topicRelevance": "direct",
      "contractVersion": "certscore.policy-topic-evidence-assessment.v1"
    },
    "policyEvidenceProvenance": {
      "sourceUrl": "https://x.ai/legal/europe-privacy-policy-addendum",
      "policyTitle": "SpaceXSI’s Europe Privacy Policy Addendum | SpaceXSI",
      "artifactRefs": [
        "policy_excerpt_40f9cdb5_a054dce3",
        "policy_surface_text_40f9cdb5_21b1bdd4"
      ],
      "bannerLanguage": "en",
      "contractVersion": "certscore.policy-evidence-provenance.v1",
      "discoveryMethod": "page_text_link",
      "documentHeading": "SpaceXSI’s Europe Privacy Policy Addendum",
      "detectedLanguage": "en",
      "retrievalTimestamp": "2026-10-12T19:33:57.483Z",
      "targetRelationship": "target_controller",
      "translationApplied": false,
      "documentOwnerEntity": "SpaceXSI s Europe Addendum SpaceXSI",
      "ownershipConfidence": 0.98,
      "directlyLinkedFromScannedPage": false
    },
    "selectedEvidenceStrength": "moderate",
    "selectedEvidenceArtifactId": "coverage_policy",
    "gdprTransparencyArticle13Concern": {
      "state": "sufficient",
      "topic": "data_subject_rights",
      "originKey": "gdpr_transparency.article13.data_subject_rights",
      "canonicalConcernKey": "runtime_artifact:gdpr_transparency.article13.data_subject_rights",
      "regulatoryChecklistEligibility": "observed"
    }
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

{
  "assessmentStatus": "checked",
  "checklistItemId": "international_transfers_disclosure",
  "coverageArea": "International transfer disclosure",
  "evidenceState": "observed",
  "explanation": "Whether retained privacy-policy evidence described international transfers or transfer-relevant endpoint/vendor context.",
  "note": "Whether retained privacy-policy evidence described international transfers or transfer-relevant endpoint/vendor context.",
  "status": "Observed",
  "tone": "warning",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.international_transfers_disclosure.observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.international_transfers_disclosure"
  },
  "statusBasis": "International transfer disclosure evidence was retained through adapter-approved multilingual GDPR Transparency Article 13 evidence.",
  "retainedEvidence": {
    "remediation": {
      "kind": "none",
      "steps": [],
      "message": "No remediation is established by this check alone. Retain its evidence and reassess after relevant changes."
    },
    "evidenceRefs": [
      "Evidence: International transfer disclosure",
      "Excerpt: 13.3 Our service providers with whom we may share personal information and where personal information is processed We process all of your personal information in the United States, where we maintain our primary data centers.",
      "Locale: de",
      "Policy URL: https://x.ai/legal/europe-privacy-policy-addendum"
    ],
    "signalObserved": true,
    "article13Signal": {
      "source": "normalized_concern",
      "status": "observed",
      "confidence": 0.82,
      "surfaceUrl": "https://x.ai/legal/europe-privacy-policy-addendum",
      "evidenceText": "13.3 Our service providers with whom we may share personal information and where personal information is processed We process all of your personal information in the United States, where we maintain our primary data centers.",
      "matchStrength": "equivalent",
      "matchedLocale": "de",
      "disclosureType": "international_transfers",
      "evidenceSource": "normalized_gdpr_transparency_article13_concern",
      "productionCredit": true,
      "classifierProvenance": "gdpr_transparency_topic_classifier.v1",
      "classifierReasonCodes": [
        "matched_international_transfers",
        "match_strength_equivalent",
        "variant_requires_privacy_context"
      ],
      "productionCreditProfile": "gdpr_transparency_multilingual_article13_v1",
      "selectedEvidenceStrength": "strong",
      "selectedPolicySectionUrl": "https://x.ai/legal/europe-privacy-policy-addendum",
      "selectedPolicySectionHeading": "13.3 Our service providers with whom we may share personal information and where personal information is processed"
    },
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "policyEvidenceAssessment": {
      "result": "disclosure_observed",
      "scoreEffect": "canonical_policy",
      "topicRelevance": "direct",
      "contractVersion": "certscore.policy-topic-evidence-assessment.v1"
    },
    "policyEvidenceProvenance": {
      "sourceUrl": "https://x.ai/legal/europe-privacy-policy-addendum",
      "policyTitle": "SpaceXSI’s Europe Privacy Policy Addendum | SpaceXSI",
      "artifactRefs": [
        "policy_excerpt_40f9cdb5_a054dce3",
        "policy_surface_text_40f9cdb5_21b1bdd4"
      ],
      "bannerLanguage": "en",
      "sectionHeading": "13.3 Our service providers with whom we may share personal information and where personal information is processed",
      "contractVersion": "certscore.policy-evidence-provenance.v1",
      "discoveryMethod": "page_text_link",
      "documentHeading": "SpaceXSI’s Europe Privacy Policy Addendum",
      "detectedLanguage": "en",
      "retrievalTimestamp": "2026-10-12T19:33:57.483Z",
      "targetRelationship": "target_controller",
      "translationApplied": false,
      "documentOwnerEntity": "SpaceXSI s Europe Addendum SpaceXSI",
      "ownershipConfidence": 0.98,
      "directlyLinkedFromScannedPage": false
    },
    "selectedEvidenceStrength": "moderate",
    "selectedEvidenceArtifactId": "coverage_policy",
    "gdprTransparencyArticle13Concern": {
      "state": "sufficient",
      "topic": "international_transfers",
      "originKey": "gdpr_transparency.article13.international_transfers",
      "canonicalConcernKey": "runtime_artifact:gdpr_transparency.article13.international_transfers",
      "regulatoryChecklistEligibility": "observed"
    }
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

{
  "assessmentStatus": "coverage_limitation",
  "checklistItemId": "dpo_contact_point_disclosure",
  "coverageArea": "DPO contact point (where applicable)",
  "evidenceState": "not_testable",
  "explanation": "Whether retained privacy-policy evidence identified a designated data protection officer or equivalent statutory DPO contact. A generic privacy mailbox is credited under controller/contact disclosure and does not by itself establish a DPO designation.",
  "note": "Whether retained privacy-policy evidence identified a designated data protection officer or equivalent statutory DPO contact. A generic privacy mailbox is credited under controller/contact disclosure and does not by itself establish a DPO designation.",
  "status": "Not confirmed",
  "tone": "neutral",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.dpo_contact_point_disclosure.not_confirmed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.dpo_contact_point_disclosure"
  },
  "statusBasis": "No production-approved topic match was established. This neutral result does not establish that the disclosure is absent.",
  "retainedEvidence": {
    "remediation": {
      "kind": "steps",
      "steps": [
        "Review the governing policy section for an expressly designated Data Protection Officer and contact route, where applicable; retain the exact excerpt and source URL.",
        "Determine whether DPO designation is required separately. A generic privacy mailbox does not prove a designation.",
        "If relevant wording exists, record it for review and investigate extraction coverage. Unconfirmed evidence alone does not establish a missing disclosure.",
        "Retest the same policy version or record the revised version; verify that the extracted passage supports this specific topic, rather than nearby or unrelated wording."
      ]
    },
    "signalObserved": "not_confirmed_canonical_projection_unavailable",
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "canonicalProjectionState": "normalized_concern_unavailable",
    "policyEvidenceAssessment": {
      "result": "extraction_incomplete",
      "scoreEffect": "none",
      "topicRelevance": "unknown",
      "contractVersion": "certscore.policy-topic-evidence-assessment.v1"
    },
    "policyEvidenceProvenance": {
      "sourceUrl": "https://x.ai/legal/europe-privacy-policy-addendum",
      "policyTitle": "SpaceXSI’s Europe Privacy Policy Addendum | SpaceXSI",
      "artifactRefs": [
        "policy_excerpt_40f9cdb5_a054dce3",
        "policy_surface_text_40f9cdb5_21b1bdd4"
      ],
      "bannerLanguage": "en",
      "contractVersion": "certscore.policy-evidence-provenance.v1",
      "discoveryMethod": "page_text_link",
      "documentHeading": "SpaceXSI’s Europe Privacy Policy Addendum",
      "detectedLanguage": "en",
      "retrievalTimestamp": "2026-10-12T19:33:57.483Z",
      "targetRelationship": "target_controller",
      "translationApplied": false,
      "documentOwnerEntity": "SpaceXSI s Europe Addendum SpaceXSI",
      "ownershipConfidence": 0.98,
      "directlyLinkedFromScannedPage": false
    },
    "selectedEvidenceStrength": "missing",
    "policyTextExtractionHealth": {
      "policyUrls": [
        "https://x.ai/legal/europe-privacy-policy-addendum",
        "https://x.ai/legal/cookie-policy",
        "https://x.ai/legal/privacy-policy"
      ],
      "nanoInvoked": false,
      "contractVersion": "certscore.policy-text-extraction-health.v2",
      "policyTextQuality": {
        "usable": true,
        "codeSignalCount": 0,
        "codeSymbolRatio": 0.00039856516540454366,
        "policyTermCount": 12,
        "alphabeticWordRatio": 0.7957259585166562,
        "accessChallengeSignalCount": 0,
        "naturalLanguageSentenceCount": 44
      },
      "policyUrlRetained": true,
      "extractedTextLength": 10036,
      "policySurfaceObserved": true,
      "detectedPolicyLanguage": "en",
      "minimumTextLengthRequired": 500,
      "policyTextExtractionStatus": "ok",
      "verifiedPolicyDocumentCount": 3,
      "detectedPolicyLanguageSource": "policy_surface",
      "supportedGdprTransparencyLocales": [
        "en",
        "de",
        "fr",
        "es",
        "it",
        "nl",
        "pl",
        "pt",
        "ru",
        "ja",
        "zh",
        "ar",
        "sv",
        "ro",
        "cs",
        "el",
        "hu",
        "da",
        "fi",
        "sk",
        "bg",
        "hr",
        "nb",
        "sl",
        "lt",
        "lv",
        "et",
        "uk",
        "tr",
        "fa",
        "vi",
        "id",
        "ko",
        "th",
        "he",
        "sr",
        "ca",
        "hi",
        "az",
        "gl"
      ],
      "gdprTransparencyLanguageSupported": true,
      "policyTextEvidenceProjectionStatus": "verified_complete",
      "policyTextEvidenceProjectionContractVersion": "certscore.policy-text-evidence-projection.v1"
    },
    "selectedEvidenceArtifactId": "coverage_policy",
    "article13CoverageAssessment": {
      "topic": "dpo_contact",
      "status": "insufficient_retained_evidence",
      "sourceUrls": [
        "https://x.ai/legal/europe-privacy-policy-addendum"
      ],
      "reasonCodes": [
        "policy_absence_coverage_preconditions_not_met",
        "typed_topic_coverage_diagnostic_missing_or_limited",
        "policy_document_content_coverage_incomplete",
        "policy_index_is_not_substantive_policy_document",
        "material_linked_policy_supplements_not_fully_evaluated"
      ],
      "coverageStatus": "insufficient",
      "policyDocumentIds": [
        "policy_surface_40f9cdb5"
      ],
      "policyDocumentRoles": [
        "policy_document"
      ],
      "policyDocumentSha256": [
        "bcce01c43f1938279457d6313cf8ca74a8869e58d21ccb19d6080b4d7454f8c3"
      ],
      "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
      "unresolvedMaterialPolicyChildUrls": [
        "https://x.ai/privacy-portal",
        "https://x.ai/legal/privacy-policy/previous-2026-08-24"
      ]
    },
    "gdprTransparencyReportStatusContract": "observed_not_confirmed_no_match_found.v1"
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

{
  "assessmentStatus": "checked",
  "checklistItemId": "supervisory_authority_complaint_disclosure",
  "coverageArea": "Supervisory authority complaint",
  "evidenceState": "observed",
  "explanation": "Whether retained privacy-policy evidence referenced a right to complain to a supervisory authority.",
  "note": "Whether retained privacy-policy evidence referenced a right to complain to a supervisory authority.",
  "status": "Observed",
  "tone": "warning",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.supervisory_authority_complaint_disclosure.observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.supervisory_authority_complaint_disclosure"
  },
  "statusBasis": "Supervisory authority complaint disclosure evidence was retained through adapter-approved multilingual GDPR Transparency Article 13 evidence.",
  "retainedEvidence": {
    "remediation": {
      "kind": "none",
      "steps": [],
      "message": "No remediation is established by this check alone. Retain its evidence and reassess after relevant changes."
    },
    "evidenceRefs": [
      "Evidence: Supervisory authority complaint disclosure",
      "Excerpt: You have the right to complain to a supervisory authority about our collection and use of your personal information.",
      "Locale: en",
      "Policy URL: https://x.ai/legal/europe-privacy-policy-addendum"
    ],
    "signalObserved": true,
    "article13Signal": {
      "source": "normalized_concern",
      "status": "observed",
      "confidence": 0.82,
      "surfaceUrl": "https://x.ai/legal/europe-privacy-policy-addendum",
      "evidenceText": "You have the right to complain to a supervisory authority about our collection and use of your personal information.",
      "matchStrength": "equivalent",
      "matchedLocale": "en",
      "disclosureType": "supervisory_authority",
      "evidenceSource": "normalized_gdpr_transparency_article13_concern",
      "productionCredit": true,
      "classifierProvenance": "gdpr_transparency_topic_classifier.v1",
      "classifierReasonCodes": [
        "matched_supervisory_authority",
        "match_strength_equivalent"
      ],
      "productionCreditProfile": "gdpr_transparency_multilingual_article13_v1",
      "selectedEvidenceStrength": "strong",
      "selectedPolicySectionUrl": "https://x.ai/legal/europe-privacy-policy-addendum",
      "selectedPolicySectionHeading": null
    },
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "policyEvidenceAssessment": {
      "result": "disclosure_observed",
      "scoreEffect": "canonical_policy",
      "topicRelevance": "direct",
      "contractVersion": "certscore.policy-topic-evidence-assessment.v1"
    },
    "policyEvidenceProvenance": {
      "sourceUrl": "https://x.ai/legal/europe-privacy-policy-addendum",
      "policyTitle": "SpaceXSI’s Europe Privacy Policy Addendum | SpaceXSI",
      "artifactRefs": [
        "policy_excerpt_40f9cdb5_a054dce3",
        "policy_surface_text_40f9cdb5_21b1bdd4"
      ],
      "bannerLanguage": "en",
      "contractVersion": "certscore.policy-evidence-provenance.v1",
      "discoveryMethod": "page_text_link",
      "documentHeading": "SpaceXSI’s Europe Privacy Policy Addendum",
      "detectedLanguage": "en",
      "retrievalTimestamp": "2026-10-12T19:33:57.483Z",
      "targetRelationship": "target_controller",
      "translationApplied": false,
      "documentOwnerEntity": "SpaceXSI s Europe Addendum SpaceXSI",
      "ownershipConfidence": 0.98,
      "directlyLinkedFromScannedPage": false
    },
    "selectedEvidenceStrength": "moderate",
    "selectedEvidenceArtifactId": "coverage_policy",
    "gdprTransparencyArticle13Concern": {
      "state": "sufficient",
      "topic": "supervisory_authority",
      "originKey": "gdpr_transparency.article13.supervisory_authority",
      "canonicalConcernKey": "runtime_artifact:gdpr_transparency.article13.supervisory_authority",
      "regulatoryChecklistEligibility": "observed"
    }
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

{
  "assessmentStatus": "coverage_limitation",
  "checklistItemId": "automated_decision_making_profiling_disclosure",
  "coverageArea": "Profiling / automated decisions disclosure",
  "evidenceState": "not_testable",
  "explanation": "Whether adapter-approved Article 13 evidence retained automated decision-making or profiling disclosure context for review.",
  "note": "Whether adapter-approved Article 13 evidence retained automated decision-making or profiling disclosure context for review.",
  "status": "Not confirmed",
  "tone": "neutral",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.automated_decision_making_profiling_disclosure.not_confirmed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.automated_decision_making_profiling_disclosure"
  },
  "statusBasis": "No production-approved topic match was established. This neutral result does not establish that the disclosure is absent.",
  "retainedEvidence": {
    "remediation": {
      "kind": "steps",
      "steps": [
        "Review the governing policy section for the applicable automated decision-making or profiling disclosures; retain the exact excerpt and source URL.",
        "If relevant wording exists, record it for review and investigate extraction coverage. Unconfirmed evidence alone does not establish a missing disclosure.",
        "Retest the same policy version or record the revised version; verify that the extracted passage supports this specific topic, rather than nearby or unrelated wording."
      ]
    },
    "signalObserved": "not_confirmed_canonical_projection_unavailable",
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "canonicalProjectionState": "normalized_concern_unavailable",
    "policyEvidenceAssessment": {
      "result": "extraction_incomplete",
      "scoreEffect": "none",
      "topicRelevance": "unknown",
      "contractVersion": "certscore.policy-topic-evidence-assessment.v1"
    },
    "policyEvidenceProvenance": {
      "sourceUrl": "https://x.ai/legal/europe-privacy-policy-addendum",
      "policyTitle": "SpaceXSI’s Europe Privacy Policy Addendum | SpaceXSI",
      "artifactRefs": [
        "policy_excerpt_40f9cdb5_a054dce3",
        "policy_surface_text_40f9cdb5_21b1bdd4"
      ],
      "bannerLanguage": "en",
      "contractVersion": "certscore.policy-evidence-provenance.v1",
      "discoveryMethod": "page_text_link",
      "documentHeading": "SpaceXSI’s Europe Privacy Policy Addendum",
      "detectedLanguage": "en",
      "retrievalTimestamp": "2026-10-12T19:33:57.483Z",
      "targetRelationship": "target_controller",
      "translationApplied": false,
      "documentOwnerEntity": "SpaceXSI s Europe Addendum SpaceXSI",
      "ownershipConfidence": 0.98,
      "directlyLinkedFromScannedPage": false
    },
    "selectedEvidenceStrength": "missing",
    "policyTextExtractionHealth": {
      "policyUrls": [
        "https://x.ai/legal/europe-privacy-policy-addendum",
        "https://x.ai/legal/cookie-policy",
        "https://x.ai/legal/privacy-policy"
      ],
      "nanoInvoked": false,
      "contractVersion": "certscore.policy-text-extraction-health.v2",
      "policyTextQuality": {
        "usable": true,
        "codeSignalCount": 0,
        "codeSymbolRatio": 0.00039856516540454366,
        "policyTermCount": 12,
        "alphabeticWordRatio": 0.7957259585166562,
        "accessChallengeSignalCount": 0,
        "naturalLanguageSentenceCount": 44
      },
      "policyUrlRetained": true,
      "extractedTextLength": 10036,
      "policySurfaceObserved": true,
      "detectedPolicyLanguage": "en",
      "minimumTextLengthRequired": 500,
      "policyTextExtractionStatus": "ok",
      "verifiedPolicyDocumentCount": 3,
      "detectedPolicyLanguageSource": "policy_surface",
      "supportedGdprTransparencyLocales": [
        "en",
        "de",
        "fr",
        "es",
        "it",
        "nl",
        "pl",
        "pt",
        "ru",
        "ja",
        "zh",
        "ar",
        "sv",
        "ro",
        "cs",
        "el",
        "hu",
        "da",
        "fi",
        "sk",
        "bg",
        "hr",
        "nb",
        "sl",
        "lt",
        "lv",
        "et",
        "uk",
        "tr",
        "fa",
        "vi",
        "id",
        "ko",
        "th",
        "he",
        "sr",
        "ca",
        "hi",
        "az",
        "gl"
      ],
      "gdprTransparencyLanguageSupported": true,
      "policyTextEvidenceProjectionStatus": "verified_complete",
      "policyTextEvidenceProjectionContractVersion": "certscore.policy-text-evidence-projection.v1"
    },
    "selectedEvidenceArtifactId": "coverage_policy",
    "article13CoverageAssessment": {
      "topic": "automated_decision_making_or_profiling",
      "status": "insufficient_retained_evidence",
      "sourceUrls": [
        "https://x.ai/legal/europe-privacy-policy-addendum"
      ],
      "reasonCodes": [
        "policy_absence_coverage_preconditions_not_met",
        "typed_topic_coverage_diagnostic_missing_or_limited",
        "policy_document_content_coverage_incomplete",
        "policy_index_is_not_substantive_policy_document",
        "material_linked_policy_supplements_not_fully_evaluated"
      ],
      "coverageStatus": "insufficient",
      "policyDocumentIds": [
        "policy_surface_40f9cdb5"
      ],
      "policyDocumentRoles": [
        "policy_document"
      ],
      "policyDocumentSha256": [
        "bcce01c43f1938279457d6313cf8ca74a8869e58d21ccb19d6080b4d7454f8c3"
      ],
      "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
      "unresolvedMaterialPolicyChildUrls": [
        "https://x.ai/privacy-portal",
        "https://x.ai/legal/privacy-policy/previous-2026-08-24"
      ]
    },
    "gdprTransparencyReportStatusContract": "observed_not_confirmed_no_match_found.v1"
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

{
  "assessmentStatus": "checked",
  "checklistItemId": "cookie_notice_policy_availability",
  "coverageArea": "Cookie notice / cookie policy availability",
  "evidenceState": "observed",
  "explanation": "Whether a cookie notice, cookie policy, cookie settings surface, or equivalent cookie disclosure surface was retained.",
  "note": "Whether a cookie notice, cookie policy, cookie settings surface, or equivalent cookie disclosure surface was retained.",
  "status": "Observed",
  "tone": "warning",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.cookie_notice_policy_availability.observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.cookie_notice_policy_availability"
  },
  "statusBasis": "A durable cookie disclosure surface and cookie preference interface were retained in the tested context; a granular named-cookie inventory was not confirmed.",
  "retainedEvidence": {
    "evidenceRefs": [
      "Evidence: cookie policy or cookie disclosure surface retained",
      "Not confirmed: granular named-cookie inventory",
      "Evidence: cookie preference interface retained",
      "Policy URL: https://x.ai/legal/europe-privacy-policy-addendum"
    ],
    "cookiePolicyUrls": [
      "https://x.ai/legal/europe-privacy-policy-addendum"
    ],
    "cookiePolicyPresent": true,
    "cookieNoticeObserved": true,
    "observedPolicyTopics": [
      "cookies",
      "sale_or_share",
      "do_not_sell_or_share",
      "sensitive_personal_information",
      "profiling_or_automated_decision_making",
      "vendor_list"
    ],
    "missingEvidenceNeeded": [],
    "observedPolicyControls": [
      "consent_withdrawal",
      "cookie_settings"
    ],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "selectedEvidenceStrength": "moderate",
    "selectedEvidenceArtifactId": "coverage_policy",
    "preferenceInterfaceConfirmed": true,
    "granularCookieInventoryConfirmed": false
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}