Loading report

{
  "assessmentStatus": "checked",
  "checklistItemId": "privacy_notice_availability",
  "coverageArea": "Privacy notice link/surface discovered",
  "evidenceState": "observed",
  "explanation": "Whether a reachable privacy notice or privacy policy link/surface was retained. This row does not by itself confirm that substantive notice content was available.",
  "note": "Whether a reachable privacy notice or privacy policy link/surface was retained. This row does not by itself confirm that substantive notice content was available.",
  "status": "Observed",
  "tone": "warning",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.privacy_notice_availability.observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.privacy_notice_availability"
  },
  "statusBasis": "Privacy notice evidence was retained in public policy-surface evidence.",
  "retainedEvidence": {
    "remediation": {
      "kind": "none",
      "steps": [],
      "message": "No remediation is established by this check alone. Retain its evidence and reassess after relevant changes."
    },
    "evidenceRefs": [
      "Excerpt: ults but do not store your government identification documents or selfies ourselves. These services act as our processors and process your information in accordance with their own privacy notices. Inferred Information Based on information such as your IP address, we may also determine the general location from which your device accesses the Services. De-identified/Anonymized/Aggregated Information We may de-identify, anonymize, or aggregate information we collect so the information cannot reasonably identify you or",
      "Evidence: privacy policy surface retained",
      "Policy URL: https://groq.com/privacy-policy"
    ],
    "signalObserved": true,
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "policyEvidenceAssessment": {
      "result": "disclosure_observed",
      "scoreEffect": "canonical_policy",
      "topicRelevance": "direct",
      "contractVersion": "certscore.policy-topic-evidence-assessment.v1"
    },
    "policyEvidenceProvenance": {
      "sourceUrl": "https://groq.com/privacy-policy",
      "policyTitle": "Privacy Policy | Groq is the premier neocloud for fast inference",
      "artifactRefs": [
        "policy_excerpt_69e31537_2a599f95",
        "policy_surface_text_69e31537_7739ff25"
      ],
      "bannerLanguage": "en",
      "contractVersion": "certscore.policy-evidence-provenance.v1",
      "discoveryMethod": "guessed_common_path",
      "documentHeading": "Privacy Policy",
      "detectedLanguage": "en",
      "retrievalTimestamp": "2026-10-12T19:36:26.352Z",
      "targetRelationship": "target_controller",
      "translationApplied": false,
      "documentOwnerEntity": "Groq is the premier neocloud for fast inference",
      "ownershipConfidence": 0.98,
      "directlyLinkedFromScannedPage": false
    },
    "selectedEvidenceStrength": "moderate",
    "selectedEvidenceArtifactId": "coverage_policy",
    "policySurfaceSummary": {
      "scanStartedAt": "2026-10-12T19:36:15.013Z",
      "observedTopics": [
        "cookies",
        "analytics",
        "advertising",
        "targeted_advertising",
        "sale_or_share",
        "do_not_sell_or_share",
        "global_privacy_control",
        "california_privacy_rights",
        "sensitive_personal_information",
        "profiling_or_automated_decision_making",
        "third_party_disclosures",
        "vendor_list",
        "consent_withdrawal",
        "data_retention",
        "controller_contact",
        "processing_purposes",
        "legal_basis",
        "recipients_or_vendor_categories",
        "data_subject_rights",
        "international_transfers",
        "supervisory_authority",
        "ai_features",
        "contact_privacy"
      ],
      "cookiePolicyUrls": [],
      "cookieDisclosures": [],
      "mentionedControls": [
        "global_privacy_control",
        "consent_withdrawal"
      ],
      "privacyPolicySize": {
        "url": "https://groq.com/privacy-policy",
        "completeness": "complete",
        "documentFormat": "text",
        "compressedBytes": 130793,
        "measurementScope": "selected_usable_privacy_policy",
        "decompressedBytes": 130793
      },
      "privacyPolicyUrls": [
        "https://groq.com/privacy-policy"
      ],
      "cookie_disclosures": [],
      "policySectionCount": 17,
      "policySurfaceCount": 2,
      "cookiePolicyPresent": false,
      "scannedPageLanguage": "en",
      "privacyPolicyPresent": true,
      "policyPrimaryLanguage": "en",
      "policyLastUpdatedTexts": [],
      "policyTextCoverageMode": "section_targeted",
      "retainedPolicySections": [
        {
          "charEnd": 13844,
          "heading": "Legal Obligation.",
          "quality": "partial",
          "charStart": 13618,
          "sourceUrl": "https://groq.com/privacy-policy",
          "textExcerpt": "Where we use your information to comply with applicable legal obligations. For example, to: Keep track of usage of our Services for tax, accounting, and auditing purposes; and"
        },
        {
          "charEnd": 18427,
          "heading": "Service Providers.",
          "quality": "strong",
          "charStart": 17952,
          "sourceUrl": "https://groq.com/privacy-policy",
          "textExcerpt": "We may disclose information to our third-party service providers, vendors, or others who provide services for Groq’s business operations subject to Groq’s instructions. This may include providers of services such as infrastructure, hosting, data analysis, order fulfillment, payment processing, IT services, customer support and services, professional services, audit services, or advertising and marketing services, among others."
        },
        {
          "charEnd": 33131,
          "heading": "Privacy Policy",
          "quality": "strong",
          "charStart": 3406,
          "sourceUrl": "https://groq.com/privacy-policy",
          "textExcerpt": "This Policy is effective on November 12, 2025. This Privacy Policy (“ Policy ”) describes how Groq LLC and its subsidiaries and affiliates (‘ Groq ”, “ we ”, “ us ”, or “ our ”) process information collected from and about users of our website www.groq.com , community.groq.com , appgen.groqlabs.com , and customers of our related applications and services on console.groq.com and chat.groq.com (collectively, “ Websites ”). It also applies to information we collect from and about you in relation to prospecting activities, events, our social media accounts, ongoing billing and maintenance of our customer accounts, information related to usage of our products and services (e.g., metadata such as file transmission size, times and dates of use, and similar data), interactions with business contacts of our vendors and partners, and other engagements or interactions we may have with you. With respect to such processing, Groq is the “ data controller ” of your information."
        },
        {
          "charEnd": 10980,
          "heading": "The Information We Collect",
          "quality": "strong",
          "charStart": 6721,
          "sourceUrl": "https://groq.com/privacy-policy",
          "textExcerpt": "This section discusses the types of information we collect from and about you as you use the Services. Information You Provide to Us You may choose to provide certain information directly to us. For example, we collect information directly from you when you login or sign-up to use a Service; interact with us through online forms, social media pages, or customer service; communicate with our sales, marketing, or developer teams; participate in surveys or research; or otherwise engage with us through the Services (including in connection with our ongoing servicing of your customer account, including billing)."
        },
        {
          "charEnd": 14837,
          "heading": "How We Use Your Information",
          "quality": "strong",
          "charStart": 10980,
          "sourceUrl": "https://groq.com/privacy-policy",
          "textExcerpt": "We use your information for the following purposes: To provide the Services and respond to your requests, including when you provide feedback or ask questions; To measure use of, analyze performance of, fix errors in, provide support for, improve, and develop the Services; To send you transactional or relationship communications, including related to the Services or about updates to our legal terms; In accordance with applicable legal requirements, for advertising and marketing purposes, including to provide you with special offers, information, and promotions both with respect to our products, events, and services and the products, events, and services of third parties that we believe will be of interest to you; For our business operations, including maintaining your account, billing, security, abuse and fraud prevention, legal compliance, and detecting security incidents and protecting against malicious, deceptive, fraudulent, or illegal activity; and For other purposes where we have your consent. We may process your personal information for these purposes for both mandatory and optional reasons."
        },
        {
          "charEnd": 19704,
          "heading": "How We Disclose Your Information",
          "quality": "strong",
          "charStart": 17588,
          "sourceUrl": "https://groq.com/privacy-policy",
          "textExcerpt": "We may disclose your information to third parties as described above in the Online Analytics and Targeted Advertising section, and in the following ways: Affiliates. We may disclose information to our affiliates under common ownership or control for the purposes outlined in this Policy. Service Providers. We may disclose information to our third-party service providers, vendors, or others who provide services for Groq’s business operations subject to Groq’s instructions. This may include providers of services such as infrastructure, hosting, data analysis, order fulfillment, payment processing, IT services, customer support and services, professional services, audit services, or advertising and marketing services, among others. Your organization. If you are using the Services on behalf of an organization’s customer account, your organization may have access to information generated as you use the Cloud Services. For questions about how your organization processes your information, please ask your organization. Legal and Safety Disclosures."
        },
        {
          "charEnd": 23507,
          "heading": "Your Rights and Choices",
          "quality": "strong",
          "charStart": 19704,
          "sourceUrl": "https://groq.com/privacy-policy",
          "textExcerpt": "Your Rights We provide you with the ability to exercise certain rights regarding our collection, use, and disclosure of your information. Your legal rights to exercise such controls and choices vary based on the laws of your jurisdiction. Depending on the laws in your jurisdiction (which includes the EU, UK, California, and the Kingdom of Saudi Arabia), you may have the ability to request: Access to, or a copy of, your information in a structured, commonly used, and machine-readable format Correction of your inaccurate information Deletion of your information Transfer of your information to a third party, where technologically feasible Restriction or objection to certain uses of your information Withdrawal of your consent at any time, where our processing operations were based on your consent. If you withdraw your consent, our use of your personal information before your withdrawal will still be lawful. We may ask you to provide us with certain personal information necessary to reasonably verify your identity before responding to your request. We will consider all requests and provide our response within the time period required by applicable law."
        },
        {
          "charEnd": 24055,
          "heading": "Data Retention",
          "quality": "strong",
          "charStart": 23507,
          "sourceUrl": "https://groq.com/privacy-policy",
          "textExcerpt": "We will retain your information for the period necessary to fulfill the purposes outlined in this Policy, unless a longer retention period is required or not prohibited by applicable law. When determining the appropriate retention period for the information we process and store, we take into account various criteria, such as the type of Services requested by or provided to you, the nature and length of our relationship with you, the impact on the Services we provide to you, and legally-required retention periods."
        },
        {
          "charEnd": 26469,
          "heading": "Additional Information for International Users",
          "quality": "strong",
          "charStart": 25553,
          "sourceUrl": "https://groq.com/privacy-policy",
          "textExcerpt": "Groq is located in the United States, and maintains processing operations in various global jurisdictions. We may therefore transfer your information to countries other than the country where you are located, including to the U.S. or any other country in which we or our service providers maintain facilities. Whenever we make restricted international transfers of personal information, we take steps to ensure that your personal information receives an adequate level of protection (such as by using approved contractual protections for the transfer of information or relying on third parties’ Data Privacy Framework certifications, where applicable). Where relevant, you may request access to the safeguards we use to transfer your personal information outside of the European Economic Area, United Kingdom, Switzerland, or the Kingdom of Saudi Arabia."
        },
        {
          "charEnd": 1647,
          "heading": "data controller",
          "quality": "strong",
          "charStart": 907,
          "sourceUrl": "https://groq.com/privacy-policy",
          "textExcerpt": "With respect to such processing, Groq is the “ data controller ” of your information. We refer to the processing activities covered in this paragraph collectively for purposes of this Policy as the “ Services .” This Policy also describes the choices available to you regarding our processing of your information. This Policy does not apply to the information that we process as a “ data processor ” on behalf of customers (“ Customer Data ”) of our business offerings such as GroqCloud, GroqChat, and our Application Programming Interfaces (collectively, “ Cloud Services ”). Our processing of Customer Data in connection with a customer’s use of our Cloud Services is governed by our Groq Services Agreement and Data Processing Addendum ."
        },
        {
          "charEnd": 16205,
          "heading": "right to lodge a complaint",
          "quality": "strong",
          "charStart": 15355,
          "sourceUrl": "https://groq.com/privacy-policy",
          "textExcerpt": "You also have the right to lodge a complaint with the supervisory authority or regulator in your jurisdiction of residence. If you are located in California, and want more detailed information about the categories of information we collect, sources of information, and our disclosures of information, please see the chart in the “ Additional Information for California Residents ” section below. Your Marketing Choices In accordance with applicable law, we may send you promotional offers, updates, newsletters, and other marketing communications. You can opt out of email marketing using the unsubscribe link in those communications. You may also contact us at the contact information provided below and request that we no longer use your information to send marketing communications. We will process such requests in accordance with applicable law."
        },
        {
          "charEnd": 8531,
          "heading": "under a contract",
          "quality": "strong",
          "charStart": 7661,
          "sourceUrl": "https://groq.com/privacy-policy",
          "textExcerpt": "Where use of your information is necessary to perform our obligations under a contract or commitment to you. For example, to: Provide the Services you’ve requested from us; Comply with our applicable agreements; and Make and receive payments. Legitimate Interests. Where use of your information furthers our legitimate interests or the legitimate interests of others. For example, to: Operate our business and our Services; Defend our legal rights; Provide safety and security for our Services; Reduce abuse and prevent fraud in connection with the use of our Services; and Develop and improve the Services. If you are based in the Kingdom of Saudi Arabia, we will not rely on legitimate interests as a legal ground to process any sensitive personal information of you, if any. Legal Obligation. Where we use your information to comply with applicable legal obligations."
        },
        {
          "charEnd": 20123,
          "heading": "Policy section",
          "quality": "strong",
          "charStart": 19279,
          "sourceUrl": "https://groq.com/privacy-policy",
          "textExcerpt": "or any other country in which we or our service providers maintain facilities. Whenever we make restricted international transfers of personal information, we take steps to ensure that your personal information receives an adequate level of protection (such as by using approved contractual protections for the transfer of information or relying on third parties’ Data Privacy Framework certifications, where applicable). Where relevant, you may request access to the safeguards we use to transfer your personal information outside of the European Economic Area, United Kingdom, Switzerland, or the Kingdom of Saudi Arabia. Additional Information for California Residents If you are a California resident, the California Consumer Privacy Act (“ CCPA ”) requires us to provide you with certain additional information about our privacy practices."
        },
        {
          "charEnd": 7545,
          "heading": "Policy section",
          "quality": "strong",
          "charStart": 6629,
          "sourceUrl": "https://groq.com/privacy-policy",
          "textExcerpt": "both with respect to our products, events, and services and the products, events, and services of third parties that we believe will be of interest to you; For our business operations, including maintaining your account, billing, security, abuse and fraud prevention, legal compliance, and detecting security incidents and protecting against malicious, deceptive, fraudulent, or illegal activity; and For other purposes where we have your consent. We may process your personal information for these purposes for both mandatory and optional reasons. We will not process your personal data for any additional purposes that are incompatible with the original purpose for which it was collected unless permitted by applicable law. The laws in some jurisdictions (including the EU, UK, Switzerland, and the Kingdom of Saudi Arabia) require companies to explain the legal grounds they rely on to process your information."
        },
        {
          "charEnd": 9207,
          "heading": "Policy section",
          "quality": "strong",
          "charStart": 8269,
          "sourceUrl": "https://groq.com/privacy-policy",
          "textExcerpt": "If you are based in the Kingdom of Saudi Arabia, we will not rely on legitimate interests as a legal ground to process any sensitive personal information of you, if any. Legal Obligation. Where we use your information to comply with applicable legal obligations. For example, to: Keep track of usage of our Services for tax, accounting, and auditing purposes; and Respond to compulsory government requests. Consent. Where you have consented to our processing of your information for a particular purpose in jurisdictions where consent is required. For example, depending on your jurisdiction, to: Send you marketing communications Collect and process information through cookies and similar tools as discussed immediately below. Groq acknowledges that some of its Services may incorporate certain technologies (such as artificial intelligence) that could pose risks under data protection laws such as those in the Kingdom of Saudi Arabia."
        },
        {
          "charEnd": 2648,
          "heading": "Policy section",
          "quality": "strong",
          "charStart": 1648,
          "sourceUrl": "https://groq.com/privacy-policy",
          "textExcerpt": "This Policy contains the following sections: The Information We Collect How We Use Your Information Online Analytics and Targeted Advertising How We Disclose Your Information Your Rights and Choices Data Retention Notification of Policy Changes Children’s Privacy Third Party Links and Features Additional Information for International Users Additional Information for California Residents Contact Groq The Information We Collect This section discusses the types of information we collect from and about you as you use the Services. Information You Provide to Us You may choose to provide certain information directly to us. For example, we collect information directly from you when you login or sign-up to use a Service; interact with us through online forms, social media pages, or customer service; communicate with our sales, marketing, or developer teams; participate in surveys or research; or otherwise engage with us through the Services (including in connection with our ongoing servicing o"
        },
        {
          "charEnd": 23375,
          "heading": "Policy section",
          "quality": "strong",
          "charStart": 22438,
          "sourceUrl": "https://groq.com/privacy-policy",
          "textExcerpt": "We may also ask you for additional information to verify your identity before responding to your request: Right to request access to the specific pieces of personal information we have processed about you over the past 12 months; Right to request that we correction inaccurate personal information about you; and Right to request that we delete the personal information we collected about you. You may also designate an authorized agent to submit a rights request on your behalf. We may ask authorized agents to submit proof of their authority to make a request, such as a valid power of attorney or proof that they have signed permission from the consumer who is the subject of the request. In some cases, we may contact the individual who is the subject of the request to verify their own identity or confirm the authorized agent has permission to submit the request. If we deny your request, you may contact us to appeal our decision."
        }
      ],
      "cookieDisclosurePresent": true,
      "policyCookieDisclosures": [],
      "privacyPolicyDiscovered": true,
      "processingErrorObserved": false,
      "observedPolicyTopicHints": [
        "cookies",
        "analytics",
        "advertising",
        "targeted_advertising",
        "sale_or_share",
        "do_not_sell_or_share",
        "global_privacy_control",
        "california_privacy_rights",
        "sensitive_personal_information",
        "profiling_or_automated_decision_making",
        "third_party_disclosures",
        "vendor_list",
        "consent_withdrawal",
        "data_retention",
        "controller_contact",
        "processing_purposes",
        "legal_basis",
        "recipients_or_vendor_categories",
        "data_subject_rights",
        "international_transfers",
        "supervisory_authority",
        "ai_features",
        "contact_privacy"
      ],
      "policyDocumentProvenance": [
        {
          "sourceUrl": "https://groq.com/privacy-policy",
          "policyTitle": "Privacy Policy | Groq is the premier neocloud for fast inference",
          "artifactRefs": [
            "policy_excerpt_69e31537_2a599f95",
            "policy_surface_text_69e31537_7739ff25"
          ],
          "effectiveDate": null,
          "observationId": "policy_surface_69e31537",
          "discoveryMethod": "guessed_common_path",
          "documentHeading": "Privacy Policy",
          "lastUpdatedText": null,
          "detectedLanguage": "en",
          "retrievalTimestamp": "2026-10-12T19:36:26.352Z",
          "targetRelationship": "target_controller",
          "translationApplied": false,
          "documentOwnerEntity": "Groq is the premier neocloud for fast inference",
          "ownershipConfidence": 0.98,
          "translationTargetLanguage": null,
          "directlyLinkedFromScannedPage": false
        }
      ],
      "policy_cookie_disclosures": [],
      "article13DisclosureSignals": [
        {
          "source": "deterministic",
          "status": "observed",
          "confidence": 0.86,
          "surfaceUrl": "https://groq.com/privacy-policy",
          "matchedTerm": "enumerated data-subject rights disclosure",
          "evidenceText": "Your Rights We provide you with the ability to exercise certain rights regarding our collection, use, and disclosure of your information. Your legal rights to exercise such controls and choices vary based on the laws of your jurisdiction. Depending on the laws in your jurisdiction (which includes the EU, UK, California, and the Kingdom of Saudi Arabia), you may have the ability to request: Access to, or a copy of, your information in a structured, commonly used, and machine-readable format Correction of your inaccurate information Deletion of your information Transfer of your information to a third party, where technologically feasi",
          "matchStrength": "equivalent",
          "matchedLocale": "en",
          "disclosureType": "data_subject_rights",
          "evidenceSource": "canonical_retained_article13_signal",
          "productionCredit": true,
          "classifierProvenance": "gdpr_transparency_topic_classifier.v1",
          "classifierReasonCodes": [
            "matched_data_subject_rights",
            "match_strength_equivalent",
            "variant_semantic_clause"
          ],
          "productionCreditProfile": "gdpr_transparency_multilingual_article13_v1",
          "selectedEvidenceStrength": "strong",
          "selectedPolicySectionUrl": "https://groq.com/privacy-policy",
          "selectedPolicySectionExcerpt": "Your Rights We provide you with the ability to exercise certain rights regarding our collection, use, and disclosure of your information. Your legal rights to exercise such controls and choices vary based on the laws of your jurisdiction. Depending on the laws in your jurisdiction (which includes the EU, UK, California, and the Kingdom of Saudi Arabia), you may have the ability to request: Access to, or a copy of, your information in a structured, commonly used, and machine-readable format Correction of your inaccurate information Deletion of your information Transfer of your information to a third party, where technologically feasi",
          "selectedPolicySectionHeading": "Your Rights and Choices",
          "sourceCandidateProductionCredit": false
        },
        {
          "source": "deterministic",
          "status": "observed",
          "confidence": 0.86,
          "surfaceUrl": "https://groq.com/privacy-policy",
          "matchedTerm": "international or cross-border transfer disclosure",
          "evidenceText": "Whenever we make restricted international transfers of personal information, we take steps to ensure that your personal information receives an adequate level of protection (such as by using approved contractual protections for the transfer of information or relying on third parties’ Data Privacy Framework certifications, where applicable). Where relevant, you may request access to the safeguards we use to transfer your personal information outside of the European Economic Area, United Kingdom, Switzerland, or the Kingdom of Saudi Arabia.",
          "matchStrength": "equivalent",
          "matchedLocale": "en",
          "disclosureType": "international_transfers",
          "evidenceSource": "canonical_retained_article13_signal",
          "productionCredit": true,
          "classifierProvenance": "gdpr_transparency_topic_classifier.v1",
          "classifierReasonCodes": [
            "matched_international_transfers",
            "match_strength_equivalent",
            "variant_semantic_clause"
          ],
          "productionCreditProfile": "gdpr_transparency_multilingual_article13_v1",
          "selectedEvidenceStrength": "strong",
          "selectedPolicySectionUrl": "https://groq.com/privacy-policy",
          "selectedPolicySectionExcerpt": "Whenever we make restricted international transfers of personal information, we take steps to ensure that your personal information receives an adequate level of protection (such as by using approved contractual protections for the transfer of information or relying on third parties’ Data Privacy Framework certifications, where applicable). Where relevant, you may request access to the safeguards we use to transfer your personal information outside of the European Economic Area, United Kingdom, Switzerland, or the Kingdom of Saudi Arabia.",
          "selectedPolicySectionHeading": "Additional Information for International Users",
          "sourceCandidateProductionCredit": false
        },
        {
          "source": "deterministic",
          "status": "observed",
          "confidence": 0.86,
          "surfaceUrl": "https://groq.com/privacy-policy",
          "matchedTerm": "supervisory-authority complaint disclosure",
          "evidenceText": "You also have the right to lodge a complaint with the supervisory authority or regulator in your jurisdiction of residence.",
          "matchStrength": "equivalent",
          "matchedLocale": "en",
          "disclosureType": "supervisory_authority",
          "evidenceSource": "canonical_retained_article13_signal",
          "productionCredit": true,
          "classifierProvenance": "gdpr_transparency_topic_classifier.v1",
          "classifierReasonCodes": [
            "matched_supervisory_authority",
            "match_strength_equivalent",
            "variant_semantic_clause"
          ],
          "productionCreditProfile": "gdpr_transparency_multilingual_article13_v1",
          "selectedEvidenceStrength": "strong",
          "selectedPolicySectionUrl": "https://groq.com/privacy-policy",
          "selectedPolicySectionExcerpt": "You also have the right to lodge a complaint with the supervisory authority or regulator in your jurisdiction of residence.",
          "sourceCandidateProductionCredit": false
        },
        {
          "source": "deterministic",
          "status": "observed",
          "confidence": 0.9,
          "surfaceUrl": "https://groq.com/privacy-policy",
          "evidenceText": "data), interactions with business contacts of our vendors and partners, and other engagements or interactions we may have with you. With respect to such processing, Groq is the “ data controller ” of your information.",
          "disclosureType": "controller_contact",
          "evidenceSource": "deterministic",
          "selectedEvidenceStrength": "strong",
          "selectedPolicySectionUrl": "https://groq.com/privacy-policy",
          "supportingContactContext": null,
          "selectedPolicySectionExcerpt": "data), interactions with business contacts of our vendors and partners, and other engagements or interactions we may have with you. With respect to such processing, Groq is the “ data controller ” of your information.",
          "selectedPolicySectionHeading": "Privacy Policy"
        },
        {
          "source": "deterministic",
          "status": "observed",
          "confidence": 0.86,
          "surfaceUrl": "https://groq.com/privacy-policy",
          "matchedTerm": "specific personal-data processing purpose",
          "evidenceText": "We may process your personal information for these purposes for both mandatory and optional reasons.",
          "matchStrength": "equivalent",
          "matchedLocale": "en",
          "disclosureType": "processing_purposes",
          "evidenceSource": "canonical_retained_article13_signal",
          "productionCredit": true,
          "classifierProvenance": "gdpr_transparency_topic_classifier.v1",
          "classifierReasonCodes": [
            "matched_processing_purposes",
            "match_strength_equivalent",
            "variant_semantic_clause"
          ],
          "productionCreditProfile": "gdpr_transparency_multilingual_article13_v1",
          "selectedEvidenceStrength": "strong",
          "selectedPolicySectionUrl": "https://groq.com/privacy-policy",
          "selectedPolicySectionExcerpt": "We may process your personal information for these purposes for both mandatory and optional reasons.",
          "selectedPolicySectionHeading": "How We Use Your Information",
          "sourceCandidateProductionCredit": false
        },
        {
          "source": "deterministic",
          "status": "observed",
          "confidence": 0.86,
          "surfaceUrl": "https://groq.com/privacy-policy",
          "matchedTerm": "processing legal-basis clause",
          "evidenceText": "Legal Obligation. Where we use your information to comply with applicable legal obligations.",
          "matchStrength": "equivalent",
          "matchedLocale": "en",
          "disclosureType": "legal_basis",
          "evidenceSource": "canonical_retained_article13_signal",
          "productionCredit": true,
          "classifierProvenance": "gdpr_transparency_topic_classifier.v1",
          "classifierReasonCodes": [
            "matched_legal_basis",
            "match_strength_equivalent",
            "variant_semantic_clause"
          ],
          "productionCreditProfile": "gdpr_transparency_multilingual_article13_v1",
          "selectedEvidenceStrength": "strong",
          "selectedPolicySectionUrl": "https://groq.com/privacy-policy",
          "selectedPolicySectionExcerpt": "Legal Obligation. Where we use your information to comply with applicable legal obligations.",
          "sourceCandidateProductionCredit": false
        },
        {
          "source": "deterministic",
          "status": "observed",
          "confidence": 0.86,
          "surfaceUrl": "https://groq.com/privacy-policy",
          "matchedTerm": "named recipient or meaningful recipient category",
          "evidenceText": "We may disclose information to our third-party service providers, vendors, or others who provide services for Groq’s business operations subject to Groq’s instructions.",
          "matchStrength": "equivalent",
          "matchedLocale": "en",
          "disclosureType": "recipients_or_vendor_categories",
          "evidenceSource": "canonical_retained_article13_signal",
          "productionCredit": true,
          "classifierProvenance": "gdpr_transparency_topic_classifier.v1",
          "classifierReasonCodes": [
            "matched_recipients_or_vendor_categories",
            "match_strength_equivalent",
            "variant_semantic_clause"
          ],
          "productionCreditProfile": "gdpr_transparency_multilingual_article13_v1",
          "selectedEvidenceStrength": "strong",
          "selectedPolicySectionUrl": "https://groq.com/privacy-policy",
          "selectedPolicySectionExcerpt": "We may disclose information to our third-party service providers, vendors, or others who provide services for Groq’s business operations subject to Groq’s instructions.",
          "selectedPolicySectionHeading": "How We Disclose Your Information",
          "sourceCandidateProductionCredit": false
        }
      ],
      "policyTextExtractionHealth": {
        "policyUrls": [
          "https://groq.com/privacy-policy"
        ],
        "nanoInvoked": false,
        "contractVersion": "certscore.policy-text-extraction-health.v2",
        "policyTextQuality": {
          "usable": true,
          "codeSignalCount": 0,
          "codeSymbolRatio": 0.0011762860727728983,
          "policyTermCount": 16,
          "alphabeticWordRatio": 0.7921747967479674,
          "accessChallengeSignalCount": 0,
          "naturalLanguageSentenceCount": 139
        },
        "policyUrlRetained": true,
        "extractedTextLength": 25504,
        "policySurfaceObserved": true,
        "detectedPolicyLanguage": "en",
        "minimumTextLengthRequired": 500,
        "policyTextExtractionStatus": "ok",
        "verifiedPolicyDocumentCount": 1,
        "detectedPolicyLanguageSource": "policy_surface",
        "supportedGdprTransparencyLocales": [
          "en",
          "de",
          "fr",
          "es",
          "it",
          "nl",
          "pl",
          "pt",
          "ru",
          "ja",
          "zh",
          "ar",
          "sv",
          "ro",
          "cs",
          "el",
          "hu",
          "da",
          "fi",
          "sk",
          "bg",
          "hr",
          "nb",
          "sl",
          "lt",
          "lv",
          "et",
          "uk",
          "tr",
          "fa",
          "vi",
          "id",
          "ko",
          "th",
          "he",
          "sr",
          "ca",
          "hi",
          "az",
          "gl"
        ],
        "gdprTransparencyLanguageSupported": true,
        "policyTextEvidenceProjectionStatus": "verified_complete",
        "policyTextEvidenceProjectionContractVersion": "certscore.policy-text-evidence-projection.v1"
      },
      "privacyPolicyEvidencePaths": [],
      "discoveredPrivacyPolicyUrls": [],
      "article13CoverageAssessments": [
        {
          "topic": "automated_decision_making_or_profiling",
          "status": "insufficient_retained_evidence",
          "sourceUrls": [
            "https://groq.com/privacy-policy"
          ],
          "reasonCodes": [
            "policy_absence_coverage_preconditions_not_met",
            "typed_topic_coverage_diagnostic_missing_or_limited",
            "policy_document_content_coverage_incomplete"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_69e31537"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "fb03edb9fd3038dd4fbf1b776cbc7d1e75083ad2ac87fd01c5bb0de4ca65170e"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "controller_contact",
          "status": "observed",
          "sourceUrls": [
            "https://groq.com/privacy-policy"
          ],
          "reasonCodes": [
            "row_specific_disclosure_observed"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_69e31537"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "fb03edb9fd3038dd4fbf1b776cbc7d1e75083ad2ac87fd01c5bb0de4ca65170e"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "data_retention",
          "status": "insufficient_retained_evidence",
          "sourceUrls": [
            "https://groq.com/privacy-policy"
          ],
          "reasonCodes": [
            "policy_absence_coverage_preconditions_not_met",
            "typed_topic_coverage_diagnostic_missing_or_limited",
            "policy_document_content_coverage_incomplete"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_69e31537"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "fb03edb9fd3038dd4fbf1b776cbc7d1e75083ad2ac87fd01c5bb0de4ca65170e"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "data_subject_rights",
          "status": "observed",
          "sourceUrls": [
            "https://groq.com/privacy-policy"
          ],
          "reasonCodes": [
            "row_specific_disclosure_observed"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_69e31537"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "fb03edb9fd3038dd4fbf1b776cbc7d1e75083ad2ac87fd01c5bb0de4ca65170e"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "dpo_contact",
          "status": "insufficient_retained_evidence",
          "sourceUrls": [
            "https://groq.com/privacy-policy"
          ],
          "reasonCodes": [
            "policy_absence_coverage_preconditions_not_met",
            "typed_topic_coverage_diagnostic_missing_or_limited",
            "policy_document_content_coverage_incomplete"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_69e31537"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "fb03edb9fd3038dd4fbf1b776cbc7d1e75083ad2ac87fd01c5bb0de4ca65170e"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "international_transfers",
          "status": "observed",
          "sourceUrls": [
            "https://groq.com/privacy-policy"
          ],
          "reasonCodes": [
            "row_specific_disclosure_observed"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_69e31537"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "fb03edb9fd3038dd4fbf1b776cbc7d1e75083ad2ac87fd01c5bb0de4ca65170e"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "legal_basis",
          "status": "observed",
          "sourceUrls": [
            "https://groq.com/privacy-policy"
          ],
          "reasonCodes": [
            "row_specific_disclosure_observed"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_69e31537"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "fb03edb9fd3038dd4fbf1b776cbc7d1e75083ad2ac87fd01c5bb0de4ca65170e"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "processing_purposes",
          "status": "observed",
          "sourceUrls": [
            "https://groq.com/privacy-policy"
          ],
          "reasonCodes": [
            "row_specific_disclosure_observed"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_69e31537"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "fb03edb9fd3038dd4fbf1b776cbc7d1e75083ad2ac87fd01c5bb0de4ca65170e"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "recipients_or_vendor_categories",
          "status": "observed",
          "sourceUrls": [
            "https://groq.com/privacy-policy"
          ],
          "reasonCodes": [
            "row_specific_disclosure_observed"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_69e31537"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "fb03edb9fd3038dd4fbf1b776cbc7d1e75083ad2ac87fd01c5bb0de4ca65170e"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "supervisory_authority",
          "status": "observed",
          "sourceUrls": [
            "https://groq.com/privacy-policy"
          ],
          "reasonCodes": [
            "row_specific_disclosure_observed"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_69e31537"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "fb03edb9fd3038dd4fbf1b776cbc7d1e75083ad2ac87fd01c5bb0de4ca65170e"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        }
      ],
      "dedicatedCookiePolicyPresent": false,
      "policyTextEvidenceProjection": {
        "scanId": "9b1badef-048a-494e-88f5-0827d2a5e529",
        "documents": [
          {
            "finalUrl": "https://groq.com/privacy-policy",
            "artifactId": "policy_surface_text_69e31537_7739ff25",
            "artifactUri": "s3://certscore-v2-dag-local-artifacts-eu-west-1-199536052647/v2-dag-lambda/local/9b1badef-048a-494e-88f5-0827d2a5e529/auxiliary/policy_surface_text_69e31537_7739ff25.txt",
            "contentType": "text/html; charset=utf-8",
            "documentRole": "policy_document",
            "requestedUrl": "https://groq.com/privacy-policy",
            "observationId": "policy_surface_69e31537",
            "redirectChain": [
              "https://groq.com/privacy",
              "https://groq.com/privacy-policy"
            ],
            "artifactSha256": "fb03edb9fd3038dd4fbf1b776cbc7d1e75083ad2ac87fd01c5bb0de4ca65170e",
            "documentFormat": "text",
            "limitationKeys": [
              "policy_section_inventory_bounded",
              "policy_section_text_bounded"
            ],
            "contentCoverage": {
              "status": "truncated",
              "limitationKeys": [
                "policy_section_inventory_bounded",
                "policy_section_text_bounded"
              ],
              "sourceTextChars": 25504,
              "retainedSectionCount": 17,
              "extractedSectionCount": 28,
              "retainedTableRowCount": 0
            },
            "artifactFileName": "policy_surface_text_69e31537_7739ff25.txt",
            "extractionStatus": "complete",
            "artifactSizeBytes": 25640,
            "retainedTextChars": 25504,
            "documentFetchState": "fetched",
            "retainedTextSha256": "fb03edb9fd3038dd4fbf1b776cbc7d1e75083ad2ac87fd01c5bb0de4ca65170e",
            "targetRelationship": "target_controller",
            "documentOwnerEntity": "Groq is the premier neocloud for fast inference",
            "ownershipConfidence": 0.98,
            "documentTextCoverage": {
              "status": "complete",
              "limitationKeys": [],
              "sourceTextChars": 25504,
              "retainedTextChars": 25504
            },
            "documentEvaluationState": "usable",
            "documentRoleReasonCodes": [
              "multiple_substantive_disclosure_signals_retained"
            ],
            "governingPolicySelection": {
              "rank": 1,
              "score": 85,
              "state": "primary",
              "reasonCodes": [
                "highest_ranked_eligible_governing_policy",
                "target_controller_document",
                "policy_content_coverage_truncated",
                "complete_policy_text_retention",
                "multiple_substantive_disclosure_signals_retained"
              ],
              "contractVersion": "governing_policy_selection.v1"
            },
            "artifactVerificationStatus": "verified",
            "gdprTransparencyTopicCoverageDiagnostics": [
              {
                "topic": "controller_contact",
                "reasonCodes": [
                  "row_specific_disclosure_observed",
                  "evidence_hash_binding_verified",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "observed",
                "sourceDocumentSha256": "d653d5b67eaae4a2d847c2cbe9b5734814c7bf2eba55dd41da12735a3e23cf7c",
                "evidenceSectionSha256": "ad990b99773d5a09320e2b3d5086325e2b577eec8990bfda087b3dfdb30e6742",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated",
                "sectionExtractionMethod": "html_heading_hierarchy"
              },
              {
                "topic": "processing_purposes",
                "reasonCodes": [
                  "row_specific_disclosure_observed",
                  "evidence_hash_binding_verified",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "observed",
                "sourceDocumentSha256": "d653d5b67eaae4a2d847c2cbe9b5734814c7bf2eba55dd41da12735a3e23cf7c",
                "evidenceSectionSha256": "772c276e4fc5d8c10a6fa01de55117f243df0dce62e0ce716b668b5fca3e4cfa",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated",
                "sectionExtractionMethod": "html_heading_hierarchy"
              },
              {
                "topic": "legal_basis",
                "reasonCodes": [
                  "row_specific_disclosure_observed",
                  "evidence_hash_binding_verified",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "observed",
                "sourceDocumentSha256": "fb03edb9fd3038dd4fbf1b776cbc7d1e75083ad2ac87fd01c5bb0de4ca65170e",
                "evidenceSectionSha256": "efd7f5a9c3c8dc91e1dd3f262953e86beb50d458510abdb1a5975d419068c0df",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated",
                "sectionExtractionMethod": "canonical_topic_window"
              },
              {
                "topic": "recipients_or_vendor_categories",
                "reasonCodes": [
                  "row_specific_disclosure_observed",
                  "evidence_hash_binding_verified",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "observed",
                "sourceDocumentSha256": "d653d5b67eaae4a2d847c2cbe9b5734814c7bf2eba55dd41da12735a3e23cf7c",
                "evidenceSectionSha256": "7e9e5289cc3b5b8a36f11a9dcc04d96cc1dc37533e2aa8fdc2d9a7f5ea07830b",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated",
                "sectionExtractionMethod": "html_labeled_block"
              },
              {
                "topic": "data_retention",
                "reasonCodes": [
                  "row_specific_disclosure_not_confirmed",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "unknown",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated"
              },
              {
                "topic": "data_subject_rights",
                "reasonCodes": [
                  "row_specific_disclosure_observed",
                  "evidence_hash_binding_verified",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "observed",
                "sourceDocumentSha256": "d653d5b67eaae4a2d847c2cbe9b5734814c7bf2eba55dd41da12735a3e23cf7c",
                "evidenceSectionSha256": "4eabf30f5f63028391723602eb1f34f8dbede806e3150607f7b045acaefdc1fc",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated",
                "sectionExtractionMethod": "html_heading_hierarchy"
              },
              {
                "topic": "international_transfers",
                "reasonCodes": [
                  "row_specific_disclosure_observed",
                  "evidence_hash_binding_verified",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "observed",
                "sourceDocumentSha256": "d653d5b67eaae4a2d847c2cbe9b5734814c7bf2eba55dd41da12735a3e23cf7c",
                "evidenceSectionSha256": "796047d24344c5f9aed1a84b45e113f5ed4cceef807103d046af99af6b67cabd",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated",
                "sectionExtractionMethod": "html_heading_hierarchy"
              },
              {
                "topic": "dpo_contact",
                "reasonCodes": [
                  "row_specific_disclosure_not_confirmed",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "unknown",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated"
              },
              {
                "topic": "supervisory_authority",
                "reasonCodes": [
                  "row_specific_disclosure_observed",
                  "evidence_hash_binding_verified",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "observed",
                "sourceDocumentSha256": "fb03edb9fd3038dd4fbf1b776cbc7d1e75083ad2ac87fd01c5bb0de4ca65170e",
                "evidenceSectionSha256": "6e6aa5487fde2c3a5dd674a952e7d0500a00f64225fd5bc394baa3739db8e281",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated",
                "sectionExtractionMethod": "canonical_topic_window"
              },
              {
                "topic": "automated_decision_making_or_profiling",
                "reasonCodes": [
                  "row_specific_disclosure_not_confirmed",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "unknown",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated"
              }
            ]
          }
        ],
        "generatedAt": "2026-10-12T19:36:28.797Z",
        "sourceBundle": {
          "uri": "s3://certscore-v2-dag-local-artifacts-eu-west-1-199536052647/v2-dag-lambda/local/9b1badef-048a-494e-88f5-0827d2a5e529/CanonicalEvidenceBundle.json",
          "sha256": "ebcb265bee4cf2c117cd724f64e4daabe87ae8d97657b92f50975a86aa272447",
          "sizeBytes": 1249285,
          "schemaVersion": "certscore.v2.alpha.1",
          "verificationStatus": "verified"
        },
        "limitationKeys": [
          "policy_section_inventory_bounded",
          "policy_section_text_bounded"
        ],
        "contractVersion": "certscore.policy-text-evidence-projection.v1",
        "projectionStatus": "verified_complete"
      },
      "privacyPolicyEvaluationState": "fetched_usable",
      "legalFrameworkValidityMatches": [
        {
          "sourceUrl": "https://groq.com/privacy-policy",
          "canonicalId": "eu_us_data_privacy_framework",
          "subjectArea": "international_data_transfers",
          "evidenceText": "Data Privacy Framework",
          "matchedAlias": "Data Privacy Framework",
          "statusAtScan": "current",
          "canonicalName": "EU-US Data Privacy Framework",
          "effectiveFrom": "2023-07-10",
          "canonicalStatus": "current"
        }
      ],
      "missingExpectedPolicySections": [
        "Your privacy controls",
        "Exporting and deleting your information",
        "Retaining your information",
        "Compliance and cooperation with regulators",
        "European requirements",
        "Data transfers"
      ],
      "policy_text_extraction_health": {
        "policyUrls": [
          "https://groq.com/privacy-policy"
        ],
        "nanoInvoked": false,
        "contractVersion": "certscore.policy-text-extraction-health.v2",
        "policyTextQuality": {
          "usable": true,
          "codeSignalCount": 0,
          "codeSymbolRatio": 0.0011762860727728983,
          "policyTermCount": 16,
          "alphabeticWordRatio": 0.7921747967479674,
          "accessChallengeSignalCount": 0,
          "naturalLanguageSentenceCount": 139
        },
        "policyUrlRetained": true,
        "extractedTextLength": 25504,
        "policySurfaceObserved": true,
        "detectedPolicyLanguage": "en",
        "minimumTextLengthRequired": 500,
        "policyTextExtractionStatus": "ok",
        "verifiedPolicyDocumentCount": 1,
        "detectedPolicyLanguageSource": "policy_surface",
        "supportedGdprTransparencyLocales": [
          "en",
          "de",
          "fr",
          "es",
          "it",
          "nl",
          "pl",
          "pt",
          "ru",
          "ja",
          "zh",
          "ar",
          "sv",
          "ro",
          "cs",
          "el",
          "hu",
          "da",
          "fi",
          "sk",
          "bg",
          "hr",
          "nb",
          "sl",
          "lt",
          "lv",
          "et",
          "uk",
          "tr",
          "fa",
          "vi",
          "id",
          "ko",
          "th",
          "he",
          "sr",
          "ca",
          "hi",
          "az",
          "gl"
        ],
        "gdprTransparencyLanguageSupported": true,
        "policyTextEvidenceProjectionStatus": "verified_complete",
        "policyTextEvidenceProjectionContractVersion": "certscore.policy-text-evidence-projection.v1"
      },
      "retainedPolicySectionHeadings": [
        "Legal Obligation.",
        "Service Providers.",
        "Privacy Policy",
        "The Information We Collect",
        "How We Use Your Information",
        "How We Disclose Your Information",
        "Your Rights and Choices",
        "Data Retention",
        "Additional Information for International Users",
        "data controller",
        "right to lodge a complaint",
        "under a contract",
        "Policy section"
      ],
      "selectedPrivacyPolicyDocument": {
        "documentUrl": "https://groq.com/privacy-policy",
        "observationId": "policy_surface_69e31537",
        "traversalDepth": 0,
        "parentSurfaceUrl": null,
        "parentObservationId": null,
        "selectionReasonCodes": []
      },
      "article13_coverage_assessments": [
        {
          "topic": "automated_decision_making_or_profiling",
          "status": "insufficient_retained_evidence",
          "sourceUrls": [
            "https://groq.com/privacy-policy"
          ],
          "reasonCodes": [
            "policy_absence_coverage_preconditions_not_met",
            "typed_topic_coverage_diagnostic_missing_or_limited",
            "policy_document_content_coverage_incomplete"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_69e31537"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "fb03edb9fd3038dd4fbf1b776cbc7d1e75083ad2ac87fd01c5bb0de4ca65170e"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "controller_contact",
          "status": "observed",
          "sourceUrls": [
            "https://groq.com/privacy-policy"
          ],
          "reasonCodes": [
            "row_specific_disclosure_observed"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_69e31537"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "fb03edb9fd3038dd4fbf1b776cbc7d1e75083ad2ac87fd01c5bb0de4ca65170e"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "data_retention",
          "status": "insufficient_retained_evidence",
          "sourceUrls": [
            "https://groq.com/privacy-policy"
          ],
          "reasonCodes": [
            "policy_absence_coverage_preconditions_not_met",
            "typed_topic_coverage_diagnostic_missing_or_limited",
            "policy_document_content_coverage_incomplete"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_69e31537"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "fb03edb9fd3038dd4fbf1b776cbc7d1e75083ad2ac87fd01c5bb0de4ca65170e"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "data_subject_rights",
          "status": "observed",
          "sourceUrls": [
            "https://groq.com/privacy-policy"
          ],
          "reasonCodes": [
            "row_specific_disclosure_observed"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_69e31537"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "fb03edb9fd3038dd4fbf1b776cbc7d1e75083ad2ac87fd01c5bb0de4ca65170e"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "dpo_contact",
          "status": "insufficient_retained_evidence",
          "sourceUrls": [
            "https://groq.com/privacy-policy"
          ],
          "reasonCodes": [
            "policy_absence_coverage_preconditions_not_met",
            "typed_topic_coverage_diagnostic_missing_or_limited",
            "policy_document_content_coverage_incomplete"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_69e31537"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "fb03edb9fd3038dd4fbf1b776cbc7d1e75083ad2ac87fd01c5bb0de4ca65170e"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "international_transfers",
          "status": "observed",
          "sourceUrls": [
            "https://groq.com/privacy-policy"
          ],
          "reasonCodes": [
            "row_specific_disclosure_observed"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_69e31537"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "fb03edb9fd3038dd4fbf1b776cbc7d1e75083ad2ac87fd01c5bb0de4ca65170e"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "legal_basis",
          "status": "observed",
          "sourceUrls": [
            "https://groq.com/privacy-policy"
          ],
          "reasonCodes": [
            "row_specific_disclosure_observed"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_69e31537"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "fb03edb9fd3038dd4fbf1b776cbc7d1e75083ad2ac87fd01c5bb0de4ca65170e"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "processing_purposes",
          "status": "observed",
          "sourceUrls": [
            "https://groq.com/privacy-policy"
          ],
          "reasonCodes": [
            "row_specific_disclosure_observed"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_69e31537"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "fb03edb9fd3038dd4fbf1b776cbc7d1e75083ad2ac87fd01c5bb0de4ca65170e"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "recipients_or_vendor_categories",
          "status": "observed",
          "sourceUrls": [
            "https://groq.com/privacy-policy"
          ],
          "reasonCodes": [
            "row_specific_disclosure_observed"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_69e31537"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "fb03edb9fd3038dd4fbf1b776cbc7d1e75083ad2ac87fd01c5bb0de4ca65170e"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "supervisory_authority",
          "status": "observed",
          "sourceUrls": [
            "https://groq.com/privacy-policy"
          ],
          "reasonCodes": [
            "row_specific_disclosure_observed"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_69e31537"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "fb03edb9fd3038dd4fbf1b776cbc7d1e75083ad2ac87fd01c5bb0de4ca65170e"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        }
      ],
      "discoveredPrivacyPolicyDetails": [],
      "article13DisclosureTypesPartial": [],
      "discoveredPrivacyPolicyStatuses": [],
      "gdprTransparencyEvidenceProfile": "gdpr_transparency_multilingual_article13_v1",
      "policy_text_evidence_projection": {
        "scanId": "9b1badef-048a-494e-88f5-0827d2a5e529",
        "documents": [
          {
            "finalUrl": "https://groq.com/privacy-policy",
            "artifactId": "policy_surface_text_69e31537_7739ff25",
            "artifactUri": "s3://certscore-v2-dag-local-artifacts-eu-west-1-199536052647/v2-dag-lambda/local/9b1badef-048a-494e-88f5-0827d2a5e529/auxiliary/policy_surface_text_69e31537_7739ff25.txt",
            "contentType": "text/html; charset=utf-8",
            "documentRole": "policy_document",
            "requestedUrl": "https://groq.com/privacy-policy",
            "observationId": "policy_surface_69e31537",
            "redirectChain": [
              "https://groq.com/privacy",
              "https://groq.com/privacy-policy"
            ],
            "artifactSha256": "fb03edb9fd3038dd4fbf1b776cbc7d1e75083ad2ac87fd01c5bb0de4ca65170e",
            "documentFormat": "text",
            "limitationKeys": [
              "policy_section_inventory_bounded",
              "policy_section_text_bounded"
            ],
            "contentCoverage": {
              "status": "truncated",
              "limitationKeys": [
                "policy_section_inventory_bounded",
                "policy_section_text_bounded"
              ],
              "sourceTextChars": 25504,
              "retainedSectionCount": 17,
              "extractedSectionCount": 28,
              "retainedTableRowCount": 0
            },
            "artifactFileName": "policy_surface_text_69e31537_7739ff25.txt",
            "extractionStatus": "complete",
            "artifactSizeBytes": 25640,
            "retainedTextChars": 25504,
            "documentFetchState": "fetched",
            "retainedTextSha256": "fb03edb9fd3038dd4fbf1b776cbc7d1e75083ad2ac87fd01c5bb0de4ca65170e",
            "targetRelationship": "target_controller",
            "documentOwnerEntity": "Groq is the premier neocloud for fast inference",
            "ownershipConfidence": 0.98,
            "documentTextCoverage": {
              "status": "complete",
              "limitationKeys": [],
              "sourceTextChars": 25504,
              "retainedTextChars": 25504
            },
            "documentEvaluationState": "usable",
            "documentRoleReasonCodes": [
              "multiple_substantive_disclosure_signals_retained"
            ],
            "governingPolicySelection": {
              "rank": 1,
              "score": 85,
              "state": "primary",
              "reasonCodes": [
                "highest_ranked_eligible_governing_policy",
                "target_controller_document",
                "policy_content_coverage_truncated",
                "complete_policy_text_retention",
                "multiple_substantive_disclosure_signals_retained"
              ],
              "contractVersion": "governing_policy_selection.v1"
            },
            "artifactVerificationStatus": "verified",
            "gdprTransparencyTopicCoverageDiagnostics": [
              {
                "topic": "controller_contact",
                "reasonCodes": [
                  "row_specific_disclosure_observed",
                  "evidence_hash_binding_verified",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "observed",
                "sourceDocumentSha256": "d653d5b67eaae4a2d847c2cbe9b5734814c7bf2eba55dd41da12735a3e23cf7c",
                "evidenceSectionSha256": "ad990b99773d5a09320e2b3d5086325e2b577eec8990bfda087b3dfdb30e6742",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated",
                "sectionExtractionMethod": "html_heading_hierarchy"
              },
              {
                "topic": "processing_purposes",
                "reasonCodes": [
                  "row_specific_disclosure_observed",
                  "evidence_hash_binding_verified",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "observed",
                "sourceDocumentSha256": "d653d5b67eaae4a2d847c2cbe9b5734814c7bf2eba55dd41da12735a3e23cf7c",
                "evidenceSectionSha256": "772c276e4fc5d8c10a6fa01de55117f243df0dce62e0ce716b668b5fca3e4cfa",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated",
                "sectionExtractionMethod": "html_heading_hierarchy"
              },
              {
                "topic": "legal_basis",
                "reasonCodes": [
                  "row_specific_disclosure_observed",
                  "evidence_hash_binding_verified",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "observed",
                "sourceDocumentSha256": "fb03edb9fd3038dd4fbf1b776cbc7d1e75083ad2ac87fd01c5bb0de4ca65170e",
                "evidenceSectionSha256": "efd7f5a9c3c8dc91e1dd3f262953e86beb50d458510abdb1a5975d419068c0df",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated",
                "sectionExtractionMethod": "canonical_topic_window"
              },
              {
                "topic": "recipients_or_vendor_categories",
                "reasonCodes": [
                  "row_specific_disclosure_observed",
                  "evidence_hash_binding_verified",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "observed",
                "sourceDocumentSha256": "d653d5b67eaae4a2d847c2cbe9b5734814c7bf2eba55dd41da12735a3e23cf7c",
                "evidenceSectionSha256": "7e9e5289cc3b5b8a36f11a9dcc04d96cc1dc37533e2aa8fdc2d9a7f5ea07830b",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated",
                "sectionExtractionMethod": "html_labeled_block"
              },
              {
                "topic": "data_retention",
                "reasonCodes": [
                  "row_specific_disclosure_not_confirmed",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "unknown",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated"
              },
              {
                "topic": "data_subject_rights",
                "reasonCodes": [
                  "row_specific_disclosure_observed",
                  "evidence_hash_binding_verified",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "observed",
                "sourceDocumentSha256": "d653d5b67eaae4a2d847c2cbe9b5734814c7bf2eba55dd41da12735a3e23cf7c",
                "evidenceSectionSha256": "4eabf30f5f63028391723602eb1f34f8dbede806e3150607f7b045acaefdc1fc",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated",
                "sectionExtractionMethod": "html_heading_hierarchy"
              },
              {
                "topic": "international_transfers",
                "reasonCodes": [
                  "row_specific_disclosure_observed",
                  "evidence_hash_binding_verified",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "observed",
                "sourceDocumentSha256": "d653d5b67eaae4a2d847c2cbe9b5734814c7bf2eba55dd41da12735a3e23cf7c",
                "evidenceSectionSha256": "796047d24344c5f9aed1a84b45e113f5ed4cceef807103d046af99af6b67cabd",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated",
                "sectionExtractionMethod": "html_heading_hierarchy"
              },
              {
                "topic": "dpo_contact",
                "reasonCodes": [
                  "row_specific_disclosure_not_confirmed",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "unknown",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated"
              },
              {
                "topic": "supervisory_authority",
                "reasonCodes": [
                  "row_specific_disclosure_observed",
                  "evidence_hash_binding_verified",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "observed",
                "sourceDocumentSha256": "fb03edb9fd3038dd4fbf1b776cbc7d1e75083ad2ac87fd01c5bb0de4ca65170e",
                "evidenceSectionSha256": "6e6aa5487fde2c3a5dd674a952e7d0500a00f64225fd5bc394baa3739db8e281",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated",
                "sectionExtractionMethod": "canonical_topic_window"
              },
              {
                "topic": "automated_decision_making_or_profiling",
                "reasonCodes": [
                  "row_specific_disclosure_not_confirmed",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "unknown",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated"
              }
            ]
          }
        ],
        "generatedAt": "2026-10-12T19:36:28.797Z",
        "sourceBundle": {
          "uri": "s3://certscore-v2-dag-local-artifacts-eu-west-1-199536052647/v2-dag-lambda/local/9b1badef-048a-494e-88f5-0827d2a5e529/CanonicalEvidenceBundle.json",
          "sha256": "ebcb265bee4cf2c117cd724f64e4daabe87ae8d97657b92f50975a86aa272447",
          "sizeBytes": 1249285,
          "schemaVersion": "certscore.v2.alpha.1",
          "verificationStatus": "verified"
        },
        "limitationKeys": [
          "policy_section_inventory_bounded",
          "policy_section_text_bounded"
        ],
        "contractVersion": "certscore.policy-text-evidence-projection.v1",
        "projectionStatus": "verified_complete"
      },
      "privacyPolicyTextCharacterCount": 25504,
      "retainedCookiePolicyTextExcerpt": "",
      "validatedDisclosureTypesPartial": [],
      "article13DisclosureTypesObserved": [
        "data_subject_rights",
        "international_transfers",
        "supervisory_authority",
        "controller_contact",
        "processing_purposes",
        "legal_basis",
        "recipients_or_vendor_categories"
      ],
      "retainedArticle13SectionEvidence": [
        {
          "surfaceUrl": "https://groq.com/privacy-policy",
          "coverageArea": "data_retention",
          "evidenceSource": "deterministic",
          "signalObserved": "not_confirmed",
          "extractionLimitation": "section_retained_without_row_specific_disclosure",
          "selectedEvidenceStrength": "limited",
          "selectedPolicySectionUrl": "https://groq.com/privacy-policy",
          "selectedPolicySectionExcerpt": "We will retain your information for the period necessary to fulfill the purposes outlined in this Policy, unless a longer retention period is required or not prohibited by applicable law. When determining the appropriate retention period for the information we process and store, we take into account various criteria, such as the type of Services requested by or provided to you, the nature and length of our relationship with you, the impact on the Services we provide to you, and legally-required retention periods.",
          "selectedPolicySectionHeading": "Data Retention"
        },
        {
          "surfaceUrl": "https://groq.com/privacy-policy",
          "coverageArea": "data_subject_rights",
          "evidenceSource": "deterministic",
          "signalObserved": "observed",
          "extractionLimitation": "selected_policy_section_truncated_by_retention_limit",
          "selectedEvidenceStrength": "strong",
          "selectedPolicySectionUrl": "https://groq.com/privacy-policy",
          "selectedPolicySectionExcerpt": "Your Rights We provide you with the ability to exercise certain rights regarding our collection, use, and disclosure of your information. Your legal rights to exercise such controls and choices vary based on the laws of your jurisdiction. Depending on the laws in your jurisdiction (which includes the EU, UK, California, and the Kingdom of Saudi Arabia), you may have the ability to request: Access to, or a copy of, your information in a structured, commonly used, and machine-readable format Correction of your inaccurate information Deletion of your information Transfer of your information to a third party, where technologically feasible Restriction or objection to certain uses of your information Withdrawal of your consent at any time, where our processing operations were based on your consent. If you withdraw your consent, our use of your personal information before your withdrawal will still be lawful. We may ask you to provide us with certain personal information necessary to reasonably verify your identity before responding to your request. We will consider all requests and provide our response within the time period required by applicable law.",
          "selectedPolicySectionHeading": "Your Rights and Choices"
        },
        {
          "surfaceUrl": "https://groq.com/privacy-policy",
          "coverageArea": "international_transfers",
          "evidenceSource": "deterministic",
          "signalObserved": "observed",
          "selectedEvidenceStrength": "strong",
          "selectedPolicySectionUrl": "https://groq.com/privacy-policy",
          "selectedPolicySectionExcerpt": "Whenever we make restricted international transfers of personal information, we take steps to ensure that your personal information receives an adequate level of protection (such as by using approved contractual protections for the transfer of information or relying on third parties’ Data Privacy Framework certifications, where applicable). Where relevant, you may request access to the safeguards we use to transfer your personal information outside of the European Economic Area, United Kingdom, Switzerland, or the Kingdom of Saudi Arabia.",
          "selectedPolicySectionHeading": "Additional Information for International Users"
        },
        {
          "surfaceUrl": "https://groq.com/privacy-policy",
          "coverageArea": "supervisory_authority",
          "evidenceSource": "deterministic",
          "signalObserved": "observed",
          "selectedEvidenceStrength": "strong",
          "selectedPolicySectionUrl": "https://groq.com/privacy-policy",
          "selectedPolicySectionExcerpt": "You also have the right to lodge a complaint with the supervisory authority or regulator in your jurisdiction of residence.",
          "selectedPolicySectionHeading": "right to lodge a complaint"
        },
        {
          "surfaceUrl": "https://groq.com/privacy-policy",
          "coverageArea": "dpo_contact",
          "evidenceSource": "deterministic",
          "signalObserved": "not_confirmed",
          "extractionLimitation": "selected_policy_section_truncated_by_retention_limit",
          "selectedEvidenceStrength": "limited",
          "selectedPolicySectionUrl": "https://groq.com/privacy-policy",
          "selectedPolicySectionExcerpt": "This Policy is effective on November 12, 2025. This Privacy Policy (“ Policy ”) describes how Groq LLC and its subsidiaries and affiliates (‘ Groq ”, “ we ”, “ us ”, or “ our ”) process information collected from and about users of our website www.groq.com , community.groq.com , appgen.groqlabs.com , and customers of our related applications and services on console.groq.com and chat.groq.com (collectively, “ Websites ”). It also applies to information we collect from and about you in relation to prospecting activities, events, our social media accounts, ongoing billing and maintenance of our customer accounts, information related to usage of our products and services (e.g., metadata such as file transmission size, times and dates of use, and similar data), interactions with business contacts of our vendors and partners, and other engagements or interactions we may have with you. With respect to such processing, Groq is the “ data controller ” of your information.",
          "selectedPolicySectionHeading": "Privacy Policy"
        },
        {
          "surfaceUrl": "https://groq.com/privacy-policy",
          "coverageArea": "controller_contact",
          "evidenceSource": "deterministic",
          "signalObserved": "observed",
          "extractionLimitation": "selected_policy_section_truncated_by_retention_limit",
          "selectedEvidenceStrength": "strong",
          "selectedPolicySectionUrl": "https://groq.com/privacy-policy",
          "selectedPolicySectionExcerpt": "data), interactions with business contacts of our vendors and partners, and other engagements or interactions we may have with you. With respect to such processing, Groq is the “ data controller ” of your information.",
          "selectedPolicySectionHeading": "Privacy Policy"
        },
        {
          "surfaceUrl": "https://groq.com/privacy-policy",
          "coverageArea": "processing_purposes",
          "evidenceSource": "deterministic",
          "signalObserved": "observed",
          "extractionLimitation": "selected_policy_section_truncated_by_retention_limit",
          "selectedEvidenceStrength": "strong",
          "selectedPolicySectionUrl": "https://groq.com/privacy-policy",
          "selectedPolicySectionExcerpt": "We may process your personal information for these purposes for both mandatory and optional reasons.",
          "selectedPolicySectionHeading": "How We Use Your Information"
        },
        {
          "surfaceUrl": "https://groq.com/privacy-policy",
          "coverageArea": "legal_basis",
          "evidenceSource": "deterministic",
          "signalObserved": "observed",
          "selectedEvidenceStrength": "strong",
          "selectedPolicySectionUrl": "https://groq.com/privacy-policy",
          "selectedPolicySectionExcerpt": "Legal Obligation. Where we use your information to comply with applicable legal obligations.",
          "selectedPolicySectionHeading": "Policy section"
        },
        {
          "surfaceUrl": "https://groq.com/privacy-policy",
          "coverageArea": "recipients_or_vendor_categories",
          "evidenceSource": "deterministic",
          "signalObserved": "observed",
          "selectedEvidenceStrength": "strong",
          "selectedPolicySectionUrl": "https://groq.com/privacy-policy",
          "selectedPolicySectionExcerpt": "We may disclose information to our third-party service providers, vendors, or others who provide services for Groq’s business operations subject to Groq’s instructions.",
          "selectedPolicySectionHeading": "Service Providers."
        }
      ],
      "retainedPrivacyPolicyTextExcerpt": "Privacy Policy This Policy is effective on November 12, 2025. This Privacy Policy (“ Policy ”) describes how Groq LLC and its subsidiaries and affiliates (‘ Groq ”, “ we ”, “ us ”, or “ our ”) process information collected from and about users of our website www.groq.com , community.groq.com , appgen.groqlabs.com , and customers of our related applications and services on console.groq.com and chat.groq.com (collectively, “ Websites ”). It also applies to information we collect from and about you in relation to prospecting activities, events, our social media accounts, ongoing billing and maintenance of our customer accounts, information related to usage of our products and services (e.g., metadata such as file transmission size, times and dates of use, and similar data), interactions with business contacts of our vendors and partners, and other engagements or interactions we may have with you. With respect to such processing, Groq is the “ data controller ” of your information. We refer to the processing activities covered in this paragraph collectively for purposes of this Policy as the “ Services .” This Policy also describes the choices available to you regarding our processing of your information. This Policy does not apply to the information that we process as a “ data processor ” on behalf of customers (“ Customer Data ”) of our business offerings such as GroqCloud, GroqChat, and our Application Programming Interfaces (collectively, “ Cloud Services ”). Our processing of Customer Data in connection with a customer’s use of our Cloud Services is governed by our Groq Services Agreement and Data Processing Addendum . This Policy contains the following sections: The Information We Collect How We Use Your Information Online Analytics and Targeted Advertising How We Disclose Your Information Your Rights and Choices Data Retention Notification of Policy Changes Children’s Privacy Third Party Links and Features Additional Information for International Users Additional Information for California Residents Contact Groq The Information We Collect This section discusses the types of information we collect from and about you as you use the Services. Information You Provide to Us You may choose to provide certain information directly to us. For example, we collect information directly from you when you login or sign-up to use a Service; interact with us through online forms, social media pages, or customer service; communicate with our sales, marketing, or developer teams; participate in surveys or research; or otherwise engage with us through the Services (including in connection with our ongoing servicing of your customer account, including billing). The information we collect from you includes: First and last name Email address Mailing address Account name and log-in information Mobile or phone number Company name and role Payment information (collected by our third-party payment processor) and related transaction information Information you provide in connection with requests you submit to us through the Services Information you provide in connection with customer service interactions (note that customer service chats and phone calls may be recorded and stored for quality assurance and training purposes) Information you provide to establish your identity If you fail to provide necessary information when requested, we may be unable to effectively provide the Services to you. Information We Automatically Collect As You Use the Services There is certain information that we collect automatically from your use of our online Services and from your device(s) used to access those Services, for example by using the types of technologies discussed in the “ Online Analytics ” section below. This information includes your IP address, page view statistics, browsing history, usage and click data (e.g., the features you interact with and actions you take, session duration, dates and time of access, diagnostic data), and information about your device (e.g., device identifiers, operating system, and browser type/version). It also includes metadata about the type and size of files transmitted through your customer account and related usage data. Information We Receive from Other Sources We (or third parties acting on our behalf) may receive or collect additional information about you from public databases, partners, social media platforms, conference hosts, event companies, and other third parties that supplement the information we collect directly or automatically as described above, for example partners and vendors that provide us with information about potential customers. We may use third-party identity verification services to verify your identity, secure our Services, and protect against fraud or abuse. When you engage in this process, you provide information, such as a photo ID or selfie, directly to that service. We receive confirmation of verification results but do not store your government identification documents or selfies ourselves. These services act as our processors and process your information in accordance with their own privacy notices. Inferred Information Based on information such as your IP address, we may also determine the general location from which your device accesses the Services. De-identified/Anonymized/Aggregated Information We may de-identify, anonymize, or aggregate information we collect so the information cannot reasonably identify you or your device, or we may collect information that is already in de-identified form. For example, we may disclose performance benchmark data and other aggregated, anonymized, or de-identified data useful to our user community. We maintain and use de-identified information only in a de-identified fashion and will not attempt to re-identify such information, except as permitted by law. Our use and disclosure of such aggregated, anonymized, or de-identified information is not subject to any restrictions under this Policy, and we may use and disclose it to others for any purpose. How We Use Your Information We use your information for the following purposes: To provide the Services and respond to your requests, including when you provide feedback or ask questions; To measure use of, analyze performance of, fix errors in, provide support for, improve, and develop the Services; To send you transactional or relationship communications, including related to the Services or about updates to our legal terms; In accordance with applicable legal requirements, for advertising and marketing purposes, including to provide you with special offers, information, and promotions both with respect to our products, events, and services and the products, events, and services of third parties that we believe will be of interest to you; For our business operations, including maintaining your account, billing, security, abuse and fraud prevention, legal compliance, and detecting security incidents and protecting against malicious, deceptive, fraudulent, or illegal activity; and For other purposes where we have your consent. We may process your personal information for these purposes for both mandatory and optional reasons. We will not process your personal data for any additional purposes that are incompatible with the original purpose for which it was collected unless permitted by applicable law. The laws in some jurisdictions (including the EU, UK, Switzerland, and the Kingdom of Saudi Arabia) require companies to explain the legal grounds they rely on to process your information. Our legal bases for processing your information as described in this Policy are as follows: Contractual Necessity. Where use of your information is necessary to perform our obligations under a contract or commitment to you. For example, to: Provide the Services you’ve requested from us; Comply with our applicable agreements; and Make and receive payments. Legitimate Interests. Where use of your information furthers our legitimate interests or the legitimate interests of others. For example, to: Operate our business and our Services; Defend our legal rights; Provide safety and security for our Services; Reduce abuse and prevent fraud in connection with the use of our Services; and Develop and improve the Services. If you are based in the Kingdom of Saudi Arabia, we will not rely on legitimate interests as a legal ground to process any sensitive personal information of you, if any. Legal Obligation. Where we use your information to comply with applicable legal obligations. For example, to: Keep track of usage of our Services for tax, accounting, and auditing purposes; and Respond to compulsory government requests. Consent. Where you have consented to our processing of your information for a particular purpose in jurisdictions where consent is required. For example, depending on your jurisdiction, to: Send you marketing communications Collect and process information through cookies and similar tools as discussed immediately below. Groq acknowledges that some of its Services may incorporate certain technologies (such as artificial intelligence) that could pose risks under data protection laws such as those in the Kingdom of Saudi Arabia. In this regard, we will protect any of your personal information that we process in accordance with our data security policies and applicable law. You will not be subject to decisions that will have a significant impact on you based solely on automated decision-making, unless we have a legal ground for doing so and we have notified you. Online Analytics and Targeted Advertising Our online Services use various technologies provided by us or others such as cookies, beacons, tags, and scripts (collectively referred to as “ cookies ”). These technologies are used in authenticating user sessions, analyzing trends, administering those Services, tracking users’ activities on those Services, and in gathering demographic information about our user base as a whole. We may receive reports based on the use of these technologies by these companies on an individual as well as aggregated basis. Please note that you can change your settings to notify you when a cookie is being set or updated, or to block cookies altogether. Please consult the “ Help ” section of your browser for more information (e.g., Microsoft Edge ; Google Chrome ; Mozilla Firefox ; or Apple Safari ). Also see our Cookies Notice . Please note that by blocking, disabling, or managing any or all cookies, you may not have access to certain features or offerings of these Services. We use third-party web analytics services (such as those of Google Analytics) on our online Services to collect and analyze usage information through cookies and similar tools; engage in auditing, research, or reporting; assist with fraud prevention; and provide certain features to you. To prevent Google Analytics from using your information for analytics, you may install the Google Analytics Opt-out Browser Add-on by clicking here . We also disclose certain categories of personal data to show you targeted ads on third party properties and to expand the reach and effectiveness of our own marketing campaigns If you receive an email from us, we may use certain analytics tools, such as tracking pixels, to capture data such as when you open our message or click on any links or banners our email contains. This data allows us to gauge the effectiveness of our communications and marketing campaigns. How We Disclose Your Information We may disclose your information to third parties as described above in the Online Analytics and Targeted Advertising section, and in the following ways: Affiliates. We may disclose information to our affiliates under common ownership or control for the purposes outlined in this Policy. Service Providers. We may disclose information to our third-party service providers, vendors, or others who provide services for Groq’s business operations subject to Groq’s instructions. This may include providers of services such as infrastructure, hosting, data analysis, order fulfillment, payment processing, IT services, customer support and services, professional services, audit services, or advertising and marketing services, among others. Your organization. If you are using the Services on behalf of an organization’s customer account, your organization may have access to information generated as you use the Cloud Services. For questions about how your organization processes your information, please ask your organization. Legal and Safety Disclosures. We may disclose information as necessary or appropriate under applicable laws (including laws outside your country of residence) to: comply with legal process or requirements, including applicable notification obligations; respond in good faith as necessary to requests from public and government authorities (including public and government authorities outside your country of residence); enforce our terms and conditions; and protect our operations or those of any of our affiliates and our rights, privacy, safety, or property, or that of our affiliates, you, or others. Business Transactions. We may disclose Information in the event of a proposed or actual reorganization, merger, sale, joint venture, assignment, transfer, or other disposition of all or any portion of Groq’s business, assets, or stock (including in connection with any bankruptcy or similar proceedings). Your Rights and Choices Your Rights We provide you with the ability to exercise certain rights regarding our collection, use, and disclosure of your information. Your legal rights to exercise such controls and choices vary based on the laws of your jurisdiction. Depending on the laws in your jurisdiction (which includes the EU, UK, California, and the Kingdom of Saudi Arabia), you may have the ability to request: Access to, or a copy of, your information in a structured, commonly used, and machine-readable format Correction of your inaccurate information Deletion of your information Transfer of your information to a third party, where technologically feasible Restriction or objection to certain uses of your information Withdrawal of your consent at any time, where our processing operations were based on your consent. If you withdraw your consent, our use of your personal information before your withdrawal will still be lawful. We may ask you to provide us with certain personal information necessary to reasonably verify your identity before responding to your request. We will consider all requests and provide our response within the time period required by applicable law. Please note, however, that certain information or processing activities may be exempt from such requests. To exercise your rights, please contact us using the contact information provided below. Depending on your jurisdiction, you may have the ability to appeal our decision. In such circumstances, we will inform you of your appeal rights and how to exercise it in our response to your request. We will not discriminate against you for exercising your rights. This means that we will not penalize you for exercising your rights by taking actions such as denying you services; increasing the price/rate of services; decreasing service quality; or suggesting that we may penalize you as described above for exercising your rights. You also have the right to lodge a complaint with the supervisory authority or regulator in your jurisdiction of residence. If you are located in California, and want more detailed information about the categories of information we collect, sources of information, and our disclosures of information, please see the chart in the “ Additional Information for California Residents ” section below. Your Marketing Choices In accordance with applicable law, we may send you promotional offers, updates, newsletters, and other marketing communications. You can opt out of email marketing using the unsubscribe link in those communications. You may also contact us at the contact information provided below and request that we no longer use your information to send marketing communications. We will process such requests in accordance with applicable law. Please note that, even if you opt out of receiving marketing communications from us, you may still receive transactional or relationship communications, including about the Services or legal notifications. Sale/Targeted Advertising Opt Out Rights Under the laws in certain US states (e.g., California), you have the right to opt out of our processing or sharing of your information for online targeted advertising purposes. Note that certain state laws also allow you to opt out of the “ sale ” of your information to third parties in exchange for valuable consideration. We do not sell your personal information to third parties providing online analytics or targeted advertising services to us. We also honor browser-based opt out signals (such as the global privacy control) in accordance with our legal obligations. Data Retention We will retain your information for the period necessary to fulfill the purposes outlined in this Policy, unless a longer retention period is required or not prohibited by applicable law. When determining the appropriate retention period for the information we process and store, we take into account various criteria, such as the type of Services requested by or provided to you, the nature and length of our relationship with you, the impact on the Services we provide to you, and legally-required retention periods. Notification of Policy Changes We may change this Policy from time to time. If we make changes, we will post an updated Policy on the Services, and it will become effective as of the date of posting (“ Effective Date ”). If we make material changes, we will provide you with additional notice (such as by adding a statement to the Services or sending you a notification). We encourage you to periodically review this page for the latest information on our privacy practices. Children’s Privacy Our Services are not directed to children, and we do not knowingly collect identifiable information from children under the age of 18. If you learn that a child has provided us with identifiable information in violation of this Policy, please contact us as indicated at the end of this Policy. Third Party Links and Features Our Services may contain features or links to websites and services provided by third parties. Any information you provide on third-party websites or services is provided directly to the operators of such websites or services and is subject to those operators’ policies governing privacy and security, even if accessed via our Services. We are not responsible for the privacy and security practices of third parties to which links or access are provided through our Services. We encourage you to learn about third parties’ privacy and security policies before using their services or providing them with your information. Additional Information for International Users Groq is located in the United States, and maintains processing operations in various global jurisdictions. We may therefore transfer your information to countries other than the country where you are located, including to the U.S. or any other country in which we or our service providers maintain facilities. Whenever we make restricted international transfers of personal information, we take steps to ensure that your personal information receives an adequate level of protection (such as by using approved contractual protections for the transfer of information or relying on third parties’ Data Privacy Framework certifications, where applicable). Where relevant, you may request access to the safeguards we use to transfer your personal information outside of the European Economic Area, United Kingdom, Switzerland, or the Kingdom of Saudi Arabia. Additional Information for California Residents If you are a California resident, the California Consumer Privacy Act (“ CCPA ”) requires us to provide you with certain additional information about our privacy practices. Under the CCPA, “ sharing ” is defined as the targeting of advertising to a consumer based on that consumer’s personal information obtained from the consumer’s activity across distinct online services, and “ selling ” is defined as the disclosure of personal information to third parties in exchange for monetary or other valuable consideration. Our use of third-party analytics services may result in the sharing of online identifiers (e.g., cookie data, IP addresses, device identifiers, and usage information) in a way that may be considered a “ sale ” under the CCPA. We also disclose certain categories of personal data to show you targeted ads on third party properties and to expand the reach and effectiveness of our own marketing campaigns. Our Policy explains how we collect, use, and disclose information about you. The chart below summarizes these practices by reference to the statutory categories specified in the CCPA, and describes our practices during the 12 months preceding the Effective Date of this Policy. Category of Personal Information (“PI”) Identifiers (e.g., name, address, phone number, email address, company name and role) Commercial information (e.g., records of your transactions with us) Financial Information (e.g., financial account data, credit card information) Online Identifiers, Internet or Network Information, and Approximate Geolocation Data User Submitted Data (e.g., information you provide in online forms or for seeking customer support) Categories of third parties to whom we disclose PI for business purposes Affiliates Service Providers Online analytics partners Governmental authorities and others Advertising and marketing service providers Internet service providers, data analytics providers Operating systems and platforms Payment processors Fulfillment partners Customer support partners Event partners Fraud prevention partners Categories of third parties with whom we “share” PI Online analytics partners Targeted advertising partners We do not engage in sales or sharing using personal information about consumers we know to be under the age of 16. We do not use or disclose sensitive personal information for the purpose of inferring characteristics about you. Your California privacy rights. As a California resident, you have the rights listed below. We may also ask you for additional information to verify your identity before responding to your request: Right to request access to the specific pieces of personal information we have processed about you over the past 12 months; Right to request that we correction inaccurate personal information about you; and Right to request that we delete the personal information we collected about you. You may also designate an authorized agent to submit a rights request on your behalf. We may ask authorized agents to submit proof of their authority to make a request, such as a valid power of attorney or proof that they have signed permission from the consumer who is the subject of the request. In some cases, we may contact the individual who is the subject of the request to verify their own identity or confirm the authorized agent has permission to submit the request. If we deny your request, you may contact us to appeal our decision. If you have concerns about the result of an appeal, you may contact the California Attorney General. To exercise these rights, submit a request as an authorized agent, or to appeal the denial of a rights request, please contact us using the contact information below. You have the right not to be discriminated against for exercising any of your privacy rights. Your Choices Regarding “Sharing” and “Selling” . You can opt-out of sharing your personal data for targeted advertising to promote our products and services by clicking the “Your Privacy Choices” link in the footer below, and we will honor global privacy controls. Financial Incentives . If we offer any financial incentives in exchange for your personal information (e.g., discounts in exchange for your email address), we will provide you with appropriate information about such incentives so that you can make an informed decision as to whether to participate. Notice Concerning Do Not Track . Do Not Track (“ DNT ”) is a privacy preference that users can set in certain web browsers. We recognize and honor browser-initiated DNT signals in addition to the global privacy control browser-based privacy signal. Contact Groq If you have any questions or comments about this Policy, the information practices of the Services, or if you would like to exercise any applicable data rights, you can contact us at any time by sending us an email or writing to us at: Groq LLC, P.O. Box 1778, Mountain View, CA 94042, USA. These contact details also apply to you if you are domiciled in the Kingdom of Saudi Arabia, or you can contact us in writing at: Groq Limited, 8476 Al Raidah Tower - Second Floor, King Fahad Road, Al Muhammadiya District, Riyadh 12363-4228, Kingdom of Saudi Arabia. Our EU/UK representatives can be reached at [email protected] or at the following mailing addresses: EU: DP-Dock GmbH, Attn: Groq LLC, Ballindamm 39, 20095 Hamburg, Germany UK: DP Data Protection Services UK Ltd., Attn: Groq LLC, 16 Great Queen Street, Covent Garden, London, WC2B 5AH, United Kingdom To view previous privacy policies, please see the archive below: October 15, 2025",
      "validatedDisclosureTypesObserved": [
        "data_subject_rights",
        "international_transfers",
        "supervisory_authority",
        "controller_contact",
        "processing_purposes",
        "legal_basis",
        "recipients_or_vendor_categories"
      ],
      "privacyNoticeAvailabilityObserved": true,
      "evaluatedPrivacyPolicySurfaceCount": 1,
      "discardedArticle13DisclosureSignals": [
        {
          "source": "deterministic",
          "confidence": 0.88,
          "surfaceUrl": "https://groq.com/privacy-policy",
          "evidenceText": "with you. With respect to such processing, Groq is the “ data controller ” of your information. We refer to the processing activities covered in this paragraph collectively for purposes of this Policy as the “ Services .” This Policy also describes the choices available to you regarding our processing of your",
          "rejectReason": "insufficient_row_specific_terms",
          "disclosureType": "processing_purposes"
        },
        {
          "source": "deterministic",
          "confidence": 0.9,
          "surfaceUrl": "https://groq.com/privacy-policy",
          "evidenceText": "advertising services to us. We also honor browser-based opt out signals (such as the global privacy control) in accordance with our legal obligations. Data Retention We will retain your information for the period necessary to fulfill the purposes outlined in this Policy, unless a longer retention period is required or",
          "rejectReason": "insufficient_row_specific_terms",
          "disclosureType": "data_retention"
        },
        {
          "source": "deterministic",
          "confidence": 0.76,
          "surfaceUrl": "https://groq.com/privacy-policy",
          "evidenceText": "that we process in accordance with our data security policies and applicable law. You will not be subject to decisions that will have a significant impact on you based solely on automated decision-making, unless we have a legal ground for doing so and we have notified you.",
          "rejectReason": "insufficient_row_specific_terms",
          "disclosureType": "automated_decision_making_or_profiling"
        }
      ],
      "staleLegalFrameworkReferenceObserved": false,
      "policyEvidenceProvenanceContractVersion": "certscore.policy-evidence-provenance.v1",
      "gdprTransparencyProductionEvidenceEnabled": true,
      "gdprTransparencyProductionEvidenceDiagnostics": {
        "sourceCandidateCount": 8,
        "candidateDispositions": [
          {
            "topic": "controller_contact",
            "confidence": 0.9,
            "disposition": "diagnostic_only",
            "matchStrength": "direct",
            "matchedLocale": "en",
            "rejectionReason": "candidate_topic_invariants_failed",
            "sourceObservationId": "policy_surface_69e31537"
          },
          {
            "topic": "supervisory_authority",
            "confidence": 0.86,
            "disposition": "accepted",
            "matchStrength": "equivalent",
            "matchedLocale": "en",
            "rejectionReason": null,
            "sourceObservationId": "policy_surface_69e31537"
          },
          {
            "topic": "legal_basis",
            "confidence": 0.86,
            "disposition": "accepted",
            "matchStrength": "equivalent",
            "matchedLocale": "en",
            "rejectionReason": null,
            "sourceObservationId": "policy_surface_69e31537"
          },
          {
            "topic": "international_transfers",
            "confidence": 0.86,
            "disposition": "accepted",
            "matchStrength": "equivalent",
            "matchedLocale": "en",
            "rejectionReason": null,
            "sourceObservationId": "policy_surface_69e31537"
          },
          {
            "topic": "data_retention",
            "confidence": 0.86,
            "disposition": "discarded",
            "matchStrength": "equivalent",
            "matchedLocale": "en",
            "rejectionReason": "insufficient_row_specific_terms",
            "sourceObservationId": "policy_surface_69e31537"
          },
          {
            "topic": "recipients_or_vendor_categories",
            "confidence": 0.86,
            "disposition": "accepted",
            "matchStrength": "equivalent",
            "matchedLocale": "en",
            "rejectionReason": null,
            "sourceObservationId": "policy_surface_69e31537"
          },
          {
            "topic": "processing_purposes",
            "confidence": 0.86,
            "disposition": "accepted",
            "matchStrength": "equivalent",
            "matchedLocale": "en",
            "rejectionReason": null,
            "sourceObservationId": "policy_surface_69e31537"
          },
          {
            "topic": "data_subject_rights",
            "confidence": 0.86,
            "disposition": "accepted",
            "matchStrength": "equivalent",
            "matchedLocale": "en",
            "rejectionReason": null,
            "sourceObservationId": "policy_surface_69e31537"
          }
        ],
        "acceptedCandidateCount": 6,
        "rejectedCandidateCount": 2,
        "discardedCandidateCount": 1,
        "diagnosticCandidateCount": 1,
        "productionCreditSignalCount": 6
      }
    }
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

{
  "assessmentStatus": "checked",
  "checklistItemId": "legal_basis_disclosure_observed",
  "coverageArea": "Legal basis disclosure",
  "evidenceState": "observed",
  "explanation": "Whether retained privacy-policy evidence included a canonical legal-basis disclosure signal.",
  "note": "Whether retained privacy-policy evidence included a canonical legal-basis disclosure signal.",
  "status": "Observed",
  "tone": "warning",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.legal_basis_disclosure_observed.observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.legal_basis_disclosure_observed"
  },
  "statusBasis": "Legal basis disclosure evidence was retained through adapter-approved multilingual GDPR Transparency Article 13 evidence.",
  "retainedEvidence": {
    "remediation": {
      "kind": "none",
      "steps": [],
      "message": "No remediation is established by this check alone. Retain its evidence and reassess after relevant changes."
    },
    "evidenceRefs": [
      "Evidence: Legal basis disclosure",
      "Excerpt: Legal Obligation. Where we use your information to comply with applicable legal obligations.",
      "Locale: en",
      "Policy URL: https://groq.com/privacy-policy"
    ],
    "signalObserved": true,
    "article13Signal": {
      "source": "normalized_concern",
      "status": "observed",
      "confidence": 0.86,
      "surfaceUrl": "https://groq.com/privacy-policy",
      "evidenceText": "Legal Obligation. Where we use your information to comply with applicable legal obligations.",
      "matchStrength": "equivalent",
      "matchedLocale": "en",
      "disclosureType": "legal_basis",
      "evidenceSource": "normalized_gdpr_transparency_article13_concern",
      "productionCredit": true,
      "classifierProvenance": "gdpr_transparency_topic_classifier.v1",
      "classifierReasonCodes": [
        "matched_legal_basis",
        "match_strength_equivalent",
        "variant_semantic_clause"
      ],
      "productionCreditProfile": "gdpr_transparency_multilingual_article13_v1",
      "selectedEvidenceStrength": "strong",
      "selectedPolicySectionUrl": "https://groq.com/privacy-policy",
      "selectedPolicySectionHeading": null
    },
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "policyEvidenceAssessment": {
      "result": "disclosure_observed",
      "scoreEffect": "canonical_policy",
      "topicRelevance": "direct",
      "contractVersion": "certscore.policy-topic-evidence-assessment.v1"
    },
    "policyEvidenceProvenance": {
      "sourceUrl": "https://groq.com/privacy-policy",
      "policyTitle": "Privacy Policy | Groq is the premier neocloud for fast inference",
      "artifactRefs": [
        "policy_excerpt_69e31537_2a599f95",
        "policy_surface_text_69e31537_7739ff25"
      ],
      "bannerLanguage": "en",
      "contractVersion": "certscore.policy-evidence-provenance.v1",
      "discoveryMethod": "guessed_common_path",
      "documentHeading": "Privacy Policy",
      "detectedLanguage": "en",
      "retrievalTimestamp": "2026-10-12T19:36:26.352Z",
      "targetRelationship": "target_controller",
      "translationApplied": false,
      "documentOwnerEntity": "Groq is the premier neocloud for fast inference",
      "ownershipConfidence": 0.98,
      "directlyLinkedFromScannedPage": false
    },
    "selectedEvidenceStrength": "moderate",
    "selectedEvidenceArtifactId": "coverage_policy",
    "gdprTransparencyArticle13Concern": {
      "state": "sufficient",
      "topic": "legal_basis",
      "originKey": "gdpr_transparency.article13.legal_basis",
      "canonicalConcernKey": "runtime_artifact:gdpr_transparency.article13.legal_basis",
      "regulatoryChecklistEligibility": "observed"
    }
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

{
  "assessmentStatus": "coverage_limitation",
  "checklistItemId": "retention_disclosure_observed",
  "coverageArea": "Retention disclosure",
  "evidenceState": "not_testable",
  "explanation": "Whether retained privacy-policy evidence included a data-retention disclosure signal.",
  "note": "Whether retained privacy-policy evidence included a data-retention disclosure signal.",
  "status": "Not confirmed",
  "tone": "neutral",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.retention_disclosure_observed.not_confirmed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.retention_disclosure_observed"
  },
  "statusBasis": "No production-approved topic match was established. This neutral result does not establish that the disclosure is absent.",
  "retainedEvidence": {
    "remediation": {
      "kind": "steps",
      "steps": [
        "Review the governing policy section for the retention period or substantive criteria for each relevant data category; retain the exact excerpt and source URL.",
        "If relevant wording exists, record it for review and investigate extraction coverage. Unconfirmed evidence alone does not establish a missing disclosure.",
        "Retest the same policy version or record the revised version; verify that the extracted passage supports this specific topic, rather than nearby or unrelated wording."
      ]
    },
    "signalObserved": "not_confirmed_canonical_projection_unavailable",
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "canonicalProjectionState": "normalized_concern_unavailable",
    "policyEvidenceAssessment": {
      "result": "extraction_incomplete",
      "scoreEffect": "none",
      "topicRelevance": "unknown",
      "contractVersion": "certscore.policy-topic-evidence-assessment.v1"
    },
    "policyEvidenceProvenance": {
      "sourceUrl": "https://groq.com/privacy-policy",
      "policyTitle": "Privacy Policy | Groq is the premier neocloud for fast inference",
      "artifactRefs": [
        "policy_excerpt_69e31537_2a599f95",
        "policy_surface_text_69e31537_7739ff25"
      ],
      "bannerLanguage": "en",
      "contractVersion": "certscore.policy-evidence-provenance.v1",
      "discoveryMethod": "guessed_common_path",
      "documentHeading": "Privacy Policy",
      "detectedLanguage": "en",
      "retrievalTimestamp": "2026-10-12T19:36:26.352Z",
      "targetRelationship": "target_controller",
      "translationApplied": false,
      "documentOwnerEntity": "Groq is the premier neocloud for fast inference",
      "ownershipConfidence": 0.98,
      "directlyLinkedFromScannedPage": false
    },
    "selectedEvidenceStrength": "missing",
    "policyTextExtractionHealth": {
      "policyUrls": [
        "https://groq.com/privacy-policy"
      ],
      "nanoInvoked": false,
      "contractVersion": "certscore.policy-text-extraction-health.v2",
      "policyTextQuality": {
        "usable": true,
        "codeSignalCount": 0,
        "codeSymbolRatio": 0.0011762860727728983,
        "policyTermCount": 16,
        "alphabeticWordRatio": 0.7921747967479674,
        "accessChallengeSignalCount": 0,
        "naturalLanguageSentenceCount": 139
      },
      "policyUrlRetained": true,
      "extractedTextLength": 25504,
      "policySurfaceObserved": true,
      "detectedPolicyLanguage": "en",
      "minimumTextLengthRequired": 500,
      "policyTextExtractionStatus": "ok",
      "verifiedPolicyDocumentCount": 1,
      "detectedPolicyLanguageSource": "policy_surface",
      "supportedGdprTransparencyLocales": [
        "en",
        "de",
        "fr",
        "es",
        "it",
        "nl",
        "pl",
        "pt",
        "ru",
        "ja",
        "zh",
        "ar",
        "sv",
        "ro",
        "cs",
        "el",
        "hu",
        "da",
        "fi",
        "sk",
        "bg",
        "hr",
        "nb",
        "sl",
        "lt",
        "lv",
        "et",
        "uk",
        "tr",
        "fa",
        "vi",
        "id",
        "ko",
        "th",
        "he",
        "sr",
        "ca",
        "hi",
        "az",
        "gl"
      ],
      "gdprTransparencyLanguageSupported": true,
      "policyTextEvidenceProjectionStatus": "verified_complete",
      "policyTextEvidenceProjectionContractVersion": "certscore.policy-text-evidence-projection.v1"
    },
    "selectedEvidenceArtifactId": "coverage_policy",
    "article13CoverageAssessment": {
      "topic": "data_retention",
      "status": "insufficient_retained_evidence",
      "sourceUrls": [
        "https://groq.com/privacy-policy"
      ],
      "reasonCodes": [
        "policy_absence_coverage_preconditions_not_met",
        "typed_topic_coverage_diagnostic_missing_or_limited",
        "policy_document_content_coverage_incomplete"
      ],
      "coverageStatus": "insufficient",
      "policyDocumentIds": [
        "policy_surface_69e31537"
      ],
      "policyDocumentRoles": [
        "policy_document"
      ],
      "policyDocumentSha256": [
        "fb03edb9fd3038dd4fbf1b776cbc7d1e75083ad2ac87fd01c5bb0de4ca65170e"
      ],
      "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
      "unresolvedMaterialPolicyChildUrls": []
    },
    "gdprTransparencyReportStatusContract": "observed_not_confirmed_no_match_found.v1"
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

{
  "assessmentStatus": "coverage_limitation",
  "checklistItemId": "controller_contact_disclosure",
  "coverageArea": "Controller/contact disclosure",
  "evidenceState": "not_testable",
  "explanation": "Whether retained privacy-policy evidence included a controller, privacy contact, or equivalent contact point.",
  "note": "Whether retained privacy-policy evidence included a controller, privacy contact, or equivalent contact point.",
  "status": "Not confirmed",
  "tone": "neutral",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.controller_contact_disclosure.not_confirmed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.controller_contact_disclosure"
  },
  "statusBasis": "No production-approved topic match was established. A retained candidate was rejected by the canonical projection and remains available for audit; this result does not establish that the disclosure is absent.",
  "retainedEvidence": {
    "remediation": {
      "kind": "steps",
      "steps": [
        "Review the governing policy section for the controller identity and contact details; retain the exact excerpt and source URL.",
        "If relevant wording exists, record it for review and investigate extraction coverage. Unconfirmed evidence alone does not establish a missing disclosure.",
        "Retest the same policy version or record the revised version; verify that the extracted passage supports this specific topic, rather than nearby or unrelated wording."
      ]
    },
    "evidenceRefs": [
      "Evidence: unprojected controller/contact disclosure candidate",
      "Excerpt: data), interactions with business contacts of our vendors and partners, and other engagements or interactions we may have with you. With respect to such processing, Groq is the “ data controller ” of your information.",
      "Policy URL: https://groq.com/privacy-policy"
    ],
    "signalObserved": "not_confirmed_canonical_projection_unavailable",
    "retainedCandidate": {
      "source": "deterministic",
      "status": "observed",
      "confidence": 0.9,
      "surfaceUrl": "https://groq.com/privacy-policy",
      "evidenceText": "data), interactions with business contacts of our vendors and partners, and other engagements or interactions we may have with you. With respect to such processing, Groq is the “ data controller ” of your information.",
      "disclosureType": "controller_contact",
      "evidenceSource": "deterministic",
      "selectedEvidenceStrength": "strong",
      "selectedPolicySectionUrl": "https://groq.com/privacy-policy",
      "supportingContactContext": null,
      "selectedPolicySectionExcerpt": "data), interactions with business contacts of our vendors and partners, and other engagements or interactions we may have with you. With respect to such processing, Groq is the “ data controller ” of your information.",
      "selectedPolicySectionHeading": "Privacy Policy"
    },
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "canonicalProjectionState": "retained_candidate_not_production_projectable",
    "policyEvidenceAssessment": {
      "result": "extraction_incomplete",
      "scoreEffect": "none",
      "topicRelevance": "unknown",
      "contractVersion": "certscore.policy-topic-evidence-assessment.v1"
    },
    "policyEvidenceProvenance": {
      "sourceUrl": "https://groq.com/privacy-policy",
      "policyTitle": "Privacy Policy | Groq is the premier neocloud for fast inference",
      "artifactRefs": [
        "policy_excerpt_69e31537_2a599f95",
        "policy_surface_text_69e31537_7739ff25"
      ],
      "bannerLanguage": "en",
      "contractVersion": "certscore.policy-evidence-provenance.v1",
      "discoveryMethod": "guessed_common_path",
      "documentHeading": "Privacy Policy",
      "detectedLanguage": "en",
      "retrievalTimestamp": "2026-10-12T19:36:26.352Z",
      "targetRelationship": "target_controller",
      "translationApplied": false,
      "documentOwnerEntity": "Groq is the premier neocloud for fast inference",
      "ownershipConfidence": 0.98,
      "directlyLinkedFromScannedPage": false
    },
    "selectedEvidenceStrength": "missing",
    "policyTextExtractionHealth": {
      "policyUrls": [
        "https://groq.com/privacy-policy"
      ],
      "nanoInvoked": false,
      "contractVersion": "certscore.policy-text-extraction-health.v2",
      "policyTextQuality": {
        "usable": true,
        "codeSignalCount": 0,
        "codeSymbolRatio": 0.0011762860727728983,
        "policyTermCount": 16,
        "alphabeticWordRatio": 0.7921747967479674,
        "accessChallengeSignalCount": 0,
        "naturalLanguageSentenceCount": 139
      },
      "policyUrlRetained": true,
      "extractedTextLength": 25504,
      "policySurfaceObserved": true,
      "detectedPolicyLanguage": "en",
      "minimumTextLengthRequired": 500,
      "policyTextExtractionStatus": "ok",
      "verifiedPolicyDocumentCount": 1,
      "detectedPolicyLanguageSource": "policy_surface",
      "supportedGdprTransparencyLocales": [
        "en",
        "de",
        "fr",
        "es",
        "it",
        "nl",
        "pl",
        "pt",
        "ru",
        "ja",
        "zh",
        "ar",
        "sv",
        "ro",
        "cs",
        "el",
        "hu",
        "da",
        "fi",
        "sk",
        "bg",
        "hr",
        "nb",
        "sl",
        "lt",
        "lv",
        "et",
        "uk",
        "tr",
        "fa",
        "vi",
        "id",
        "ko",
        "th",
        "he",
        "sr",
        "ca",
        "hi",
        "az",
        "gl"
      ],
      "gdprTransparencyLanguageSupported": true,
      "policyTextEvidenceProjectionStatus": "verified_complete",
      "policyTextEvidenceProjectionContractVersion": "certscore.policy-text-evidence-projection.v1"
    },
    "selectedEvidenceArtifactId": "coverage_policy",
    "article13CoverageAssessment": {
      "topic": "controller_contact",
      "status": "observed",
      "sourceUrls": [
        "https://groq.com/privacy-policy"
      ],
      "reasonCodes": [
        "row_specific_disclosure_observed"
      ],
      "coverageStatus": "insufficient",
      "policyDocumentIds": [
        "policy_surface_69e31537"
      ],
      "policyDocumentRoles": [
        "policy_document"
      ],
      "policyDocumentSha256": [
        "fb03edb9fd3038dd4fbf1b776cbc7d1e75083ad2ac87fd01c5bb0de4ca65170e"
      ],
      "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
      "unresolvedMaterialPolicyChildUrls": []
    },
    "gdprTransparencyReportStatusContract": "observed_not_confirmed_no_match_found.v1"
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

{
  "assessmentStatus": "checked",
  "checklistItemId": "processing_purposes_disclosure",
  "coverageArea": "Processing purposes disclosure",
  "evidenceState": "observed",
  "explanation": "Whether retained privacy-policy evidence described the purposes for processing personal data.",
  "note": "Whether retained privacy-policy evidence described the purposes for processing personal data.",
  "status": "Observed",
  "tone": "warning",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.processing_purposes_disclosure.observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.processing_purposes_disclosure"
  },
  "statusBasis": "Processing purposes disclosure evidence was retained through adapter-approved multilingual GDPR Transparency Article 13 evidence.",
  "retainedEvidence": {
    "remediation": {
      "kind": "none",
      "steps": [],
      "message": "No remediation is established by this check alone. Retain its evidence and reassess after relevant changes."
    },
    "evidenceRefs": [
      "Evidence: Processing purposes disclosure",
      "Excerpt: We may process your personal information for these purposes for both mandatory and optional reasons.",
      "Locale: en",
      "Policy URL: https://groq.com/privacy-policy"
    ],
    "signalObserved": true,
    "article13Signal": {
      "source": "normalized_concern",
      "status": "observed",
      "confidence": 0.86,
      "surfaceUrl": "https://groq.com/privacy-policy",
      "evidenceText": "We may process your personal information for these purposes for both mandatory and optional reasons.",
      "matchStrength": "equivalent",
      "matchedLocale": "en",
      "disclosureType": "processing_purposes",
      "evidenceSource": "normalized_gdpr_transparency_article13_concern",
      "productionCredit": true,
      "classifierProvenance": "gdpr_transparency_topic_classifier.v1",
      "classifierReasonCodes": [
        "matched_processing_purposes",
        "match_strength_equivalent",
        "variant_semantic_clause"
      ],
      "productionCreditProfile": "gdpr_transparency_multilingual_article13_v1",
      "selectedEvidenceStrength": "strong",
      "selectedPolicySectionUrl": "https://groq.com/privacy-policy",
      "selectedPolicySectionHeading": "How We Use Your Information"
    },
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "policyEvidenceAssessment": {
      "result": "disclosure_observed",
      "scoreEffect": "canonical_policy",
      "topicRelevance": "direct",
      "contractVersion": "certscore.policy-topic-evidence-assessment.v1"
    },
    "policyEvidenceProvenance": {
      "sourceUrl": "https://groq.com/privacy-policy",
      "policyTitle": "Privacy Policy | Groq is the premier neocloud for fast inference",
      "artifactRefs": [
        "policy_excerpt_69e31537_2a599f95",
        "policy_surface_text_69e31537_7739ff25"
      ],
      "bannerLanguage": "en",
      "sectionHeading": "How We Use Your Information",
      "contractVersion": "certscore.policy-evidence-provenance.v1",
      "discoveryMethod": "guessed_common_path",
      "documentHeading": "Privacy Policy",
      "detectedLanguage": "en",
      "retrievalTimestamp": "2026-10-12T19:36:26.352Z",
      "targetRelationship": "target_controller",
      "translationApplied": false,
      "documentOwnerEntity": "Groq is the premier neocloud for fast inference",
      "ownershipConfidence": 0.98,
      "directlyLinkedFromScannedPage": false
    },
    "selectedEvidenceStrength": "moderate",
    "selectedEvidenceArtifactId": "coverage_policy",
    "gdprTransparencyArticle13Concern": {
      "state": "sufficient",
      "topic": "processing_purposes",
      "originKey": "gdpr_transparency.article13.processing_purposes",
      "canonicalConcernKey": "runtime_artifact:gdpr_transparency.article13.processing_purposes",
      "regulatoryChecklistEligibility": "observed"
    }
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

{
  "assessmentStatus": "checked",
  "checklistItemId": "recipients_vendor_categories_disclosure",
  "coverageArea": "Recipients/vendor categories disclosed",
  "evidenceState": "observed",
  "explanation": "Whether retained privacy-policy evidence described recipient, vendor, or 3rd party categories.",
  "note": "Whether retained privacy-policy evidence described recipient, vendor, or 3rd party categories.",
  "status": "Observed",
  "tone": "warning",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.recipients_vendor_categories_disclosure.observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.recipients_vendor_categories_disclosure"
  },
  "statusBasis": "Recipients/vendor categories disclosure evidence was retained through adapter-approved multilingual GDPR Transparency Article 13 evidence.",
  "retainedEvidence": {
    "remediation": {
      "kind": "none",
      "steps": [],
      "message": "No remediation is established by this check alone. Retain its evidence and reassess after relevant changes."
    },
    "evidenceRefs": [
      "Evidence: Recipients/vendor categories disclosure",
      "Excerpt: We may disclose information to our third-party service providers, vendors, or others who provide services for Groq’s business operations subject to Groq’s instructions.",
      "Locale: en",
      "Policy URL: https://groq.com/privacy-policy"
    ],
    "signalObserved": true,
    "article13Signal": {
      "source": "normalized_concern",
      "status": "observed",
      "confidence": 0.86,
      "surfaceUrl": "https://groq.com/privacy-policy",
      "evidenceText": "We may disclose information to our third-party service providers, vendors, or others who provide services for Groq’s business operations subject to Groq’s instructions.",
      "matchStrength": "equivalent",
      "matchedLocale": "en",
      "disclosureType": "recipients_or_vendor_categories",
      "evidenceSource": "normalized_gdpr_transparency_article13_concern",
      "productionCredit": true,
      "classifierProvenance": "gdpr_transparency_topic_classifier.v1",
      "classifierReasonCodes": [
        "matched_recipients_or_vendor_categories",
        "match_strength_equivalent",
        "variant_semantic_clause"
      ],
      "productionCreditProfile": "gdpr_transparency_multilingual_article13_v1",
      "selectedEvidenceStrength": "strong",
      "selectedPolicySectionUrl": "https://groq.com/privacy-policy",
      "selectedPolicySectionHeading": "How We Disclose Your Information"
    },
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "policyEvidenceAssessment": {
      "result": "disclosure_observed",
      "scoreEffect": "canonical_policy",
      "topicRelevance": "direct",
      "contractVersion": "certscore.policy-topic-evidence-assessment.v1"
    },
    "policyEvidenceProvenance": {
      "sourceUrl": "https://groq.com/privacy-policy",
      "policyTitle": "Privacy Policy | Groq is the premier neocloud for fast inference",
      "artifactRefs": [
        "policy_excerpt_69e31537_2a599f95",
        "policy_surface_text_69e31537_7739ff25"
      ],
      "bannerLanguage": "en",
      "sectionHeading": "How We Disclose Your Information",
      "contractVersion": "certscore.policy-evidence-provenance.v1",
      "discoveryMethod": "guessed_common_path",
      "documentHeading": "Privacy Policy",
      "detectedLanguage": "en",
      "retrievalTimestamp": "2026-10-12T19:36:26.352Z",
      "targetRelationship": "target_controller",
      "translationApplied": false,
      "documentOwnerEntity": "Groq is the premier neocloud for fast inference",
      "ownershipConfidence": 0.98,
      "directlyLinkedFromScannedPage": false
    },
    "selectedEvidenceStrength": "moderate",
    "selectedEvidenceArtifactId": "coverage_policy",
    "gdprTransparencyArticle13Concern": {
      "state": "sufficient",
      "topic": "recipients_or_vendor_categories",
      "originKey": "gdpr_transparency.article13.recipients_or_vendor_categories",
      "canonicalConcernKey": "runtime_artifact:gdpr_transparency.article13.recipients_or_vendor_categories",
      "regulatoryChecklistEligibility": "observed"
    }
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

{
  "assessmentStatus": "coverage_limitation",
  "checklistItemId": "data_subject_rights_disclosure",
  "coverageArea": "Data subject rights disclosure",
  "evidenceState": "not_testable",
  "explanation": "Whether retained privacy-policy evidence described data subject rights or a rights request path.",
  "note": "Whether retained privacy-policy evidence described data subject rights or a rights request path.",
  "status": "Not confirmed",
  "tone": "neutral",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.data_subject_rights_disclosure.not_confirmed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.data_subject_rights_disclosure"
  },
  "statusBasis": "US-state privacy rights were retained, including request or opt-out rights. GDPR-specific rights coverage was not confirmed, so this row receives partial contextual credit rather than full GDPR transparency credit.",
  "retainedEvidence": {
    "remediation": {
      "kind": "steps",
      "steps": [
        "Review the governing policy section for the applicable rights and how to exercise them; retain the exact excerpt and source URL.",
        "If relevant wording exists, record it for review and investigate extraction coverage. Unconfirmed evidence alone does not establish a missing disclosure.",
        "Retest the same policy version or record the revised version; verify that the extracted passage supports this specific topic, rather than nearby or unrelated wording."
      ]
    },
    "evidenceRefs": [
      "Evidence: Data subject rights disclosure",
      "Excerpt: Your Rights We provide you with the ability to exercise certain rights regarding our collection, use, and disclosure of your information. Your legal rights to exercise such controls and choices vary based on the laws of your jurisdiction. Depending on the laws in your jurisdiction (which includes the EU, UK, California, and the Kingdom of Saudi Arabia), you may have the ability to request: Access to, or a copy of, your information in a structured, commonly used, and machine-readable format Correction of your inaccurate information Deletion of your information Transfer of your information to a third party, where technologically feasi",
      "Locale: en",
      "Policy URL: https://groq.com/privacy-policy"
    ],
    "signalObserved": "partial_us_state_rights",
    "article13Signal": {
      "source": "normalized_concern",
      "status": "observed",
      "confidence": 0.86,
      "surfaceUrl": "https://groq.com/privacy-policy",
      "evidenceText": "Your Rights We provide you with the ability to exercise certain rights regarding our collection, use, and disclosure of your information. Your legal rights to exercise such controls and choices vary based on the laws of your jurisdiction. Depending on the laws in your jurisdiction (which includes the EU, UK, California, and the Kingdom of Saudi Arabia), you may have the ability to request: Access to, or a copy of, your information in a structured, commonly used, and machine-readable format Correction of your inaccurate information Deletion of your information Transfer of your information to a third party, where technologically feasi",
      "matchStrength": "equivalent",
      "matchedLocale": "en",
      "disclosureType": "data_subject_rights",
      "evidenceSource": "normalized_gdpr_transparency_article13_concern",
      "productionCredit": true,
      "classifierProvenance": "gdpr_transparency_topic_classifier.v1",
      "classifierReasonCodes": [
        "matched_data_subject_rights",
        "match_strength_equivalent",
        "variant_semantic_clause"
      ],
      "productionCreditProfile": "gdpr_transparency_multilingual_article13_v1",
      "selectedEvidenceStrength": "strong",
      "selectedPolicySectionUrl": "https://groq.com/privacy-policy",
      "selectedPolicySectionHeading": "Your Rights and Choices"
    },
    "priorPolicyStatus": "review_signal",
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "rightsJurisdictionScope": "us_state_only",
    "policyEvidenceAssessment": {
      "result": "not_located_automatically",
      "scoreEffect": "none",
      "topicRelevance": "unknown",
      "contractVersion": "certscore.policy-topic-evidence-assessment.v1"
    },
    "policyEvidenceProvenance": {
      "sourceUrl": "https://groq.com/privacy-policy",
      "policyTitle": "Privacy Policy | Groq is the premier neocloud for fast inference",
      "artifactRefs": [
        "policy_excerpt_69e31537_2a599f95",
        "policy_surface_text_69e31537_7739ff25"
      ],
      "bannerLanguage": "en",
      "sectionHeading": "Your Rights and Choices",
      "contractVersion": "certscore.policy-evidence-provenance.v1",
      "discoveryMethod": "guessed_common_path",
      "documentHeading": "Privacy Policy",
      "detectedLanguage": "en",
      "retrievalTimestamp": "2026-10-12T19:36:26.352Z",
      "targetRelationship": "target_controller",
      "translationApplied": false,
      "documentOwnerEntity": "Groq is the premier neocloud for fast inference",
      "ownershipConfidence": 0.98,
      "directlyLinkedFromScannedPage": false
    },
    "selectedEvidenceStrength": "missing",
    "canonicalUncertaintyState": "not_confirmed",
    "selectedEvidenceArtifactId": "coverage_policy",
    "gdprTransparencyArticle13Concern": {
      "state": "sufficient",
      "topic": "data_subject_rights",
      "originKey": "gdpr_transparency.article13.data_subject_rights",
      "canonicalConcernKey": "runtime_artifact:gdpr_transparency.article13.data_subject_rights",
      "regulatoryChecklistEligibility": "observed"
    },
    "gdprTransparencyReportStatusContract": "observed_not_confirmed_no_match_found.v1"
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

{
  "assessmentStatus": "checked",
  "checklistItemId": "international_transfers_disclosure",
  "coverageArea": "International transfer disclosure",
  "evidenceState": "observed",
  "explanation": "Whether retained privacy-policy evidence described international transfers or transfer-relevant endpoint/vendor context.",
  "note": "Whether retained privacy-policy evidence described international transfers or transfer-relevant endpoint/vendor context.",
  "status": "Observed",
  "tone": "warning",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.international_transfers_disclosure.observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.international_transfers_disclosure"
  },
  "statusBasis": "International transfer disclosure evidence was retained through adapter-approved multilingual GDPR Transparency Article 13 evidence.",
  "retainedEvidence": {
    "remediation": {
      "kind": "none",
      "steps": [],
      "message": "No remediation is established by this check alone. Retain its evidence and reassess after relevant changes."
    },
    "evidenceRefs": [
      "Evidence: International transfer disclosure",
      "Excerpt: Whenever we make restricted international transfers of personal information, we take steps to ensure that your personal information receives an adequate level of protection (such as by using approved contractual protections for the transfer of information or relying on third parties’ Data Privacy Framework certifications, where applicable). Where relevant, you may request access to the safeguards we use to transfer your personal information outside of the European Economic Area, United Kingdom, Switzerland, or the Kingdom of Saudi Arabia.",
      "Locale: en",
      "Policy URL: https://groq.com/privacy-policy"
    ],
    "signalObserved": true,
    "article13Signal": {
      "source": "normalized_concern",
      "status": "observed",
      "confidence": 0.86,
      "surfaceUrl": "https://groq.com/privacy-policy",
      "evidenceText": "Whenever we make restricted international transfers of personal information, we take steps to ensure that your personal information receives an adequate level of protection (such as by using approved contractual protections for the transfer of information or relying on third parties’ Data Privacy Framework certifications, where applicable). Where relevant, you may request access to the safeguards we use to transfer your personal information outside of the European Economic Area, United Kingdom, Switzerland, or the Kingdom of Saudi Arabia.",
      "matchStrength": "equivalent",
      "matchedLocale": "en",
      "disclosureType": "international_transfers",
      "evidenceSource": "normalized_gdpr_transparency_article13_concern",
      "productionCredit": true,
      "classifierProvenance": "gdpr_transparency_topic_classifier.v1",
      "classifierReasonCodes": [
        "matched_international_transfers",
        "match_strength_equivalent",
        "variant_semantic_clause"
      ],
      "productionCreditProfile": "gdpr_transparency_multilingual_article13_v1",
      "selectedEvidenceStrength": "strong",
      "selectedPolicySectionUrl": "https://groq.com/privacy-policy",
      "selectedPolicySectionHeading": "Additional Information for International Users"
    },
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "policyEvidenceAssessment": {
      "result": "disclosure_observed",
      "scoreEffect": "canonical_policy",
      "topicRelevance": "direct",
      "contractVersion": "certscore.policy-topic-evidence-assessment.v1"
    },
    "policyEvidenceProvenance": {
      "sourceUrl": "https://groq.com/privacy-policy",
      "policyTitle": "Privacy Policy | Groq is the premier neocloud for fast inference",
      "artifactRefs": [
        "policy_excerpt_69e31537_2a599f95",
        "policy_surface_text_69e31537_7739ff25"
      ],
      "bannerLanguage": "en",
      "sectionHeading": "Additional Information for International Users",
      "contractVersion": "certscore.policy-evidence-provenance.v1",
      "discoveryMethod": "guessed_common_path",
      "documentHeading": "Privacy Policy",
      "detectedLanguage": "en",
      "retrievalTimestamp": "2026-10-12T19:36:26.352Z",
      "targetRelationship": "target_controller",
      "translationApplied": false,
      "documentOwnerEntity": "Groq is the premier neocloud for fast inference",
      "ownershipConfidence": 0.98,
      "directlyLinkedFromScannedPage": false
    },
    "selectedEvidenceStrength": "moderate",
    "selectedEvidenceArtifactId": "coverage_policy",
    "legalFrameworkValidityMatches": [
      {
        "canonicalId": "eu_us_data_privacy_framework",
        "subjectArea": "international_data_transfers",
        "matchedAlias": "Data Privacy Framework",
        "statusAtScan": "current",
        "canonicalName": "EU-US Data Privacy Framework",
        "effectiveFrom": "2023-07-10",
        "canonicalStatus": "current"
      }
    ],
    "gdprTransparencyArticle13Concern": {
      "state": "sufficient",
      "topic": "international_transfers",
      "originKey": "gdpr_transparency.article13.international_transfers",
      "canonicalConcernKey": "runtime_artifact:gdpr_transparency.article13.international_transfers",
      "regulatoryChecklistEligibility": "observed"
    }
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

{
  "assessmentStatus": "coverage_limitation",
  "checklistItemId": "dpo_contact_point_disclosure",
  "coverageArea": "DPO contact point (where applicable)",
  "evidenceState": "not_testable",
  "explanation": "Whether retained privacy-policy evidence identified a designated data protection officer or equivalent statutory DPO contact. A generic privacy mailbox is credited under controller/contact disclosure and does not by itself establish a DPO designation.",
  "note": "Whether retained privacy-policy evidence identified a designated data protection officer or equivalent statutory DPO contact. A generic privacy mailbox is credited under controller/contact disclosure and does not by itself establish a DPO designation.",
  "status": "Not confirmed",
  "tone": "neutral",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.dpo_contact_point_disclosure.not_confirmed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.dpo_contact_point_disclosure"
  },
  "statusBasis": "No production-approved topic match was established. This neutral result does not establish that the disclosure is absent.",
  "retainedEvidence": {
    "remediation": {
      "kind": "steps",
      "steps": [
        "Review the governing policy section for an expressly designated Data Protection Officer and contact route, where applicable; retain the exact excerpt and source URL.",
        "Determine whether DPO designation is required separately. A generic privacy mailbox does not prove a designation.",
        "If relevant wording exists, record it for review and investigate extraction coverage. Unconfirmed evidence alone does not establish a missing disclosure.",
        "Retest the same policy version or record the revised version; verify that the extracted passage supports this specific topic, rather than nearby or unrelated wording."
      ]
    },
    "signalObserved": "not_confirmed_canonical_projection_unavailable",
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "canonicalProjectionState": "normalized_concern_unavailable",
    "policyEvidenceAssessment": {
      "result": "extraction_incomplete",
      "scoreEffect": "none",
      "topicRelevance": "unknown",
      "contractVersion": "certscore.policy-topic-evidence-assessment.v1"
    },
    "policyEvidenceProvenance": {
      "sourceUrl": "https://groq.com/privacy-policy",
      "policyTitle": "Privacy Policy | Groq is the premier neocloud for fast inference",
      "artifactRefs": [
        "policy_excerpt_69e31537_2a599f95",
        "policy_surface_text_69e31537_7739ff25"
      ],
      "bannerLanguage": "en",
      "contractVersion": "certscore.policy-evidence-provenance.v1",
      "discoveryMethod": "guessed_common_path",
      "documentHeading": "Privacy Policy",
      "detectedLanguage": "en",
      "retrievalTimestamp": "2026-10-12T19:36:26.352Z",
      "targetRelationship": "target_controller",
      "translationApplied": false,
      "documentOwnerEntity": "Groq is the premier neocloud for fast inference",
      "ownershipConfidence": 0.98,
      "directlyLinkedFromScannedPage": false
    },
    "selectedEvidenceStrength": "missing",
    "policyTextExtractionHealth": {
      "policyUrls": [
        "https://groq.com/privacy-policy"
      ],
      "nanoInvoked": false,
      "contractVersion": "certscore.policy-text-extraction-health.v2",
      "policyTextQuality": {
        "usable": true,
        "codeSignalCount": 0,
        "codeSymbolRatio": 0.0011762860727728983,
        "policyTermCount": 16,
        "alphabeticWordRatio": 0.7921747967479674,
        "accessChallengeSignalCount": 0,
        "naturalLanguageSentenceCount": 139
      },
      "policyUrlRetained": true,
      "extractedTextLength": 25504,
      "policySurfaceObserved": true,
      "detectedPolicyLanguage": "en",
      "minimumTextLengthRequired": 500,
      "policyTextExtractionStatus": "ok",
      "verifiedPolicyDocumentCount": 1,
      "detectedPolicyLanguageSource": "policy_surface",
      "supportedGdprTransparencyLocales": [
        "en",
        "de",
        "fr",
        "es",
        "it",
        "nl",
        "pl",
        "pt",
        "ru",
        "ja",
        "zh",
        "ar",
        "sv",
        "ro",
        "cs",
        "el",
        "hu",
        "da",
        "fi",
        "sk",
        "bg",
        "hr",
        "nb",
        "sl",
        "lt",
        "lv",
        "et",
        "uk",
        "tr",
        "fa",
        "vi",
        "id",
        "ko",
        "th",
        "he",
        "sr",
        "ca",
        "hi",
        "az",
        "gl"
      ],
      "gdprTransparencyLanguageSupported": true,
      "policyTextEvidenceProjectionStatus": "verified_complete",
      "policyTextEvidenceProjectionContractVersion": "certscore.policy-text-evidence-projection.v1"
    },
    "selectedEvidenceArtifactId": "coverage_policy",
    "article13CoverageAssessment": {
      "topic": "dpo_contact",
      "status": "insufficient_retained_evidence",
      "sourceUrls": [
        "https://groq.com/privacy-policy"
      ],
      "reasonCodes": [
        "policy_absence_coverage_preconditions_not_met",
        "typed_topic_coverage_diagnostic_missing_or_limited",
        "policy_document_content_coverage_incomplete"
      ],
      "coverageStatus": "insufficient",
      "policyDocumentIds": [
        "policy_surface_69e31537"
      ],
      "policyDocumentRoles": [
        "policy_document"
      ],
      "policyDocumentSha256": [
        "fb03edb9fd3038dd4fbf1b776cbc7d1e75083ad2ac87fd01c5bb0de4ca65170e"
      ],
      "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
      "unresolvedMaterialPolicyChildUrls": []
    },
    "gdprTransparencyReportStatusContract": "observed_not_confirmed_no_match_found.v1"
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

{
  "assessmentStatus": "checked",
  "checklistItemId": "supervisory_authority_complaint_disclosure",
  "coverageArea": "Supervisory authority complaint",
  "evidenceState": "observed",
  "explanation": "Whether retained privacy-policy evidence referenced a right to complain to a supervisory authority.",
  "note": "Whether retained privacy-policy evidence referenced a right to complain to a supervisory authority.",
  "status": "Observed",
  "tone": "warning",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.supervisory_authority_complaint_disclosure.observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.supervisory_authority_complaint_disclosure"
  },
  "statusBasis": "Supervisory authority complaint disclosure evidence was retained through adapter-approved multilingual GDPR Transparency Article 13 evidence.",
  "retainedEvidence": {
    "remediation": {
      "kind": "none",
      "steps": [],
      "message": "No remediation is established by this check alone. Retain its evidence and reassess after relevant changes."
    },
    "evidenceRefs": [
      "Evidence: Supervisory authority complaint disclosure",
      "Excerpt: You also have the right to lodge a complaint with the supervisory authority or regulator in your jurisdiction of residence.",
      "Locale: en",
      "Policy URL: https://groq.com/privacy-policy"
    ],
    "signalObserved": true,
    "article13Signal": {
      "source": "normalized_concern",
      "status": "observed",
      "confidence": 0.86,
      "surfaceUrl": "https://groq.com/privacy-policy",
      "evidenceText": "You also have the right to lodge a complaint with the supervisory authority or regulator in your jurisdiction of residence.",
      "matchStrength": "equivalent",
      "matchedLocale": "en",
      "disclosureType": "supervisory_authority",
      "evidenceSource": "normalized_gdpr_transparency_article13_concern",
      "productionCredit": true,
      "classifierProvenance": "gdpr_transparency_topic_classifier.v1",
      "classifierReasonCodes": [
        "matched_supervisory_authority",
        "match_strength_equivalent",
        "variant_semantic_clause"
      ],
      "productionCreditProfile": "gdpr_transparency_multilingual_article13_v1",
      "selectedEvidenceStrength": "strong",
      "selectedPolicySectionUrl": "https://groq.com/privacy-policy",
      "selectedPolicySectionHeading": null
    },
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "policyEvidenceAssessment": {
      "result": "disclosure_observed",
      "scoreEffect": "canonical_policy",
      "topicRelevance": "direct",
      "contractVersion": "certscore.policy-topic-evidence-assessment.v1"
    },
    "policyEvidenceProvenance": {
      "sourceUrl": "https://groq.com/privacy-policy",
      "policyTitle": "Privacy Policy | Groq is the premier neocloud for fast inference",
      "artifactRefs": [
        "policy_excerpt_69e31537_2a599f95",
        "policy_surface_text_69e31537_7739ff25"
      ],
      "bannerLanguage": "en",
      "contractVersion": "certscore.policy-evidence-provenance.v1",
      "discoveryMethod": "guessed_common_path",
      "documentHeading": "Privacy Policy",
      "detectedLanguage": "en",
      "retrievalTimestamp": "2026-10-12T19:36:26.352Z",
      "targetRelationship": "target_controller",
      "translationApplied": false,
      "documentOwnerEntity": "Groq is the premier neocloud for fast inference",
      "ownershipConfidence": 0.98,
      "directlyLinkedFromScannedPage": false
    },
    "selectedEvidenceStrength": "moderate",
    "selectedEvidenceArtifactId": "coverage_policy",
    "gdprTransparencyArticle13Concern": {
      "state": "sufficient",
      "topic": "supervisory_authority",
      "originKey": "gdpr_transparency.article13.supervisory_authority",
      "canonicalConcernKey": "runtime_artifact:gdpr_transparency.article13.supervisory_authority",
      "regulatoryChecklistEligibility": "observed"
    }
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

{
  "assessmentStatus": "coverage_limitation",
  "checklistItemId": "automated_decision_making_profiling_disclosure",
  "coverageArea": "Profiling / automated decisions disclosure",
  "evidenceState": "not_testable",
  "explanation": "Whether adapter-approved Article 13 evidence retained automated decision-making or profiling disclosure context for review.",
  "note": "Whether adapter-approved Article 13 evidence retained automated decision-making or profiling disclosure context for review.",
  "status": "Not confirmed",
  "tone": "neutral",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.automated_decision_making_profiling_disclosure.not_confirmed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.automated_decision_making_profiling_disclosure"
  },
  "statusBasis": "No production-approved topic match was established. This neutral result does not establish that the disclosure is absent.",
  "retainedEvidence": {
    "remediation": {
      "kind": "steps",
      "steps": [
        "Review the governing policy section for the applicable automated decision-making or profiling disclosures; retain the exact excerpt and source URL.",
        "If relevant wording exists, record it for review and investigate extraction coverage. Unconfirmed evidence alone does not establish a missing disclosure.",
        "Retest the same policy version or record the revised version; verify that the extracted passage supports this specific topic, rather than nearby or unrelated wording."
      ]
    },
    "signalObserved": "not_confirmed_canonical_projection_unavailable",
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "canonicalProjectionState": "normalized_concern_unavailable",
    "policyEvidenceAssessment": {
      "result": "extraction_incomplete",
      "scoreEffect": "none",
      "topicRelevance": "unknown",
      "contractVersion": "certscore.policy-topic-evidence-assessment.v1"
    },
    "policyEvidenceProvenance": {
      "sourceUrl": "https://groq.com/privacy-policy",
      "policyTitle": "Privacy Policy | Groq is the premier neocloud for fast inference",
      "artifactRefs": [
        "policy_excerpt_69e31537_2a599f95",
        "policy_surface_text_69e31537_7739ff25"
      ],
      "bannerLanguage": "en",
      "contractVersion": "certscore.policy-evidence-provenance.v1",
      "discoveryMethod": "guessed_common_path",
      "documentHeading": "Privacy Policy",
      "detectedLanguage": "en",
      "retrievalTimestamp": "2026-10-12T19:36:26.352Z",
      "targetRelationship": "target_controller",
      "translationApplied": false,
      "documentOwnerEntity": "Groq is the premier neocloud for fast inference",
      "ownershipConfidence": 0.98,
      "directlyLinkedFromScannedPage": false
    },
    "selectedEvidenceStrength": "missing",
    "policyTextExtractionHealth": {
      "policyUrls": [
        "https://groq.com/privacy-policy"
      ],
      "nanoInvoked": false,
      "contractVersion": "certscore.policy-text-extraction-health.v2",
      "policyTextQuality": {
        "usable": true,
        "codeSignalCount": 0,
        "codeSymbolRatio": 0.0011762860727728983,
        "policyTermCount": 16,
        "alphabeticWordRatio": 0.7921747967479674,
        "accessChallengeSignalCount": 0,
        "naturalLanguageSentenceCount": 139
      },
      "policyUrlRetained": true,
      "extractedTextLength": 25504,
      "policySurfaceObserved": true,
      "detectedPolicyLanguage": "en",
      "minimumTextLengthRequired": 500,
      "policyTextExtractionStatus": "ok",
      "verifiedPolicyDocumentCount": 1,
      "detectedPolicyLanguageSource": "policy_surface",
      "supportedGdprTransparencyLocales": [
        "en",
        "de",
        "fr",
        "es",
        "it",
        "nl",
        "pl",
        "pt",
        "ru",
        "ja",
        "zh",
        "ar",
        "sv",
        "ro",
        "cs",
        "el",
        "hu",
        "da",
        "fi",
        "sk",
        "bg",
        "hr",
        "nb",
        "sl",
        "lt",
        "lv",
        "et",
        "uk",
        "tr",
        "fa",
        "vi",
        "id",
        "ko",
        "th",
        "he",
        "sr",
        "ca",
        "hi",
        "az",
        "gl"
      ],
      "gdprTransparencyLanguageSupported": true,
      "policyTextEvidenceProjectionStatus": "verified_complete",
      "policyTextEvidenceProjectionContractVersion": "certscore.policy-text-evidence-projection.v1"
    },
    "selectedEvidenceArtifactId": "coverage_policy",
    "article13CoverageAssessment": {
      "topic": "automated_decision_making_or_profiling",
      "status": "insufficient_retained_evidence",
      "sourceUrls": [
        "https://groq.com/privacy-policy"
      ],
      "reasonCodes": [
        "policy_absence_coverage_preconditions_not_met",
        "typed_topic_coverage_diagnostic_missing_or_limited",
        "policy_document_content_coverage_incomplete"
      ],
      "coverageStatus": "insufficient",
      "policyDocumentIds": [
        "policy_surface_69e31537"
      ],
      "policyDocumentRoles": [
        "policy_document"
      ],
      "policyDocumentSha256": [
        "fb03edb9fd3038dd4fbf1b776cbc7d1e75083ad2ac87fd01c5bb0de4ca65170e"
      ],
      "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
      "unresolvedMaterialPolicyChildUrls": []
    },
    "gdprTransparencyReportStatusContract": "observed_not_confirmed_no_match_found.v1"
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

{
  "assessmentStatus": "checked",
  "checklistItemId": "cookie_notice_policy_availability",
  "coverageArea": "Cookie notice / cookie policy availability",
  "evidenceState": "observed",
  "explanation": "Whether a cookie notice, cookie policy, cookie settings surface, or equivalent cookie disclosure surface was retained.",
  "note": "Whether a cookie notice, cookie policy, cookie settings surface, or equivalent cookie disclosure surface was retained.",
  "status": "Observed",
  "tone": "warning",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.cookie_notice_policy_availability.observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.cookie_notice_policy_availability"
  },
  "statusBasis": "A durable cookie disclosure surface was retained in the tested context; a granular named-cookie inventory or preference interface was not confirmed.",
  "retainedEvidence": {
    "evidenceRefs": [
      "Evidence: cookie policy or cookie disclosure surface retained",
      "Not confirmed: granular named-cookie inventory",
      "Not confirmed: cookie preference interface",
      "Policy URL: https://groq.com/privacy-policy"
    ],
    "cookiePolicyUrls": [
      "https://groq.com/privacy-policy"
    ],
    "cookiePolicyPresent": true,
    "cookieNoticeObserved": true,
    "observedPolicyTopics": [
      "cookies",
      "analytics",
      "advertising",
      "targeted_advertising",
      "sale_or_share",
      "do_not_sell_or_share"
    ],
    "missingEvidenceNeeded": [],
    "observedPolicyControls": [
      "global_privacy_control",
      "consent_withdrawal"
    ],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "selectedEvidenceStrength": "moderate",
    "selectedEvidenceArtifactId": "coverage_policy",
    "preferenceInterfaceConfirmed": false,
    "granularCookieInventoryConfirmed": false
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}