Loading report

CertScore.ai report

Loading report

The report is ready; we’re loading its retained findings and evidence.

ergoveritas.com tracking, cookie, consent, and accessibility scan | CertScore.ai

🇩🇪Scanned from EU-DE13 sec

Sep 8, 2026, 4:28:43 AM UTC

ergoveritas.com

https://ergoveritas.com/

58/100

Overall score

Targeted review

4 priority items across tracking & external services and consent surface.

Signal snapshot

Consent platformNot determined

Not determined

Consent inspection was incomplete or not representative, so platform identity was not determined.

Consent controls2 not observed · 1 unknown

Priority review

Top issues needing attention

4 issues

Open for evidence, JSON, and correction steps.

01Pre-consent non-essential trackingPre-consent non-essential tracking evidence was retained before consent: Google Analytics (Analytics); first seen 1.99s after scan start; no consent action was recorded first.Tracking & external servicesPotential gap

GDPR / ePrivacy: Pre-consent non-essential tracking
Pre-consent non-essential tracking evidence was retained before consent: Google Analytics (Analytics); first seen 1.99s after scan start; no consent action was recorded first.

JSON evidence

{
  "assessmentStatus": "review_signal",
  "checklistItemId": "pre_consent_third_party_tracking",
  "coverageArea": "Pre-consent non-essential tracking",
  "evidenceState": "not_observed",
  "explanation": "High priority pre-consent tracker inventory was retained without a promotion-eligible normalized concern or unified finding: Microsoft Clarity - Session replay (2.18s). Tracking is not confirmed from grouped inventory alone. This row is limited to concrete 3rd party tracker/request evidence retained before a recorded consent choice.",
  "note": "High priority pre-consent tracker inventory was retained without a promotion-eligible normalized concern or unified finding: Microsoft Clarity - Session replay (2.18s). Tracking is not confirmed from grouped inventory alone. This row is limited to concrete 3rd party tracker/request evidence retained before a recorded consent choice.",
  "status": "Not confirmed",
  "tone": "warning",
  "pipeline": {
    "projectionStage": "coverage_fallback",
    "concernPolicyKey": "gdpr_eprivacy.pre_consent_third_party_tracking.tracker_inventory.high",
    "ws01EvidenceRole": "retained_pre_consent_tracker_inventory",
    "wc01NormalizedConcernKey": "pre_consent_third_party_tracking"
  },
  "statusBasis": "High priority pre-consent tracker inventory was retained without a promotion-eligible normalized concern or unified finding: Microsoft Clarity - Session replay (2.18s). Tracking is not confirmed from grouped inventory alone.",
  "retainedEvidence": {
    "tagManagerOnly": false,
    "trackerPriority": "high",
    "trackerPriorityLabel": "High",
    "missingEvidenceNeeded": [
      "CertScore.unifiedFinding.preconsent_tracking: Grouped tracker inventory remains review evidence unless the canonical promotion-grade sequence contract passes."
    ],
    "serviceConnectionOnly": false,
    "selectedEvidenceReason": "Selected retained pre-consent request/vendor timing evidence; storage evidence is evaluated separately.",
    "weakerArtifactsIgnored": [],
    "selectedEvidenceStrength": "limited",
    "selectedEvidenceArtifactId": "preConsentTrackingRequestEvidence.missing",
    "trackingEvidenceAssessment": {
      "result": "not_confirmed_from_grouped_inventory",
      "scoreEffect": "review"
    },
    "contextualInfrastructureOnly": false,
    "preconsentThirdPartyTrackerGroups": [
      {
        "party": "third_party",
        "vendor": "Microsoft Clarity",
        "purpose": "Session replay",
        "priority": "high",
        "firstSeenMs": 2180
      },
      {
        "party": "third_party",
        "vendor": "Google Analytics",
        "purpose": "Analytics",
        "priority": "medium",
        "firstSeenMs": 1988
      }
    ],
    "preconsentThirdPartyTrackingVendors": [
      "Microsoft Clarity"
    ],
    "preconsentThirdPartyTrackerGroupCount": 2,
    "firstPreconsentThirdPartyTrackingObservedMs": 2180,
    "selectedPreconsentThirdPartyTrackingVendors": [
      "Microsoft Clarity"
    ]
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": [
    {
      "field": "CertScore.unifiedFinding.preconsent_tracking",
      "actual": "tracker inventory only",
      "source": "CertScore.ai",
      "expected": "promotion-eligible normalized concern and unified finding",
      "whyNeeded": "Grouped tracker inventory remains review evidence unless the canonical promotion-grade sequence contract passes."
    }
  ]
}

Correction steps

01Review the retained vendor and request timing evidence, confirm purpose and necessity, and gate confirmed non-essential requests until the relevant consent state is available.

Cookies and trackers timeline

Scan start

Public page observation began

1.99s

3P request

3P request first observed

2.18s

Session replay

Session replay first observed

2.46s

Analytics

Analytics first observed

2.98s

Cookie/storage

Cookie/storage first observed

12.65s

Observation end

Retained scan window closed

Resource inventory

Cookies, storage, requests, and embeds

Evidence mix

Non-essential5

Review0

Essential0

Contextual1

Purpose mix

Analytics3

Embedded content1

Session replay1

Tag management1

Site relationship

Same-site3

Cross-site3

Mixed0

Unknown0

Resource details

Non-essentialEssentialReview

Evidence index

Consent, tracking & external services, pre-consent runtime, GPC comparison, GDPR Transparency, transport security and collection details.

Rating mix

30 rows

4review9positive16contextual1limited

02Decline consent controlPartial support from scan evidence; No observable refusal path was retained before non-essential activity.Consent surfacePartial concern

GDPR / ePrivacy: Decline consent control
Partial support from scan evidence; No observable refusal path was retained before non-essential activity.

JSON evidence

{
  "assessmentStatus": "review_signal",
  "checklistItemId": "reject_all_path_availability",
  "coverageArea": "Decline consent control",
  "evidenceState": "observed",
  "explanation": "Whether a first-layer reject, necessary-only, decline, refuse, or equivalent refusal option was observed on a sufficiently retained consent surface.",
  "note": "Whether a first-layer reject, necessary-only, decline, refuse, or equivalent refusal option was observed on a sufficiently retained consent surface.",
  "status": "Review signal",
  "tone": "warning",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.reject_all_path_availability.review_signal",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.reject_all_path_availability"
  },
  "statusBasis": "No observable refusal path was retained before non-essential activity.",
  "retainedEvidence": {
    "evidenceRefs": [
      "scan_runtime_artifacts.consent_control_assessment",
      "Consent governance disclosure note: retained public materials did not clearly explain how users can revisit, change, withdraw, retain, renew, expire, or understand consent choices.",
      "Evidence: complete pre-interaction consent-surface inspection",
      "Evidence: classified non-essential pre-consent activity"
    ],
    "scoreAttribution": "reject_all_path_availability",
    "missingEvidenceNeeded": [
      "Confirmed first-layer GDPR/ePrivacy cookie banner and same-surface accept/reject control inventory."
    ],
    "rejectControlObserved": false,
    "consentSurfaceObserved": false,
    "selectedEvidenceReason": "Selected retained same-surface reject-path or post-reject comparison evidence.",
    "weakerArtifactsIgnored": [],
    "selectedEvidenceStrength": "limited",
    "consentRefusalPathConcern": {
      "originKey": "consent.refusal_path.unavailable_before_nonessential_activity",
      "canonicalConcernKey": "runtime_artifact:consent.refusal_path.unavailable_before_nonessential_activity",
      "regulatoryChecklistEligibility": "review_signal"
    },
    "selectedEvidenceArtifactId": "rejectPathDepthAndAvailability",
    "consentOperationalSurfaceConcern": {
      "originKey": "consent.operational_surface.not_observed",
      "canonicalConcernKey": "runtime_artifact:consent.operational_surface.not_observed"
    },
    "firstLayerCookieConsentBannerObserved": false,
    "preconsentCookieOrTrackingActivityObserved": true
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

01Review the retained first-layer consent-control inventory. If it confirms no reject or necessary-only control, add a visible refusal action and retest regional and device variants.

03Non-essential storage timing reviewCookies or browser storage were retained before consent. First retained item: _ga (ergoveritas.com): non_essential, present in periodic pre-consent snapshot. Essentiality was not confirmed for every item.Pre-consent runtimePartial concern

GDPR / ePrivacy: Non-essential storage timing review
Non-essential cookies or browser storage appeared before consent, but the scan could not confirm exactly when each item was set.

JSON evidence

{
  "assessmentStatus": "review_signal",
  "checklistItemId": "pre_consent_cookies_storage",
  "coverageArea": "Non-essential storage timing review",
  "evidenceState": "observed",
  "explanation": "Classified non-essential storage identities were present in a pre-consent snapshot, but retained evidence did not confirm that they were written during the scan.",
  "note": "Classified non-essential storage identities were present in a pre-consent snapshot, but retained evidence did not confirm that they were written during the scan.",
  "status": "Review signal",
  "tone": "warning",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.pre_consent_cookies_storage.review_signal",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.pre_consent_cookies_storage"
  },
  "statusBasis": "Classified non-essential storage identities were present in a pre-consent snapshot, but retained evidence did not confirm that they were written during the scan.",
  "retainedEvidence": {
    "evidenceRefs": [
      "_ga (ergoveritas.com): non_essential, present in periodic pre-consent snapshot",
      "_ga_X5ZM7BWET3 (ergoveritas.com): non_essential, present in periodic pre-consent snapshot",
      "Aggregate pre-consent storage count: 2",
      "Assessment reconciliation: reconciled"
    ],
    "cookiesSeenCount": 2,
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected retained concrete cookie/storage evidence for storage timing; request-only tracking evidence is not used as storage proof.",
    "weakerArtifactsIgnored": [],
    "selectedEvidenceStrength": "limited",
    "cookiesBeforeConsentCount": 2,
    "selectedEvidenceArtifactId": "preConsentCookieOrStorageEvidence.missing",
    "preConsentStorageAssessment": {
      "status": "snapshot_presence_only",
      "evidenceRows": [
        {
          "name": "_ga_X5ZM7BWET3",
          "party": "first_party",
          "domain": "ergoveritas.com",
          "category": "analytics",
          "storageType": "cookie",
          "essentiality": "non_essential",
          "timingEvidence": "periodic_preconsent_snapshot",
          "exclusionReason": null,
          "firstObservedMs": 2979,
          "initiatorDomain": null,
          "initiatorVendor": null,
          "essentialitySource": "canonical_registry"
        },
        {
          "name": "_ga",
          "party": "first_party",
          "domain": "ergoveritas.com",
          "category": "analytics",
          "storageType": "cookie",
          "essentiality": "non_essential",
          "timingEvidence": "periodic_preconsent_snapshot",
          "exclusionReason": null,
          "firstObservedMs": 2979,
          "initiatorDomain": null,
          "initiatorVendor": null,
          "essentialitySource": "canonical_registry"
        }
      ],
      "provenWriteCount": 0,
      "assessmentVersion": "pre-consent-storage-assessment-v1",
      "unclassifiedCount": 0,
      "reconciliationStatus": "reconciled",
      "snapshotPresenceCount": 2,
      "aggregateObservedCount": 2,
      "classifiedEssentialCount": 0,
      "classifiedNonEssentialCount": 2,
      "attributedPreConsentRecordCount": 2,
      "excludedFunctionalOrConsentCount": 0
    },
    "preConsentStorageAssessmentStatus": "snapshot_presence_only",
    "eligiblePreconsentCookieStorageRows": [
      {
        "name": "_ga_X5ZM7BWET3",
        "party": "first_party",
        "domain": "ergoveritas.com",
        "category": "analytics",
        "storageType": "cookie",
        "essentiality": "non_essential",
        "timingEvidence": "periodic_preconsent_snapshot",
        "exclusionReason": null,
        "firstObservedMs": 2979,
        "initiatorDomain": null,
        "initiatorVendor": null,
        "essentialitySource": "canonical_registry"
      },
      {
        "name": "_ga",
        "party": "first_party",
        "domain": "ergoveritas.com",
        "category": "analytics",
        "storageType": "cookie",
        "essentiality": "non_essential",
        "timingEvidence": "periodic_preconsent_snapshot",
        "exclusionReason": null,
        "firstObservedMs": 2979,
        "initiatorDomain": null,
        "initiatorVendor": null,
        "essentialitySource": "canonical_registry"
      }
    ],
    "snapshotOnlyNonEssentialCookieNames": [
      "_ga_X5ZM7BWET3",
      "_ga"
    ],
    "rowLevelEssentialityEvidenceRetained": true,
    "firstPreconsentCookieOrStorageObservedMs": 2979,
    "preConsentStorageClassificationLimitation": true,
    "preconsentCookieOrStorageExactTimingRetained": false,
    "eligibleNonEssentialCookieStorageFindingProjected": false
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

01Review the retained cookie and storage rows, confirm purpose and necessity, and gate confirmed non-essential writes until the relevant consent state is available.

04Session replay signalSession replay or behavioral analytics signals were observed: Microsoft Clarity; first seen 2.18s after scan start; before any recorded consent action.Pre-consent runtimePartial concern

GDPR / ePrivacy: Session replay signal
Session replay or behavioral analytics signals were observed: Microsoft Clarity; first seen 2.18s after scan start; before any recorded consent action.

JSON evidence

{
  "assessmentStatus": "review_signal",
  "checklistItemId": "session_replay_fingerprinting_review",
  "coverageArea": "Session replay signal",
  "evidenceState": "observed",
  "explanation": "CertScore.ai observed session replay or behavioral analytics vendors not observed pre-consent in retained evidence, including Microsoft Clarity. Because these tools can capture user interaction behavior, review consent timing, disclosure, masking/exclusion settings, sensitive-page coverage, and withdrawal controls.",
  "note": "CertScore.ai observed session replay or behavioral analytics vendors not observed pre-consent in retained evidence, including Microsoft Clarity. Because these tools can capture user interaction behavior, review consent timing, disclosure, masking/exclusion settings, sensitive-page coverage, and withdrawal controls.",
  "status": "Review signal",
  "tone": "warning",
  "pipeline": {
    "projectionStage": "unified_finding",
    "concernPolicyKey": "gdpr_eprivacy_coverage.session_replay_fingerprinting_review.review_signal",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.session_replay_fingerprinting_review"
  },
  "statusBasis": "Selected the strongest retained canonical coverage evidence available for this row.",
  "retainedEvidence": {
    "status": "Review signal",
    "evidenceRefs": [
      "Session replay observed",
      "Signal: Session replay runtime detected",
      "Signal: Session replay runtime vendors",
      "Signal: Session replay tool detected",
      "Evidence flag: contradiction_runtime_artifact_retained",
      "Evidence flag: privacy.session_replay_runtime_detected"
    ],
    "findingEntities": [
      {
        "id": "session_replay_observed",
        "entities": {
          "runtimeVendors": [
            "Microsoft Clarity"
          ],
          "runtimeRequestUrls": [
            "https://www.clarity.ms",
            "https://www.clarity.ms/tag/xycqqptk8i",
            "https://scripts.clarity.ms/0.8.69/clarity.js",
            "https://o.clarity.ms/collect"
          ],
          "observedTrackingVendors": [
            "Microsoft Clarity"
          ],
          "sessionReplayEvidenceSummary": [
            "{\"artifactCount\":3,\"collectionEndpointObserved\":true,\"consentStates\":[\"pre_consent\"],\"coverageRetained\":true,\"firstSeenMs\":2180,\"libraryOnly\":false,\"preConsentObserved\":true,\"requestUrls\":[\"https://www.clarity.ms/tag/xycqqptk8i\",\"https://scripts.clarity.ms/0.8.69/clarity.js\",\"https://o.clarity.ms/collect\"],\"vendors\":[\"Microsoft Clarity\"]}"
          ],
          "session_replay_runtime_vendors": [
            "Microsoft Clarity"
          ]
        },
        "sourceRefs": [
          "Signal: Session replay runtime detected",
          "Signal: Session replay runtime vendors",
          "Signal: Session replay tool detected"
        ],
        "evidenceFlags": [
          "privacy.session_replay_runtime_detected",
          "privacy.session_replay_runtime_vendors",
          "commerce.session_replay_tool_detected"
        ]
      }
    ],
    "evidenceHighlights": [
      "\"Microsoft Clarity\", \"category\": \"session_replay\", \"preConsent\": false"
    ],
    "missingEvidenceNeeded": [],
    "sessionReplayEvidence": {
      "vendors": [
        "Microsoft Clarity"
      ],
      "firstSeenMs": 2180,
      "requestUrls": [
        "https://www.clarity.ms/tag/xycqqptk8i",
        "https://scripts.clarity.ms/0.8.69/clarity.js",
        "https://o.clarity.ms/collect"
      ],
      "consentStates": [
        "pre_consent"
      ],
      "vendorDisclosed": false,
      "postAcceptObserved": false,
      "preConsentObserved": true,
      "libraryLoadObserved": true,
      "vendorDisclosureGap": false,
      "collectionEndpointObserved": true,
      "vendorDisclosureMatchedCount": 0,
      "vendorDisclosureUnmatchedCount": 0,
      "postChoiceConsentControlsObserved": false,
      "vendorDisclosureComparisonObserved": false
    },
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "selectedEvidenceStrength": "missing",
    "selectedEvidenceArtifactId": "unified_finding"
  },
  "projectedFindings": [
    {
      "id": "session_replay_observed",
      "label": "Session replay observed",
      "severity": "high"
    }
  ],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

01Review consent timing, masking, exclusions, sensitive-page coverage, and disclosure for the retained replay/behavioral-analytics signal; correct confirmed gaps and retest.

Consent mechanismNot observed in scan evidence; No operational consent surface was retained in the tested context.Not observed

JSON evidence

complete ConsentControlAssessment v2

Full evidence JSON

{
  "assessmentStatus": "checked",
  "checklistItemId": "consent_surface_observed",
  "coverageArea": "Consent mechanism",
  "evidenceState": "not_observed",
  "explanation": "Whether an actionable cookie/consent banner or CMP preference surface was observed in the tested context.",
  "note": "Whether an actionable cookie/consent banner or CMP preference surface was observed in the tested context.",
  "status": "Not observed",
  "tone": "neutral",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.consent_surface_observed.not_observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.consent_surface_observed"
  },
  "statusBasis": "No operational consent surface was retained in the tested context.",
  "retainedEvidence": {
    "evidenceRefs": [
      "Evidence: complete ConsentControlAssessment v2"
    ],
    "consentSurfaceState": "not_observed",
    "missingEvidenceNeeded": [],
    "consentSurfaceObserved": false,
    "selectedEvidenceReason": "Retained evidence did not confirm an uncontaminated first-layer GDPR/ePrivacy cookie/CMP consent surface.",
    "weakerArtifactsIgnored": [],
    "selectedEvidenceStrength": "missing",
    "selectedEvidenceArtifactId": "consentControlLifecycleEvidence.surfaceClassification"
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

Consent mechanism is currently rated Not observed. No site remediation is indicated from this row alone; rerun after material site, policy, or tag changes.

CMP frameworkNot observed in scan evidence; Runtime consent/CMP checks completed for the tested context and did not retain a CMP framework signal.Not observed

JSON evidence

runtime capture completed

Full evidence JSON

{
  "assessmentStatus": "checked",
  "checklistItemId": "cmp_framework_signal_observed",
  "coverageArea": "CMP framework",
  "evidenceState": "not_observed",
  "explanation": "Whether a consent-management framework, CMP vendor, or CMP runtime signal was observed in the pre-consent/public-web context.",
  "note": "Whether a consent-management framework, CMP vendor, or CMP runtime signal was observed in the pre-consent/public-web context.",
  "status": "Not observed",
  "tone": "neutral",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.cmp_framework_signal_observed.not_observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.cmp_framework_signal_observed"
  },
  "statusBasis": "Runtime consent/CMP checks completed for the tested context and did not retain a CMP framework signal.",
  "retainedEvidence": {
    "evidenceRefs": [
      "Evidence: runtime capture completed"
    ],
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "runtimeCaptureCompleted": true,
    "selectedEvidenceStrength": "missing",
    "cmpFrameworkSignalObserved": false,
    "selectedEvidenceArtifactId": "coverage_policy"
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

CMP framework is currently rated Not observed. No site remediation is indicated from this row alone; rerun after material site, policy, or tag changes.

Decline consent controlPartial support from scan evidence; No observable refusal path was retained before non-essential activity.Partial concern

JSON evidence

scan_runtime_artifacts.consent_control_assessment

Consent governance disclosure note: retained public materials did not clearly explain how users can revisit, change, withdraw, retain, renew, expire, or understand consent choices.

complete pre-interaction consent-surface inspection

Full evidence JSON

{
  "assessmentStatus": "review_signal",
  "checklistItemId": "reject_all_path_availability",
  "coverageArea": "Decline consent control",
  "evidenceState": "observed",
  "explanation": "Whether a first-layer reject, necessary-only, decline, refuse, or equivalent refusal option was observed on a sufficiently retained consent surface.",
  "note": "Whether a first-layer reject, necessary-only, decline, refuse, or equivalent refusal option was observed on a sufficiently retained consent surface.",
  "status": "Review signal",
  "tone": "warning",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.reject_all_path_availability.review_signal",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.reject_all_path_availability"
  },
  "statusBasis": "No observable refusal path was retained before non-essential activity.",
  "retainedEvidence": {
    "evidenceRefs": [
      "scan_runtime_artifacts.consent_control_assessment",
      "Consent governance disclosure note: retained public materials did not clearly explain how users can revisit, change, withdraw, retain, renew, expire, or understand consent choices.",
      "Evidence: complete pre-interaction consent-surface inspection",
      "Evidence: classified non-essential pre-consent activity"
    ],
    "scoreAttribution": "reject_all_path_availability",
    "missingEvidenceNeeded": [
      "Confirmed first-layer GDPR/ePrivacy cookie banner and same-surface accept/reject control inventory."
    ],
    "rejectControlObserved": false,
    "consentSurfaceObserved": false,
    "selectedEvidenceReason": "Selected retained same-surface reject-path or post-reject comparison evidence.",
    "weakerArtifactsIgnored": [],
    "selectedEvidenceStrength": "limited",
    "consentRefusalPathConcern": {
      "originKey": "consent.refusal_path.unavailable_before_nonessential_activity",
      "canonicalConcernKey": "runtime_artifact:consent.refusal_path.unavailable_before_nonessential_activity",
      "regulatoryChecklistEligibility": "review_signal"
    },
    "selectedEvidenceArtifactId": "rejectPathDepthAndAvailability",
    "consentOperationalSurfaceConcern": {
      "originKey": "consent.operational_surface.not_observed",
      "canonicalConcernKey": "runtime_artifact:consent.operational_surface.not_observed"
    },
    "firstLayerCookieConsentBannerObserved": false,
    "preconsentCookieOrTrackingActivityObserved": true
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

1Add or expose a clear reject-all or equivalent refusal control wherever the consent surface offers accept-all.
2Keep the reject path reachable without requiring unnecessary extra steps compared with accepting.
3Confirm the reject action stores a durable refusal state and closes or updates the consent surface.
4Rerun the scan and confirm the reject action is available and works in a fresh visit.
5Rerun the scan and confirm the result reflects the change or clearly explains why the page could not be fully evaluated.

Accept consent controlNot observed in scan evidence; No accept control was retained because no operational consent surface was retained.Not observed

JSON evidence

complete pre-interaction consent-surface inspection

Full evidence JSON

{
  "assessmentStatus": "checked",
  "checklistItemId": "accept_consent_control",
  "coverageArea": "Accept consent control",
  "evidenceState": "not_observed",
  "explanation": "Whether a first-layer accept, accept-all, allow-all, or agree control was observed on the retained consent surface.",
  "note": "Whether a first-layer accept, accept-all, allow-all, or agree control was observed on the retained consent surface.",
  "status": "Not observed",
  "tone": "neutral",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.accept_consent_control.not_observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.accept_consent_control"
  },
  "statusBasis": "No accept control was retained because no operational consent surface was retained.",
  "retainedEvidence": {
    "scoreEffect": "none",
    "evidenceRefs": [
      "Evidence: complete pre-interaction consent-surface inspection"
    ],
    "acceptControlObserved": false,
    "missingEvidenceNeeded": [],
    "consentSurfaceObserved": false,
    "selectedEvidenceReason": "Selected retained same-surface accept consent control evidence.",
    "weakerArtifactsIgnored": [],
    "selectedEvidenceStrength": "limited",
    "selectedEvidenceArtifactId": "firstLayerConsentChoices.acceptControl",
    "consentOperationalSurfaceConcern": {
      "originKey": "consent.operational_surface.not_observed",
      "canonicalConcernKey": "runtime_artifact:consent.operational_surface.not_observed"
    },
    "firstLayerCookieConsentBannerObserved": false
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

Accept consent control is currently rated Not observed. No site remediation is indicated from this row alone; rerun after material site, policy, or tag changes.

Options / settings / preferences controlNot observed in scan evidence; No options control was retained because no operational consent surface was retained.Not observed

JSON evidence

complete pre-interaction consent-surface inspection

Full evidence JSON

{
  "assessmentStatus": "checked",
  "checklistItemId": "options_settings_preferences_control",
  "coverageArea": "Options / settings / preferences control",
  "evidenceState": "not_observed",
  "explanation": "Whether a first-layer options, settings, preferences, or manage-preferences control was observed on the retained consent surface.",
  "note": "Whether a first-layer options, settings, preferences, or manage-preferences control was observed on the retained consent surface.",
  "status": "Not observed",
  "tone": "neutral",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.options_settings_preferences_control.not_observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.options_settings_preferences_control"
  },
  "statusBasis": "No options control was retained because no operational consent surface was retained.",
  "retainedEvidence": {
    "scoreEffect": "none",
    "evidenceRefs": [
      "Evidence: complete pre-interaction consent-surface inspection"
    ],
    "missingEvidenceNeeded": [],
    "consentSurfaceObserved": false,
    "optionsControlObserved": false,
    "selectedEvidenceReason": "Selected retained same-surface options/settings/preferences control evidence.",
    "weakerArtifactsIgnored": [],
    "selectedEvidenceStrength": "limited",
    "selectedEvidenceArtifactId": "firstLayerConsentChoices.optionsControl",
    "consentOperationalSurfaceConcern": {
      "originKey": "consent.operational_surface.not_observed",
      "canonicalConcernKey": "runtime_artifact:consent.operational_surface.not_observed"
    },
    "firstLayerCookieConsentBannerObserved": false
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

Options / settings / preferences control is currently rated Not observed. No site remediation is indicated from this row alone; rerun after material site, policy, or tag changes.

Cookie notice / cookie policy availabilityObserved in scan evidence; A durable cookie disclosure surface was retained in the tested context; a granular named-cookie inventory or preference interface was not confirmed.Observed

JSON evidence

cookie policy or cookie disclosure surface retained

Not confirmed: granular named-cookie inventory

Not confirmed: cookie preference interface

Full evidence JSON

{
  "assessmentStatus": "checked",
  "checklistItemId": "cookie_notice_policy_availability",
  "coverageArea": "Cookie notice / cookie policy availability",
  "evidenceState": "observed",
  "explanation": "Whether a cookie notice, cookie policy, cookie settings surface, or equivalent cookie disclosure surface was retained.",
  "note": "Whether a cookie notice, cookie policy, cookie settings surface, or equivalent cookie disclosure surface was retained.",
  "status": "Observed",
  "tone": "warning",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.cookie_notice_policy_availability.observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.cookie_notice_policy_availability"
  },
  "statusBasis": "A durable cookie disclosure surface was retained in the tested context; a granular named-cookie inventory or preference interface was not confirmed.",
  "retainedEvidence": {
    "evidenceRefs": [
      "Evidence: cookie policy or cookie disclosure surface retained",
      "Not confirmed: granular named-cookie inventory",
      "Not confirmed: cookie preference interface",
      "Policy URL: https://ergoveritas.com/privacy"
    ],
    "cookiePolicyUrls": [
      "https://ergoveritas.com/privacy"
    ],
    "cookiePolicyPresent": true,
    "cookieNoticeObserved": true,
    "observedPolicyTopics": [
      "cookies",
      "analytics",
      "third_party_disclosures",
      "controller_contact",
      "recipients_or_vendor_categories",
      "contact_privacy"
    ],
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "selectedEvidenceStrength": "moderate",
    "selectedEvidenceArtifactId": "coverage_policy",
    "preferenceInterfaceConfirmed": false,
    "granularCookieInventoryConfirmed": false
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

Cookie notice / cookie policy availability is currently rated Observed. No site remediation is indicated from this row alone; rerun after material site, policy, or tag changes.

Non-essential activity after confirmed RejectCould not be fully evaluated using scan evidence; The completed first-layer consent inventory retained no actionable Reject or necessary-only control, so a post-Reject activity window was not applicable. Missing refusal-control availability is assessed separately.Limited

JSON evidence

complete first-layer consent-control assessment

Reason: no_actionable_reject_control

Full evidence JSON

{
  "assessmentStatus": "coverage_limitation",
  "checklistItemId": "post_reject_tracking_reduction",
  "coverageArea": "Post-choice tracking reduction",
  "evidenceState": "not_testable",
  "explanation": "Whether retained activity followed Reject: confirmed refusal is assessed separately from classified tracking after a verified click whose decision registration remains unverified.",
  "note": "Whether retained activity followed Reject: confirmed refusal is assessed separately from classified tracking after a verified click whose decision registration remains unverified.",
  "status": "Not testable",
  "tone": "neutral",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.post_reject_tracking_reduction.not_testable",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.post_reject_tracking_reduction"
  },
  "statusBasis": "The completed first-layer consent inventory retained no actionable Reject or necessary-only control, so a post-Reject activity window was not applicable. Missing refusal-control availability is assessed separately.",
  "retainedEvidence": {
    "scoreEffect": "canonical_post_refusal_policy",
    "evidenceRefs": [
      "Evidence: complete first-layer consent-control assessment",
      "Reason: no_actionable_reject_control"
    ],
    "productionPosture": "not_applicable_no_reject_control",
    "missingEvidenceNeeded": [
      "Confirmed reject action plus refusal-anchored request/write evidence, a contradictory consent signal, or exact unchanged storage identity-and-value evidence."
    ],
    "selectedEvidenceReason": "Reject-path evidence is not selected as testable unless a first-layer GDPR/ePrivacy cookie banner and valid reject state are confirmed.",
    "weakerArtifactsIgnored": [],
    "selectedEvidenceStrength": "limited",
    "postRejectWindowAvailable": false,
    "reductionEvaluationStatus": "not_testable",
    "rejectInteractionConfirmed": false,
    "selectedEvidenceArtifactId": "postRejectTrackingReductionEvidence",
    "preConsentStorageNotCleared": false,
    "rejectInteractionFailureClass": "reject_path_incomplete_at_passive_barrier",
    "refusalSignalContradictsAction": false,
    "rejectInteractionFailureReason": "The independent Reject Path did not complete by the passive-lane barrier; control absence is not established in that session.",
    "postRejectRequestRecordsObserved": false,
    "preConsentStorageNotClearedCount": 0,
    "postRejectNonEssentialRequestCount": 0,
    "postRejectNonEssentialActivityRetained": false,
    "storagePresenceDoesNotEstablishActiveUse": false,
    "concretePostRejectNonEssentialDetailsRetained": false
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

1The scan could not fully evaluate Post-choice tracking reduction, so improve access to the relevant page or feature before treating this as a confirmed issue.
2Resolve any blocked or unavailable page or path noted in the evidence details.
3Confirm the relevant page, policy, or user-choice control is reachable without authentication or bot challenge.
4Rerun the scan with the same location and settings so the result can be compared consistently.
5Keep a short internal record of what changed so the next scan can be compared with the same page and settings.

Tracking & external services

1 requiring review · 4 checks

Pre-consent non-essential trackingPre-consent non-essential tracking evidence was retained before consent: Google Analytics (Analytics); first seen 1.99s after scan start; no consent action was recorded first.Partial concern

JSON evidence

Third-party tracking observed before recorded consent

Review issue: Trackers fired before consent interaction

Review issue: Pre-consent tracking incidents detected

Full evidence JSON

{
  "assessmentStatus": "review_signal",
  "checklistItemId": "pre_consent_third_party_tracking",
  "coverageArea": "Pre-consent non-essential tracking",
  "evidenceState": "not_observed",
  "explanation": "High priority pre-consent tracker inventory was retained without a promotion-eligible normalized concern or unified finding: Microsoft Clarity - Session replay (2.18s). Tracking is not confirmed from grouped inventory alone. This row is limited to concrete 3rd party tracker/request evidence retained before a recorded consent choice.",
  "note": "High priority pre-consent tracker inventory was retained without a promotion-eligible normalized concern or unified finding: Microsoft Clarity - Session replay (2.18s). Tracking is not confirmed from grouped inventory alone. This row is limited to concrete 3rd party tracker/request evidence retained before a recorded consent choice.",
  "status": "Not confirmed",
  "tone": "warning",
  "pipeline": {
    "projectionStage": "coverage_fallback",
    "concernPolicyKey": "gdpr_eprivacy.pre_consent_third_party_tracking.tracker_inventory.high",
    "ws01EvidenceRole": "retained_pre_consent_tracker_inventory",
    "wc01NormalizedConcernKey": "pre_consent_third_party_tracking"
  },
  "statusBasis": "High priority pre-consent tracker inventory was retained without a promotion-eligible normalized concern or unified finding: Microsoft Clarity - Session replay (2.18s). Tracking is not confirmed from grouped inventory alone.",
  "retainedEvidence": {
    "tagManagerOnly": false,
    "trackerPriority": "high",
    "trackerPriorityLabel": "High",
    "missingEvidenceNeeded": [
      "CertScore.unifiedFinding.preconsent_tracking: Grouped tracker inventory remains review evidence unless the canonical promotion-grade sequence contract passes."
    ],
    "serviceConnectionOnly": false,
    "selectedEvidenceReason": "Selected retained pre-consent request/vendor timing evidence; storage evidence is evaluated separately.",
    "weakerArtifactsIgnored": [],
    "selectedEvidenceStrength": "limited",
    "selectedEvidenceArtifactId": "preConsentTrackingRequestEvidence.missing",
    "trackingEvidenceAssessment": {
      "result": "not_confirmed_from_grouped_inventory",
      "scoreEffect": "review"
    },
    "contextualInfrastructureOnly": false,
    "preconsentThirdPartyTrackerGroups": [
      {
        "party": "third_party",
        "vendor": "Microsoft Clarity",
        "purpose": "Session replay",
        "priority": "high",
        "firstSeenMs": 2180
      },
      {
        "party": "third_party",
        "vendor": "Google Analytics",
        "purpose": "Analytics",
        "priority": "medium",
        "firstSeenMs": 1988
      }
    ],
    "preconsentThirdPartyTrackingVendors": [
      "Microsoft Clarity"
    ],
    "preconsentThirdPartyTrackerGroupCount": 2,
    "firstPreconsentThirdPartyTrackingObservedMs": 2180,
    "selectedPreconsentThirdPartyTrackingVendors": [
      "Microsoft Clarity"
    ]
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": [
    {
      "field": "CertScore.unifiedFinding.preconsent_tracking",
      "actual": "tracker inventory only",
      "source": "CertScore.ai",
      "expected": "promotion-eligible normalized concern and unified finding",
      "whyNeeded": "Grouped tracker inventory remains review evidence unless the canonical promotion-grade sequence contract passes."
    }
  ]
}

Correction steps

1Review the privacy policy for the disclosure described in this result.
2If the disclosure exists, review why the scan did not identify it or add an internal review note.
3If the disclosure is missing, update the privacy notice or internal review record.
4Rerun the scan and confirm the updated result reflects the disclosure or clearly explains why it could not be evaluated.

3rd party iframes before consentNot observed in scan evidence; Retained iframe inventory did not show known 3rd party iframe embeds before a recorded consent action.Not observed

JSON evidence

retained pre-consent iframe inventory

Full evidence JSON

{
  "assessmentStatus": "checked",
  "checklistItemId": "third_party_iframe_pre_consent",
  "coverageArea": "3rd party iframes before consent",
  "evidenceState": "not_observed",
  "explanation": "Whether retained scanner evidence showed known 3rd party iframe embeds before a recorded consent action.",
  "note": "Whether retained scanner evidence showed known 3rd party iframe embeds before a recorded consent action.",
  "status": "Not observed",
  "tone": "neutral",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.third_party_iframe_pre_consent.not_observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.third_party_iframe_pre_consent"
  },
  "statusBasis": "Retained iframe inventory did not show known 3rd party iframe embeds before a recorded consent action.",
  "retainedEvidence": {
    "evidenceRefs": [
      "Evidence: retained pre-consent iframe inventory"
    ],
    "missingEvidenceNeeded": [],
    "preConsentIframeCount": 1,
    "iframeObservationCount": 0,
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "runtimeCaptureCompleted": true,
    "selectedEvidenceStrength": "missing",
    "selectedEvidenceArtifactId": "coverage_policy"
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

3rd party iframes before consent is currently rated Not observed. No site remediation is indicated from this row alone; rerun after material site, policy, or tag changes.

Social/media embeds or plugins loaded before consentNo eligible social/media provider request was observed before a recorded consent action; plain outbound social links are not counted for this row.Not observed

JSON evidence

retained pre-consent embedded-content inventory

Full evidence JSON

{
  "assessmentStatus": "checked",
  "checklistItemId": "social_media_embed_pre_consent",
  "coverageArea": "Social/media embeds or plugins loaded before consent",
  "evidenceState": "not_observed",
  "explanation": "Whether retained network/runtime evidence showed a social, video, media embed, social pixel, or plugin provider loading before a recorded consent action.",
  "note": "Whether retained network/runtime evidence showed a social, video, media embed, social pixel, or plugin provider loading before a recorded consent action.",
  "status": "Not observed",
  "tone": "neutral",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.social_media_embed_pre_consent.not_observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.social_media_embed_pre_consent"
  },
  "statusBasis": "Retained embedded-content checks did not show a social/media embed, plugin, widget, or pixel provider request before consent. Plain outbound links are not treated as evidence for this row.",
  "retainedEvidence": {
    "evidenceRefs": [
      "Evidence: retained pre-consent embedded-content inventory"
    ],
    "placeholderDetected": false,
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "runtimeCaptureCompleted": true,
    "selectedEvidenceStrength": "missing",
    "selectedEvidenceArtifactId": "coverage_policy",
    "socialMediaEmbedObservationCount": 0
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

Social/media embeds or plugins loaded before consent is currently rated Not observed. No site remediation is indicated from this row alone; rerun after material site, policy, or tag changes.

Embedded third-party services before consentNo eligible 3rd party embedded content was observed before a recorded consent action.Not observed

JSON evidence

EmbeddedContentObservationCount: 0

Full evidence JSON

{
  "assessmentStatus": "checked",
  "checklistItemId": "embedded_content_pre_consent",
  "coverageArea": "Embedded third-party services before consent",
  "evidenceState": "not_observed",
  "explanation": "Whether retained scanner evidence showed iframe, embed, widget, or visibly integrated third-party services before a recorded consent action. This row does not represent all background analytics or network requests.",
  "note": "Whether retained scanner evidence showed iframe, embed, widget, or visibly integrated third-party services before a recorded consent action. This row does not represent all background analytics or network requests.",
  "status": "Not observed",
  "tone": "neutral",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.embedded_content_pre_consent.not_observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.embedded_content_pre_consent"
  },
  "statusBasis": "Iframe/runtime checks completed for the tested context and did not retain a concrete 3rd party embedded-content iframe before consent.",
  "retainedEvidence": {
    "evidenceRefs": [
      "Evidence: retained pre-consent embedded-content inventory"
    ],
    "missingEvidenceNeeded": [],
    "preConsentIframeCount": 1,
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "runtimeCaptureCompleted": true,
    "selectedEvidenceStrength": "missing",
    "selectedEvidenceArtifactId": "coverage_policy",
    "embeddedContentObservationCount": 0
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

Embedded third-party services before consent is currently rated Not observed. No site remediation is indicated from this row alone; rerun after material site, policy, or tag changes.

Policy and transparency

3 observed · 11 checks

Privacy notice link/surface discoveredObserved in policy-surface evidence; Privacy notice evidence was retained in public policy-surface evidence; policy surface: https://ergoveritas.com/privacy; 1548 policy-text characters retained.Observed

JSON evidence

Policy source

Public-Web Evidence & Transparency Research | ErgoVeritas — https://ergoveritas.com/privacy

Source policy language: en; banner/page language: en; translation applied: No.

Policy reached through: Footer Link; directly linked from scanned page: Yes; retrieved during scan: 2026-09-08T04:28:54.177Z.

Section: Not retained; update text: Last updated August 6, 2026 Static website ErgoVerita.

Excerpt: Privacy Policy Last updated August 6, 2026 Static website ErgoVeritas is served as a static website. It does not provide user accounts, accept file uploads, or maintain an application database. Hosting records Our hosting and content-delivery providers may process ordinary request information such as IP address, requested URL, timestamp, browser information, and security diagnostics to deliver and protect the site. Analytics and session diagnostics On the main ErgoVeritas site, Google Tag Manager loads Google Analy

Policy URL: https://ergoveritas.com/privacy

Full evidence JSON

{
  "assessmentStatus": "checked",
  "checklistItemId": "privacy_notice_availability",
  "coverageArea": "Privacy notice link/surface discovered",
  "evidenceState": "observed",
  "explanation": "Whether a reachable privacy notice or privacy policy link/surface was retained. This row does not by itself confirm that substantive notice content was available.",
  "note": "Whether a reachable privacy notice or privacy policy link/surface was retained. This row does not by itself confirm that substantive notice content was available.",
  "status": "Observed",
  "tone": "warning",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.privacy_notice_availability.observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.privacy_notice_availability"
  },
  "statusBasis": "Privacy notice evidence was retained in public policy-surface evidence.",
  "retainedEvidence": {
    "evidenceRefs": [
      "Evidence: privacy policy surface retained",
      "Excerpt: Privacy Policy Last updated August 6, 2026 Static website ErgoVeritas is served as a static website. It does not provide user accounts, accept file uploads, or maintain an application database. Hosting records Our hosting and content-delivery providers may process ordinary request information such as IP address, requested URL, timestamp, browser information, and security diagnostics to deliver and protect the site. Analytics and session diagnostics On the main ErgoVeritas site, Google Tag Manager loads Google Analy",
      "Policy URL: https://ergoveritas.com/privacy"
    ],
    "signalObserved": true,
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "policyEvidenceAssessment": {
      "result": "disclosure_observed",
      "scoreEffect": "canonical_policy",
      "topicRelevance": "direct",
      "contractVersion": "certscore.policy-topic-evidence-assessment.v1"
    },
    "policyEvidenceProvenance": {
      "sourceUrl": "https://ergoveritas.com/privacy",
      "policyTitle": "Public-Web Evidence & Transparency Research | ErgoVeritas",
      "artifactRefs": [
        "policy_excerpt_9c950c87",
        "policy_surface_text_9c950c87"
      ],
      "bannerLanguage": "en",
      "contractVersion": "certscore.policy-evidence-provenance.v1",
      "discoveryMethod": "footer_link",
      "lastUpdatedText": "Last updated August 6, 2026 Static website ErgoVerita",
      "detectedLanguage": "en",
      "retrievalTimestamp": "2026-09-08T04:28:54.177Z",
      "targetRelationship": "target_controller",
      "translationApplied": false,
      "documentOwnerEntity": "Public",
      "ownershipConfidence": 0.98,
      "directlyLinkedFromScannedPage": true
    },
    "selectedEvidenceStrength": "moderate",
    "selectedEvidenceArtifactId": "coverage_policy",
    "policySurfaceSummary": {
      "scanStartedAt": "2026-09-08T04:28:44.977Z",
      "observedTopics": [
        "cookies",
        "analytics",
        "third_party_disclosures",
        "controller_contact",
        "recipients_or_vendor_categories",
        "contact_privacy"
      ],
      "cookiePolicyUrls": [],
      "cookieDisclosures": [],
      "mentionedControls": [],
      "privacyPolicySize": {
        "url": "https://ergoveritas.com/privacy",
        "completeness": "complete",
        "documentFormat": "text",
        "compressedBytes": 20815,
        "measurementScope": "selected_usable_privacy_policy",
        "decompressedBytes": 20815
      },
      "privacyPolicyUrls": [
        "https://ergoveritas.com/privacy"
      ],
      "cookie_disclosures": [],
      "policySectionCount": 7,
      "policySurfaceCount": 2,
      "cookiePolicyPresent": false,
      "scannedPageLanguage": "en",
      "privacyPolicyPresent": true,
      "policyPrimaryLanguage": "en",
      "policyLastUpdatedTexts": [
        "Last updated August 6, 2026 Static website ErgoVerita",
        "Last updated August 6, 2026 Informational site This w"
      ],
      "policyTextCoverageMode": "section_targeted",
      "retainedPolicySections": [
        {
          "charEnd": 4276,
          "heading": "Privacy Policy",
          "quality": "strong",
          "charStart": 2038,
          "sourceUrl": "https://ergoveritas.com/privacy/",
          "textExcerpt": "Last updated August 6, 2026 Static website ErgoVeritas is served as a static website. It does not provide user accounts, accept file uploads, or maintain an application database. Hosting records Our hosting and content-delivery providers may process ordinary request information such as IP address, requested URL, timestamp, browser information, and security diagnostics to deliver and protect the site. Analytics and session diagnostics On the main ErgoVeritas site, Google Tag Manager loads Google Analytics and Microsoft Clarity. These services may set cookies or use similar browser storage and collect information about page visits, device and browser characteristics, interactions, and approximate location. We use this information to understand site usage, verify changes, and diagnose usability issues. Microsoft Clarity is configured to mask sensitive content in session recordings. Contact If you email us, we receive the information you choose to include and use it to respond to your message. You can contact us at [email protected] . Controlled calibration pages No-index calibration pages may intentionally expose synthetic controls, policy text, cookies, browser-storage values, o"
        },
        {
          "charEnd": 3357,
          "heading": "Analytics and session diagnostics",
          "quality": "strong",
          "charStart": 2770,
          "sourceUrl": "https://ergoveritas.com/privacy/",
          "textExcerpt": "On the main ErgoVeritas site, Google Tag Manager loads Google Analytics and Microsoft Clarity. These services may set cookies or use similar browser storage and collect information about page visits, device and browser characteristics, interactions, and approximate location. We use this information to understand site usage, verify changes, and diagnose usability issues. Microsoft Clarity is configured to mask sensitive content in session recordings."
        },
        {
          "charEnd": 2770,
          "heading": "Hosting records",
          "quality": "partial",
          "charStart": 2446,
          "sourceUrl": "https://ergoveritas.com/privacy/",
          "textExcerpt": "Our hosting and content-delivery providers may process ordinary request information such as IP address, requested URL, timestamp, browser information, and security diagnostics to deliver and protect the site."
        },
        {
          "charEnd": 418,
          "heading": "content-delivery providers may process",
          "quality": "partial",
          "charStart": 194,
          "sourceUrl": "https://ergoveritas.com/privacy/",
          "textExcerpt": "Hosting records Our hosting and content-delivery providers may process ordinary request information such as IP address, requested URL, timestamp, browser information, and security diagnostics to deliver and protect the site."
        },
        {
          "charEnd": 4276,
          "heading": "Controlled calibration pages",
          "quality": "strong",
          "charStart": 3659,
          "sourceUrl": "https://ergoveritas.com/privacy/",
          "textExcerpt": "No-index calibration pages may intentionally expose synthetic controls, policy text, cookies, browser-storage values, or designated third-party analytics and session-replay tags so authorized CertScore testing can verify scanner behavior. Each page is designed as an isolated test case; clean control pages remain free of the main-site Tag Manager loader. These pages are labeled as calibration surfaces and do not interpret a visitor's consent choice."
        },
        {
          "charEnd": 2446,
          "heading": "Static website",
          "quality": "partial",
          "charStart": 2196,
          "sourceUrl": "https://ergoveritas.com/privacy/",
          "textExcerpt": "ErgoVeritas is served as a static website. It does not provide user accounts, accept file uploads, or maintain an application database."
        },
        {
          "charEnd": 3659,
          "heading": "Contact",
          "quality": "partial",
          "charStart": 3357,
          "sourceUrl": "https://ergoveritas.com/privacy/",
          "textExcerpt": "If you email us, we receive the information you choose to include and use it to respond to your message. You can contact us at [email protected] ."
        }
      ],
      "policyCookieDisclosures": [],
      "privacyPolicyDiscovered": true,
      "processingErrorObserved": false,
      "observedPolicyTopicHints": [
        "cookies",
        "analytics",
        "third_party_disclosures",
        "controller_contact",
        "recipients_or_vendor_categories",
        "contact_privacy"
      ],
      "policyDocumentProvenance": [
        {
          "sourceUrl": "https://ergoveritas.com/privacy",
          "policyTitle": "Public-Web Evidence & Transparency Research | ErgoVeritas",
          "artifactRefs": [
            "policy_excerpt_9c950c87",
            "policy_surface_text_9c950c87"
          ],
          "effectiveDate": null,
          "observationId": "policy_surface_9c950c87",
          "discoveryMethod": "footer_link",
          "lastUpdatedText": "Last updated August 6, 2026 Static website ErgoVerita",
          "detectedLanguage": "en",
          "retrievalTimestamp": "2026-09-08T04:28:54.177Z",
          "targetRelationship": "target_controller",
          "translationApplied": false,
          "documentOwnerEntity": "Public",
          "ownershipConfidence": 0.98,
          "translationTargetLanguage": null,
          "directlyLinkedFromScannedPage": true
        }
      ],
      "policy_cookie_disclosures": [],
      "article13DisclosureSignals": [
        {
          "source": "deterministic",
          "status": "observed",
          "confidence": 0.82,
          "surfaceUrl": "https://ergoveritas.com/privacy",
          "matchedTerm": "we use this information to",
          "evidenceText": "We use this information to understand site usage, verify changes, and diagnose usability issues. Microsoft Clarity is configured to mask sensitive content in session recordings. Contact If you email us, we receive the information you choose to include and use it to respond to your message. You can contact us at [email protected] .",
          "matchStrength": "equivalent",
          "matchedLocale": "en",
          "disclosureType": "processing_purposes",
          "evidenceSource": "gdpr_transparency_topic_candidate",
          "productionCredit": true,
          "classifierProvenance": "gdpr_transparency_topic_classifier.v1",
          "classifierReasonCodes": [
            "matched_processing_purposes",
            "match_strength_equivalent"
          ],
          "productionCreditProfile": "gdpr_transparency_multilingual_article13_v1",
          "selectedEvidenceStrength": "strong",
          "selectedPolicySectionUrl": "https://ergoveritas.com/privacy",
          "selectedPolicySectionExcerpt": "We use this information to understand site usage, verify changes, and diagnose usability issues. Microsoft Clarity is configured to mask sensitive content in session recordings. Contact If you email us, we receive the information you choose to include and use it to respond to your message. You can contact us at [email protected] .",
          "selectedPolicySectionHeading": "GDPR Transparency topic classifier evidence",
          "sourceCandidateProductionCredit": false
        },
        {
          "source": "deterministic",
          "status": "observed",
          "confidence": 0.82,
          "surfaceUrl": "https://ergoveritas.com/privacy",
          "matchedTerm": "content-delivery providers may process",
          "evidenceText": "Hosting records Our hosting and content-delivery providers may process ordinary request information such as IP address, requested URL, timestamp, browser information, and security diagnostics to deliver and protect the site. Analytics and session diagnostics On the main ErgoVeritas site, Google Tag Manager loads Google Analytics and Microsoft Clarity.",
          "matchStrength": "equivalent",
          "matchedLocale": "en",
          "disclosureType": "recipients_or_vendor_categories",
          "evidenceSource": "gdpr_transparency_topic_candidate",
          "productionCredit": true,
          "classifierProvenance": "gdpr_transparency_topic_classifier.v1",
          "classifierReasonCodes": [
            "matched_recipients_or_vendor_categories",
            "match_strength_equivalent"
          ],
          "productionCreditProfile": "gdpr_transparency_multilingual_article13_v1",
          "selectedEvidenceStrength": "strong",
          "selectedPolicySectionUrl": "https://ergoveritas.com/privacy",
          "selectedPolicySectionExcerpt": "Hosting records Our hosting and content-delivery providers may process ordinary request information such as IP address, requested URL, timestamp, browser information, and security diagnostics to deliver and protect the site. Analytics and session diagnostics On the main ErgoVeritas site, Google Tag Manager loads Google Analytics and Microsoft Clarity.",
          "selectedPolicySectionHeading": "GDPR Transparency topic classifier evidence",
          "sourceCandidateProductionCredit": false
        }
      ],
      "policyTextExtractionHealth": {
        "policyUrls": [
          "https://ergoveritas.com/privacy"
        ],
        "nanoInvoked": false,
        "contractVersion": "certscore.policy-text-extraction-health.v2",
        "policyTextQuality": {
          "usable": true,
          "codeSignalCount": 0,
          "codeSymbolRatio": 0.0006459948320413437,
          "policyTermCount": 6,
          "alphabeticWordRatio": 0.8416289592760181,
          "accessChallengeSignalCount": 0,
          "naturalLanguageSentenceCount": 12
        },
        "policyUrlRetained": true,
        "extractedTextLength": 1548,
        "policySurfaceObserved": true,
        "detectedPolicyLanguage": "en",
        "minimumTextLengthRequired": 500,
        "policyTextExtractionStatus": "ok",
        "verifiedPolicyDocumentCount": 1,
        "detectedPolicyLanguageSource": "policy_surface",
        "supportedGdprTransparencyLocales": [
          "en",
          "de",
          "fr",
          "es",
          "it",
          "nl",
          "pl",
          "pt",
          "ru",
          "ja",
          "zh",
          "ar",
          "sv",
          "ro",
          "cs",
          "el",
          "hu",
          "da",
          "fi",
          "sk",
          "bg",
          "hr",
          "nb",
          "sl",
          "lt",
          "lv",
          "et",
          "uk",
          "tr",
          "fa",
          "vi",
          "id",
          "ko",
          "th",
          "he",
          "sr",
          "ca",
          "hi",
          "az",
          "gl"
        ],
        "gdprTransparencyLanguageSupported": true,
        "policyTextEvidenceProjectionStatus": "verified_complete",
        "policyTextEvidenceProjectionContractVersion": "certscore.policy-text-evidence-projection.v1"
      },
      "privacyPolicyEvidencePaths": [],
      "discoveredPrivacyPolicyUrls": [
        "https://ergoveritas.com/privacy/"
      ],
      "article13CoverageAssessments": [
        {
          "topic": "automated_decision_making_or_profiling",
          "status": "insufficient_retained_evidence",
          "sourceUrls": [
            "https://ergoveritas.com/privacy/"
          ],
          "reasonCodes": [
            "policy_absence_coverage_preconditions_not_met",
            "typed_topic_coverage_diagnostic_missing_or_limited",
            "policy_document_content_coverage_incomplete"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_9c950c87"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "1b36f348c66ea3096ea9e5afdf2c1d0a3a8ce14c55b471542d119e41b1e5bbce"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "controller_contact",
          "status": "insufficient_retained_evidence",
          "sourceUrls": [
            "https://ergoveritas.com/privacy/"
          ],
          "reasonCodes": [
            "policy_absence_coverage_preconditions_not_met",
            "typed_topic_coverage_diagnostic_missing_or_limited",
            "policy_document_content_coverage_incomplete"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_9c950c87"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "1b36f348c66ea3096ea9e5afdf2c1d0a3a8ce14c55b471542d119e41b1e5bbce"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "data_retention",
          "status": "insufficient_retained_evidence",
          "sourceUrls": [
            "https://ergoveritas.com/privacy/"
          ],
          "reasonCodes": [
            "policy_absence_coverage_preconditions_not_met",
            "typed_topic_coverage_diagnostic_missing_or_limited",
            "policy_document_content_coverage_incomplete"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_9c950c87"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "1b36f348c66ea3096ea9e5afdf2c1d0a3a8ce14c55b471542d119e41b1e5bbce"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "data_subject_rights",
          "status": "insufficient_retained_evidence",
          "sourceUrls": [
            "https://ergoveritas.com/privacy/"
          ],
          "reasonCodes": [
            "policy_absence_coverage_preconditions_not_met",
            "typed_topic_coverage_diagnostic_missing_or_limited",
            "policy_document_content_coverage_incomplete"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_9c950c87"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "1b36f348c66ea3096ea9e5afdf2c1d0a3a8ce14c55b471542d119e41b1e5bbce"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "dpo_contact",
          "status": "insufficient_retained_evidence",
          "sourceUrls": [
            "https://ergoveritas.com/privacy/"
          ],
          "reasonCodes": [
            "policy_absence_coverage_preconditions_not_met",
            "typed_topic_coverage_diagnostic_missing_or_limited",
            "policy_document_content_coverage_incomplete"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_9c950c87"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "1b36f348c66ea3096ea9e5afdf2c1d0a3a8ce14c55b471542d119e41b1e5bbce"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "international_transfers",
          "status": "insufficient_retained_evidence",
          "sourceUrls": [
            "https://ergoveritas.com/privacy/"
          ],
          "reasonCodes": [
            "policy_absence_coverage_preconditions_not_met",
            "typed_topic_coverage_diagnostic_missing_or_limited",
            "policy_document_content_coverage_incomplete"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_9c950c87"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "1b36f348c66ea3096ea9e5afdf2c1d0a3a8ce14c55b471542d119e41b1e5bbce"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "legal_basis",
          "status": "insufficient_retained_evidence",
          "sourceUrls": [
            "https://ergoveritas.com/privacy/"
          ],
          "reasonCodes": [
            "policy_absence_coverage_preconditions_not_met",
            "typed_topic_coverage_diagnostic_missing_or_limited",
            "policy_document_content_coverage_incomplete"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_9c950c87"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "1b36f348c66ea3096ea9e5afdf2c1d0a3a8ce14c55b471542d119e41b1e5bbce"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "processing_purposes",
          "status": "observed",
          "sourceUrls": [
            "https://ergoveritas.com/privacy/"
          ],
          "reasonCodes": [
            "row_specific_disclosure_observed"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_9c950c87"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "1b36f348c66ea3096ea9e5afdf2c1d0a3a8ce14c55b471542d119e41b1e5bbce"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "recipients_or_vendor_categories",
          "status": "observed",
          "sourceUrls": [
            "https://ergoveritas.com/privacy/"
          ],
          "reasonCodes": [
            "row_specific_disclosure_observed"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_9c950c87"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "1b36f348c66ea3096ea9e5afdf2c1d0a3a8ce14c55b471542d119e41b1e5bbce"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "supervisory_authority",
          "status": "insufficient_retained_evidence",
          "sourceUrls": [
            "https://ergoveritas.com/privacy/"
          ],
          "reasonCodes": [
            "policy_absence_coverage_preconditions_not_met",
            "typed_topic_coverage_diagnostic_missing_or_limited",
            "policy_document_content_coverage_incomplete"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_9c950c87"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "1b36f348c66ea3096ea9e5afdf2c1d0a3a8ce14c55b471542d119e41b1e5bbce"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        }
      ],
      "policyTextEvidenceProjection": {
        "scanId": "a9a7470d-248f-4d96-ac1f-7ffa517c22de",
        "documents": [
          {
            "finalUrl": "https://ergoveritas.com/privacy/",
            "artifactId": "policy_surface_text_9c950c87",
            "artifactUri": "s3://certscore-v2-dag-local-artifacts-eu-central-1-199536052647/v2-dag-lambda/local/a9a7470d-248f-4d96-ac1f-7ffa517c22de/auxiliary/policy_surface_text_9c950c87.txt",
            "contentType": "text/html",
            "documentRole": "policy_document",
            "requestedUrl": "/privacy/",
            "observationId": "policy_surface_9c950c87",
            "redirectChain": [
              "https://ergoveritas.com/privacy"
            ],
            "artifactSha256": "1b36f348c66ea3096ea9e5afdf2c1d0a3a8ce14c55b471542d119e41b1e5bbce",
            "documentFormat": "text",
            "limitationKeys": [
              "policy_section_inventory_bounded",
              "policy_section_text_bounded"
            ],
            "contentCoverage": {
              "status": "truncated",
              "limitationKeys": [
                "policy_section_inventory_bounded",
                "policy_section_text_bounded"
              ],
              "sourceTextChars": 1548,
              "retainedSectionCount": 7,
              "extractedSectionCount": 8,
              "retainedTableRowCount": 0
            },
            "artifactFileName": "policy_surface_text_9c950c87.txt",
            "extractionStatus": "complete",
            "artifactSizeBytes": 1548,
            "retainedTextChars": 1548,
            "documentFetchState": "fetched",
            "retainedTextSha256": "1b36f348c66ea3096ea9e5afdf2c1d0a3a8ce14c55b471542d119e41b1e5bbce",
            "targetRelationship": "target_controller",
            "documentOwnerEntity": "Public",
            "ownershipConfidence": 0.98,
            "documentTextCoverage": {
              "status": "complete",
              "limitationKeys": [],
              "sourceTextChars": 1548,
              "retainedTextChars": 1548
            },
            "documentEvaluationState": "usable",
            "documentRoleReasonCodes": [
              "direct_privacy_document_without_index_evidence"
            ],
            "governingPolicySelection": {
              "rank": 1,
              "score": 77,
              "state": "primary",
              "reasonCodes": [
                "highest_ranked_eligible_governing_policy",
                "target_controller_document",
                "policy_content_coverage_truncated",
                "complete_policy_text_retention",
                "direct_privacy_document_without_index_evidence"
              ],
              "contractVersion": "governing_policy_selection.v1"
            },
            "artifactVerificationStatus": "verified",
            "gdprTransparencyTopicCoverageDiagnostics": [
              {
                "topic": "controller_contact",
                "reasonCodes": [
                  "row_specific_disclosure_not_confirmed",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "unknown"
              },
              {
                "topic": "processing_purposes",
                "reasonCodes": [
                  "row_specific_disclosure_observed",
                  "evidence_hash_binding_verified",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "observed",
                "sourceDocumentSha256": "ca15e89a4a88d064aa44720fd41cd6b2efad05da4c16b6fc154f15c429a389c4",
                "evidenceSectionSha256": "c90070aea9d00485de89c69abddc0eea87005d720ec839ba42c37cd01fe77933",
                "sectionExtractionMethod": "html_heading_hierarchy"
              },
              {
                "topic": "legal_basis",
                "reasonCodes": [
                  "row_specific_disclosure_not_confirmed",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "unknown"
              },
              {
                "topic": "recipients_or_vendor_categories",
                "reasonCodes": [
                  "row_specific_disclosure_not_confirmed",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "unknown"
              },
              {
                "topic": "data_retention",
                "reasonCodes": [
                  "row_specific_disclosure_not_confirmed",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "unknown"
              },
              {
                "topic": "data_subject_rights",
                "reasonCodes": [
                  "row_specific_disclosure_not_confirmed",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "unknown"
              },
              {
                "topic": "international_transfers",
                "reasonCodes": [
                  "row_specific_disclosure_not_confirmed",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "unknown"
              },
              {
                "topic": "dpo_contact",
                "reasonCodes": [
                  "row_specific_disclosure_not_confirmed",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "unknown"
              },
              {
                "topic": "supervisory_authority",
                "reasonCodes": [
                  "row_specific_disclosure_not_confirmed",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "unknown"
              },
              {
                "topic": "automated_decision_making_or_profiling",
                "reasonCodes": [
                  "row_specific_disclosure_not_confirmed",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "unknown"
              }
            ]
          }
        ],
        "generatedAt": "2026-09-08T04:28:57.628Z",
        "sourceBundle": {
          "uri": "s3://certscore-v2-dag-local-artifacts-eu-central-1-199536052647/v2-dag-lambda/local/a9a7470d-248f-4d96-ac1f-7ffa517c22de/CanonicalEvidenceBundle.json",
          "sha256": "3eaa531527cfb090776a0399d75252a868bbf6bd48d1e41ff4cdfc71f1097988",
          "sizeBytes": 315540,
          "schemaVersion": "certscore.v2.alpha.1",
          "verificationStatus": "verified"
        },
        "limitationKeys": [
          "policy_section_inventory_bounded",
          "policy_section_text_bounded"
        ],
        "contractVersion": "certscore.policy-text-evidence-projection.v1",
        "projectionStatus": "verified_complete"
      },
      "privacyPolicyEvaluationState": "fetched_usable",
      "legalFrameworkValidityMatches": [],
      "missingExpectedPolicySections": [
        "Your privacy controls",
        "Exporting and deleting your information",
        "Retaining your information",
        "Compliance and cooperation with regulators",
        "European requirements",
        "Data transfers"
      ],
      "policy_text_extraction_health": {
        "policyUrls": [
          "https://ergoveritas.com/privacy"
        ],
        "nanoInvoked": false,
        "contractVersion": "certscore.policy-text-extraction-health.v2",
        "policyTextQuality": {
          "usable": true,
          "codeSignalCount": 0,
          "codeSymbolRatio": 0.0006459948320413437,
          "policyTermCount": 6,
          "alphabeticWordRatio": 0.8416289592760181,
          "accessChallengeSignalCount": 0,
          "naturalLanguageSentenceCount": 12
        },
        "policyUrlRetained": true,
        "extractedTextLength": 1548,
        "policySurfaceObserved": true,
        "detectedPolicyLanguage": "en",
        "minimumTextLengthRequired": 500,
        "policyTextExtractionStatus": "ok",
        "verifiedPolicyDocumentCount": 1,
        "detectedPolicyLanguageSource": "policy_surface",
        "supportedGdprTransparencyLocales": [
          "en",
          "de",
          "fr",
          "es",
          "it",
          "nl",
          "pl",
          "pt",
          "ru",
          "ja",
          "zh",
          "ar",
          "sv",
          "ro",
          "cs",
          "el",
          "hu",
          "da",
          "fi",
          "sk",
          "bg",
          "hr",
          "nb",
          "sl",
          "lt",
          "lv",
          "et",
          "uk",
          "tr",
          "fa",
          "vi",
          "id",
          "ko",
          "th",
          "he",
          "sr",
          "ca",
          "hi",
          "az",
          "gl"
        ],
        "gdprTransparencyLanguageSupported": true,
        "policyTextEvidenceProjectionStatus": "verified_complete",
        "policyTextEvidenceProjectionContractVersion": "certscore.policy-text-evidence-projection.v1"
      },
      "retainedPolicySectionHeadings": [
        "Privacy Policy",
        "Analytics and session diagnostics",
        "Hosting records",
        "content-delivery providers may process",
        "Controlled calibration pages",
        "Static website",
        "Contact"
      ],
      "selectedPrivacyPolicyDocument": {
        "documentUrl": "https://ergoveritas.com/privacy",
        "observationId": "policy_surface_9c950c87",
        "traversalDepth": 0,
        "parentSurfaceUrl": null,
        "parentObservationId": null,
        "selectionReasonCodes": []
      },
      "article13_coverage_assessments": [
        {
          "topic": "automated_decision_making_or_profiling",
          "status": "insufficient_retained_evidence",
          "sourceUrls": [
            "https://ergoveritas.com/privacy/"
          ],
          "reasonCodes": [
            "policy_absence_coverage_preconditions_not_met",
            "typed_topic_coverage_diagnostic_missing_or_limited",
            "policy_document_content_coverage_incomplete"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_9c950c87"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "1b36f348c66ea3096ea9e5afdf2c1d0a3a8ce14c55b471542d119e41b1e5bbce"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "controller_contact",
          "status": "insufficient_retained_evidence",
          "sourceUrls": [
            "https://ergoveritas.com/privacy/"
          ],
          "reasonCodes": [
            "policy_absence_coverage_preconditions_not_met",
            "typed_topic_coverage_diagnostic_missing_or_limited",
            "policy_document_content_coverage_incomplete"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_9c950c87"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "1b36f348c66ea3096ea9e5afdf2c1d0a3a8ce14c55b471542d119e41b1e5bbce"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "data_retention",
          "status": "insufficient_retained_evidence",
          "sourceUrls": [
            "https://ergoveritas.com/privacy/"
          ],
          "reasonCodes": [
            "policy_absence_coverage_preconditions_not_met",
            "typed_topic_coverage_diagnostic_missing_or_limited",
            "policy_document_content_coverage_incomplete"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_9c950c87"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "1b36f348c66ea3096ea9e5afdf2c1d0a3a8ce14c55b471542d119e41b1e5bbce"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "data_subject_rights",
          "status": "insufficient_retained_evidence",
          "sourceUrls": [
            "https://ergoveritas.com/privacy/"
          ],
          "reasonCodes": [
            "policy_absence_coverage_preconditions_not_met",
            "typed_topic_coverage_diagnostic_missing_or_limited",
            "policy_document_content_coverage_incomplete"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_9c950c87"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "1b36f348c66ea3096ea9e5afdf2c1d0a3a8ce14c55b471542d119e41b1e5bbce"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "dpo_contact",
          "status": "insufficient_retained_evidence",
          "sourceUrls": [
            "https://ergoveritas.com/privacy/"
          ],
          "reasonCodes": [
            "policy_absence_coverage_preconditions_not_met",
            "typed_topic_coverage_diagnostic_missing_or_limited",
            "policy_document_content_coverage_incomplete"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_9c950c87"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "1b36f348c66ea3096ea9e5afdf2c1d0a3a8ce14c55b471542d119e41b1e5bbce"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "international_transfers",
          "status": "insufficient_retained_evidence",
          "sourceUrls": [
            "https://ergoveritas.com/privacy/"
          ],
          "reasonCodes": [
            "policy_absence_coverage_preconditions_not_met",
            "typed_topic_coverage_diagnostic_missing_or_limited",
            "policy_document_content_coverage_incomplete"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_9c950c87"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "1b36f348c66ea3096ea9e5afdf2c1d0a3a8ce14c55b471542d119e41b1e5bbce"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "legal_basis",
          "status": "insufficient_retained_evidence",
          "sourceUrls": [
            "https://ergoveritas.com/privacy/"
          ],
          "reasonCodes": [
            "policy_absence_coverage_preconditions_not_met",
            "typed_topic_coverage_diagnostic_missing_or_limited",
            "policy_document_content_coverage_incomplete"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_9c950c87"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "1b36f348c66ea3096ea9e5afdf2c1d0a3a8ce14c55b471542d119e41b1e5bbce"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "processing_purposes",
          "status": "observed",
          "sourceUrls": [
            "https://ergoveritas.com/privacy/"
          ],
          "reasonCodes": [
            "row_specific_disclosure_observed"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_9c950c87"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "1b36f348c66ea3096ea9e5afdf2c1d0a3a8ce14c55b471542d119e41b1e5bbce"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "recipients_or_vendor_categories",
          "status": "observed",
          "sourceUrls": [
            "https://ergoveritas.com/privacy/"
          ],
          "reasonCodes": [
            "row_specific_disclosure_observed"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_9c950c87"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "1b36f348c66ea3096ea9e5afdf2c1d0a3a8ce14c55b471542d119e41b1e5bbce"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "supervisory_authority",
          "status": "insufficient_retained_evidence",
          "sourceUrls": [
            "https://ergoveritas.com/privacy/"
          ],
          "reasonCodes": [
            "policy_absence_coverage_preconditions_not_met",
            "typed_topic_coverage_diagnostic_missing_or_limited",
            "policy_document_content_coverage_incomplete"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_9c950c87"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "1b36f348c66ea3096ea9e5afdf2c1d0a3a8ce14c55b471542d119e41b1e5bbce"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        }
      ],
      "discoveredPrivacyPolicyDetails": [
        {
          "url": "https://ergoveritas.com/privacy/",
          "status": "fetched",
          "documentFetchState": "fetched",
          "fetchFailureReason": null,
          "linkObservationState": "observed",
          "documentEvaluationState": "usable"
        }
      ],
      "article13DisclosureTypesPartial": [],
      "discoveredPrivacyPolicyStatuses": [
        "fetched"
      ],
      "gdprTransparencyEvidenceProfile": "gdpr_transparency_multilingual_article13_v1",
      "policy_text_evidence_projection": {
        "scanId": "a9a7470d-248f-4d96-ac1f-7ffa517c22de",
        "documents": [
          {
            "finalUrl": "https://ergoveritas.com/privacy/",
            "artifactId": "policy_surface_text_9c950c87",
            "artifactUri": "s3://certscore-v2-dag-local-artifacts-eu-central-1-199536052647/v2-dag-lambda/local/a9a7470d-248f-4d96-ac1f-7ffa517c22de/auxiliary/policy_surface_text_9c950c87.txt",
            "contentType": "text/html",
            "documentRole": "policy_document",
            "requestedUrl": "/privacy/",
            "observationId": "policy_surface_9c950c87",
            "redirectChain": [
              "https://ergoveritas.com/privacy"
            ],
            "artifactSha256": "1b36f348c66ea3096ea9e5afdf2c1d0a3a8ce14c55b471542d119e41b1e5bbce",
            "documentFormat": "text",
            "limitationKeys": [
              "policy_section_inventory_bounded",
              "policy_section_text_bounded"
            ],
            "contentCoverage": {
              "status": "truncated",
              "limitationKeys": [
                "policy_section_inventory_bounded",
                "policy_section_text_bounded"
              ],
              "sourceTextChars": 1548,
              "retainedSectionCount": 7,
              "extractedSectionCount": 8,
              "retainedTableRowCount": 0
            },
            "artifactFileName": "policy_surface_text_9c950c87.txt",
            "extractionStatus": "complete",
            "artifactSizeBytes": 1548,
            "retainedTextChars": 1548,
            "documentFetchState": "fetched",
            "retainedTextSha256": "1b36f348c66ea3096ea9e5afdf2c1d0a3a8ce14c55b471542d119e41b1e5bbce",
            "targetRelationship": "target_controller",
            "documentOwnerEntity": "Public",
            "ownershipConfidence": 0.98,
            "documentTextCoverage": {
              "status": "complete",
              "limitationKeys": [],
              "sourceTextChars": 1548,
              "retainedTextChars": 1548
            },
            "documentEvaluationState": "usable",
            "documentRoleReasonCodes": [
              "direct_privacy_document_without_index_evidence"
            ],
            "governingPolicySelection": {
              "rank": 1,
              "score": 77,
              "state": "primary",
              "reasonCodes": [
                "highest_ranked_eligible_governing_policy",
                "target_controller_document",
                "policy_content_coverage_truncated",
                "complete_policy_text_retention",
                "direct_privacy_document_without_index_evidence"
              ],
              "contractVersion": "governing_policy_selection.v1"
            },
            "artifactVerificationStatus": "verified",
            "gdprTransparencyTopicCoverageDiagnostics": [
              {
                "topic": "controller_contact",
                "reasonCodes": [
                  "row_specific_disclosure_not_confirmed",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "unknown"
              },
              {
                "topic": "processing_purposes",
                "reasonCodes": [
                  "row_specific_disclosure_observed",
                  "evidence_hash_binding_verified",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "observed",
                "sourceDocumentSha256": "ca15e89a4a88d064aa44720fd41cd6b2efad05da4c16b6fc154f15c429a389c4",
                "evidenceSectionSha256": "c90070aea9d00485de89c69abddc0eea87005d720ec839ba42c37cd01fe77933",
                "sectionExtractionMethod": "html_heading_hierarchy"
              },
              {
                "topic": "legal_basis",
                "reasonCodes": [
                  "row_specific_disclosure_not_confirmed",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "unknown"
              },
              {
                "topic": "recipients_or_vendor_categories",
                "reasonCodes": [
                  "row_specific_disclosure_not_confirmed",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "unknown"
              },
              {
                "topic": "data_retention",
                "reasonCodes": [
                  "row_specific_disclosure_not_confirmed",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "unknown"
              },
              {
                "topic": "data_subject_rights",
                "reasonCodes": [
                  "row_specific_disclosure_not_confirmed",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "unknown"
              },
              {
                "topic": "international_transfers",
                "reasonCodes": [
                  "row_specific_disclosure_not_confirmed",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "unknown"
              },
              {
                "topic": "dpo_contact",
                "reasonCodes": [
                  "row_specific_disclosure_not_confirmed",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "unknown"
              },
              {
                "topic": "supervisory_authority",
                "reasonCodes": [
                  "row_specific_disclosure_not_confirmed",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "unknown"
              },
              {
                "topic": "automated_decision_making_or_profiling",
                "reasonCodes": [
                  "row_specific_disclosure_not_confirmed",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "unknown"
              }
            ]
          }
        ],
        "generatedAt": "2026-09-08T04:28:57.628Z",
        "sourceBundle": {
          "uri": "s3://certscore-v2-dag-local-artifacts-eu-central-1-199536052647/v2-dag-lambda/local/a9a7470d-248f-4d96-ac1f-7ffa517c22de/CanonicalEvidenceBundle.json",
          "sha256": "3eaa531527cfb090776a0399d75252a868bbf6bd48d1e41ff4cdfc71f1097988",
          "sizeBytes": 315540,
          "schemaVersion": "certscore.v2.alpha.1",
          "verificationStatus": "verified"
        },
        "limitationKeys": [
          "policy_section_inventory_bounded",
          "policy_section_text_bounded"
        ],
        "contractVersion": "certscore.policy-text-evidence-projection.v1",
        "projectionStatus": "verified_complete"
      },
      "privacyPolicyTextCharacterCount": 1548,
      "retainedCookiePolicyTextExcerpt": "",
      "validatedDisclosureTypesPartial": [],
      "article13DisclosureTypesObserved": [
        "processing_purposes",
        "recipients_or_vendor_categories"
      ],
      "retainedArticle13SectionEvidence": [
        {
          "surfaceUrl": "https://ergoveritas.com/privacy",
          "coverageArea": "data_subject_rights",
          "evidenceSource": "deterministic",
          "signalObserved": "partial",
          "extractionLimitation": "selected_policy_section_truncated_by_retention_limit",
          "selectedEvidenceStrength": "partial",
          "selectedPolicySectionUrl": "https://ergoveritas.com/privacy/",
          "selectedPolicySectionExcerpt": "Privacy Policy. Last updated August 6, 2026 Static website ErgoVeritas is served as a static website. It does not provide user accounts, accept file uploads, or maintain an application database. Hosting records Our hosting and content-delivery providers may process ordinary request information such as IP address, requested URL, timestamp, browser information, and security diagnostics to deliver and protect the site. Analytics and session diagnostics On the main ErgoVeritas site, Google Tag Manager loads Google Analytics and Microsoft Clarity. These services may set cookies or use similar browser storage and collect information about page visits, device and browser characteristics, interactions, and approximate location. We use this information to understand site usage, verify changes, and diagnose usability issues. Microsoft Clarity is configured to mask sensitive content in session recordings. Contact If you email us, we receive the information you choose to include and use it to respond to your message. You can contact us at [email protected] . Controlled calibration pages No-index calibration pages may intentionally expose synthetic controls, policy text, cookies, browser-s",
          "selectedPolicySectionHeading": "Privacy Policy"
        },
        {
          "surfaceUrl": "https://ergoveritas.com/privacy",
          "coverageArea": "dpo_contact",
          "evidenceSource": "deterministic",
          "signalObserved": "not_confirmed",
          "extractionLimitation": "section_retained_without_row_specific_disclosure",
          "selectedEvidenceStrength": "limited",
          "selectedPolicySectionUrl": "https://ergoveritas.com/privacy/",
          "selectedPolicySectionExcerpt": "Contact. If you email us, we receive the information you choose to include and use it to respond to your message. You can contact us at [email protected] .",
          "selectedPolicySectionHeading": "Contact"
        },
        {
          "surfaceUrl": "https://ergoveritas.com/privacy",
          "coverageArea": "controller_contact",
          "evidenceSource": "deterministic",
          "signalObserved": "not_confirmed",
          "extractionLimitation": "section_retained_without_row_specific_disclosure",
          "selectedEvidenceStrength": "limited",
          "selectedPolicySectionUrl": "https://ergoveritas.com/privacy/",
          "selectedPolicySectionExcerpt": "Contact. If you email us, we receive the information you choose to include and use it to respond to your message. You can contact us at [email protected] .",
          "selectedPolicySectionHeading": "Contact"
        },
        {
          "surfaceUrl": "https://ergoveritas.com/privacy",
          "coverageArea": "processing_purposes",
          "evidenceSource": "deterministic",
          "signalObserved": "observed",
          "extractionLimitation": "selected_policy_section_truncated_by_retention_limit",
          "selectedEvidenceStrength": "strong",
          "selectedPolicySectionUrl": "https://ergoveritas.com/privacy/",
          "selectedPolicySectionExcerpt": "Privacy Policy. We use this information to understand site usage, verify changes, and diagnose usability issues. Microsoft Clarity is configured to mask sensitive content in session recordings.",
          "selectedPolicySectionHeading": "Privacy Policy"
        },
        {
          "surfaceUrl": "https://ergoveritas.com/privacy",
          "coverageArea": "legal_basis",
          "evidenceSource": "deterministic",
          "signalObserved": "not_confirmed",
          "extractionLimitation": "section_retained_without_row_specific_disclosure",
          "selectedEvidenceStrength": "limited",
          "selectedPolicySectionUrl": "https://ergoveritas.com/privacy/",
          "selectedPolicySectionExcerpt": "Controlled calibration pages. ned as an isolated test case; clean control pages remain free of the main-site Tag Manager loader. These pages are labeled as calibration surfaces and do not interpret a visitor's consent choice.",
          "selectedPolicySectionHeading": "Controlled calibration pages"
        },
        {
          "surfaceUrl": "https://ergoveritas.com/privacy",
          "coverageArea": "recipients_or_vendor_categories",
          "evidenceSource": "deterministic",
          "signalObserved": "not_confirmed",
          "extractionLimitation": "selected_policy_section_truncated_by_retention_limit",
          "selectedEvidenceStrength": "limited",
          "selectedPolicySectionUrl": "https://ergoveritas.com/privacy/",
          "selectedPolicySectionExcerpt": "Privacy Policy. Hosting records Our hosting and content-delivery providers may process ordinary request information such as IP address, requested URL, timestamp, browser information, and security diagnostics to deliver and protect the site. Analytics and session diagnostics On the main ErgoVeritas site, Google Tag Manager loads Google Analytics and Microsoft Clarity.",
          "selectedPolicySectionHeading": "Privacy Policy"
        }
      ],
      "retainedPrivacyPolicyTextExcerpt": "Privacy Policy Last updated August 6, 2026 Static website ErgoVeritas is served as a static website. It does not provide user accounts, accept file uploads, or maintain an application database. Hosting records Our hosting and content-delivery providers may process ordinary request information such as IP address, requested URL, timestamp, browser information, and security diagnostics to deliver and protect the site. Analytics and session diagnostics On the main ErgoVeritas site, Google Tag Manager loads Google Analytics and Microsoft Clarity. These services may set cookies or use similar browser storage and collect information about page visits, device and browser characteristics, interactions, and approximate location. We use this information to understand site usage, verify changes, and diagnose usability issues. Microsoft Clarity is configured to mask sensitive content in session recordings. Contact If you email us, we receive the information you choose to include and use it to respond to your message. You can contact us at [email protected] . Controlled calibration pages No-index calibration pages may intentionally expose synthetic controls, policy text, cookies, browser-storage values, or designated third-party analytics and session-replay tags so authorized CertScore testing can verify scanner behavior. Each page is designed as an isolated test case; clean control pages remain free of the main-site Tag Manager loader. These pages are labeled as calibration surfaces and do not interpret a visitor's consent choice.",
      "validatedDisclosureTypesObserved": [
        "processing_purposes",
        "recipients_or_vendor_categories"
      ],
      "privacyNoticeAvailabilityObserved": true,
      "evaluatedPrivacyPolicySurfaceCount": 1,
      "discardedArticle13DisclosureSignals": [
        {
          "source": "deterministic",
          "confidence": 0.66,
          "surfaceUrl": "https://ergoveritas.com/privacy",
          "evidenceText": "Privacy Policy Last updated August 6, 2026 Static website ErgoVeritas is served as a static website. It does not provide user accounts, accept file uploads, or maintain an application database. Hosting records Our hosting and content-delivery providers may process ordinary request information such as IP address, reques",
          "rejectReason": "insufficient_row_specific_terms",
          "disclosureType": "controller_contact"
        },
        {
          "source": "deterministic",
          "confidence": 0.7,
          "surfaceUrl": "https://ergoveritas.com/privacy",
          "evidenceText": "ned as an isolated test case; clean control pages remain free of the main-site Tag Manager loader. These pages are labeled as calibration surfaces and do not interpret a visitor's consent choice.",
          "rejectReason": "insufficient_row_specific_terms",
          "disclosureType": "legal_basis"
        },
        {
          "source": "deterministic",
          "confidence": 0.76,
          "surfaceUrl": "https://ergoveritas.com/privacy",
          "evidenceText": "[email protected] . Controlled calibration pages No-index calibration pages may intentionally expose synthetic controls, policy text, cookies, browser-storage values, or designated third-party analytics and session-replay tags so authorized CertScore testing can verify scanner behavior. Each page is designed as an isola",
          "rejectReason": "insufficient_row_specific_terms",
          "disclosureType": "recipients_or_vendor_categories"
        }
      ],
      "staleLegalFrameworkReferenceObserved": false,
      "policyEvidenceProvenanceContractVersion": "certscore.policy-evidence-provenance.v1",
      "gdprTransparencyProductionEvidenceEnabled": true,
      "gdprTransparencyProductionEvidenceDiagnostics": {
        "sourceCandidateCount": 2,
        "candidateDispositions": [
          {
            "topic": "recipients_or_vendor_categories",
            "confidence": 0.82,
            "disposition": "accepted",
            "matchStrength": "equivalent",
            "matchedLocale": "en",
            "rejectionReason": null,
            "sourceObservationId": "policy_surface_9c950c87"
          },
          {
            "topic": "processing_purposes",
            "confidence": 0.82,
            "disposition": "accepted",
            "matchStrength": "equivalent",
            "matchedLocale": "en",
            "rejectionReason": null,
            "sourceObservationId": "policy_surface_9c950c87"
          }
        ],
        "acceptedCandidateCount": 2,
        "rejectedCandidateCount": 0,
        "discardedCandidateCount": 0,
        "diagnosticCandidateCount": 0,
        "productionCreditSignalCount": 2
      }
    }
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

Privacy notice link/surface discovered is currently rated Observed. No site remediation is indicated from this row alone; rerun after material site, policy, or tag changes.

Legal basis disclosureNot confirmed by scan evidence; No production-approved topic match was established. This neutral result does not establish that the disclosure is absent.Not confirmed

JSON evidence

Policy source

Public-Web Evidence & Transparency Research | ErgoVeritas — https://ergoveritas.com/privacy

Source policy language: en; banner/page language: en; translation applied: No.

Policy reached through: Footer Link; directly linked from scanned page: Yes; retrieved during scan: 2026-09-08T04:28:54.177Z.

Section: Not retained; update text: Last updated August 6, 2026 Static website ErgoVerita.

No production-approved topic match was established. This neutral result does not establish that the disclosure is absent.

Full evidence JSON

{
  "assessmentStatus": "coverage_limitation",
  "checklistItemId": "legal_basis_disclosure_observed",
  "coverageArea": "Legal basis disclosure",
  "evidenceState": "not_testable",
  "explanation": "Whether retained privacy-policy evidence included a canonical legal-basis disclosure signal.",
  "note": "Whether retained privacy-policy evidence included a canonical legal-basis disclosure signal.",
  "status": "Not confirmed",
  "tone": "neutral",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.legal_basis_disclosure_observed.not_confirmed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.legal_basis_disclosure_observed"
  },
  "statusBasis": "No production-approved topic match was established. This neutral result does not establish that the disclosure is absent.",
  "retainedEvidence": {
    "signalObserved": "not_confirmed_canonical_projection_unavailable",
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "canonicalProjectionState": "normalized_concern_unavailable",
    "policyEvidenceAssessment": {
      "result": "extraction_incomplete",
      "scoreEffect": "none",
      "topicRelevance": "unknown",
      "contractVersion": "certscore.policy-topic-evidence-assessment.v1"
    },
    "policyEvidenceProvenance": {
      "sourceUrl": "https://ergoveritas.com/privacy",
      "policyTitle": "Public-Web Evidence & Transparency Research | ErgoVeritas",
      "artifactRefs": [
        "policy_excerpt_9c950c87",
        "policy_surface_text_9c950c87"
      ],
      "bannerLanguage": "en",
      "contractVersion": "certscore.policy-evidence-provenance.v1",
      "discoveryMethod": "footer_link",
      "lastUpdatedText": "Last updated August 6, 2026 Static website ErgoVerita",
      "detectedLanguage": "en",
      "retrievalTimestamp": "2026-09-08T04:28:54.177Z",
      "targetRelationship": "target_controller",
      "translationApplied": false,
      "documentOwnerEntity": "Public",
      "ownershipConfidence": 0.98,
      "directlyLinkedFromScannedPage": true
    },
    "selectedEvidenceStrength": "missing",
    "policyTextExtractionHealth": {
      "policyUrls": [
        "https://ergoveritas.com/privacy"
      ],
      "nanoInvoked": false,
      "contractVersion": "certscore.policy-text-extraction-health.v2",
      "policyTextQuality": {
        "usable": true,
        "codeSignalCount": 0,
        "codeSymbolRatio": 0.0006459948320413437,
        "policyTermCount": 6,
        "alphabeticWordRatio": 0.8416289592760181,
        "accessChallengeSignalCount": 0,
        "naturalLanguageSentenceCount": 12
      },
      "policyUrlRetained": true,
      "extractedTextLength": 1548,
      "policySurfaceObserved": true,
      "detectedPolicyLanguage": "en",
      "minimumTextLengthRequired": 500,
      "policyTextExtractionStatus": "ok",
      "verifiedPolicyDocumentCount": 1,
      "detectedPolicyLanguageSource": "policy_surface",
      "supportedGdprTransparencyLocales": [
        "en",
        "de",
        "fr",
        "es",
        "it",
        "nl",
        "pl",
        "pt",
        "ru",
        "ja",
        "zh",
        "ar",
        "sv",
        "ro",
        "cs",
        "el",
        "hu",
        "da",
        "fi",
        "sk",
        "bg",
        "hr",
        "nb",
        "sl",
        "lt",
        "lv",
        "et",
        "uk",
        "tr",
        "fa",
        "vi",
        "id",
        "ko",
        "th",
        "he",
        "sr",
        "ca",
        "hi",
        "az",
        "gl"
      ],
      "gdprTransparencyLanguageSupported": true,
      "policyTextEvidenceProjectionStatus": "verified_complete",
      "policyTextEvidenceProjectionContractVersion": "certscore.policy-text-evidence-projection.v1"
    },
    "selectedEvidenceArtifactId": "coverage_policy",
    "article13CoverageAssessment": {
      "topic": "legal_basis",
      "status": "insufficient_retained_evidence",
      "sourceUrls": [
        "https://ergoveritas.com/privacy/"
      ],
      "reasonCodes": [
        "policy_absence_coverage_preconditions_not_met",
        "typed_topic_coverage_diagnostic_missing_or_limited",
        "policy_document_content_coverage_incomplete"
      ],
      "coverageStatus": "insufficient",
      "policyDocumentIds": [
        "policy_surface_9c950c87"
      ],
      "policyDocumentRoles": [
        "policy_document"
      ],
      "policyDocumentSha256": [
        "1b36f348c66ea3096ea9e5afdf2c1d0a3a8ce14c55b471542d119e41b1e5bbce"
      ],
      "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
      "unresolvedMaterialPolicyChildUrls": []
    },
    "gdprTransparencyReportStatusContract": "observed_not_confirmed_no_match_found.v1"
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

The scan could not retrieve enough policy text to evaluate this item. This does not indicate a policy problem by itself. Review the source policy manually or improve how the policy page is made available to the scan.

Retention disclosureNot confirmed by scan evidence; No production-approved topic match was established. This neutral result does not establish that the disclosure is absent.Not confirmed

JSON evidence

Policy source

Public-Web Evidence & Transparency Research | ErgoVeritas — https://ergoveritas.com/privacy

Source policy language: en; banner/page language: en; translation applied: No.

Policy reached through: Footer Link; directly linked from scanned page: Yes; retrieved during scan: 2026-09-08T04:28:54.177Z.

Section: Not retained; update text: Last updated August 6, 2026 Static website ErgoVerita.

No production-approved topic match was established. This neutral result does not establish that the disclosure is absent.

Full evidence JSON

{
  "assessmentStatus": "coverage_limitation",
  "checklistItemId": "retention_disclosure_observed",
  "coverageArea": "Retention disclosure",
  "evidenceState": "not_testable",
  "explanation": "Whether retained privacy-policy evidence included a data-retention disclosure signal.",
  "note": "Whether retained privacy-policy evidence included a data-retention disclosure signal.",
  "status": "Not confirmed",
  "tone": "neutral",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.retention_disclosure_observed.not_confirmed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.retention_disclosure_observed"
  },
  "statusBasis": "No production-approved topic match was established. This neutral result does not establish that the disclosure is absent.",
  "retainedEvidence": {
    "signalObserved": "not_confirmed_canonical_projection_unavailable",
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "canonicalProjectionState": "normalized_concern_unavailable",
    "policyEvidenceAssessment": {
      "result": "extraction_incomplete",
      "scoreEffect": "none",
      "topicRelevance": "unknown",
      "contractVersion": "certscore.policy-topic-evidence-assessment.v1"
    },
    "policyEvidenceProvenance": {
      "sourceUrl": "https://ergoveritas.com/privacy",
      "policyTitle": "Public-Web Evidence & Transparency Research | ErgoVeritas",
      "artifactRefs": [
        "policy_excerpt_9c950c87",
        "policy_surface_text_9c950c87"
      ],
      "bannerLanguage": "en",
      "contractVersion": "certscore.policy-evidence-provenance.v1",
      "discoveryMethod": "footer_link",
      "lastUpdatedText": "Last updated August 6, 2026 Static website ErgoVerita",
      "detectedLanguage": "en",
      "retrievalTimestamp": "2026-09-08T04:28:54.177Z",
      "targetRelationship": "target_controller",
      "translationApplied": false,
      "documentOwnerEntity": "Public",
      "ownershipConfidence": 0.98,
      "directlyLinkedFromScannedPage": true
    },
    "selectedEvidenceStrength": "missing",
    "policyTextExtractionHealth": {
      "policyUrls": [
        "https://ergoveritas.com/privacy"
      ],
      "nanoInvoked": false,
      "contractVersion": "certscore.policy-text-extraction-health.v2",
      "policyTextQuality": {
        "usable": true,
        "codeSignalCount": 0,
        "codeSymbolRatio": 0.0006459948320413437,
        "policyTermCount": 6,
        "alphabeticWordRatio": 0.8416289592760181,
        "accessChallengeSignalCount": 0,
        "naturalLanguageSentenceCount": 12
      },
      "policyUrlRetained": true,
      "extractedTextLength": 1548,
      "policySurfaceObserved": true,
      "detectedPolicyLanguage": "en",
      "minimumTextLengthRequired": 500,
      "policyTextExtractionStatus": "ok",
      "verifiedPolicyDocumentCount": 1,
      "detectedPolicyLanguageSource": "policy_surface",
      "supportedGdprTransparencyLocales": [
        "en",
        "de",
        "fr",
        "es",
        "it",
        "nl",
        "pl",
        "pt",
        "ru",
        "ja",
        "zh",
        "ar",
        "sv",
        "ro",
        "cs",
        "el",
        "hu",
        "da",
        "fi",
        "sk",
        "bg",
        "hr",
        "nb",
        "sl",
        "lt",
        "lv",
        "et",
        "uk",
        "tr",
        "fa",
        "vi",
        "id",
        "ko",
        "th",
        "he",
        "sr",
        "ca",
        "hi",
        "az",
        "gl"
      ],
      "gdprTransparencyLanguageSupported": true,
      "policyTextEvidenceProjectionStatus": "verified_complete",
      "policyTextEvidenceProjectionContractVersion": "certscore.policy-text-evidence-projection.v1"
    },
    "selectedEvidenceArtifactId": "coverage_policy",
    "article13CoverageAssessment": {
      "topic": "data_retention",
      "status": "insufficient_retained_evidence",
      "sourceUrls": [
        "https://ergoveritas.com/privacy/"
      ],
      "reasonCodes": [
        "policy_absence_coverage_preconditions_not_met",
        "typed_topic_coverage_diagnostic_missing_or_limited",
        "policy_document_content_coverage_incomplete"
      ],
      "coverageStatus": "insufficient",
      "policyDocumentIds": [
        "policy_surface_9c950c87"
      ],
      "policyDocumentRoles": [
        "policy_document"
      ],
      "policyDocumentSha256": [
        "1b36f348c66ea3096ea9e5afdf2c1d0a3a8ce14c55b471542d119e41b1e5bbce"
      ],
      "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
      "unresolvedMaterialPolicyChildUrls": []
    },
    "gdprTransparencyReportStatusContract": "observed_not_confirmed_no_match_found.v1"
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

Controller/contact disclosureNot confirmed by scan evidence; No production-approved topic match was established. This neutral result does not establish that the disclosure is absent.Not confirmed

JSON evidence

Policy source

Public-Web Evidence & Transparency Research | ErgoVeritas — https://ergoveritas.com/privacy

Source policy language: en; banner/page language: en; translation applied: No.

Policy reached through: Footer Link; directly linked from scanned page: Yes; retrieved during scan: 2026-09-08T04:28:54.177Z.

Section: Not retained; update text: Last updated August 6, 2026 Static website ErgoVerita.

No production-approved topic match was established. This neutral result does not establish that the disclosure is absent.

Full evidence JSON

{
  "assessmentStatus": "coverage_limitation",
  "checklistItemId": "controller_contact_disclosure",
  "coverageArea": "Controller/contact disclosure",
  "evidenceState": "not_testable",
  "explanation": "Whether retained privacy-policy evidence included a controller, privacy contact, or equivalent contact point.",
  "note": "Whether retained privacy-policy evidence included a controller, privacy contact, or equivalent contact point.",
  "status": "Not confirmed",
  "tone": "neutral",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.controller_contact_disclosure.not_confirmed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.controller_contact_disclosure"
  },
  "statusBasis": "No production-approved topic match was established. This neutral result does not establish that the disclosure is absent.",
  "retainedEvidence": {
    "signalObserved": "not_confirmed_canonical_projection_unavailable",
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "canonicalProjectionState": "normalized_concern_unavailable",
    "policyEvidenceAssessment": {
      "result": "extraction_incomplete",
      "scoreEffect": "none",
      "topicRelevance": "unknown",
      "contractVersion": "certscore.policy-topic-evidence-assessment.v1"
    },
    "policyEvidenceProvenance": {
      "sourceUrl": "https://ergoveritas.com/privacy",
      "policyTitle": "Public-Web Evidence & Transparency Research | ErgoVeritas",
      "artifactRefs": [
        "policy_excerpt_9c950c87",
        "policy_surface_text_9c950c87"
      ],
      "bannerLanguage": "en",
      "contractVersion": "certscore.policy-evidence-provenance.v1",
      "discoveryMethod": "footer_link",
      "lastUpdatedText": "Last updated August 6, 2026 Static website ErgoVerita",
      "detectedLanguage": "en",
      "retrievalTimestamp": "2026-09-08T04:28:54.177Z",
      "targetRelationship": "target_controller",
      "translationApplied": false,
      "documentOwnerEntity": "Public",
      "ownershipConfidence": 0.98,
      "directlyLinkedFromScannedPage": true
    },
    "selectedEvidenceStrength": "missing",
    "policyTextExtractionHealth": {
      "policyUrls": [
        "https://ergoveritas.com/privacy"
      ],
      "nanoInvoked": false,
      "contractVersion": "certscore.policy-text-extraction-health.v2",
      "policyTextQuality": {
        "usable": true,
        "codeSignalCount": 0,
        "codeSymbolRatio": 0.0006459948320413437,
        "policyTermCount": 6,
        "alphabeticWordRatio": 0.8416289592760181,
        "accessChallengeSignalCount": 0,
        "naturalLanguageSentenceCount": 12
      },
      "policyUrlRetained": true,
      "extractedTextLength": 1548,
      "policySurfaceObserved": true,
      "detectedPolicyLanguage": "en",
      "minimumTextLengthRequired": 500,
      "policyTextExtractionStatus": "ok",
      "verifiedPolicyDocumentCount": 1,
      "detectedPolicyLanguageSource": "policy_surface",
      "supportedGdprTransparencyLocales": [
        "en",
        "de",
        "fr",
        "es",
        "it",
        "nl",
        "pl",
        "pt",
        "ru",
        "ja",
        "zh",
        "ar",
        "sv",
        "ro",
        "cs",
        "el",
        "hu",
        "da",
        "fi",
        "sk",
        "bg",
        "hr",
        "nb",
        "sl",
        "lt",
        "lv",
        "et",
        "uk",
        "tr",
        "fa",
        "vi",
        "id",
        "ko",
        "th",
        "he",
        "sr",
        "ca",
        "hi",
        "az",
        "gl"
      ],
      "gdprTransparencyLanguageSupported": true,
      "policyTextEvidenceProjectionStatus": "verified_complete",
      "policyTextEvidenceProjectionContractVersion": "certscore.policy-text-evidence-projection.v1"
    },
    "selectedEvidenceArtifactId": "coverage_policy",
    "article13CoverageAssessment": {
      "topic": "controller_contact",
      "status": "insufficient_retained_evidence",
      "sourceUrls": [
        "https://ergoveritas.com/privacy/"
      ],
      "reasonCodes": [
        "policy_absence_coverage_preconditions_not_met",
        "typed_topic_coverage_diagnostic_missing_or_limited",
        "policy_document_content_coverage_incomplete"
      ],
      "coverageStatus": "insufficient",
      "policyDocumentIds": [
        "policy_surface_9c950c87"
      ],
      "policyDocumentRoles": [
        "policy_document"
      ],
      "policyDocumentSha256": [
        "1b36f348c66ea3096ea9e5afdf2c1d0a3a8ce14c55b471542d119e41b1e5bbce"
      ],
      "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
      "unresolvedMaterialPolicyChildUrls": []
    },
    "gdprTransparencyReportStatusContract": "observed_not_confirmed_no_match_found.v1"
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

Processing purposes disclosurePolicy text included matching disclosure evidence: "Privacy Policy. We use this information to understand site usage, verify changes, and diagnose usability issues. Microsoft Clarity is configured to...[more evidence available]"Observed

JSON evidence

Policy source

Public-Web Evidence & Transparency Research | ErgoVeritas — https://ergoveritas.com/privacy/

Source policy language: en; banner/page language: en; translation applied: No.

Policy reached through: Footer Link; directly linked from scanned page: Yes; retrieved during scan: 2026-09-08T04:28:54.177Z.

Section: Not retained; update text: Last updated August 6, 2026 Static website ErgoVerita.

Matched disclosure snippet: Privacy Policy. We use this information to understand site usage, verify changes, and diagnose usability issues. Microsof…

Full evidence JSON

{
  "assessmentStatus": "checked",
  "checklistItemId": "processing_purposes_disclosure",
  "coverageArea": "Processing purposes disclosure",
  "evidenceState": "observed",
  "explanation": "Whether retained privacy-policy evidence described the purposes for processing personal data.",
  "note": "Whether retained privacy-policy evidence described the purposes for processing personal data.",
  "status": "Observed",
  "tone": "warning",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.processing_purposes_disclosure.observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.processing_purposes_disclosure"
  },
  "statusBasis": "Processing purposes disclosure evidence was retained through adapter-approved multilingual GDPR Transparency Article 13 evidence.",
  "retainedEvidence": {
    "evidenceRefs": [
      "Evidence: Processing purposes disclosure",
      "Excerpt: Privacy Policy. We use this information to understand site usage, verify changes, and diagnose usability issues. Microsoft Clarity is configured to mask sensitive content in session recordings.",
      "Policy URL: https://ergoveritas.com/privacy/"
    ],
    "signalObserved": true,
    "article13Signal": {
      "source": "normalized_concern",
      "status": "observed",
      "confidence": 0.97,
      "surfaceUrl": "https://ergoveritas.com/privacy/",
      "evidenceText": "Privacy Policy. We use this information to understand site usage, verify changes, and diagnose usability issues. Microsoft Clarity is configured to mask sensitive content in session recordings.",
      "matchedLocale": null,
      "disclosureType": "processing_purposes",
      "evidenceSource": "normalized_gdpr_transparency_article13_concern",
      "productionCredit": true,
      "classifierProvenance": "mini_policy_semantic_review.v2",
      "classifierReasonCodes": [
        "purpose_disclosure_present",
        "site_analytics_and_support_purposes",
        "verified_retained_topic_evidence",
        "policy_review_invariants_applied_v1"
      ],
      "productionCreditProfile": "gdpr_transparency_mini_review_v1",
      "selectedEvidenceStrength": "strong",
      "selectedPolicySectionUrl": "https://ergoveritas.com/privacy/"
    },
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "policyEvidenceAssessment": {
      "result": "disclosure_observed",
      "scoreEffect": "canonical_policy",
      "topicRelevance": "direct",
      "contractVersion": "certscore.policy-topic-evidence-assessment.v1"
    },
    "policyEvidenceProvenance": {
      "sourceUrl": "https://ergoveritas.com/privacy/",
      "policyTitle": "Public-Web Evidence & Transparency Research | ErgoVeritas",
      "artifactRefs": [
        "policy_excerpt_9c950c87",
        "policy_surface_text_9c950c87"
      ],
      "bannerLanguage": "en",
      "contractVersion": "certscore.policy-evidence-provenance.v1",
      "discoveryMethod": "footer_link",
      "lastUpdatedText": "Last updated August 6, 2026 Static website ErgoVerita",
      "detectedLanguage": "en",
      "retrievalTimestamp": "2026-09-08T04:28:54.177Z",
      "targetRelationship": "target_controller",
      "translationApplied": false,
      "documentOwnerEntity": "Public",
      "ownershipConfidence": 0.98,
      "directlyLinkedFromScannedPage": true
    },
    "selectedEvidenceStrength": "moderate",
    "selectedEvidenceArtifactId": "coverage_policy",
    "gdprTransparencyArticle13Concern": {
      "state": "sufficient",
      "topic": "processing_purposes",
      "originKey": "gdpr_transparency.article13.processing_purposes",
      "canonicalConcernKey": "runtime_artifact:gdpr_transparency.article13.processing_purposes",
      "regulatoryChecklistEligibility": "observed"
    }
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

Processing purposes disclosure is currently rated Observed. No site remediation is indicated from this row alone; rerun after material site, policy, or tag changes.

Recipients/vendor categories disclosedPolicy text included matching disclosure evidence: "Our hosting and content-delivery providers may process ordinary request information …"Observed

JSON evidence

Policy source

Public-Web Evidence & Transparency Research | ErgoVeritas — https://ergoveritas.com/privacy/

Source policy language: en; banner/page language: en; translation applied: No.

Policy reached through: Footer Link; directly linked from scanned page: Yes; retrieved during scan: 2026-09-08T04:28:54.177Z.

Section: Not retained; update text: Last updated August 6, 2026 Static website ErgoVerita.

Matched disclosure snippet: Our hosting and content-delivery providers may process ordinary request information …

Full evidence JSON

{
  "assessmentStatus": "checked",
  "checklistItemId": "recipients_vendor_categories_disclosure",
  "coverageArea": "Recipients/vendor categories disclosed",
  "evidenceState": "observed",
  "explanation": "Whether retained privacy-policy evidence described recipient, vendor, or 3rd party categories.",
  "note": "Whether retained privacy-policy evidence described recipient, vendor, or 3rd party categories.",
  "status": "Observed",
  "tone": "warning",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.recipients_vendor_categories_disclosure.observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.recipients_vendor_categories_disclosure"
  },
  "statusBasis": "Recipients/vendor categories disclosure evidence was retained through adapter-approved multilingual GDPR Transparency Article 13 evidence.",
  "retainedEvidence": {
    "evidenceRefs": [
      "Evidence: Recipients/vendor categories disclosure",
      "Excerpt: Our hosting and content-delivery providers may process ordinary request information …",
      "Policy URL: https://ergoveritas.com/privacy/"
    ],
    "signalObserved": true,
    "article13Signal": {
      "source": "normalized_concern",
      "status": "observed",
      "confidence": 0.96,
      "surfaceUrl": "https://ergoveritas.com/privacy/",
      "evidenceText": "Our hosting and content-delivery providers may process ordinary request information …",
      "matchedLocale": null,
      "disclosureType": "recipients_or_vendor_categories",
      "evidenceSource": "normalized_gdpr_transparency_article13_concern",
      "productionCredit": true,
      "classifierProvenance": "mini_policy_semantic_review.v2",
      "classifierReasonCodes": [
        "named_recipient_categories",
        "named_third_party_services",
        "review_excerpt_topic_evidence_verified",
        "policy_review_invariants_applied_v1"
      ],
      "productionCreditProfile": "gdpr_transparency_mini_review_v1",
      "selectedEvidenceStrength": "strong",
      "selectedPolicySectionUrl": "https://ergoveritas.com/privacy/"
    },
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "policyEvidenceAssessment": {
      "result": "disclosure_observed",
      "scoreEffect": "canonical_policy",
      "topicRelevance": "direct",
      "contractVersion": "certscore.policy-topic-evidence-assessment.v1"
    },
    "policyEvidenceProvenance": {
      "sourceUrl": "https://ergoveritas.com/privacy/",
      "policyTitle": "Public-Web Evidence & Transparency Research | ErgoVeritas",
      "artifactRefs": [
        "policy_excerpt_9c950c87",
        "policy_surface_text_9c950c87"
      ],
      "bannerLanguage": "en",
      "contractVersion": "certscore.policy-evidence-provenance.v1",
      "discoveryMethod": "footer_link",
      "lastUpdatedText": "Last updated August 6, 2026 Static website ErgoVerita",
      "detectedLanguage": "en",
      "retrievalTimestamp": "2026-09-08T04:28:54.177Z",
      "targetRelationship": "target_controller",
      "translationApplied": false,
      "documentOwnerEntity": "Public",
      "ownershipConfidence": 0.98,
      "directlyLinkedFromScannedPage": true
    },
    "selectedEvidenceStrength": "moderate",
    "selectedEvidenceArtifactId": "coverage_policy",
    "gdprTransparencyArticle13Concern": {
      "state": "sufficient",
      "topic": "recipients_or_vendor_categories",
      "originKey": "gdpr_transparency.article13.recipients_or_vendor_categories",
      "canonicalConcernKey": "runtime_artifact:gdpr_transparency.article13.recipients_or_vendor_categories",
      "regulatoryChecklistEligibility": "observed"
    }
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

Recipients/vendor categories disclosed is currently rated Observed. No site remediation is indicated from this row alone; rerun after material site, policy, or tag changes.

Data subject rights disclosureNot confirmed by scan evidence; No production-approved topic match was established. This neutral result does not establish that the disclosure is absent.Not confirmed

JSON evidence

Policy source

Public-Web Evidence & Transparency Research | ErgoVeritas — https://ergoveritas.com/privacy

Source policy language: en; banner/page language: en; translation applied: No.

Policy reached through: Footer Link; directly linked from scanned page: Yes; retrieved during scan: 2026-09-08T04:28:54.177Z.

Section: Not retained; update text: Last updated August 6, 2026 Static website ErgoVerita.

No production-approved topic match was established. This neutral result does not establish that the disclosure is absent.

Full evidence JSON

{
  "assessmentStatus": "coverage_limitation",
  "checklistItemId": "data_subject_rights_disclosure",
  "coverageArea": "Data subject rights disclosure",
  "evidenceState": "not_testable",
  "explanation": "Whether retained privacy-policy evidence described data subject rights or a rights request path.",
  "note": "Whether retained privacy-policy evidence described data subject rights or a rights request path.",
  "status": "Not confirmed",
  "tone": "neutral",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.data_subject_rights_disclosure.not_confirmed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.data_subject_rights_disclosure"
  },
  "statusBasis": "No production-approved topic match was established. This neutral result does not establish that the disclosure is absent.",
  "retainedEvidence": {
    "signalObserved": "not_confirmed_canonical_projection_unavailable",
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "canonicalProjectionState": "normalized_concern_unavailable",
    "policyEvidenceAssessment": {
      "result": "extraction_incomplete",
      "scoreEffect": "none",
      "topicRelevance": "unknown",
      "contractVersion": "certscore.policy-topic-evidence-assessment.v1"
    },
    "policyEvidenceProvenance": {
      "sourceUrl": "https://ergoveritas.com/privacy",
      "policyTitle": "Public-Web Evidence & Transparency Research | ErgoVeritas",
      "artifactRefs": [
        "policy_excerpt_9c950c87",
        "policy_surface_text_9c950c87"
      ],
      "bannerLanguage": "en",
      "contractVersion": "certscore.policy-evidence-provenance.v1",
      "discoveryMethod": "footer_link",
      "lastUpdatedText": "Last updated August 6, 2026 Static website ErgoVerita",
      "detectedLanguage": "en",
      "retrievalTimestamp": "2026-09-08T04:28:54.177Z",
      "targetRelationship": "target_controller",
      "translationApplied": false,
      "documentOwnerEntity": "Public",
      "ownershipConfidence": 0.98,
      "directlyLinkedFromScannedPage": true
    },
    "selectedEvidenceStrength": "missing",
    "policyTextExtractionHealth": {
      "policyUrls": [
        "https://ergoveritas.com/privacy"
      ],
      "nanoInvoked": false,
      "contractVersion": "certscore.policy-text-extraction-health.v2",
      "policyTextQuality": {
        "usable": true,
        "codeSignalCount": 0,
        "codeSymbolRatio": 0.0006459948320413437,
        "policyTermCount": 6,
        "alphabeticWordRatio": 0.8416289592760181,
        "accessChallengeSignalCount": 0,
        "naturalLanguageSentenceCount": 12
      },
      "policyUrlRetained": true,
      "extractedTextLength": 1548,
      "policySurfaceObserved": true,
      "detectedPolicyLanguage": "en",
      "minimumTextLengthRequired": 500,
      "policyTextExtractionStatus": "ok",
      "verifiedPolicyDocumentCount": 1,
      "detectedPolicyLanguageSource": "policy_surface",
      "supportedGdprTransparencyLocales": [
        "en",
        "de",
        "fr",
        "es",
        "it",
        "nl",
        "pl",
        "pt",
        "ru",
        "ja",
        "zh",
        "ar",
        "sv",
        "ro",
        "cs",
        "el",
        "hu",
        "da",
        "fi",
        "sk",
        "bg",
        "hr",
        "nb",
        "sl",
        "lt",
        "lv",
        "et",
        "uk",
        "tr",
        "fa",
        "vi",
        "id",
        "ko",
        "th",
        "he",
        "sr",
        "ca",
        "hi",
        "az",
        "gl"
      ],
      "gdprTransparencyLanguageSupported": true,
      "policyTextEvidenceProjectionStatus": "verified_complete",
      "policyTextEvidenceProjectionContractVersion": "certscore.policy-text-evidence-projection.v1"
    },
    "selectedEvidenceArtifactId": "coverage_policy",
    "article13CoverageAssessment": {
      "topic": "data_subject_rights",
      "status": "insufficient_retained_evidence",
      "sourceUrls": [
        "https://ergoveritas.com/privacy/"
      ],
      "reasonCodes": [
        "policy_absence_coverage_preconditions_not_met",
        "typed_topic_coverage_diagnostic_missing_or_limited",
        "policy_document_content_coverage_incomplete"
      ],
      "coverageStatus": "insufficient",
      "policyDocumentIds": [
        "policy_surface_9c950c87"
      ],
      "policyDocumentRoles": [
        "policy_document"
      ],
      "policyDocumentSha256": [
        "1b36f348c66ea3096ea9e5afdf2c1d0a3a8ce14c55b471542d119e41b1e5bbce"
      ],
      "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
      "unresolvedMaterialPolicyChildUrls": []
    },
    "gdprTransparencyReportStatusContract": "observed_not_confirmed_no_match_found.v1"
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

International transfer disclosureNot confirmed by scan evidence; No production-approved topic match was established. This neutral result does not establish that the disclosure is absent.Not confirmed

JSON evidence

Policy source

Public-Web Evidence & Transparency Research | ErgoVeritas — https://ergoveritas.com/privacy

Source policy language: en; banner/page language: en; translation applied: No.

Policy reached through: Footer Link; directly linked from scanned page: Yes; retrieved during scan: 2026-09-08T04:28:54.177Z.

Section: Not retained; update text: Last updated August 6, 2026 Static website ErgoVerita.

No production-approved topic match was established. This neutral result does not establish that the disclosure is absent.

Full evidence JSON

{
  "assessmentStatus": "coverage_limitation",
  "checklistItemId": "international_transfers_disclosure",
  "coverageArea": "International transfer disclosure",
  "evidenceState": "not_testable",
  "explanation": "Whether retained privacy-policy evidence described international transfers or transfer-relevant endpoint/vendor context.",
  "note": "Whether retained privacy-policy evidence described international transfers or transfer-relevant endpoint/vendor context.",
  "status": "Not confirmed",
  "tone": "neutral",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.international_transfers_disclosure.not_confirmed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.international_transfers_disclosure"
  },
  "statusBasis": "No production-approved topic match was established. This neutral result does not establish that the disclosure is absent.",
  "retainedEvidence": {
    "signalObserved": "not_confirmed_canonical_projection_unavailable",
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "canonicalProjectionState": "normalized_concern_unavailable",
    "policyEvidenceAssessment": {
      "result": "extraction_incomplete",
      "scoreEffect": "none",
      "topicRelevance": "unknown",
      "contractVersion": "certscore.policy-topic-evidence-assessment.v1"
    },
    "policyEvidenceProvenance": {
      "sourceUrl": "https://ergoveritas.com/privacy",
      "policyTitle": "Public-Web Evidence & Transparency Research | ErgoVeritas",
      "artifactRefs": [
        "policy_excerpt_9c950c87",
        "policy_surface_text_9c950c87"
      ],
      "bannerLanguage": "en",
      "contractVersion": "certscore.policy-evidence-provenance.v1",
      "discoveryMethod": "footer_link",
      "lastUpdatedText": "Last updated August 6, 2026 Static website ErgoVerita",
      "detectedLanguage": "en",
      "retrievalTimestamp": "2026-09-08T04:28:54.177Z",
      "targetRelationship": "target_controller",
      "translationApplied": false,
      "documentOwnerEntity": "Public",
      "ownershipConfidence": 0.98,
      "directlyLinkedFromScannedPage": true
    },
    "selectedEvidenceStrength": "missing",
    "policyTextExtractionHealth": {
      "policyUrls": [
        "https://ergoveritas.com/privacy"
      ],
      "nanoInvoked": false,
      "contractVersion": "certscore.policy-text-extraction-health.v2",
      "policyTextQuality": {
        "usable": true,
        "codeSignalCount": 0,
        "codeSymbolRatio": 0.0006459948320413437,
        "policyTermCount": 6,
        "alphabeticWordRatio": 0.8416289592760181,
        "accessChallengeSignalCount": 0,
        "naturalLanguageSentenceCount": 12
      },
      "policyUrlRetained": true,
      "extractedTextLength": 1548,
      "policySurfaceObserved": true,
      "detectedPolicyLanguage": "en",
      "minimumTextLengthRequired": 500,
      "policyTextExtractionStatus": "ok",
      "verifiedPolicyDocumentCount": 1,
      "detectedPolicyLanguageSource": "policy_surface",
      "supportedGdprTransparencyLocales": [
        "en",
        "de",
        "fr",
        "es",
        "it",
        "nl",
        "pl",
        "pt",
        "ru",
        "ja",
        "zh",
        "ar",
        "sv",
        "ro",
        "cs",
        "el",
        "hu",
        "da",
        "fi",
        "sk",
        "bg",
        "hr",
        "nb",
        "sl",
        "lt",
        "lv",
        "et",
        "uk",
        "tr",
        "fa",
        "vi",
        "id",
        "ko",
        "th",
        "he",
        "sr",
        "ca",
        "hi",
        "az",
        "gl"
      ],
      "gdprTransparencyLanguageSupported": true,
      "policyTextEvidenceProjectionStatus": "verified_complete",
      "policyTextEvidenceProjectionContractVersion": "certscore.policy-text-evidence-projection.v1"
    },
    "selectedEvidenceArtifactId": "coverage_policy",
    "article13CoverageAssessment": {
      "topic": "international_transfers",
      "status": "insufficient_retained_evidence",
      "sourceUrls": [
        "https://ergoveritas.com/privacy/"
      ],
      "reasonCodes": [
        "policy_absence_coverage_preconditions_not_met",
        "typed_topic_coverage_diagnostic_missing_or_limited",
        "policy_document_content_coverage_incomplete"
      ],
      "coverageStatus": "insufficient",
      "policyDocumentIds": [
        "policy_surface_9c950c87"
      ],
      "policyDocumentRoles": [
        "policy_document"
      ],
      "policyDocumentSha256": [
        "1b36f348c66ea3096ea9e5afdf2c1d0a3a8ce14c55b471542d119e41b1e5bbce"
      ],
      "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
      "unresolvedMaterialPolicyChildUrls": []
    },
    "gdprTransparencyReportStatusContract": "observed_not_confirmed_no_match_found.v1"
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

DPO contact point (where applicable)Not confirmed by scan evidence; No production-approved topic match was established. This neutral result does not establish that the disclosure is absent.Not confirmed

JSON evidence

Policy source

Public-Web Evidence & Transparency Research | ErgoVeritas — https://ergoveritas.com/privacy

Source policy language: en; banner/page language: en; translation applied: No.

Policy reached through: Footer Link; directly linked from scanned page: Yes; retrieved during scan: 2026-09-08T04:28:54.177Z.

Section: Not retained; update text: Last updated August 6, 2026 Static website ErgoVerita.

No production-approved topic match was established. This neutral result does not establish that the disclosure is absent.

Full evidence JSON

{
  "assessmentStatus": "coverage_limitation",
  "checklistItemId": "dpo_contact_point_disclosure",
  "coverageArea": "DPO contact point (where applicable)",
  "evidenceState": "not_testable",
  "explanation": "Whether retained privacy-policy evidence identified a designated data protection officer or equivalent statutory DPO contact. A generic privacy mailbox is credited under controller/contact disclosure and does not by itself establish a DPO designation.",
  "note": "Whether retained privacy-policy evidence identified a designated data protection officer or equivalent statutory DPO contact. A generic privacy mailbox is credited under controller/contact disclosure and does not by itself establish a DPO designation.",
  "status": "Not confirmed",
  "tone": "neutral",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.dpo_contact_point_disclosure.not_confirmed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.dpo_contact_point_disclosure"
  },
  "statusBasis": "No production-approved topic match was established. This neutral result does not establish that the disclosure is absent.",
  "retainedEvidence": {
    "signalObserved": "not_confirmed_canonical_projection_unavailable",
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "canonicalProjectionState": "normalized_concern_unavailable",
    "policyEvidenceAssessment": {
      "result": "extraction_incomplete",
      "scoreEffect": "none",
      "topicRelevance": "unknown",
      "contractVersion": "certscore.policy-topic-evidence-assessment.v1"
    },
    "policyEvidenceProvenance": {
      "sourceUrl": "https://ergoveritas.com/privacy",
      "policyTitle": "Public-Web Evidence & Transparency Research | ErgoVeritas",
      "artifactRefs": [
        "policy_excerpt_9c950c87",
        "policy_surface_text_9c950c87"
      ],
      "bannerLanguage": "en",
      "contractVersion": "certscore.policy-evidence-provenance.v1",
      "discoveryMethod": "footer_link",
      "lastUpdatedText": "Last updated August 6, 2026 Static website ErgoVerita",
      "detectedLanguage": "en",
      "retrievalTimestamp": "2026-09-08T04:28:54.177Z",
      "targetRelationship": "target_controller",
      "translationApplied": false,
      "documentOwnerEntity": "Public",
      "ownershipConfidence": 0.98,
      "directlyLinkedFromScannedPage": true
    },
    "selectedEvidenceStrength": "missing",
    "policyTextExtractionHealth": {
      "policyUrls": [
        "https://ergoveritas.com/privacy"
      ],
      "nanoInvoked": false,
      "contractVersion": "certscore.policy-text-extraction-health.v2",
      "policyTextQuality": {
        "usable": true,
        "codeSignalCount": 0,
        "codeSymbolRatio": 0.0006459948320413437,
        "policyTermCount": 6,
        "alphabeticWordRatio": 0.8416289592760181,
        "accessChallengeSignalCount": 0,
        "naturalLanguageSentenceCount": 12
      },
      "policyUrlRetained": true,
      "extractedTextLength": 1548,
      "policySurfaceObserved": true,
      "detectedPolicyLanguage": "en",
      "minimumTextLengthRequired": 500,
      "policyTextExtractionStatus": "ok",
      "verifiedPolicyDocumentCount": 1,
      "detectedPolicyLanguageSource": "policy_surface",
      "supportedGdprTransparencyLocales": [
        "en",
        "de",
        "fr",
        "es",
        "it",
        "nl",
        "pl",
        "pt",
        "ru",
        "ja",
        "zh",
        "ar",
        "sv",
        "ro",
        "cs",
        "el",
        "hu",
        "da",
        "fi",
        "sk",
        "bg",
        "hr",
        "nb",
        "sl",
        "lt",
        "lv",
        "et",
        "uk",
        "tr",
        "fa",
        "vi",
        "id",
        "ko",
        "th",
        "he",
        "sr",
        "ca",
        "hi",
        "az",
        "gl"
      ],
      "gdprTransparencyLanguageSupported": true,
      "policyTextEvidenceProjectionStatus": "verified_complete",
      "policyTextEvidenceProjectionContractVersion": "certscore.policy-text-evidence-projection.v1"
    },
    "selectedEvidenceArtifactId": "coverage_policy",
    "article13CoverageAssessment": {
      "topic": "dpo_contact",
      "status": "insufficient_retained_evidence",
      "sourceUrls": [
        "https://ergoveritas.com/privacy/"
      ],
      "reasonCodes": [
        "policy_absence_coverage_preconditions_not_met",
        "typed_topic_coverage_diagnostic_missing_or_limited",
        "policy_document_content_coverage_incomplete"
      ],
      "coverageStatus": "insufficient",
      "policyDocumentIds": [
        "policy_surface_9c950c87"
      ],
      "policyDocumentRoles": [
        "policy_document"
      ],
      "policyDocumentSha256": [
        "1b36f348c66ea3096ea9e5afdf2c1d0a3a8ce14c55b471542d119e41b1e5bbce"
      ],
      "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
      "unresolvedMaterialPolicyChildUrls": []
    },
    "gdprTransparencyReportStatusContract": "observed_not_confirmed_no_match_found.v1"
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

Supervisory authority complaintNot confirmed by scan evidence; No production-approved topic match was established. This neutral result does not establish that the disclosure is absent.Not confirmed

JSON evidence

Policy source

Public-Web Evidence & Transparency Research | ErgoVeritas — https://ergoveritas.com/privacy

Source policy language: en; banner/page language: en; translation applied: No.

Policy reached through: Footer Link; directly linked from scanned page: Yes; retrieved during scan: 2026-09-08T04:28:54.177Z.

Section: Not retained; update text: Last updated August 6, 2026 Static website ErgoVerita.

No production-approved topic match was established. This neutral result does not establish that the disclosure is absent.

Full evidence JSON

{
  "assessmentStatus": "coverage_limitation",
  "checklistItemId": "supervisory_authority_complaint_disclosure",
  "coverageArea": "Supervisory authority complaint",
  "evidenceState": "not_testable",
  "explanation": "Whether retained privacy-policy evidence referenced a right to complain to a supervisory authority.",
  "note": "Whether retained privacy-policy evidence referenced a right to complain to a supervisory authority.",
  "status": "Not confirmed",
  "tone": "neutral",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.supervisory_authority_complaint_disclosure.not_confirmed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.supervisory_authority_complaint_disclosure"
  },
  "statusBasis": "No production-approved topic match was established. This neutral result does not establish that the disclosure is absent.",
  "retainedEvidence": {
    "signalObserved": "not_confirmed_canonical_projection_unavailable",
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "canonicalProjectionState": "normalized_concern_unavailable",
    "policyEvidenceAssessment": {
      "result": "extraction_incomplete",
      "scoreEffect": "none",
      "topicRelevance": "unknown",
      "contractVersion": "certscore.policy-topic-evidence-assessment.v1"
    },
    "policyEvidenceProvenance": {
      "sourceUrl": "https://ergoveritas.com/privacy",
      "policyTitle": "Public-Web Evidence & Transparency Research | ErgoVeritas",
      "artifactRefs": [
        "policy_excerpt_9c950c87",
        "policy_surface_text_9c950c87"
      ],
      "bannerLanguage": "en",
      "contractVersion": "certscore.policy-evidence-provenance.v1",
      "discoveryMethod": "footer_link",
      "lastUpdatedText": "Last updated August 6, 2026 Static website ErgoVerita",
      "detectedLanguage": "en",
      "retrievalTimestamp": "2026-09-08T04:28:54.177Z",
      "targetRelationship": "target_controller",
      "translationApplied": false,
      "documentOwnerEntity": "Public",
      "ownershipConfidence": 0.98,
      "directlyLinkedFromScannedPage": true
    },
    "selectedEvidenceStrength": "missing",
    "policyTextExtractionHealth": {
      "policyUrls": [
        "https://ergoveritas.com/privacy"
      ],
      "nanoInvoked": false,
      "contractVersion": "certscore.policy-text-extraction-health.v2",
      "policyTextQuality": {
        "usable": true,
        "codeSignalCount": 0,
        "codeSymbolRatio": 0.0006459948320413437,
        "policyTermCount": 6,
        "alphabeticWordRatio": 0.8416289592760181,
        "accessChallengeSignalCount": 0,
        "naturalLanguageSentenceCount": 12
      },
      "policyUrlRetained": true,
      "extractedTextLength": 1548,
      "policySurfaceObserved": true,
      "detectedPolicyLanguage": "en",
      "minimumTextLengthRequired": 500,
      "policyTextExtractionStatus": "ok",
      "verifiedPolicyDocumentCount": 1,
      "detectedPolicyLanguageSource": "policy_surface",
      "supportedGdprTransparencyLocales": [
        "en",
        "de",
        "fr",
        "es",
        "it",
        "nl",
        "pl",
        "pt",
        "ru",
        "ja",
        "zh",
        "ar",
        "sv",
        "ro",
        "cs",
        "el",
        "hu",
        "da",
        "fi",
        "sk",
        "bg",
        "hr",
        "nb",
        "sl",
        "lt",
        "lv",
        "et",
        "uk",
        "tr",
        "fa",
        "vi",
        "id",
        "ko",
        "th",
        "he",
        "sr",
        "ca",
        "hi",
        "az",
        "gl"
      ],
      "gdprTransparencyLanguageSupported": true,
      "policyTextEvidenceProjectionStatus": "verified_complete",
      "policyTextEvidenceProjectionContractVersion": "certscore.policy-text-evidence-projection.v1"
    },
    "selectedEvidenceArtifactId": "coverage_policy",
    "article13CoverageAssessment": {
      "topic": "supervisory_authority",
      "status": "insufficient_retained_evidence",
      "sourceUrls": [
        "https://ergoveritas.com/privacy/"
      ],
      "reasonCodes": [
        "policy_absence_coverage_preconditions_not_met",
        "typed_topic_coverage_diagnostic_missing_or_limited",
        "policy_document_content_coverage_incomplete"
      ],
      "coverageStatus": "insufficient",
      "policyDocumentIds": [
        "policy_surface_9c950c87"
      ],
      "policyDocumentRoles": [
        "policy_document"
      ],
      "policyDocumentSha256": [
        "1b36f348c66ea3096ea9e5afdf2c1d0a3a8ce14c55b471542d119e41b1e5bbce"
      ],
      "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
      "unresolvedMaterialPolicyChildUrls": []
    },
    "gdprTransparencyReportStatusContract": "observed_not_confirmed_no_match_found.v1"
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

Automated decision-making / profiling disclosureNot confirmed by scan evidence; No production-approved topic match was established. This neutral result does not establish that the disclosure is absent.Not confirmed

JSON evidence

Policy source

Public-Web Evidence & Transparency Research | ErgoVeritas — https://ergoveritas.com/privacy

Source policy language: en; banner/page language: en; translation applied: No.

Policy reached through: Footer Link; directly linked from scanned page: Yes; retrieved during scan: 2026-09-08T04:28:54.177Z.

Section: Not retained; update text: Last updated August 6, 2026 Static website ErgoVerita.

No production-approved topic match was established. This neutral result does not establish that the disclosure is absent.

Full evidence JSON

{
  "assessmentStatus": "coverage_limitation",
  "checklistItemId": "automated_decision_making_profiling_disclosure",
  "coverageArea": "Automated decision-making / profiling disclosure",
  "evidenceState": "not_testable",
  "explanation": "Whether adapter-approved Article 13 evidence retained automated decision-making or profiling disclosure context for review.",
  "note": "Whether adapter-approved Article 13 evidence retained automated decision-making or profiling disclosure context for review.",
  "status": "Not confirmed",
  "tone": "neutral",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.automated_decision_making_profiling_disclosure.not_confirmed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.automated_decision_making_profiling_disclosure"
  },
  "statusBasis": "No production-approved topic match was established. This neutral result does not establish that the disclosure is absent.",
  "retainedEvidence": {
    "signalObserved": "not_confirmed_canonical_projection_unavailable",
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "canonicalProjectionState": "normalized_concern_unavailable",
    "policyEvidenceAssessment": {
      "result": "extraction_incomplete",
      "scoreEffect": "none",
      "topicRelevance": "unknown",
      "contractVersion": "certscore.policy-topic-evidence-assessment.v1"
    },
    "policyEvidenceProvenance": {
      "sourceUrl": "https://ergoveritas.com/privacy",
      "policyTitle": "Public-Web Evidence & Transparency Research | ErgoVeritas",
      "artifactRefs": [
        "policy_excerpt_9c950c87",
        "policy_surface_text_9c950c87"
      ],
      "bannerLanguage": "en",
      "contractVersion": "certscore.policy-evidence-provenance.v1",
      "discoveryMethod": "footer_link",
      "lastUpdatedText": "Last updated August 6, 2026 Static website ErgoVerita",
      "detectedLanguage": "en",
      "retrievalTimestamp": "2026-09-08T04:28:54.177Z",
      "targetRelationship": "target_controller",
      "translationApplied": false,
      "documentOwnerEntity": "Public",
      "ownershipConfidence": 0.98,
      "directlyLinkedFromScannedPage": true
    },
    "selectedEvidenceStrength": "missing",
    "policyTextExtractionHealth": {
      "policyUrls": [
        "https://ergoveritas.com/privacy"
      ],
      "nanoInvoked": false,
      "contractVersion": "certscore.policy-text-extraction-health.v2",
      "policyTextQuality": {
        "usable": true,
        "codeSignalCount": 0,
        "codeSymbolRatio": 0.0006459948320413437,
        "policyTermCount": 6,
        "alphabeticWordRatio": 0.8416289592760181,
        "accessChallengeSignalCount": 0,
        "naturalLanguageSentenceCount": 12
      },
      "policyUrlRetained": true,
      "extractedTextLength": 1548,
      "policySurfaceObserved": true,
      "detectedPolicyLanguage": "en",
      "minimumTextLengthRequired": 500,
      "policyTextExtractionStatus": "ok",
      "verifiedPolicyDocumentCount": 1,
      "detectedPolicyLanguageSource": "policy_surface",
      "supportedGdprTransparencyLocales": [
        "en",
        "de",
        "fr",
        "es",
        "it",
        "nl",
        "pl",
        "pt",
        "ru",
        "ja",
        "zh",
        "ar",
        "sv",
        "ro",
        "cs",
        "el",
        "hu",
        "da",
        "fi",
        "sk",
        "bg",
        "hr",
        "nb",
        "sl",
        "lt",
        "lv",
        "et",
        "uk",
        "tr",
        "fa",
        "vi",
        "id",
        "ko",
        "th",
        "he",
        "sr",
        "ca",
        "hi",
        "az",
        "gl"
      ],
      "gdprTransparencyLanguageSupported": true,
      "policyTextEvidenceProjectionStatus": "verified_complete",
      "policyTextEvidenceProjectionContractVersion": "certscore.policy-text-evidence-projection.v1"
    },
    "selectedEvidenceArtifactId": "coverage_policy",
    "article13CoverageAssessment": {
      "topic": "automated_decision_making_or_profiling",
      "status": "insufficient_retained_evidence",
      "sourceUrls": [
        "https://ergoveritas.com/privacy/"
      ],
      "reasonCodes": [
        "policy_absence_coverage_preconditions_not_met",
        "typed_topic_coverage_diagnostic_missing_or_limited",
        "policy_document_content_coverage_incomplete"
      ],
      "coverageStatus": "insufficient",
      "policyDocumentIds": [
        "policy_surface_9c950c87"
      ],
      "policyDocumentRoles": [
        "policy_document"
      ],
      "policyDocumentSha256": [
        "1b36f348c66ea3096ea9e5afdf2c1d0a3a8ce14c55b471542d119e41b1e5bbce"
      ],
      "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
      "unresolvedMaterialPolicyChildUrls": []
    },
    "gdprTransparencyReportStatusContract": "observed_not_confirmed_no_match_found.v1"
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

Pre-consent runtime

2 requiring review · 3 checks

Non-essential storage timing reviewNon-essential cookies or browser storage appeared before consent, but the scan could not confirm exactly when each item was set.Partial concern

JSON evidence

_ga_X5ZM7BWET3 (ergoveritas.com) non-essential, present in a check performed before consent, first seen at 2.98s.

_ga (ergoveritas.com) non-essential, present in a check performed before consent, first seen at 2.98s.

Full evidence JSON

{
  "assessmentStatus": "review_signal",
  "checklistItemId": "pre_consent_cookies_storage",
  "coverageArea": "Non-essential storage timing review",
  "evidenceState": "observed",
  "explanation": "Classified non-essential storage identities were present in a pre-consent snapshot, but retained evidence did not confirm that they were written during the scan.",
  "note": "Classified non-essential storage identities were present in a pre-consent snapshot, but retained evidence did not confirm that they were written during the scan.",
  "status": "Review signal",
  "tone": "warning",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.pre_consent_cookies_storage.review_signal",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.pre_consent_cookies_storage"
  },
  "statusBasis": "Classified non-essential storage identities were present in a pre-consent snapshot, but retained evidence did not confirm that they were written during the scan.",
  "retainedEvidence": {
    "evidenceRefs": [
      "_ga (ergoveritas.com): non_essential, present in periodic pre-consent snapshot",
      "_ga_X5ZM7BWET3 (ergoveritas.com): non_essential, present in periodic pre-consent snapshot",
      "Aggregate pre-consent storage count: 2",
      "Assessment reconciliation: reconciled"
    ],
    "cookiesSeenCount": 2,
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected retained concrete cookie/storage evidence for storage timing; request-only tracking evidence is not used as storage proof.",
    "weakerArtifactsIgnored": [],
    "selectedEvidenceStrength": "limited",
    "cookiesBeforeConsentCount": 2,
    "selectedEvidenceArtifactId": "preConsentCookieOrStorageEvidence.missing",
    "preConsentStorageAssessment": {
      "status": "snapshot_presence_only",
      "evidenceRows": [
        {
          "name": "_ga_X5ZM7BWET3",
          "party": "first_party",
          "domain": "ergoveritas.com",
          "category": "analytics",
          "storageType": "cookie",
          "essentiality": "non_essential",
          "timingEvidence": "periodic_preconsent_snapshot",
          "exclusionReason": null,
          "firstObservedMs": 2979,
          "initiatorDomain": null,
          "initiatorVendor": null,
          "essentialitySource": "canonical_registry"
        },
        {
          "name": "_ga",
          "party": "first_party",
          "domain": "ergoveritas.com",
          "category": "analytics",
          "storageType": "cookie",
          "essentiality": "non_essential",
          "timingEvidence": "periodic_preconsent_snapshot",
          "exclusionReason": null,
          "firstObservedMs": 2979,
          "initiatorDomain": null,
          "initiatorVendor": null,
          "essentialitySource": "canonical_registry"
        }
      ],
      "provenWriteCount": 0,
      "assessmentVersion": "pre-consent-storage-assessment-v1",
      "unclassifiedCount": 0,
      "reconciliationStatus": "reconciled",
      "snapshotPresenceCount": 2,
      "aggregateObservedCount": 2,
      "classifiedEssentialCount": 0,
      "classifiedNonEssentialCount": 2,
      "attributedPreConsentRecordCount": 2,
      "excludedFunctionalOrConsentCount": 0
    },
    "preConsentStorageAssessmentStatus": "snapshot_presence_only",
    "eligiblePreconsentCookieStorageRows": [
      {
        "name": "_ga_X5ZM7BWET3",
        "party": "first_party",
        "domain": "ergoveritas.com",
        "category": "analytics",
        "storageType": "cookie",
        "essentiality": "non_essential",
        "timingEvidence": "periodic_preconsent_snapshot",
        "exclusionReason": null,
        "firstObservedMs": 2979,
        "initiatorDomain": null,
        "initiatorVendor": null,
        "essentialitySource": "canonical_registry"
      },
      {
        "name": "_ga",
        "party": "first_party",
        "domain": "ergoveritas.com",
        "category": "analytics",
        "storageType": "cookie",
        "essentiality": "non_essential",
        "timingEvidence": "periodic_preconsent_snapshot",
        "exclusionReason": null,
        "firstObservedMs": 2979,
        "initiatorDomain": null,
        "initiatorVendor": null,
        "essentialitySource": "canonical_registry"
      }
    ],
    "snapshotOnlyNonEssentialCookieNames": [
      "_ga_X5ZM7BWET3",
      "_ga"
    ],
    "rowLevelEssentialityEvidenceRetained": true,
    "firstPreconsentCookieOrStorageObservedMs": 2979,
    "preConsentStorageClassificationLimitation": true,
    "preconsentCookieOrStorageExactTimingRetained": false,
    "eligibleNonEssentialCookieStorageFindingProjected": false
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

1Review the evidence details for the specific signal behind Non-essential storage timing review.
2Update the affected consent, policy, tag-manager, vendor, or user-choice implementation.
3Retest in a fresh browser context so prior cookies or preferences do not hide the change.
4Rerun the scan and confirm the result reflects the change or clearly explains why the page could not be fully evaluated.
5Keep a short internal record of what changed so the next scan can be compared with the same page and settings.

Session replay signalSession replay or behavioral analytics signals were observed: Microsoft Clarity; first seen 2.18s after scan start; before any recorded consent action.Partial concern

JSON evidence

Microsoft Clarity, category: session_replay, preConsent: false

Full evidence JSON

{
  "assessmentStatus": "review_signal",
  "checklistItemId": "session_replay_fingerprinting_review",
  "coverageArea": "Session replay signal",
  "evidenceState": "observed",
  "explanation": "CertScore.ai observed session replay or behavioral analytics vendors not observed pre-consent in retained evidence, including Microsoft Clarity. Because these tools can capture user interaction behavior, review consent timing, disclosure, masking/exclusion settings, sensitive-page coverage, and withdrawal controls.",
  "note": "CertScore.ai observed session replay or behavioral analytics vendors not observed pre-consent in retained evidence, including Microsoft Clarity. Because these tools can capture user interaction behavior, review consent timing, disclosure, masking/exclusion settings, sensitive-page coverage, and withdrawal controls.",
  "status": "Review signal",
  "tone": "warning",
  "pipeline": {
    "projectionStage": "unified_finding",
    "concernPolicyKey": "gdpr_eprivacy_coverage.session_replay_fingerprinting_review.review_signal",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.session_replay_fingerprinting_review"
  },
  "statusBasis": "Selected the strongest retained canonical coverage evidence available for this row.",
  "retainedEvidence": {
    "status": "Review signal",
    "evidenceRefs": [
      "Session replay observed",
      "Signal: Session replay runtime detected",
      "Signal: Session replay runtime vendors",
      "Signal: Session replay tool detected",
      "Evidence flag: contradiction_runtime_artifact_retained",
      "Evidence flag: privacy.session_replay_runtime_detected"
    ],
    "findingEntities": [
      {
        "id": "session_replay_observed",
        "entities": {
          "runtimeVendors": [
            "Microsoft Clarity"
          ],
          "runtimeRequestUrls": [
            "https://www.clarity.ms",
            "https://www.clarity.ms/tag/xycqqptk8i",
            "https://scripts.clarity.ms/0.8.69/clarity.js",
            "https://o.clarity.ms/collect"
          ],
          "observedTrackingVendors": [
            "Microsoft Clarity"
          ],
          "sessionReplayEvidenceSummary": [
            "{\"artifactCount\":3,\"collectionEndpointObserved\":true,\"consentStates\":[\"pre_consent\"],\"coverageRetained\":true,\"firstSeenMs\":2180,\"libraryOnly\":false,\"preConsentObserved\":true,\"requestUrls\":[\"https://www.clarity.ms/tag/xycqqptk8i\",\"https://scripts.clarity.ms/0.8.69/clarity.js\",\"https://o.clarity.ms/collect\"],\"vendors\":[\"Microsoft Clarity\"]}"
          ],
          "session_replay_runtime_vendors": [
            "Microsoft Clarity"
          ]
        },
        "sourceRefs": [
          "Signal: Session replay runtime detected",
          "Signal: Session replay runtime vendors",
          "Signal: Session replay tool detected"
        ],
        "evidenceFlags": [
          "privacy.session_replay_runtime_detected",
          "privacy.session_replay_runtime_vendors",
          "commerce.session_replay_tool_detected"
        ]
      }
    ],
    "evidenceHighlights": [
      "\"Microsoft Clarity\", \"category\": \"session_replay\", \"preConsent\": false"
    ],
    "missingEvidenceNeeded": [],
    "sessionReplayEvidence": {
      "vendors": [
        "Microsoft Clarity"
      ],
      "firstSeenMs": 2180,
      "requestUrls": [
        "https://www.clarity.ms/tag/xycqqptk8i",
        "https://scripts.clarity.ms/0.8.69/clarity.js",
        "https://o.clarity.ms/collect"
      ],
      "consentStates": [
        "pre_consent"
      ],
      "vendorDisclosed": false,
      "postAcceptObserved": false,
      "preConsentObserved": true,
      "libraryLoadObserved": true,
      "vendorDisclosureGap": false,
      "collectionEndpointObserved": true,
      "vendorDisclosureMatchedCount": 0,
      "vendorDisclosureUnmatchedCount": 0,
      "postChoiceConsentControlsObserved": false,
      "vendorDisclosureComparisonObserved": false
    },
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "selectedEvidenceStrength": "missing",
    "selectedEvidenceArtifactId": "unified_finding"
  },
  "projectedFindings": [
    {
      "id": "session_replay_observed",
      "label": "Session replay observed",
      "severity": "high"
    }
  ],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

1Review the signals listed in the evidence details and any other replay, behavioral analytics, or fingerprinting-like vendor signals.
2Disable recording on sensitive forms, account pages, health/financial inputs, and other high-risk entry points.
3Gate replay or behavioral analytics behind the appropriate consent category where required by your policy.
4Verify collection endpoints do not receive sensitive field values or unmasked interaction content.
5Rerun the scan and confirm the result reflects the change or clearly explains why the page could not be fully evaluated.

Device identification / fingerprinting signalNo eligible device-identification or fingerprinting signal was observed in retained runtime evidence.Not observed

JSON evidence

retained fingerprinting/browser API coverage summary

Full evidence JSON

{
  "assessmentStatus": "checked",
  "checklistItemId": "device_identification_fingerprinting_signal_observed",
  "coverageArea": "Device identification / fingerprinting signal",
  "evidenceState": "not_observed",
  "explanation": "Whether browser/device entropy, fingerprinting, or identifier-like device collection signals were observed in retained runtime evidence.",
  "note": "Whether browser/device entropy, fingerprinting, or identifier-like device collection signals were observed in retained runtime evidence.",
  "status": "Not observed",
  "tone": "neutral",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.device_identification_fingerprinting_signal_observed.not_observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.device_identification_fingerprinting_signal_observed"
  },
  "statusBasis": "Runtime fingerprinting/device-identification checks completed for the tested context and did not retain an eligible signal.",
  "retainedEvidence": {
    "evidenceRefs": [
      "Evidence: retained fingerprinting/browser API coverage summary"
    ],
    "missingEvidenceNeeded": [],
    "fingerprintingObserved": false,
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "runtimeCaptureCompleted": true,
    "runtimeEvidenceRetained": true,
    "selectedEvidenceStrength": "missing",
    "selectedEvidenceArtifactId": "coverage_policy",
    "fingerprintingRuntimeCoverageRetained": true
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

Device identification / fingerprinting signal is currently rated Not observed. No site remediation is indicated from this row alone; rerun after material site, policy, or tag changes.

GPC observation and comparison

GPC response

GPC delivery or comparison coverage could not be fully verified. Other verified scan evidence remains available; this GPC limitation is not a successful response or an observed gap.

Sec-GPC: 1Main-document navigator.globalPrivacyControl: trueDelivery: verified · Coverage: limited16 retained request proofs

Paired comparison is unverified; missing evidence is not treated as suppressed activity.

Cookie/storage and CMP identity differences are descriptive snapshots. The response uses classified activity within the matched window, not an inferred consent decision.

Coverage limits: baseline_settle_not_completed.

Typed comparison evidence

{
  "assessment": {
    "contractVersion": "certscore.gpc-response-assessment.v2",
    "generatedAt": "2026-09-08T04:28:57.583Z",
    "status": "indeterminate",
    "findingTitle": "GPC response",
    "scoreEffect": "none",
    "legalInterpretation": "not_assessed",
    "comparison": {
      "comparable": false,
      "protocol": "passive_baseline_with_sec_gpc",
      "baselineArtifact": {
        "lane": "runtime_evidence",
        "sha256": "f20afd3756aefec480cc0a502e4e090d0bd234242d00f68843e6d5b28ff8eb6d",
        "sizeBytes": 207784,
        "uri": "s3://certscore-v2-dag-local-artifacts-eu-central-1-199536052647/v2-dag-lambda/local/a9a7470d-248f-4d96-ac1f-7ffa517c22de/lanes/runtime_evidence/CanonicalEvidenceBundle.json"
      },
      "gpcArtifact": {
        "lane": "gpc_observation",
        "sha256": "8b4f954bb5ffaa1211e04205a5dd7c5ced8237f535dcc0937e033669e2982669",
        "sizeBytes": 180645,
        "uri": "s3://certscore-v2-dag-local-artifacts-eu-central-1-199536052647/v2-dag-lambda/local/a9a7470d-248f-4d96-ac1f-7ffa517c22de/lanes/gpc_observation/CanonicalEvidenceBundle.json"
      },
      "enabledProof": {
        "secGpcHeaderValue": "1",
        "requestsWithSecGpc": 16,
        "requestEventIds": [
          "net_11",
          "net_13",
          "net_15",
          "net_17",
          "net_19",
          "net_2",
          "net_21",
          "net_30",
          "net_34",
          "net_36",
          "net_39",
          "net_41",
          "net_46",
          "net_5",
          "net_7",
          "net_9"
        ],
        "navigatorGlobalPrivacyControl": true
      },
      "delivery": {
        "status": "verified",
        "baseline": {
          "contractVersion": "certscore.gpc-signal-observation.v1",
          "expectedEnabled": false,
          "documentUrlSha256": "c3e6c87ac21f6a28bf0f78f9d83ab3c8e568cdbcddd8a7a93f943bed821a3b00",
          "contextConfigSha256": "f81071936dae829962a6122dc033cead189bb3594cde2adccfdc9fb0ebc15686",
          "capturedAtMs": 2971,
          "documentStartedAtMs": 849,
          "frameCount": 2,
          "frames": [
            {
              "documentUrlSha256": "c3e6c87ac21f6a28bf0f78f9d83ab3c8e568cdbcddd8a7a93f943bed821a3b00",
              "mainFrame": true,
              "navigatorValue": false
            },
            {
              "documentUrlSha256": "7d6436d6d4ce51065835ef09aeef21a12c4b6bdcc37c2e6055324cdb7035db5f",
              "mainFrame": false,
              "navigatorValue": false
            }
          ],
          "workerCount": 0,
          "limitationKeys": []
        },
        "gpc": {
          "contractVersion": "certscore.gpc-signal-observation.v1",
          "expectedEnabled": true,
          "documentUrlSha256": "c3e6c87ac21f6a28bf0f78f9d83ab3c8e568cdbcddd8a7a93f943bed821a3b00",
          "contextConfigSha256": "f81071936dae829962a6122dc033cead189bb3594cde2adccfdc9fb0ebc15686",
          "capturedAtMs": 2838,
          "documentStartedAtMs": 904,
          "frameCount": 2,
          "frames": [
            {
              "documentUrlSha256": "c3e6c87ac21f6a28bf0f78f9d83ab3c8e568cdbcddd8a7a93f943bed821a3b00",
              "mainFrame": true,
              "navigatorValue": true
            },
            {
              "documentUrlSha256": "7d6436d6d4ce51065835ef09aeef21a12c4b6bdcc37c2e6055324cdb7035db5f",
              "mainFrame": false,
              "navigatorValue": true
            }
          ],
          "workerCount": 0,
          "limitationKeys": []
        }
      },
      "coverage": {
        "status": "limited",
        "comparedThroughMs": 1934
      },
      "responseBasis": "insufficient_evidence",
      "deltas": {
        "cookies": {
          "baselineCount": 2,
          "gpcCount": 2,
          "countDelta": 0,
          "baselineOnly": [],
          "gpcOnly": [],
          "shared": [
            "[\"_ga_X5ZM7BWET3\",\".ergoveritas.com\",\"/\"]",
            "[\"_ga\",\".ergoveritas.com\",\"/\"]"
          ],
          "baselineOnlyCount": 0,
          "gpcOnlyCount": 0,
          "sharedCount": 2,
          "samplesTruncated": false
        },
        "webStorage": {
          "baselineCount": 0,
          "gpcCount": 0,
          "countDelta": 0,
          "baselineOnly": [],
          "gpcOnly": [],
          "shared": [],
          "baselineOnlyCount": 0,
          "gpcOnlyCount": 0,
          "sharedCount": 0,
          "samplesTruncated": false
        },
        "trackers": {
          "baselineCount": 4,
          "gpcCount": 4,
          "countDelta": 0,
          "baselineOnly": [],
          "gpcOnly": [],
          "shared": [
            "Google|Google Analytics|analytics",
            "Google|Google|analytics",
            "Microsoft|Microsoft Clarity|session_replay",
            "Microsoft|Microsoft|session_replay"
          ],
          "baselineOnlyCount": 0,
          "gpcOnlyCount": 0,
          "sharedCount": 4,
          "samplesTruncated": false
        },
        "advertisingOrMeasurementActivity": {
          "baselineCount": 4,
          "gpcCount": 4,
          "countDelta": 0,
          "baselineOnly": [],
          "gpcOnly": [],
          "shared": [
            "Google|Google Analytics|analytics",
            "Google|Google|analytics",
            "Microsoft|Microsoft Clarity|session_replay",
            "Microsoft|Microsoft|session_replay"
          ],
          "baselineOnlyCount": 0,
          "gpcOnlyCount": 0,
          "sharedCount": 4,
          "samplesTruncated": false
        },
        "advertisingOrMarketingActivity": {
          "baselineCount": 0,
          "gpcCount": 0,
          "countDelta": 0,
          "baselineOnly": [],
          "gpcOnly": [],
          "shared": [],
          "baselineOnlyCount": 0,
          "gpcOnlyCount": 0,
          "sharedCount": 0,
          "samplesTruncated": false
        },
        "consentOrCmpBehavior": {
          "baselineCount": 0,
          "gpcCount": 0,
          "countDelta": 0,
          "baselineOnly": [],
          "gpcOnly": [],
          "shared": [],
          "baselineOnlyCount": 0,
          "gpcOnlyCount": 0,
          "sharedCount": 0,
          "samplesTruncated": false
        }
      },
      "evidenceRefs": [
        "net_11",
        "net_13",
        "net_15",
        "net_17",
        "net_19",
        "net_2",
        "net_21",
        "net_30",
        "net_34",
        "net_36",
        "net_39",
        "net_41",
        "net_46",
        "net_5",
        "net_7",
        "net_9",
        "s3://certscore-v2-dag-local-artifacts-eu-central-1-199536052647/v2-dag-lambda/local/a9a7470d-248f-4d96-ac1f-7ffa517c22de/lanes/gpc_observation/CanonicalEvidenceBundle.json",
        "s3://certscore-v2-dag-local-artifacts-eu-central-1-199536052647/v2-dag-lambda/local/a9a7470d-248f-4d96-ac1f-7ffa517c22de/lanes/runtime_evidence/CanonicalEvidenceBundle.json"
      ],
      "limitationKeys": [
        "baseline_settle_not_completed"
      ]
    }
  },
  "californiaPolicy": {
    "deductionPoints": 0,
    "framework": "california"
  },
  "evidenceRefs": [
    "s3://certscore-v2-dag-local-artifacts-eu-central-1-199536052647/v2-dag-lambda/local/a9a7470d-248f-4d96-ac1f-7ffa517c22de/lanes/runtime_evidence/CanonicalEvidenceBundle.json",
    "s3://certscore-v2-dag-local-artifacts-eu-central-1-199536052647/v2-dag-lambda/local/a9a7470d-248f-4d96-ac1f-7ffa517c22de/lanes/gpc_observation/CanonicalEvidenceBundle.json",
    "net_11",
    "net_13",
    "net_15",
    "net_17",
    "net_19",
    "net_2",
    "net_21",
    "net_30",
    "net_34",
    "net_36",
    "net_39",
    "net_41",
    "net_46",
    "net_5",
    "net_7",
    "net_9"
  ]
}

Transport security

5 positive · 5 checks

HTTPS delivery for scanned pagesObserved in scan evidence; The scanned page was served over HTTPS in the retained transport observation.Observed

JSON evidence

ref_transport_security

Full evidence JSON

{
  "assessmentStatus": "checked",
  "checklistItemId": "transport_security_https_delivery",
  "coverageArea": "HTTPS delivery for scanned pages",
  "evidenceState": "observed",
  "explanation": "Whether the retained scanned page was served over HTTPS.",
  "note": "Whether the retained scanned page was served over HTTPS.",
  "status": "Observed",
  "tone": "warning",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.transport_security_https_delivery.observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.transport_security_https_delivery"
  },
  "statusBasis": "The scanned page was served over HTTPS in the retained transport observation.",
  "retainedEvidence": {
    "finalUrl": "https://ergoveritas.com/",
    "finalScheme": "https",
    "evidenceRefs": [
      "ref_transport_security"
    ],
    "httpProbeStatus": 200,
    "sampledPageUrls": [
      "https://ergoveritas.com/"
    ],
    "httpProbeOutcome": "redirected_to_https",
    "httpProbeFinalUrl": "https://ergoveritas.com/",
    "pageHttpsObserved": true,
    "tlsProbeAttempted": true,
    "formTransportCount": 0,
    "httpProbeAttempted": true,
    "validTlsCertificate": true,
    "httpProbeFinalScheme": "https",
    "httpRedirectsToHttps": true,
    "mixedContentObserved": false,
    "missingEvidenceNeeded": [],
    "httpProbeRedirectChain": [
      "http://ergoveritas.com/",
      "https://ergoveritas.com/"
    ],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "selectedEvidenceStrength": "moderate",
    "mixedContentObservedCount": 0,
    "selectedEvidenceArtifactId": "coverage_policy",
    "tlsCertificateObservations": [
      {
        "issuer": "CN=Amazon RSA 2048 M04, O=Amazon",
        "subject": "CN=ergoveritas.com",
        "validTo": "Feb 19 23:59:59 2027 GMT",
        "inputUrl": "https://ergoveritas.com/",
        "validFrom": "Aug  6 00:00:00 2026 GMT",
        "validCertificate": true,
        "chainCertificateCount": 4
      }
    ],
    "insecureFormTransportObserved": false
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

HTTPS delivery for scanned pages is currently rated Observed. No site remediation is indicated from this row alone; rerun after material site, policy, or tag changes.

Valid SSL/TLS certificateObserved in scan evidence; Retained certificate validation verified the HTTPS origin certificate. Retained certificate evidence: https://ergoveritas.com/ presented CN=ergoveritas.com certificate valid Aug 6, 2026–Feb 19, 2027.Observed

JSON evidence

ref_transport_security

Full evidence JSON

{
  "assessmentStatus": "checked",
  "checklistItemId": "transport_security_tls_certificate",
  "coverageArea": "Valid SSL/TLS certificate",
  "evidenceState": "observed",
  "explanation": "Whether a strict TLS probe verified the HTTPS origin certificate separately from the normal scanner runtime.",
  "note": "Whether a strict TLS probe verified the HTTPS origin certificate separately from the normal scanner runtime.",
  "status": "Observed",
  "tone": "warning",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.transport_security_tls_certificate.observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.transport_security_tls_certificate"
  },
  "statusBasis": "Retained certificate validation verified the HTTPS origin certificate. Retained certificate evidence: https://ergoveritas.com/ presented CN=ergoveritas.com certificate valid Aug 6, 2026–Feb 19, 2027.",
  "retainedEvidence": {
    "finalUrl": "https://ergoveritas.com/",
    "finalScheme": "https",
    "evidenceRefs": [
      "ref_transport_security"
    ],
    "httpProbeStatus": 200,
    "sampledPageUrls": [
      "https://ergoveritas.com/"
    ],
    "httpProbeOutcome": "redirected_to_https",
    "httpProbeFinalUrl": "https://ergoveritas.com/",
    "pageHttpsObserved": true,
    "tlsProbeAttempted": true,
    "formTransportCount": 0,
    "httpProbeAttempted": true,
    "validTlsCertificate": true,
    "httpProbeFinalScheme": "https",
    "httpRedirectsToHttps": true,
    "mixedContentObserved": false,
    "missingEvidenceNeeded": [],
    "httpProbeRedirectChain": [
      "http://ergoveritas.com/",
      "https://ergoveritas.com/"
    ],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "selectedEvidenceStrength": "moderate",
    "mixedContentObservedCount": 0,
    "selectedEvidenceArtifactId": "coverage_policy",
    "tlsCertificateObservations": [
      {
        "issuer": "CN=Amazon RSA 2048 M04, O=Amazon",
        "subject": "CN=ergoveritas.com",
        "validTo": "Feb 19 23:59:59 2027 GMT",
        "inputUrl": "https://ergoveritas.com/",
        "validFrom": "Aug  6 00:00:00 2026 GMT",
        "validCertificate": true,
        "chainCertificateCount": 4
      }
    ],
    "insecureFormTransportObserved": false
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

Valid SSL/TLS certificate is currently rated Observed. No site remediation is indicated from this row alone; rerun after material site, policy, or tag changes.

HTTP redirects to HTTPSObserved in scan evidence; The explicit HTTP-origin probe redirected to HTTPS.Observed

JSON evidence

ref_transport_security

Full evidence JSON

{
  "assessmentStatus": "checked",
  "checklistItemId": "transport_security_http_redirect",
  "coverageArea": "HTTP redirects to HTTPS",
  "evidenceState": "observed",
  "explanation": "Whether an explicit HTTP-origin probe redirected to HTTPS.",
  "note": "Whether an explicit HTTP-origin probe redirected to HTTPS.",
  "status": "Observed",
  "tone": "warning",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.transport_security_http_redirect.observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.transport_security_http_redirect"
  },
  "statusBasis": "The explicit HTTP-origin probe redirected to HTTPS.",
  "retainedEvidence": {
    "finalUrl": "https://ergoveritas.com/",
    "finalScheme": "https",
    "evidenceRefs": [
      "ref_transport_security"
    ],
    "httpProbeStatus": 200,
    "sampledPageUrls": [
      "https://ergoveritas.com/"
    ],
    "httpProbeOutcome": "redirected_to_https",
    "httpProbeFinalUrl": "https://ergoveritas.com/",
    "pageHttpsObserved": true,
    "tlsProbeAttempted": true,
    "formTransportCount": 0,
    "httpProbeAttempted": true,
    "validTlsCertificate": true,
    "httpProbeFinalScheme": "https",
    "httpRedirectsToHttps": true,
    "mixedContentObserved": false,
    "missingEvidenceNeeded": [],
    "httpProbeRedirectChain": [
      "http://ergoveritas.com/",
      "https://ergoveritas.com/"
    ],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "selectedEvidenceStrength": "moderate",
    "mixedContentObservedCount": 0,
    "selectedEvidenceArtifactId": "coverage_policy",
    "tlsCertificateObservations": [
      {
        "issuer": "CN=Amazon RSA 2048 M04, O=Amazon",
        "subject": "CN=ergoveritas.com",
        "validTo": "Feb 19 23:59:59 2027 GMT",
        "inputUrl": "https://ergoveritas.com/",
        "validFrom": "Aug  6 00:00:00 2026 GMT",
        "validCertificate": true,
        "chainCertificateCount": 4
      }
    ],
    "insecureFormTransportObserved": false
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

HTTP redirects to HTTPS is currently rated Observed. No site remediation is indicated from this row alone; rerun after material site, policy, or tag changes.

Mixed contentObserved in scan evidence; No mixed-content HTTP subresources were retained for the scanned HTTPS page.Observed

JSON evidence

ref_transport_security

Full evidence JSON

{
  "assessmentStatus": "checked",
  "checklistItemId": "transport_security_mixed_content",
  "coverageArea": "Mixed content",
  "evidenceState": "observed",
  "explanation": "Whether HTTP subresources were observed or blocked on a retained HTTPS page.",
  "note": "Whether HTTP subresources were observed or blocked on a retained HTTPS page.",
  "status": "Observed",
  "tone": "warning",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.transport_security_mixed_content.observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.transport_security_mixed_content"
  },
  "statusBasis": "No mixed-content HTTP subresources were retained for the scanned HTTPS page.",
  "retainedEvidence": {
    "finalUrl": "https://ergoveritas.com/",
    "finalScheme": "https",
    "evidenceRefs": [
      "ref_transport_security"
    ],
    "httpProbeStatus": 200,
    "sampledPageUrls": [
      "https://ergoveritas.com/"
    ],
    "httpProbeOutcome": "redirected_to_https",
    "httpProbeFinalUrl": "https://ergoveritas.com/",
    "pageHttpsObserved": true,
    "tlsProbeAttempted": true,
    "formTransportCount": 0,
    "httpProbeAttempted": true,
    "validTlsCertificate": true,
    "httpProbeFinalScheme": "https",
    "httpRedirectsToHttps": true,
    "mixedContentObserved": false,
    "missingEvidenceNeeded": [],
    "httpProbeRedirectChain": [
      "http://ergoveritas.com/",
      "https://ergoveritas.com/"
    ],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "selectedEvidenceStrength": "moderate",
    "mixedContentObservedCount": 0,
    "selectedEvidenceArtifactId": "coverage_policy",
    "tlsCertificateObservations": [
      {
        "issuer": "CN=Amazon RSA 2048 M04, O=Amazon",
        "subject": "CN=ergoveritas.com",
        "validTo": "Feb 19 23:59:59 2027 GMT",
        "inputUrl": "https://ergoveritas.com/",
        "validFrom": "Aug  6 00:00:00 2026 GMT",
        "validCertificate": true,
        "chainCertificateCount": 4
      }
    ],
    "insecureFormTransportObserved": false
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

Mixed content is currently rated Observed. No site remediation is indicated from this row alone; rerun after material site, policy, or tag changes.

Observed form transportObserved in scan evidence; No insecure observed form transport was retained for the scanned page.Observed

JSON evidence

ref_transport_security

Full evidence JSON

{
  "assessmentStatus": "checked",
  "checklistItemId": "transport_security_form_transport",
  "coverageArea": "Observed form transport",
  "evidenceState": "observed",
  "explanation": "Whether observed forms resolved to HTTPS transport without submitting form data.",
  "note": "Whether observed forms resolved to HTTPS transport without submitting form data.",
  "status": "Observed",
  "tone": "warning",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.transport_security_form_transport.observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.transport_security_form_transport"
  },
  "statusBasis": "No insecure observed form transport was retained for the scanned page.",
  "retainedEvidence": {
    "finalUrl": "https://ergoveritas.com/",
    "finalScheme": "https",
    "evidenceRefs": [
      "ref_transport_security"
    ],
    "httpProbeStatus": 200,
    "sampledPageUrls": [
      "https://ergoveritas.com/"
    ],
    "httpProbeOutcome": "redirected_to_https",
    "httpProbeFinalUrl": "https://ergoveritas.com/",
    "pageHttpsObserved": true,
    "tlsProbeAttempted": true,
    "formTransportCount": 0,
    "httpProbeAttempted": true,
    "validTlsCertificate": true,
    "httpProbeFinalScheme": "https",
    "httpRedirectsToHttps": true,
    "mixedContentObserved": false,
    "missingEvidenceNeeded": [],
    "httpProbeRedirectChain": [
      "http://ergoveritas.com/",
      "https://ergoveritas.com/"
    ],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "selectedEvidenceStrength": "moderate",
    "mixedContentObservedCount": 0,
    "selectedEvidenceArtifactId": "coverage_policy",
    "tlsCertificateObservations": [
      {
        "issuer": "CN=Amazon RSA 2048 M04, O=Amazon",
        "subject": "CN=ergoveritas.com",
        "validTo": "Feb 19 23:59:59 2027 GMT",
        "inputUrl": "https://ergoveritas.com/",
        "validFrom": "Aug  6 00:00:00 2026 GMT",
        "validCertificate": true,
        "chainCertificateCount": 4
      }
    ],
    "insecureFormTransportObserved": false
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

Observed form transport is currently rated Observed. No site remediation is indicated from this row alone; rerun after material site, policy, or tag changes.

Loading report

ergoveritas.com

Top issues needing attention

Cookies and trackers timeline

Cookies, storage, requests, and embeds

Resource details

Evidence index

Executive overview

Executive overview

1 requiring review · 4 checks

3 observed · 11 checks

3 details

2 requiring review · 3 checks

GPC response

5 positive · 5 checks

		Microsoft	Microsoft Clarity	Session replay	2.18s	clarity.ms, scripts.clarity.ms, o.clarity.ms	Cross-site · entity unknown		high

		Google	_ga_X5ZM7BWET3	Analytics	2.98s	ergoveritas.com	Same-site · entity unknown		review needed

		Google	Google Analytics	Analytics	1.99s	region1.google-analytics.com	Cross-site · entity unknown		medium

		Google	Google Tag Manager	Tag management	1.99s	googletagmanager.com	Cross-site · entity unknown		medium

		ergoveritas.com	Full resource name ergoveritas.com/.well-known/certscore-embeds/card.html	Embedded content	2.93s	ergoveritas.com	Same-site · entity unknown		contextual

Loading report

Top issues needing attention

Cookies and trackers timeline

Cookies, storage, requests, and embeds

Resource details

Evidence index

Controls and CMP context

Executive overview

Executive overview

1 requiring review · 4 checks

3 observed · 11 checks

3 details

2 requiring review · 3 checks

GPC response

5 positive · 5 checks