Loading report

{"assessmentStatus":"checked","checklistItemId":"privacy_notice_availability","coverageArea":"Privacy notice link/surface discovered","evidenceState":"observed","explanation":"Whether a reachable privacy notice or privacy policy link/surface was retained. This row does not by itself confirm that substantive notice content was available.","note":"Whether a reachable privacy notice or privacy policy link/surface was retained. This row does not by itself confirm that substantive notice content was available.","status":"Observed","tone":"warning","pipeline":{"projectionStage":"coverage_policy","concernPolicyKey":"gdpr_eprivacy_coverage.privacy_notice_availability.observed","ws01EvidenceRole":"observed runtime signal identification, evidence capture, and logging","wc01NormalizedConcernKey":"gdpr_eprivacy.coverage.privacy_notice_availability"},"statusBasis":"Privacy notice evidence was retained in public policy-surface evidence.","retainedEvidence":{"remediation":{"kind":"none","steps":[],"message":"No remediation is established by this check alone. Retain its evidence and reassess after relevant changes."},"evidenceRefs":["Excerpt: itas.com/test1.html, an owned synthetic scanner-validation page. It describes its deliberately configured behavior so CertScore.ai can test evidence capture. This is not a general privacy notice for other ErgoVeritas pages or a promise that this deliberately failing test is compliant. Controller and contact ErgoVeritas Canary Publisher is the controller identified in this synthetic test scenario. The scenario's privacy contact is [email protected], a reserved, non-deliverable example address for scanner validat","Evidence: privacy policy surface retained","Policy URL: https://ergoveritas.com/test1-privacy-policy.html"],"signalObserved":true,"missingEvidenceNeeded":[],"selectedEvidenceReason":"Selected the strongest retained canonical coverage evidence available for this row.","weakerArtifactsIgnored":[],"policyEvidenceAssessment":{"result":"disclosure_observed","topicRelevance":"direct","contractVersion":"certscore.policy-topic-evidence-assessment.v1"},"policyEvidenceProvenance":{"sourceUrl":"https://ergoveritas.com/test1-privacy-policy.html","policyTitle":"Privacy Policy — ErgoVeritas test 1","artifactRefs":["policy_excerpt_3ef9ecff_7b1dd5b0","policy_surface_text_3ef9ecff_7b1dd5b0"],"bannerLanguage":"en","contractVersion":"certscore.policy-evidence-provenance.v1","discoveryMethod":"page_text_link","documentHeading":"Privacy Policy for the ErgoVeritas test 1 canary","lastUpdatedText":"Updated 20 October 2026","detectedLanguage":"en","retrievalTimestamp":"2026-10-21T03:05:24.978Z","targetRelationship":"target_controller","translationApplied":false,"documentOwnerEntity":"ErgoVeritas test 1","ownershipConfidence":0.98,"directlyLinkedFromScannedPage":true},"selectedEvidenceStrength":"moderate","selectedEvidenceArtifactId":"coverage_policy","policySurfaceSummary":{"scanStartedAt":"2026-10-21T03:05:20.542Z","observedTopics":["cookies","analytics","advertising","sale_or_share","global_privacy_control","third_party_disclosures","vendor_list","data_retention","controller_contact","processing_purposes","legal_basis","recipients_or_vendor_categories","data_subject_rights","dpo_contact","ai_features","contact_privacy"],"cookiePolicyUrls":[],"cookieDisclosures":[],"mentionedControls":["global_privacy_control"],"privacyPolicySize":{"url":"https://ergoveritas.com/test1-privacy-policy.html","completeness":"complete","documentFormat":"text","compressedBytes":6546,"measurementScope":"selected_usable_privacy_policy","decompressedBytes":6546},"privacyPolicyUrls":["https://ergoveritas.com/test1-privacy-policy.html"],"cookie_disclosures":[],"policySectionCount":17,"policySurfaceCount":1,"cookiePolicyPresent":false,"scannedPageLanguage":"en","privacyPolicyPresent":true,"policyPrimaryLanguage":"en","policyLastUpdatedTexts":["Updated 20 October 2026"],"policyTextCoverageMode":"section_targeted","retainedPolicySections":[{"charEnd":6284,"heading":"Privacy Policy for the ErgoVeritas test 1 canary","quality":"strong","charStart":362,"sourceUrl":"https://ergoveritas.com/test1-privacy-policy.html#demo-form","textExcerpt":"Updated 20 October 2026. This notice applies only to ergoveritas.com/test1.html , an owned synthetic scanner-validation page. It describes its deliberately configured behavior so CertScore.ai can test evidence capture. This is not a general privacy notice for other ErgoVeritas pages or a promise that this deliberately failing test is compliant. Controller and contact ErgoVeritas Canary Publisher is the controller identified in this synthetic test scenario. The scenario's privacy contact is [email protected], a reserved, non-deliverable example address for scanner validation, not a working channel for personal data or rights requests. We do not appoint a data protection officer for this synthetic scenario. Personal data and purposes of processing We process cookie identifiers, browser and device attributes, page-view events, consent-choice events, and network-request metadata to validate analytics, advertising, session-replay and fingerprinting detection. The purposes of processing are controlled quality assurance, audience-measurement classification and testing whether refusal is reflected in observed requests."},{"charEnd":1203,"heading":"Controller and contact","quality":"strong","charStart":807,"sourceUrl":"https://ergoveritas.com/test1-privacy-policy.html#demo-form","textExcerpt":"ErgoVeritas Canary Publisher is the controller identified in this synthetic test scenario. The scenario's privacy contact is [email protected], a reserved, non-deliverable example address for scanner validation, not a working channel for personal data or rights requests. We do not appoint a data protection officer for this synthetic scenario."},{"charEnd":1806,"heading":"Personal data and purposes of processing","quality":"strong","charStart":1203,"sourceUrl":"https://ergoveritas.com/test1-privacy-policy.html#demo-form","textExcerpt":"We process cookie identifiers, browser and device attributes, page-view events, consent-choice events, and network-request metadata to validate analytics, advertising, session-replay and fingerprinting detection. The purposes of processing are controlled quality assurance, audience-measurement classification and testing whether refusal is reflected in observed requests. The demo enquiry displays name, email, phone, postal code and message fields; its values are not submitted, read by the test runtime, or written to browser storage."},{"charEnd":2364,"heading":"Legal basis for processing","quality":"strong","charStart":1806,"sourceUrl":"https://ergoveritas.com/test1-privacy-policy.html#demo-form","textExcerpt":"The legal basis described by this synthetic scenario is legitimate interests under Article 6(1)(f) GDPR for controlled diagnostic quality assurance. Optional analytics, advertising and replay are modeled as consent-based processing under Article 6(1)(a) GDPR. The runtime deliberately activates optional requests before a choice and again after Reject, so the stated consent basis does not establish that valid consent was obtained. This notice documents that test defect; it does not justify the behavior."},{"charEnd":3033,"heading":"Recipients and service providers","quality":"strong","charStart":2364,"sourceUrl":"https://ergoveritas.com/test1-privacy-policy.html#demo-form","textExcerpt":"We share personal data in the form of synthetic cookie identifiers and network-request metadata with analytics providers including Google Analytics, advertising provider Meta, replay providers Microsoft Clarity, Hotjar and FullStory, and product-measurement provider Segment. AWS is the hosting provider that receives ordinary page-request metadata. The purposes are measurement, advertising classification, session-replay classification and product-event classification. The page uses fixed synthetic identifiers rather than enquiry values; successful provider ingestion is not guaranteed by a request attempt."},{"charEnd":3981,"heading":"Cookies, storage and consent behavior","quality":"strong","charStart":3033,"sourceUrl":"https://ergoveritas.com/test1-privacy-policy.html#demo-form","textExcerpt":"On a fresh visit the runtime writes _ga_TEST1, _gid, _fbp, _clck, _hjSessionUser_100001 and fs_uid, plus an OptanonConsent test receipt. It writes certscore_test1_analytics and certscore_test1_consent_state to local storage and certscore_test1_session_replay to session storage. These are synthetic identifiers and decision markers, not evidence that a real CMP service has been installed. Accept and Manage are visible first-layer test controls without implemented decision handlers. Reject changes the test decision to denied and hides the banner, but intentionally writes _gid and starts a Google Analytics request approximately 75 milliseconds later. This page does not implement a GPC-dependent reduction. These behaviors are intentionally left available for independent scanner observation; a visible control or changed receipt alone is not proof of effective refusal."},{"charEnd":4574,"heading":"Data retention","quality":"strong","charStart":3981,"sourceUrl":"https://ergoveritas.com/test1-privacy-policy.html#demo-form","textExcerpt":"We retain personal data represented by local-storage test identifiers and consent decision markers until you clear this site's browser data. Session-storage test identifiers are retained for the lifetime of the browser tab's session. First-party cookie identifiers and the test consent receipt expire within 15 minutes of their latest write. The operator does not receive or retain demo enquiry values. Separate infrastructure logs and third-party recipient retention periods are not specified by this fixture, and no provider-side deletion is asserted."},{"charEnd":5244,"heading":"Data subject rights and withdrawal","quality":"strong","charStart":4574,"sourceUrl":"https://ergoveritas.com/test1-privacy-policy.html#demo-form","textExcerpt":"You have the right to access your personal data, the right to rectification of inaccurate personal data, the right to erasure, restriction of processing, data portability and objection to processing based on legitimate interests. Consent may be withdrawn without affecting the lawfulness of earlier processing. These are disclosure examples, not working request tools: the reserved privacy contact above does not receive requests. Visitors can clear this site's browser data or close the page to remove local test state or stop further page activity; this does not erase data already received by third parties."},{"charEnd":5793,"heading":"Demo enquiry and collection boundary","quality":"strong","charStart":5244,"sourceUrl":"https://ergoveritas.com/test1-privacy-policy.html#demo-form","textExcerpt":"The form is for invented personal information only. Its preview button does not serialize fields, send an email, call a CRM, navigate to a collection endpoint or save values. A submit-event guard and a form-action Content Security Policy independently prevent submission. The form inventory demonstrates what information the fields request, not proof that their values were transmitted. Optional requests listed above are separate and use fixed synthetic test identifiers."},{"charEnd":6284,"heading":"Concealed-link integrity example","quality":"strong","charStart":5793,"sourceUrl":"https://ergoveritas.com/test1-privacy-policy.html#demo-form","textExcerpt":"The test page contains one intentionally off-screen outbound link to promotion.example, a reserved example domain. It has no click handler, is not automatically followed and does not collect enquiry values. It is an integrity-review fixture, not evidence that the site was compromised. Return to the test page · Test environment notice"},{"charEnd":4962,"heading":"right to access your personal data","quality":"strong","charStart":4008,"sourceUrl":"https://ergoveritas.com/test1-privacy-policy.html#demo-form","textExcerpt":"Data subject rights and withdrawal You have the right to access your personal data, the right to rectification of inaccurate personal data, the right to erasure, restriction of processing, data portability and objection to processing based on legitimate interests. Consent may be withdrawn without affecting the lawfulness of earlier processing. These are disclosure examples, not working request tools: the reserved privacy contact above does not receive requests. Visitors can clear this site's browser data or close the page to remove local test state or stop further page activity; this does not erase data already received by third parties. Demo enquiry and collection boundary The form is for invented personal information only. Its preview button does not serialize fields, send an email, call a CRM, navigate to a collection endpoint or save values. A submit-event guard and a form-action Content Security Policy independently prevent submission."},{"charEnd":4353,"heading":"retain personal data","quality":"strong","charStart":3439,"sourceUrl":"https://ergoveritas.com/test1-privacy-policy.html#demo-form","textExcerpt":"Data retention We retain personal data represented by local-storage test identifiers and consent decision markers until you clear this site's browser data. Session-storage test identifiers are retained for the lifetime of the browser tab's session. First-party cookie identifiers and the test consent receipt expire within 15 minutes of their latest write. The operator does not receive or retain demo enquiry values. Separate infrastructure logs and third-party recipient retention periods are not specified by this fixture, and no provider-side deletion is asserted. Data subject rights and withdrawal You have the right to access your personal data, the right to rectification of inaccurate personal data, the right to erasure, restriction of processing, data portability and objection to processing based on legitimate interests. Consent may be withdrawn without affecting the lawfulness of earlier processing."},{"charEnd":1346,"heading":"controller and contact","quality":"strong","charStart":396,"sourceUrl":"https://ergoveritas.com/test1-privacy-policy.html#demo-form","textExcerpt":"Controller and contact ErgoVeritas Canary Publisher is the controller identified in this synthetic test scenario. The scenario's privacy contact is [email protected], a reserved, non-deliverable example address for scanner validation, not a working channel for personal data or rights requests. We do not appoint a data protection officer for this synthetic scenario. Personal data and purposes of processing We process cookie identifiers, browser and device attributes, page-view events, consent-choice events, and network-request metadata to validate analytics, advertising, session-replay and fingerprinting detection. The purposes of processing are controlled quality assurance, audience-measurement classification and testing whether refusal is reflected in observed requests. The demo enquiry displays name, email, phone, postal code and message fields; its values are not submitted, read by the test runtime, or written to browser storage."},{"charEnd":4962,"heading":"Policy section","quality":"strong","charStart":4008,"sourceUrl":"https://ergoveritas.com/test1-privacy-policy.html#demo-form","textExcerpt":"Data subject rights and withdrawal You have the right to access your personal data, the right to rectification of inaccurate personal data, the right to erasure, restriction of processing, data portability and objection to processing based on legitimate interests. Consent may be withdrawn without affecting the lawfulness of earlier processing. These are disclosure examples, not working request tools: the reserved privacy contact above does not receive requests. Visitors can clear this site's browser data or close the page to remove local test state or stop further page activity; this does not erase data already received by third parties. Demo enquiry and collection boundary The form is for invented personal information only. Its preview button does not serialize fields, send an email, call a CRM, navigate to a collection endpoint or save values. A submit-event guard and a form-action Content Security Policy independently prevent submission."},{"charEnd":4353,"heading":"Policy section","quality":"strong","charStart":3439,"sourceUrl":"https://ergoveritas.com/test1-privacy-policy.html#demo-form","textExcerpt":"Data retention We retain personal data represented by local-storage test identifiers and consent decision markers until you clear this site's browser data. Session-storage test identifiers are retained for the lifetime of the browser tab's session. First-party cookie identifiers and the test consent receipt expire within 15 minutes of their latest write. The operator does not receive or retain demo enquiry values. Separate infrastructure logs and third-party recipient retention periods are not specified by this fixture, and no provider-side deletion is asserted. Data subject rights and withdrawal You have the right to access your personal data, the right to rectification of inaccurate personal data, the right to erasure, restriction of processing, data portability and objection to processing based on legitimate interests. Consent may be withdrawn without affecting the lawfulness of earlier processing."},{"charEnd":2700,"heading":"Policy section","quality":"strong","charStart":1807,"sourceUrl":"https://ergoveritas.com/test1-privacy-policy.html#demo-form","textExcerpt":"This notice documents that test defect; it does not justify the behavior. Recipients and service providers We share personal data in the form of synthetic cookie identifiers and network-request metadata with analytics providers including Google Analytics, advertising provider Meta, replay providers Microsoft Clarity, Hotjar and FullStory, and product-measurement provider Segment. AWS is the hosting provider that receives ordinary page-request metadata. The purposes are measurement, advertising classification, session-replay classification and product-event classification. The page uses fixed synthetic identifiers rather than enquiry values; successful provider ingestion is not guaranteed by a request attempt. Cookies, storage and consent behavior On a fresh visit the runtime writes _ga_TEST1, _gid, _fbp, _clck, _hjSessionUser_100001 and fs_uid, plus an OptanonConsent test receipt."},{"charEnd":1346,"heading":"Policy section","quality":"strong","charStart":510,"sourceUrl":"https://ergoveritas.com/test1-privacy-policy.html#demo-form","textExcerpt":"The scenario's privacy contact is [email protected], a reserved, non-deliverable example address for scanner validation, not a working channel for personal data or rights requests. We do not appoint a data protection officer for this synthetic scenario. Personal data and purposes of processing We process cookie identifiers, browser and device attributes, page-view events, consent-choice events, and network-request metadata to validate analytics, advertising, session-replay and fingerprinting detection. The purposes of processing are controlled quality assurance, audience-measurement classification and testing whether refusal is reflected in observed requests. The demo enquiry displays name, email, phone, postal code and message fields; its values are not submitted, read by the test runtime, or written to browser storage."}],"cookieDisclosurePresent":true,"policyCookieDisclosures":[],"privacyPolicyDiscovered":true,"processingErrorObserved":false,"observedPolicyTopicHints":["cookies","analytics","advertising","sale_or_share","global_privacy_control","third_party_disclosures","vendor_list","data_retention","controller_contact","processing_purposes","legal_basis","recipients_or_vendor_categories","data_subject_rights","dpo_contact","ai_features","contact_privacy"],"policyDocumentProvenance":[{"sourceUrl":"https://ergoveritas.com/test1-privacy-policy.html","policyTitle":"Privacy Policy — ErgoVeritas test 1","artifactRefs":["policy_excerpt_3ef9ecff_7b1dd5b0","policy_surface_text_3ef9ecff_7b1dd5b0"],"effectiveDate":null,"observationId":"policy_surface_3ef9ecff","discoveryMethod":"page_text_link","documentHeading":"Privacy Policy for the ErgoVeritas test 1 canary","lastUpdatedText":"Updated 20 October 2026","detectedLanguage":"en","retrievalTimestamp":"2026-10-21T03:05:24.978Z","targetRelationship":"target_controller","translationApplied":false,"documentOwnerEntity":"ErgoVeritas test 1","ownershipConfidence":0.98,"translationTargetLanguage":null,"directlyLinkedFromScannedPage":true}],"policy_cookie_disclosures":[],"article13DisclosureSignals":[{"source":"deterministic","status":"observed","confidence":0.9,"surfaceUrl":"https://ergoveritas.com/test1-privacy-policy.html","matchedTerm":"retain personal data","evidenceText":"We retain personal data represented by local-storage test identifiers and consent decision markers until you clear this site's browser data.","matchStrength":"direct","matchedLocale":"en","disclosureType":"data_retention","evidenceSource":"canonical_retained_article13_signal","productionCredit":true,"classifierProvenance":"gdpr_transparency_topic_classifier.v1","classifierReasonCodes":["matched_data_retention","match_strength_direct"],"productionCreditProfile":"gdpr_transparency_multilingual_article13_v1","selectedEvidenceStrength":"strong","selectedPolicySectionUrl":"https://ergoveritas.com/test1-privacy-policy.html","selectedPolicySectionExcerpt":"We retain personal data represented by local-storage test identifiers and consent decision markers until you clear this site's browser data.","selectedPolicySectionHeading":"Data retention","sourceCandidateProductionCredit":false},{"source":"deterministic","status":"observed","confidence":0.9,"surfaceUrl":"https://ergoveritas.com/test1-privacy-policy.html","matchedTerm":"right to access your personal data","evidenceText":"You have the right to access your personal data, the right to rectification of inaccurate personal data, the right to erasure, restriction of processing, data portability and objection to processing based on legitimate interests. Consent may be withdrawn without affecting the lawfulness of earlier processing.","matchStrength":"direct","matchedLocale":"en","disclosureType":"data_subject_rights","evidenceSource":"canonical_retained_article13_signal","productionCredit":true,"classifierProvenance":"gdpr_transparency_topic_classifier.v1","classifierReasonCodes":["matched_data_subject_rights","match_strength_direct"],"productionCreditProfile":"gdpr_transparency_multilingual_article13_v1","selectedEvidenceStrength":"strong","selectedPolicySectionUrl":"https://ergoveritas.com/test1-privacy-policy.html","selectedPolicySectionExcerpt":"You have the right to access your personal data, the right to rectification of inaccurate personal data, the right to erasure, restriction of processing, data portability and objection to processing based on legitimate interests. Consent may be withdrawn without affecting the lawfulness of earlier processing.","selectedPolicySectionHeading":"Data subject rights and withdrawal","sourceCandidateProductionCredit":false},{"source":"deterministic","status":"observed","confidence":0.82,"surfaceUrl":"https://ergoveritas.com/test1-privacy-policy.html","matchedTerm":"controller and contact","evidenceText":"ErgoVeritas Canary Publisher is the controller identified in this synthetic test scenario. The scenario's privacy contact is [email protected], a reserved, non-deliverable example address for scanner validation, not a working channel for personal data or rights requests.","matchStrength":"equivalent","matchedLocale":"en","disclosureType":"controller_contact","evidenceSource":"canonical_retained_article13_signal","productionCredit":true,"classifierProvenance":"gdpr_transparency_topic_classifier.v1","classifierReasonCodes":["matched_controller_contact","match_strength_equivalent","variant_requires_topic_context"],"productionCreditProfile":"gdpr_transparency_multilingual_article13_v1","selectedEvidenceStrength":"strong","selectedPolicySectionUrl":"https://ergoveritas.com/test1-privacy-policy.html","selectedPolicySectionExcerpt":"ErgoVeritas Canary Publisher is the controller identified in this synthetic test scenario. The scenario's privacy contact is [email protected], a reserved, non-deliverable example address for scanner validation, not a working channel for personal data or rights requests.","sourceCandidateProductionCredit":false},{"source":"deterministic","status":"observed","confidence":0.88,"surfaceUrl":"https://ergoveritas.com/test1-privacy-policy.html","evidenceText":"The purposes of processing are controlled quality assurance, audience-measurement classification and testing whether refusal is reflected in observed requests.","disclosureType":"processing_purposes","evidenceSource":"deterministic","selectedEvidenceStrength":"strong","selectedPolicySectionUrl":"https://ergoveritas.com/test1-privacy-policy.html#demo-form","supportingContactContext":null,"selectedPolicySectionExcerpt":"The purposes of processing are controlled quality assurance, audience-measurement classification and testing whether refusal is reflected in observed requests.","selectedPolicySectionHeading":"Personal data and purposes of processing"},{"source":"deterministic","status":"observed","confidence":0.88,"surfaceUrl":"https://ergoveritas.com/test1-privacy-policy.html","matchedTerm":"section-bound legal basis","evidenceText":"You have the right to access your personal data, the right to rectification of inaccurate personal data, the right to erasure, restriction of processing, data portability and objection to processing based on legitimate interests.","matchStrength":"equivalent","matchedLocale":"en","disclosureType":"legal_basis","evidenceSource":"canonical_retained_article13_signal","productionCredit":true,"classifierProvenance":"gdpr_transparency_topic_classifier.v1","classifierReasonCodes":["matched_legal_basis","match_strength_equivalent","variant_section_semantic_clause"],"productionCreditProfile":"gdpr_transparency_multilingual_article13_v1","selectedEvidenceStrength":"strong","selectedPolicySectionUrl":"https://ergoveritas.com/test1-privacy-policy.html","selectedPolicySectionExcerpt":"You have the right to access your personal data, the right to rectification of inaccurate personal data, the right to erasure, restriction of processing, data portability and objection to processing based on legitimate interests.","selectedPolicySectionHeading":"Data subject rights and withdrawal","sourceCandidateProductionCredit":false},{"source":"deterministic","status":"observed","confidence":0.86,"surfaceUrl":"https://ergoveritas.com/test1-privacy-policy.html","matchedTerm":"named recipient or meaningful recipient category","evidenceText":"We share personal data in the form of synthetic cookie identifiers and network-request metadata with analytics providers including Google Analytics, advertising provider Meta, replay providers Microsoft Clarity, Hotjar and FullStory, and product-measurement provider Segment.","matchStrength":"equivalent","matchedLocale":"en","disclosureType":"recipients_or_vendor_categories","evidenceSource":"canonical_retained_article13_signal","productionCredit":true,"classifierProvenance":"gdpr_transparency_topic_classifier.v1","classifierReasonCodes":["matched_recipients_or_vendor_categories","match_strength_equivalent","variant_semantic_clause"],"productionCreditProfile":"gdpr_transparency_multilingual_article13_v1","selectedEvidenceStrength":"strong","selectedPolicySectionUrl":"https://ergoveritas.com/test1-privacy-policy.html","selectedPolicySectionExcerpt":"We share personal data in the form of synthetic cookie identifiers and network-request metadata with analytics providers including Google Analytics, advertising provider Meta, replay providers Microsoft Clarity, Hotjar and FullStory, and product-measurement provider Segment.","selectedPolicySectionHeading":"Recipients and service providers","sourceCandidateProductionCredit":false},{"source":"deterministic","status":"observed","confidence":0.88,"surfaceUrl":"https://ergoveritas.com/test1-privacy-policy.html","matchedTerm":"section-bound processing purposes","evidenceText":"Personal data and purposes of processing. We process cookie identifiers, browser and device attributes, page-view events, consent-choice events, and network-request metadata to validate analytics, advertising, session-replay and fingerprinting detection.","matchStrength":"equivalent","matchedLocale":"en","disclosureType":"processing_purposes","evidenceSource":"gdpr_transparency_topic_candidate","productionCredit":true,"classifierProvenance":"gdpr_transparency_topic_classifier.v1","classifierReasonCodes":["matched_processing_purposes","match_strength_equivalent","variant_section_semantic_clause"],"productionCreditProfile":"gdpr_transparency_multilingual_article13_v1","selectedEvidenceStrength":"strong","selectedPolicySectionUrl":"https://ergoveritas.com/test1-privacy-policy.html","selectedPolicySectionExcerpt":"Personal data and purposes of processing. We process cookie identifiers, browser and device attributes, page-view events, consent-choice events, and network-request metadata to validate analytics, advertising, session-replay and fingerprinting detection.","selectedPolicySectionHeading":"Personal data and purposes of processing","sourceCandidateProductionCredit":false}],"policyTextExtractionHealth":{"policyUrls":["https://ergoveritas.com/test1-privacy-policy.html"],"nanoInvoked":false,"contractVersion":"certscore.policy-text-extraction-health.v2","policyTextQuality":{"usable":true,"codeSignalCount":0,"codeSymbolRatio":0.0009038322487346348,"policyTermCount":14,"alphabeticWordRatio":0.8865710560625815,"accessChallengeSignalCount":0,"naturalLanguageSentenceCount":44},"policyUrlRetained":true,"extractedTextLength":5532,"policySurfaceObserved":true,"detectedPolicyLanguage":"en","minimumTextLengthRequired":500,"policyTextExtractionStatus":"ok","verifiedPolicyDocumentCount":1,"detectedPolicyLanguageSource":"policy_surface","supportedGdprTransparencyLocales":["en","de","fr","es","it","nl","pl","pt","ru","ja","zh","ar","sv","ro","cs","el","hu","da","fi","sk","bg","hr","nb","sl","lt","lv","et","uk","tr","fa","vi","id","ko","th","he","sr","ca","hi","az","gl"],"gdprTransparencyLanguageSupported":true,"policyTextEvidenceProjectionStatus":"verified_complete","policyTextEvidenceProjectionContractVersion":"certscore.policy-text-evidence-projection.v1"},"privacyPolicyEvidencePaths":[],"discoveredPrivacyPolicyUrls":["https://ergoveritas.com/test1-privacy-policy.html#demo-form"],"article13CoverageAssessments":[{"topic":"automated_decision_making_or_profiling","status":"insufficient_retained_evidence","sourceUrls":["https://ergoveritas.com/test1-privacy-policy.html#demo-form"],"reasonCodes":["policy_absence_coverage_preconditions_not_met","typed_topic_coverage_diagnostic_missing_or_limited","policy_document_content_coverage_incomplete"],"coverageStatus":"insufficient","policyDocumentIds":["policy_surface_3ef9ecff"],"policyDocumentRoles":["policy_document"],"policyDocumentSha256":["f27cbfc0ba95f6d6b6ef68e7f1d2fe68a7df962140d8c427cc78d2aa76296c46"],"assessmentContractVersion":"gdpr_transparency_article13_coverage_assessment.v1","unresolvedMaterialPolicyChildUrls":[]},{"topic":"controller_contact","status":"observed","sourceUrls":["https://ergoveritas.com/test1-privacy-policy.html#demo-form"],"reasonCodes":["row_specific_disclosure_observed"],"coverageStatus":"insufficient","policyDocumentIds":["policy_surface_3ef9ecff"],"policyDocumentRoles":["policy_document"],"policyDocumentSha256":["f27cbfc0ba95f6d6b6ef68e7f1d2fe68a7df962140d8c427cc78d2aa76296c46"],"assessmentContractVersion":"gdpr_transparency_article13_coverage_assessment.v1","unresolvedMaterialPolicyChildUrls":[]},{"topic":"data_retention","status":"observed","sourceUrls":["https://ergoveritas.com/test1-privacy-policy.html#demo-form"],"reasonCodes":["row_specific_disclosure_observed"],"coverageStatus":"insufficient","policyDocumentIds":["policy_surface_3ef9ecff"],"policyDocumentRoles":["policy_document"],"policyDocumentSha256":["f27cbfc0ba95f6d6b6ef68e7f1d2fe68a7df962140d8c427cc78d2aa76296c46"],"assessmentContractVersion":"gdpr_transparency_article13_coverage_assessment.v1","unresolvedMaterialPolicyChildUrls":[]},{"topic":"data_subject_rights","status":"observed","sourceUrls":["https://ergoveritas.com/test1-privacy-policy.html#demo-form"],"reasonCodes":["row_specific_disclosure_observed"],"coverageStatus":"insufficient","policyDocumentIds":["policy_surface_3ef9ecff"],"policyDocumentRoles":["policy_document"],"policyDocumentSha256":["f27cbfc0ba95f6d6b6ef68e7f1d2fe68a7df962140d8c427cc78d2aa76296c46"],"assessmentContractVersion":"gdpr_transparency_article13_coverage_assessment.v1","unresolvedMaterialPolicyChildUrls":[]},{"topic":"dpo_contact","status":"insufficient_retained_evidence","sourceUrls":["https://ergoveritas.com/test1-privacy-policy.html#demo-form"],"reasonCodes":["policy_absence_coverage_preconditions_not_met","typed_topic_coverage_diagnostic_missing_or_limited","policy_document_content_coverage_incomplete"],"coverageStatus":"insufficient","policyDocumentIds":["policy_surface_3ef9ecff"],"policyDocumentRoles":["policy_document"],"policyDocumentSha256":["f27cbfc0ba95f6d6b6ef68e7f1d2fe68a7df962140d8c427cc78d2aa76296c46"],"assessmentContractVersion":"gdpr_transparency_article13_coverage_assessment.v1","unresolvedMaterialPolicyChildUrls":[]},{"topic":"international_transfers","status":"insufficient_retained_evidence","sourceUrls":["https://ergoveritas.com/test1-privacy-policy.html#demo-form"],"reasonCodes":["policy_absence_coverage_preconditions_not_met","typed_topic_coverage_diagnostic_missing_or_limited","policy_document_content_coverage_incomplete"],"coverageStatus":"insufficient","policyDocumentIds":["policy_surface_3ef9ecff"],"policyDocumentRoles":["policy_document"],"policyDocumentSha256":["f27cbfc0ba95f6d6b6ef68e7f1d2fe68a7df962140d8c427cc78d2aa76296c46"],"assessmentContractVersion":"gdpr_transparency_article13_coverage_assessment.v1","unresolvedMaterialPolicyChildUrls":[]},{"topic":"legal_basis","status":"observed","sourceUrls":["https://ergoveritas.com/test1-privacy-policy.html#demo-form"],"reasonCodes":["row_specific_disclosure_observed"],"coverageStatus":"insufficient","policyDocumentIds":["policy_surface_3ef9ecff"],"policyDocumentRoles":["policy_document"],"policyDocumentSha256":["f27cbfc0ba95f6d6b6ef68e7f1d2fe68a7df962140d8c427cc78d2aa76296c46"],"assessmentContractVersion":"gdpr_transparency_article13_coverage_assessment.v1","unresolvedMaterialPolicyChildUrls":[]},{"topic":"processing_purposes","status":"observed","sourceUrls":["https://ergoveritas.com/test1-privacy-policy.html#demo-form"],"reasonCodes":["row_specific_disclosure_observed"],"coverageStatus":"insufficient","policyDocumentIds":["policy_surface_3ef9ecff"],"policyDocumentRoles":["policy_document"],"policyDocumentSha256":["f27cbfc0ba95f6d6b6ef68e7f1d2fe68a7df962140d8c427cc78d2aa76296c46"],"assessmentContractVersion":"gdpr_transparency_article13_coverage_assessment.v1","unresolvedMaterialPolicyChildUrls":[]},{"topic":"recipients_or_vendor_categories","status":"observed","sourceUrls":["https://ergoveritas.com/test1-privacy-policy.html#demo-form"],"reasonCodes":["row_specific_disclosure_observed"],"coverageStatus":"insufficient","policyDocumentIds":["policy_surface_3ef9ecff"],"policyDocumentRoles":["policy_document"],"policyDocumentSha256":["f27cbfc0ba95f6d6b6ef68e7f1d2fe68a7df962140d8c427cc78d2aa76296c46"],"assessmentContractVersion":"gdpr_transparency_article13_coverage_assessment.v1","unresolvedMaterialPolicyChildUrls":[]},{"topic":"supervisory_authority","status":"insufficient_retained_evidence","sourceUrls":["https://ergoveritas.com/test1-privacy-policy.html#demo-form"],"reasonCodes":["policy_absence_coverage_preconditions_not_met","typed_topic_coverage_diagnostic_missing_or_limited","policy_document_content_coverage_incomplete"],"coverageStatus":"insufficient","policyDocumentIds":["policy_surface_3ef9ecff"],"policyDocumentRoles":["policy_document"],"policyDocumentSha256":["f27cbfc0ba95f6d6b6ef68e7f1d2fe68a7df962140d8c427cc78d2aa76296c46"],"assessmentContractVersion":"gdpr_transparency_article13_coverage_assessment.v1","unresolvedMaterialPolicyChildUrls":[]}],"dedicatedCookiePolicyPresent":false,"policyTextEvidenceProjection":{"scanId":"bfbe7f5b-d46f-438e-a898-411e44d2571b","documents":[{"finalUrl":"https://ergoveritas.com/test1-privacy-policy.html#demo-form","artifactId":"policy_surface_text_3ef9ecff_7b1dd5b0","artifactUri":"s3://certscore-v2-dag-local-artifacts-eu-west-1-199536052647/v2-dag-lambda/local/bfbe7f5b-d46f-438e-a898-411e44d2571b/auxiliary/policy_surface_text_3ef9ecff_7b1dd5b0.txt","contentType":"text/html","documentRole":"policy_document","requestedUrl":"/test1-privacy-policy.html#demo-form","observationId":"policy_surface_3ef9ecff","redirectChain":["https://ergoveritas.com/test1-privacy-policy.html"],"artifactSha256":"f27cbfc0ba95f6d6b6ef68e7f1d2fe68a7df962140d8c427cc78d2aa76296c46","documentFormat":"text","limitationKeys":["policy_section_text_bounded"],"contentCoverage":{"status":"truncated","limitationKeys":["policy_section_text_bounded"],"sourceTextChars":5532,"retainedSectionCount":17,"extractedSectionCount":17,"retainedTableRowCount":0},"artifactFileName":"policy_surface_text_3ef9ecff_7b1dd5b0.txt","extractionStatus":"complete","artifactSizeBytes":5533,"retainedTextChars":5532,"documentFetchState":"fetched","retainedTextSha256":"f27cbfc0ba95f6d6b6ef68e7f1d2fe68a7df962140d8c427cc78d2aa76296c46","targetRelationship":"target_controller","documentOwnerEntity":"ErgoVeritas test 1","ownershipConfidence":0.98,"documentTextCoverage":{"status":"complete","limitationKeys":[],"sourceTextChars":5532,"retainedTextChars":5532},"documentEvaluationState":"usable","documentRoleReasonCodes":["multiple_substantive_disclosure_signals_retained"],"governingPolicySelection":{"rank":1,"score":85,"state":"primary","reasonCodes":["highest_ranked_eligible_governing_policy","target_controller_document","policy_content_coverage_truncated","complete_policy_text_retention","multiple_substantive_disclosure_signals_retained"],"contractVersion":"governing_policy_selection.v1"},"artifactVerificationStatus":"verified","gdprTransparencyTopicCoverageDiagnostics":[{"topic":"controller_contact","reasonCodes":["row_specific_disclosure_observed","evidence_hash_binding_verified","complete_selected_section_retained","policy_content_coverage_truncated"],"coverageState":"complete","contractVersion":"gdpr_transparency_topic_coverage_diagnostic.v2","evaluationState":"observed","sourceDocumentSha256":"0548d2aff516a981defb7a7b0e2884de97db0d990d173504f55b956b2caf169a","evidenceSectionSha256":"715917d5edfb2956a61177f2344dc265febbca54adfba9bfaa38d951d6261bec","documentRetentionState":"complete","sectionExtractionState":"complete","sectionExtractionMethod":"html_heading_hierarchy"},{"topic":"processing_purposes","reasonCodes":["row_specific_disclosure_observed","evidence_hash_binding_verified","complete_selected_section_retained","policy_content_coverage_truncated"],"coverageState":"complete","contractVersion":"gdpr_transparency_topic_coverage_diagnostic.v2","evaluationState":"observed","sourceDocumentSha256":"0548d2aff516a981defb7a7b0e2884de97db0d990d173504f55b956b2caf169a","evidenceSectionSha256":"388d797f2e9c4d3d104c47355d0ded9af62f3a1953c7a4b1302772466e12c384","documentRetentionState":"complete","sectionExtractionState":"complete","sectionExtractionMethod":"html_heading_hierarchy"},{"topic":"legal_basis","reasonCodes":["row_specific_disclosure_observed","evidence_hash_binding_verified","complete_selected_section_retained","policy_content_coverage_truncated"],"coverageState":"complete","contractVersion":"gdpr_transparency_topic_coverage_diagnostic.v2","evaluationState":"observed","sourceDocumentSha256":"0548d2aff516a981defb7a7b0e2884de97db0d990d173504f55b956b2caf169a","evidenceSectionSha256":"fb3172f24d710ad78a196d1a70c3e0ef8297309e738a3325687afef4f80f9433","documentRetentionState":"complete","sectionExtractionState":"complete","sectionExtractionMethod":"html_heading_hierarchy"},{"topic":"recipients_or_vendor_categories","reasonCodes":["row_specific_disclosure_observed","evidence_hash_binding_verified","complete_selected_section_retained","policy_content_coverage_truncated"],"coverageState":"complete","contractVersion":"gdpr_transparency_topic_coverage_diagnostic.v2","evaluationState":"observed","sourceDocumentSha256":"0548d2aff516a981defb7a7b0e2884de97db0d990d173504f55b956b2caf169a","evidenceSectionSha256":"8cde393264f7d99bc4bd2d53417cb5ce8bb30f819a399dbdde89323aff776000","documentRetentionState":"complete","sectionExtractionState":"complete","sectionExtractionMethod":"html_heading_hierarchy"},{"topic":"data_retention","reasonCodes":["row_specific_disclosure_observed","evidence_hash_binding_verified","complete_selected_section_retained","policy_content_coverage_truncated"],"coverageState":"complete","contractVersion":"gdpr_transparency_topic_coverage_diagnostic.v2","evaluationState":"observed","sourceDocumentSha256":"0548d2aff516a981defb7a7b0e2884de97db0d990d173504f55b956b2caf169a","evidenceSectionSha256":"2719a4fc3747003fefb02380cdc5cb9b659f5df5664c69c36c3dbdea69d0d707","documentRetentionState":"complete","sectionExtractionState":"complete","sectionExtractionMethod":"html_heading_hierarchy"},{"topic":"data_subject_rights","reasonCodes":["row_specific_disclosure_observed","evidence_hash_binding_verified","complete_selected_section_retained","policy_content_coverage_truncated"],"coverageState":"complete","contractVersion":"gdpr_transparency_topic_coverage_diagnostic.v2","evaluationState":"observed","sourceDocumentSha256":"0548d2aff516a981defb7a7b0e2884de97db0d990d173504f55b956b2caf169a","evidenceSectionSha256":"166785310196825968612fa5942b216418a3231527ce0e369a69644d1b5e34bb","documentRetentionState":"complete","sectionExtractionState":"complete","sectionExtractionMethod":"html_heading_hierarchy"},{"topic":"international_transfers","reasonCodes":["row_specific_disclosure_not_confirmed","policy_content_coverage_truncated"],"coverageState":"limited","contractVersion":"gdpr_transparency_topic_coverage_diagnostic.v2","evaluationState":"unknown","documentRetentionState":"complete","sectionExtractionState":"truncated"},{"topic":"dpo_contact","reasonCodes":["row_specific_disclosure_not_confirmed","policy_content_coverage_truncated"],"coverageState":"limited","contractVersion":"gdpr_transparency_topic_coverage_diagnostic.v2","evaluationState":"unknown","documentRetentionState":"complete","sectionExtractionState":"complete"},{"topic":"supervisory_authority","reasonCodes":["row_specific_disclosure_not_confirmed","policy_content_coverage_truncated"],"coverageState":"limited","contractVersion":"gdpr_transparency_topic_coverage_diagnostic.v2","evaluationState":"unknown","documentRetentionState":"complete","sectionExtractionState":"truncated"},{"topic":"automated_decision_making_or_profiling","reasonCodes":["row_specific_disclosure_not_confirmed","policy_content_coverage_truncated"],"coverageState":"limited","contractVersion":"gdpr_transparency_topic_coverage_diagnostic.v2","evaluationState":"unknown","documentRetentionState":"complete","sectionExtractionState":"truncated"}]}],"generatedAt":"2026-10-21T03:05:29.152Z","sourceBundle":{"uri":"s3://certscore-v2-dag-local-artifacts-eu-west-1-199536052647/v2-dag-lambda/local/bfbe7f5b-d46f-438e-a898-411e44d2571b/CanonicalEvidenceBundle.json","sha256":"c2530b89360df5d7fdbabf5fd01f4300e9e82bb7c412377702d13ffa2e88f81d","sizeBytes":472562,"schemaVersion":"certscore.v2.alpha.1","verificationStatus":"verified"},"limitationKeys":["policy_section_text_bounded"],"contractVersion":"certscore.policy-text-evidence-projection.v1","projectionStatus":"verified_complete"},"privacyPolicyEvaluationState":"fetched_usable","legalFrameworkValidityMatches":[],"missingExpectedPolicySections":["Your privacy controls","Exporting and deleting your information","Retaining your information","Compliance and cooperation with regulators","European requirements","Data transfers"],"policy_text_extraction_health":{"policyUrls":["https://ergoveritas.com/test1-privacy-policy.html"],"nanoInvoked":false,"contractVersion":"certscore.policy-text-extraction-health.v2","policyTextQuality":{"usable":true,"codeSignalCount":0,"codeSymbolRatio":0.0009038322487346348,"policyTermCount":14,"alphabeticWordRatio":0.8865710560625815,"accessChallengeSignalCount":0,"naturalLanguageSentenceCount":44},"policyUrlRetained":true,"extractedTextLength":5532,"policySurfaceObserved":true,"detectedPolicyLanguage":"en","minimumTextLengthRequired":500,"policyTextExtractionStatus":"ok","verifiedPolicyDocumentCount":1,"detectedPolicyLanguageSource":"policy_surface","supportedGdprTransparencyLocales":["en","de","fr","es","it","nl","pl","pt","ru","ja","zh","ar","sv","ro","cs","el","hu","da","fi","sk","bg","hr","nb","sl","lt","lv","et","uk","tr","fa","vi","id","ko","th","he","sr","ca","hi","az","gl"],"gdprTransparencyLanguageSupported":true,"policyTextEvidenceProjectionStatus":"verified_complete","policyTextEvidenceProjectionContractVersion":"certscore.policy-text-evidence-projection.v1"},"retainedPolicySectionHeadings":["Privacy Policy for the ErgoVeritas test 1 canary","Controller and contact","Personal data and purposes of processing","Legal basis for processing","Recipients and service providers","Cookies, storage and consent behavior","Data retention","Data subject rights and withdrawal","Demo enquiry and collection boundary","Concealed-link integrity example","right to access your personal data","retain personal data","controller and contact","Policy section"],"selectedPrivacyPolicyDocument":{"documentUrl":"https://ergoveritas.com/test1-privacy-policy.html","observationId":"policy_surface_3ef9ecff","traversalDepth":0,"parentSurfaceUrl":null,"parentObservationId":null,"selectionReasonCodes":[]},"article13_coverage_assessments":[{"topic":"automated_decision_making_or_profiling","status":"insufficient_retained_evidence","sourceUrls":["https://ergoveritas.com/test1-privacy-policy.html#demo-form"],"reasonCodes":["policy_absence_coverage_preconditions_not_met","typed_topic_coverage_diagnostic_missing_or_limited","policy_document_content_coverage_incomplete"],"coverageStatus":"insufficient","policyDocumentIds":["policy_surface_3ef9ecff"],"policyDocumentRoles":["policy_document"],"policyDocumentSha256":["f27cbfc0ba95f6d6b6ef68e7f1d2fe68a7df962140d8c427cc78d2aa76296c46"],"assessmentContractVersion":"gdpr_transparency_article13_coverage_assessment.v1","unresolvedMaterialPolicyChildUrls":[]},{"topic":"controller_contact","status":"observed","sourceUrls":["https://ergoveritas.com/test1-privacy-policy.html#demo-form"],"reasonCodes":["row_specific_disclosure_observed"],"coverageStatus":"insufficient","policyDocumentIds":["policy_surface_3ef9ecff"],"policyDocumentRoles":["policy_document"],"policyDocumentSha256":["f27cbfc0ba95f6d6b6ef68e7f1d2fe68a7df962140d8c427cc78d2aa76296c46"],"assessmentContractVersion":"gdpr_transparency_article13_coverage_assessment.v1","unresolvedMaterialPolicyChildUrls":[]},{"topic":"data_retention","status":"observed","sourceUrls":["https://ergoveritas.com/test1-privacy-policy.html#demo-form"],"reasonCodes":["row_specific_disclosure_observed"],"coverageStatus":"insufficient","policyDocumentIds":["policy_surface_3ef9ecff"],"policyDocumentRoles":["policy_document"],"policyDocumentSha256":["f27cbfc0ba95f6d6b6ef68e7f1d2fe68a7df962140d8c427cc78d2aa76296c46"],"assessmentContractVersion":"gdpr_transparency_article13_coverage_assessment.v1","unresolvedMaterialPolicyChildUrls":[]},{"topic":"data_subject_rights","status":"observed","sourceUrls":["https://ergoveritas.com/test1-privacy-policy.html#demo-form"],"reasonCodes":["row_specific_disclosure_observed"],"coverageStatus":"insufficient","policyDocumentIds":["policy_surface_3ef9ecff"],"policyDocumentRoles":["policy_document"],"policyDocumentSha256":["f27cbfc0ba95f6d6b6ef68e7f1d2fe68a7df962140d8c427cc78d2aa76296c46"],"assessmentContractVersion":"gdpr_transparency_article13_coverage_assessment.v1","unresolvedMaterialPolicyChildUrls":[]},{"topic":"dpo_contact","status":"insufficient_retained_evidence","sourceUrls":["https://ergoveritas.com/test1-privacy-policy.html#demo-form"],"reasonCodes":["policy_absence_coverage_preconditions_not_met","typed_topic_coverage_diagnostic_missing_or_limited","policy_document_content_coverage_incomplete"],"coverageStatus":"insufficient","policyDocumentIds":["policy_surface_3ef9ecff"],"policyDocumentRoles":["policy_document"],"policyDocumentSha256":["f27cbfc0ba95f6d6b6ef68e7f1d2fe68a7df962140d8c427cc78d2aa76296c46"],"assessmentContractVersion":"gdpr_transparency_article13_coverage_assessment.v1","unresolvedMaterialPolicyChildUrls":[]},{"topic":"international_transfers","status":"insufficient_retained_evidence","sourceUrls":["https://ergoveritas.com/test1-privacy-policy.html#demo-form"],"reasonCodes":["policy_absence_coverage_preconditions_not_met","typed_topic_coverage_diagnostic_missing_or_limited","policy_document_content_coverage_incomplete"],"coverageStatus":"insufficient","policyDocumentIds":["policy_surface_3ef9ecff"],"policyDocumentRoles":["policy_document"],"policyDocumentSha256":["f27cbfc0ba95f6d6b6ef68e7f1d2fe68a7df962140d8c427cc78d2aa76296c46"],"assessmentContractVersion":"gdpr_transparency_article13_coverage_assessment.v1","unresolvedMaterialPolicyChildUrls":[]},{"topic":"legal_basis","status":"observed","sourceUrls":["https://ergoveritas.com/test1-privacy-policy.html#demo-form"],"reasonCodes":["row_specific_disclosure_observed"],"coverageStatus":"insufficient","policyDocumentIds":["policy_surface_3ef9ecff"],"policyDocumentRoles":["policy_document"],"policyDocumentSha256":["f27cbfc0ba95f6d6b6ef68e7f1d2fe68a7df962140d8c427cc78d2aa76296c46"],"assessmentContractVersion":"gdpr_transparency_article13_coverage_assessment.v1","unresolvedMaterialPolicyChildUrls":[]},{"topic":"processing_purposes","status":"observed","sourceUrls":["https://ergoveritas.com/test1-privacy-policy.html#demo-form"],"reasonCodes":["row_specific_disclosure_observed"],"coverageStatus":"insufficient","policyDocumentIds":["policy_surface_3ef9ecff"],"policyDocumentRoles":["policy_document"],"policyDocumentSha256":["f27cbfc0ba95f6d6b6ef68e7f1d2fe68a7df962140d8c427cc78d2aa76296c46"],"assessmentContractVersion":"gdpr_transparency_article13_coverage_assessment.v1","unresolvedMaterialPolicyChildUrls":[]},{"topic":"recipients_or_vendor_categories","status":"observed","sourceUrls":["https://ergoveritas.com/test1-privacy-policy.html#demo-form"],"reasonCodes":["row_specific_disclosure_observed"],"coverageStatus":"insufficient","policyDocumentIds":["policy_surface_3ef9ecff"],"policyDocumentRoles":["policy_document"],"policyDocumentSha256":["f27cbfc0ba95f6d6b6ef68e7f1d2fe68a7df962140d8c427cc78d2aa76296c46"],"assessmentContractVersion":"gdpr_transparency_article13_coverage_assessment.v1","unresolvedMaterialPolicyChildUrls":[]},{"topic":"supervisory_authority","status":"insufficient_retained_evidence","sourceUrls":["https://ergoveritas.com/test1-privacy-policy.html#demo-form"],"reasonCodes":["policy_absence_coverage_preconditions_not_met","typed_topic_coverage_diagnostic_missing_or_limited","policy_document_content_coverage_incomplete"],"coverageStatus":"insufficient","policyDocumentIds":["policy_surface_3ef9ecff"],"policyDocumentRoles":["policy_document"],"policyDocumentSha256":["f27cbfc0ba95f6d6b6ef68e7f1d2fe68a7df962140d8c427cc78d2aa76296c46"],"assessmentContractVersion":"gdpr_transparency_article13_coverage_assessment.v1","unresolvedMaterialPolicyChildUrls":[]}],"discoveredPrivacyPolicyDetails":[{"url":"https://ergoveritas.com/test1-privacy-policy.html#demo-form","status":"fetched","documentFetchState":"fetched","fetchFailureReason":null,"linkObservationState":"observed","documentEvaluationState":"usable"}],"article13DisclosureTypesPartial":[],"discoveredPrivacyPolicyStatuses":["fetched"],"gdprTransparencyEvidenceProfile":"gdpr_transparency_multilingual_article13_v1","policy_text_evidence_projection":{"scanId":"bfbe7f5b-d46f-438e-a898-411e44d2571b","documents":[{"finalUrl":"https://ergoveritas.com/test1-privacy-policy.html#demo-form","artifactId":"policy_surface_text_3ef9ecff_7b1dd5b0","artifactUri":"s3://certscore-v2-dag-local-artifacts-eu-west-1-199536052647/v2-dag-lambda/local/bfbe7f5b-d46f-438e-a898-411e44d2571b/auxiliary/policy_surface_text_3ef9ecff_7b1dd5b0.txt","contentType":"text/html","documentRole":"policy_document","requestedUrl":"/test1-privacy-policy.html#demo-form","observationId":"policy_surface_3ef9ecff","redirectChain":["https://ergoveritas.com/test1-privacy-policy.html"],"artifactSha256":"f27cbfc0ba95f6d6b6ef68e7f1d2fe68a7df962140d8c427cc78d2aa76296c46","documentFormat":"text","limitationKeys":["policy_section_text_bounded"],"contentCoverage":{"status":"truncated","limitationKeys":["policy_section_text_bounded"],"sourceTextChars":5532,"retainedSectionCount":17,"extractedSectionCount":17,"retainedTableRowCount":0},"artifactFileName":"policy_surface_text_3ef9ecff_7b1dd5b0.txt","extractionStatus":"complete","artifactSizeBytes":5533,"retainedTextChars":5532,"documentFetchState":"fetched","retainedTextSha256":"f27cbfc0ba95f6d6b6ef68e7f1d2fe68a7df962140d8c427cc78d2aa76296c46","targetRelationship":"target_controller","documentOwnerEntity":"ErgoVeritas test 1","ownershipConfidence":0.98,"documentTextCoverage":{"status":"complete","limitationKeys":[],"sourceTextChars":5532,"retainedTextChars":5532},"documentEvaluationState":"usable","documentRoleReasonCodes":["multiple_substantive_disclosure_signals_retained"],"governingPolicySelection":{"rank":1,"score":85,"state":"primary","reasonCodes":["highest_ranked_eligible_governing_policy","target_controller_document","policy_content_coverage_truncated","complete_policy_text_retention","multiple_substantive_disclosure_signals_retained"],"contractVersion":"governing_policy_selection.v1"},"artifactVerificationStatus":"verified","gdprTransparencyTopicCoverageDiagnostics":[{"topic":"controller_contact","reasonCodes":["row_specific_disclosure_observed","evidence_hash_binding_verified","complete_selected_section_retained","policy_content_coverage_truncated"],"coverageState":"complete","contractVersion":"gdpr_transparency_topic_coverage_diagnostic.v2","evaluationState":"observed","sourceDocumentSha256":"0548d2aff516a981defb7a7b0e2884de97db0d990d173504f55b956b2caf169a","evidenceSectionSha256":"715917d5edfb2956a61177f2344dc265febbca54adfba9bfaa38d951d6261bec","documentRetentionState":"complete","sectionExtractionState":"complete","sectionExtractionMethod":"html_heading_hierarchy"},{"topic":"processing_purposes","reasonCodes":["row_specific_disclosure_observed","evidence_hash_binding_verified","complete_selected_section_retained","policy_content_coverage_truncated"],"coverageState":"complete","contractVersion":"gdpr_transparency_topic_coverage_diagnostic.v2","evaluationState":"observed","sourceDocumentSha256":"0548d2aff516a981defb7a7b0e2884de97db0d990d173504f55b956b2caf169a","evidenceSectionSha256":"388d797f2e9c4d3d104c47355d0ded9af62f3a1953c7a4b1302772466e12c384","documentRetentionState":"complete","sectionExtractionState":"complete","sectionExtractionMethod":"html_heading_hierarchy"},{"topic":"legal_basis","reasonCodes":["row_specific_disclosure_observed","evidence_hash_binding_verified","complete_selected_section_retained","policy_content_coverage_truncated"],"coverageState":"complete","contractVersion":"gdpr_transparency_topic_coverage_diagnostic.v2","evaluationState":"observed","sourceDocumentSha256":"0548d2aff516a981defb7a7b0e2884de97db0d990d173504f55b956b2caf169a","evidenceSectionSha256":"fb3172f24d710ad78a196d1a70c3e0ef8297309e738a3325687afef4f80f9433","documentRetentionState":"complete","sectionExtractionState":"complete","sectionExtractionMethod":"html_heading_hierarchy"},{"topic":"recipients_or_vendor_categories","reasonCodes":["row_specific_disclosure_observed","evidence_hash_binding_verified","complete_selected_section_retained","policy_content_coverage_truncated"],"coverageState":"complete","contractVersion":"gdpr_transparency_topic_coverage_diagnostic.v2","evaluationState":"observed","sourceDocumentSha256":"0548d2aff516a981defb7a7b0e2884de97db0d990d173504f55b956b2caf169a","evidenceSectionSha256":"8cde393264f7d99bc4bd2d53417cb5ce8bb30f819a399dbdde89323aff776000","documentRetentionState":"complete","sectionExtractionState":"complete","sectionExtractionMethod":"html_heading_hierarchy"},{"topic":"data_retention","reasonCodes":["row_specific_disclosure_observed","evidence_hash_binding_verified","complete_selected_section_retained","policy_content_coverage_truncated"],"coverageState":"complete","contractVersion":"gdpr_transparency_topic_coverage_diagnostic.v2","evaluationState":"observed","sourceDocumentSha256":"0548d2aff516a981defb7a7b0e2884de97db0d990d173504f55b956b2caf169a","evidenceSectionSha256":"2719a4fc3747003fefb02380cdc5cb9b659f5df5664c69c36c3dbdea69d0d707","documentRetentionState":"complete","sectionExtractionState":"complete","sectionExtractionMethod":"html_heading_hierarchy"},{"topic":"data_subject_rights","reasonCodes":["row_specific_disclosure_observed","evidence_hash_binding_verified","complete_selected_section_retained","policy_content_coverage_truncated"],"coverageState":"complete","contractVersion":"gdpr_transparency_topic_coverage_diagnostic.v2","evaluationState":"observed","sourceDocumentSha256":"0548d2aff516a981defb7a7b0e2884de97db0d990d173504f55b956b2caf169a","evidenceSectionSha256":"166785310196825968612fa5942b216418a3231527ce0e369a69644d1b5e34bb","documentRetentionState":"complete","sectionExtractionState":"complete","sectionExtractionMethod":"html_heading_hierarchy"},{"topic":"international_transfers","reasonCodes":["row_specific_disclosure_not_confirmed","policy_content_coverage_truncated"],"coverageState":"limited","contractVersion":"gdpr_transparency_topic_coverage_diagnostic.v2","evaluationState":"unknown","documentRetentionState":"complete","sectionExtractionState":"truncated"},{"topic":"dpo_contact","reasonCodes":["row_specific_disclosure_not_confirmed","policy_content_coverage_truncated"],"coverageState":"limited","contractVersion":"gdpr_transparency_topic_coverage_diagnostic.v2","evaluationState":"unknown","documentRetentionState":"complete","sectionExtractionState":"complete"},{"topic":"supervisory_authority","reasonCodes":["row_specific_disclosure_not_confirmed","policy_content_coverage_truncated"],"coverageState":"limited","contractVersion":"gdpr_transparency_topic_coverage_diagnostic.v2","evaluationState":"unknown","documentRetentionState":"complete","sectionExtractionState":"truncated"},{"topic":"automated_decision_making_or_profiling","reasonCodes":["row_specific_disclosure_not_confirmed","policy_content_coverage_truncated"],"coverageState":"limited","contractVersion":"gdpr_transparency_topic_coverage_diagnostic.v2","evaluationState":"unknown","documentRetentionState":"complete","sectionExtractionState":"truncated"}]}],"generatedAt":"2026-10-21T03:05:29.152Z","sourceBundle":{"uri":"s3://certscore-v2-dag-local-artifacts-eu-west-1-199536052647/v2-dag-lambda/local/bfbe7f5b-d46f-438e-a898-411e44d2571b/CanonicalEvidenceBundle.json","sha256":"c2530b89360df5d7fdbabf5fd01f4300e9e82bb7c412377702d13ffa2e88f81d","sizeBytes":472562,"schemaVersion":"certscore.v2.alpha.1","verificationStatus":"verified"},"limitationKeys":["policy_section_text_bounded"],"contractVersion":"certscore.policy-text-evidence-projection.v1","projectionStatus":"verified_complete"},"privacyPolicyTextCharacterCount":5532,"retainedCookiePolicyTextExcerpt":"","validatedDisclosureTypesPartial":[],"article13DisclosureTypesObserved":["data_retention","data_subject_rights","controller_contact","processing_purposes","legal_basis","recipients_or_vendor_categories"],"retainedArticle13SectionEvidence":[{"surfaceUrl":"https://ergoveritas.com/test1-privacy-policy.html","coverageArea":"data_retention","evidenceSource":"deterministic","signalObserved":"observed","selectedEvidenceStrength":"strong","selectedPolicySectionUrl":"https://ergoveritas.com/test1-privacy-policy.html#demo-form","selectedPolicySectionExcerpt":"We retain personal data represented by local-storage test identifiers and consent decision markers until you clear this site's browser data.","selectedPolicySectionHeading":"Data retention"},{"surfaceUrl":"https://ergoveritas.com/test1-privacy-policy.html","coverageArea":"data_subject_rights","evidenceSource":"deterministic","signalObserved":"observed","selectedEvidenceStrength":"strong","selectedPolicySectionUrl":"https://ergoveritas.com/test1-privacy-policy.html#demo-form","selectedPolicySectionExcerpt":"You have the right to access your personal data, the right to rectification of inaccurate personal data, the right to erasure, restriction of processing, data portability and objection to processing based on legitimate interests. Consent may be withdrawn without affecting the lawfulness of earlier processing.","selectedPolicySectionHeading":"Data subject rights and withdrawal"},{"surfaceUrl":"https://ergoveritas.com/test1-privacy-policy.html","coverageArea":"dpo_contact","evidenceSource":"deterministic","signalObserved":"not_confirmed","extractionLimitation":"section_retained_without_row_specific_disclosure","selectedEvidenceStrength":"limited","selectedPolicySectionUrl":"https://ergoveritas.com/test1-privacy-policy.html#demo-form","selectedPolicySectionExcerpt":"is [email protected], a reserved, non-deliverable example address for scanner validation, not a working channel for personal data or rights requests. We do not appoint a data protection officer for this synthetic scenario.","selectedPolicySectionHeading":"Controller and contact"},{"surfaceUrl":"https://ergoveritas.com/test1-privacy-policy.html","coverageArea":"controller_contact","evidenceSource":"deterministic","signalObserved":"observed","selectedEvidenceStrength":"strong","selectedPolicySectionUrl":"https://ergoveritas.com/test1-privacy-policy.html#demo-form","selectedPolicySectionExcerpt":"ErgoVeritas Canary Publisher is the controller identified in this synthetic test scenario. The scenario's privacy contact is [email protected], a reserved, non-deliverable example address for scanner validation, not a working channel for personal data or rights requests.","selectedPolicySectionHeading":"Controller and contact"},{"surfaceUrl":"https://ergoveritas.com/test1-privacy-policy.html","coverageArea":"processing_purposes","evidenceSource":"deterministic","signalObserved":"observed","selectedEvidenceStrength":"strong","selectedPolicySectionUrl":"https://ergoveritas.com/test1-privacy-policy.html#demo-form","selectedPolicySectionExcerpt":"The purposes of processing are controlled quality assurance, audience-measurement classification and testing whether refusal is reflected in observed requests.","selectedPolicySectionHeading":"Personal data and purposes of processing"},{"surfaceUrl":"https://ergoveritas.com/test1-privacy-policy.html","coverageArea":"legal_basis","evidenceSource":"deterministic","signalObserved":"observed","selectedEvidenceStrength":"strong","selectedPolicySectionUrl":"https://ergoveritas.com/test1-privacy-policy.html#demo-form","selectedPolicySectionExcerpt":"You have the right to access your personal data, the right to rectification of inaccurate personal data, the right to erasure, restriction of processing, data portability and objection to processing based on legitimate interests.","selectedPolicySectionHeading":"Data subject rights and withdrawal"},{"surfaceUrl":"https://ergoveritas.com/test1-privacy-policy.html","coverageArea":"recipients_or_vendor_categories","evidenceSource":"deterministic","signalObserved":"observed","selectedEvidenceStrength":"strong","selectedPolicySectionUrl":"https://ergoveritas.com/test1-privacy-policy.html#demo-form","selectedPolicySectionExcerpt":"We share personal data in the form of synthetic cookie identifiers and network-request metadata with analytics providers including Google Analytics, advertising provider Meta, replay providers Microsoft Clarity, Hotjar and FullStory, and product-measurement provider Segment.","selectedPolicySectionHeading":"Recipients and service providers"}],"retainedPrivacyPolicyTextExcerpt":"Privacy Policy for the ErgoVeritas test 1 canary Updated 20 October 2026. This notice applies only to ergoveritas.com/test1.html , an owned synthetic scanner-validation page. It describes its deliberately configured behavior so CertScore.ai can test evidence capture. This is not a general privacy notice for other ErgoVeritas pages or a promise that this deliberately failing test is compliant. Controller and contact ErgoVeritas Canary Publisher is the controller identified in this synthetic test scenario. The scenario's privacy contact is [email protected], a reserved, non-deliverable example address for scanner validation, not a working channel for personal data or rights requests. We do not appoint a data protection officer for this synthetic scenario. Personal data and purposes of processing We process cookie identifiers, browser and device attributes, page-view events, consent-choice events, and network-request metadata to validate analytics, advertising, session-replay and fingerprinting detection. The purposes of processing are controlled quality assurance, audience-measurement classification and testing whether refusal is reflected in observed requests. The demo enquiry displays name, email, phone, postal code and message fields; its values are not submitted, read by the test runtime, or written to browser storage. Legal basis for processing The legal basis described by this synthetic scenario is legitimate interests under Article 6(1)(f) GDPR for controlled diagnostic quality assurance. Optional analytics, advertising and replay are modeled as consent-based processing under Article 6(1)(a) GDPR. The runtime deliberately activates optional requests before a choice and again after Reject, so the stated consent basis does not establish that valid consent was obtained. This notice documents that test defect; it does not justify the behavior. Recipients and service providers We share personal data in the form of synthetic cookie identifiers and network-request metadata with analytics providers including Google Analytics, advertising provider Meta, replay providers Microsoft Clarity, Hotjar and FullStory, and product-measurement provider Segment. AWS is the hosting provider that receives ordinary page-request metadata. The purposes are measurement, advertising classification, session-replay classification and product-event classification. The page uses fixed synthetic identifiers rather than enquiry values; successful provider ingestion is not guaranteed by a request attempt. Cookies, storage and consent behavior On a fresh visit the runtime writes _ga_TEST1, _gid, _fbp, _clck, _hjSessionUser_100001 and fs_uid, plus an OptanonConsent test receipt. It writes certscore_test1_analytics and certscore_test1_consent_state to local storage and certscore_test1_session_replay to session storage. These are synthetic identifiers and decision markers, not evidence that a real CMP service has been installed. Accept and Manage are visible first-layer test controls without implemented decision handlers. Reject changes the test decision to denied and hides the banner, but intentionally writes _gid and starts a Google Analytics request approximately 75 milliseconds later. This page does not implement a GPC-dependent reduction. These behaviors are intentionally left available for independent scanner observation; a visible control or changed receipt alone is not proof of effective refusal. Data retention We retain personal data represented by local-storage test identifiers and consent decision markers until you clear this site's browser data. Session-storage test identifiers are retained for the lifetime of the browser tab's session. First-party cookie identifiers and the test consent receipt expire within 15 minutes of their latest write. The operator does not receive or retain demo enquiry values. Separate infrastructure logs and third-party recipient retention periods are not specified by this fixture, and no provider-side deletion is asserted. Data subject rights and withdrawal You have the right to access your personal data, the right to rectification of inaccurate personal data, the right to erasure, restriction of processing, data portability and objection to processing based on legitimate interests. Consent may be withdrawn without affecting the lawfulness of earlier processing. These are disclosure examples, not working request tools: the reserved privacy contact above does not receive requests. Visitors can clear this site's browser data or close the page to remove local test state or stop further page activity; this does not erase data already received by third parties. Demo enquiry and collection boundary The form is for invented personal information only. Its preview button does not serialize fields, send an email, call a CRM, navigate to a collection endpoint or save values. A submit-event guard and a form-action Content Security Policy independently prevent submission. The form inventory demonstrates what information the fields request, not proof that their values were transmitted. Optional requests listed above are separate and use fixed synthetic test identifiers. Concealed-link integrity example The test page contains one intentionally off-screen outbound link to promotion.example, a reserved example domain. It has no click handler, is not automatically followed and does not collect enquiry values. It is an integrity-review fixture, not evidence that the site was compromised. Return to the test page · Test environment notice","validatedDisclosureTypesObserved":["data_retention","data_subject_rights","controller_contact","processing_purposes","legal_basis","recipients_or_vendor_categories"],"privacyNoticeAvailabilityObserved":true,"evaluatedPrivacyPolicySurfaceCount":1,"discardedArticle13DisclosureSignals":[{"source":"deterministic","confidence":0.7,"surfaceUrl":"https://ergoveritas.com/test1-privacy-policy.html","evidenceText":"requests. The demo enquiry displays name, email, phone, postal code and message fields; its values are not submitted, read by the test runtime, or written to browser storage.","rejectReason":"insufficient_row_specific_terms","disclosureType":"legal_basis"},{"source":"deterministic","confidence":0.76,"surfaceUrl":"https://ergoveritas.com/test1-privacy-policy.html","evidenceText":"and again after Reject, so the stated consent basis does not establish that valid consent was obtained. This notice documents that test defect; it does not justify the behavior.","rejectReason":"insufficient_row_specific_terms","disclosureType":"recipients_or_vendor_categories"},{"source":"deterministic","confidence":0.9,"surfaceUrl":"https://ergoveritas.com/test1-privacy-policy.html","evidenceText":"is [email protected], a reserved, non-deliverable example address for scanner validation, not a working channel for personal data or rights requests. We do not appoint a data protection officer for this synthetic scenario.","rejectReason":"insufficient_row_specific_terms","disclosureType":"dpo_contact"}],"staleLegalFrameworkReferenceObserved":false,"policyEvidenceProvenanceContractVersion":"certscore.policy-evidence-provenance.v1","gdprTransparencyProductionEvidenceEnabled":true,"gdprTransparencyProductionEvidenceDiagnostics":{"sourceCandidateCount":7,"candidateDispositions":[{"topic":"data_subject_rights","confidence":0.9,"disposition":"accepted","matchStrength":"direct","matchedLocale":"en","rejectionReason":null,"sourceObservationId":"policy_surface_3ef9ecff"},{"topic":"data_retention","confidence":0.9,"disposition":"accepted","matchStrength":"direct","matchedLocale":"en","rejectionReason":null,"sourceObservationId":"policy_surface_3ef9ecff"},{"topic":"controller_contact","confidence":0.82,"disposition":"accepted","matchStrength":"equivalent","matchedLocale":"en","rejectionReason":null,"sourceObservationId":"policy_surface_3ef9ecff"},{"topic":"legal_basis","confidence":0.88,"disposition":"accepted","matchStrength":"equivalent","matchedLocale":"en","rejectionReason":null,"sourceObservationId":"policy_surface_3ef9ecff"},{"topic":"recipients_or_vendor_categories","confidence":0.86,"disposition":"accepted","matchStrength":"equivalent","matchedLocale":"en","rejectionReason":null,"sourceObservationId":"policy_surface_3ef9ecff"},{"topic":"dpo_contact","confidence":0.86,"disposition":"discarded","matchStrength":"equivalent","matchedLocale":"en","rejectionReason":"insufficient_row_specific_terms","sourceObservationId":"policy_surface_3ef9ecff"},{"topic":"processing_purposes","confidence":0.88,"disposition":"accepted","matchStrength":"equivalent","matchedLocale":"en","rejectionReason":null,"sourceObservationId":"policy_surface_3ef9ecff"}],"acceptedCandidateCount":6,"rejectedCandidateCount":1,"discardedCandidateCount":1,"diagnosticCandidateCount":0,"productionCreditSignalCount":6}}},"projectedFindings":[],"missingOrIncompleteSourceSignals":[]}

{"assessmentStatus":"checked","checklistItemId":"legal_basis_disclosure_observed","coverageArea":"Legal basis disclosure","evidenceState":"observed","explanation":"Whether retained privacy-policy evidence included a canonical legal-basis disclosure signal.","note":"Whether retained privacy-policy evidence included a canonical legal-basis disclosure signal.","status":"Observed","tone":"warning","pipeline":{"projectionStage":"coverage_policy","concernPolicyKey":"gdpr_eprivacy_coverage.legal_basis_disclosure_observed.observed","ws01EvidenceRole":"observed runtime signal identification, evidence capture, and logging","wc01NormalizedConcernKey":"gdpr_eprivacy.coverage.legal_basis_disclosure_observed"},"statusBasis":"Legal basis disclosure evidence was retained through adapter-approved multilingual GDPR Transparency Article 13 evidence.","retainedEvidence":{"remediation":{"kind":"none","steps":[],"message":"No remediation is established by this check alone. Retain its evidence and reassess after relevant changes."},"evidenceRefs":["Evidence: Legal basis disclosure","Excerpt: You have the right to access your personal data, the right to rectification of inaccurate personal data, the right to erasure, restriction of processing, data portability and objection to processing based on legitimate interests.","Locale: en","Policy URL: https://ergoveritas.com/test1-privacy-policy.html"],"signalObserved":true,"article13Signal":{"source":"normalized_concern","status":"observed","confidence":0.88,"surfaceUrl":"https://ergoveritas.com/test1-privacy-policy.html","evidenceText":"You have the right to access your personal data, the right to rectification of inaccurate personal data, the right to erasure, restriction of processing, data portability and objection to processing based on legitimate interests.","matchStrength":"equivalent","matchedLocale":"en","disclosureType":"legal_basis","evidenceSource":"normalized_gdpr_transparency_article13_concern","productionCredit":true,"classifierProvenance":"gdpr_transparency_topic_classifier.v1","classifierReasonCodes":["matched_legal_basis","match_strength_equivalent","variant_section_semantic_clause"],"productionCreditProfile":"gdpr_transparency_multilingual_article13_v1","selectedEvidenceStrength":"strong","selectedPolicySectionUrl":"https://ergoveritas.com/test1-privacy-policy.html","selectedPolicySectionHeading":"Data subject rights and withdrawal"},"missingEvidenceNeeded":[],"selectedEvidenceReason":"Selected the strongest retained canonical coverage evidence available for this row.","weakerArtifactsIgnored":[],"policyEvidenceAssessment":{"result":"disclosure_observed","topicRelevance":"direct","contractVersion":"certscore.policy-topic-evidence-assessment.v1"},"policyEvidenceProvenance":{"sourceUrl":"https://ergoveritas.com/test1-privacy-policy.html","policyTitle":"Privacy Policy — ErgoVeritas test 1","artifactRefs":["policy_excerpt_3ef9ecff_7b1dd5b0","policy_surface_text_3ef9ecff_7b1dd5b0"],"bannerLanguage":"en","sectionHeading":"Data subject rights and withdrawal","contractVersion":"certscore.policy-evidence-provenance.v1","discoveryMethod":"page_text_link","documentHeading":"Privacy Policy for the ErgoVeritas test 1 canary","lastUpdatedText":"Updated 20 October 2026","detectedLanguage":"en","retrievalTimestamp":"2026-10-21T03:05:24.978Z","targetRelationship":"target_controller","translationApplied":false,"documentOwnerEntity":"ErgoVeritas test 1","ownershipConfidence":0.98,"directlyLinkedFromScannedPage":true},"selectedEvidenceStrength":"moderate","selectedEvidenceArtifactId":"coverage_policy","gdprTransparencyArticle13Concern":{"state":"sufficient","topic":"legal_basis","originKey":"gdpr_transparency.article13.legal_basis","canonicalConcernKey":"runtime_artifact:gdpr_transparency.article13.legal_basis","regulatoryChecklistEligibility":"observed"}},"projectedFindings":[],"missingOrIncompleteSourceSignals":[]}

{"assessmentStatus":"checked","checklistItemId":"retention_disclosure_observed","coverageArea":"Retention disclosure","evidenceState":"observed","explanation":"Whether retained privacy-policy evidence included a data-retention disclosure signal.","note":"Whether retained privacy-policy evidence included a data-retention disclosure signal.","status":"Observed","tone":"warning","pipeline":{"projectionStage":"coverage_policy","concernPolicyKey":"gdpr_eprivacy_coverage.retention_disclosure_observed.observed","ws01EvidenceRole":"observed runtime signal identification, evidence capture, and logging","wc01NormalizedConcernKey":"gdpr_eprivacy.coverage.retention_disclosure_observed"},"statusBasis":"Retention disclosure evidence was retained through adapter-approved multilingual GDPR Transparency Article 13 evidence.","retainedEvidence":{"remediation":{"kind":"none","steps":[],"message":"No remediation is established by this check alone. Retain its evidence and reassess after relevant changes."},"evidenceRefs":["Evidence: Retention disclosure","Excerpt: We retain personal data represented by local-storage test identifiers and consent decision markers until you clear this site's browser data.","Locale: en","Policy URL: https://ergoveritas.com/test1-privacy-policy.html"],"signalObserved":true,"article13Signal":{"source":"normalized_concern","status":"observed","confidence":0.9,"surfaceUrl":"https://ergoveritas.com/test1-privacy-policy.html","evidenceText":"We retain personal data represented by local-storage test identifiers and consent decision markers until you clear this site's browser data.","matchStrength":"direct","matchedLocale":"en","disclosureType":"data_retention","evidenceSource":"normalized_gdpr_transparency_article13_concern","productionCredit":true,"classifierProvenance":"gdpr_transparency_topic_classifier.v1","classifierReasonCodes":["matched_data_retention","match_strength_direct"],"productionCreditProfile":"gdpr_transparency_multilingual_article13_v1","selectedEvidenceStrength":"strong","selectedPolicySectionUrl":"https://ergoveritas.com/test1-privacy-policy.html","selectedPolicySectionHeading":"Data retention"},"missingEvidenceNeeded":[],"selectedEvidenceReason":"Selected the strongest retained canonical coverage evidence available for this row.","weakerArtifactsIgnored":[],"policyEvidenceAssessment":{"result":"disclosure_observed","topicRelevance":"direct","contractVersion":"certscore.policy-topic-evidence-assessment.v1"},"policyEvidenceProvenance":{"sourceUrl":"https://ergoveritas.com/test1-privacy-policy.html","policyTitle":"Privacy Policy — ErgoVeritas test 1","artifactRefs":["policy_excerpt_3ef9ecff_7b1dd5b0","policy_surface_text_3ef9ecff_7b1dd5b0"],"bannerLanguage":"en","sectionHeading":"Data retention","contractVersion":"certscore.policy-evidence-provenance.v1","discoveryMethod":"page_text_link","documentHeading":"Privacy Policy for the ErgoVeritas test 1 canary","lastUpdatedText":"Updated 20 October 2026","detectedLanguage":"en","retrievalTimestamp":"2026-10-21T03:05:24.978Z","targetRelationship":"target_controller","translationApplied":false,"documentOwnerEntity":"ErgoVeritas test 1","ownershipConfidence":0.98,"directlyLinkedFromScannedPage":true},"selectedEvidenceStrength":"moderate","selectedEvidenceArtifactId":"coverage_policy","gdprTransparencyArticle13Concern":{"state":"sufficient","topic":"data_retention","originKey":"gdpr_transparency.article13.data_retention","canonicalConcernKey":"runtime_artifact:gdpr_transparency.article13.data_retention","regulatoryChecklistEligibility":"observed"}},"projectedFindings":[],"missingOrIncompleteSourceSignals":[]}

{"assessmentStatus":"checked","checklistItemId":"controller_contact_disclosure","coverageArea":"Controller/contact disclosure","evidenceState":"observed","explanation":"Whether retained privacy-policy evidence included a controller, privacy contact, or equivalent contact point.","note":"Whether retained privacy-policy evidence included a controller, privacy contact, or equivalent contact point.","status":"Observed","tone":"warning","pipeline":{"projectionStage":"coverage_policy","concernPolicyKey":"gdpr_eprivacy_coverage.controller_contact_disclosure.observed","ws01EvidenceRole":"observed runtime signal identification, evidence capture, and logging","wc01NormalizedConcernKey":"gdpr_eprivacy.coverage.controller_contact_disclosure"},"statusBasis":"Controller/contact disclosure evidence was retained through adapter-approved multilingual GDPR Transparency Article 13 evidence.","retainedEvidence":{"remediation":{"kind":"none","steps":[],"message":"No remediation is established by this check alone. Retain its evidence and reassess after relevant changes."},"evidenceRefs":["Evidence: Controller/contact disclosure","Excerpt: ErgoVeritas Canary Publisher is the controller identified in this synthetic test scenario. The scenario's privacy contact is [email protected], a reserved, non-deliverable example address for scanner validation, not a working channel for personal data or rights requests.","Locale: en","Policy URL: https://ergoveritas.com/test1-privacy-policy.html"],"signalObserved":true,"article13Signal":{"source":"normalized_concern","status":"observed","confidence":0.82,"surfaceUrl":"https://ergoveritas.com/test1-privacy-policy.html","evidenceText":"ErgoVeritas Canary Publisher is the controller identified in this synthetic test scenario. The scenario's privacy contact is [email protected], a reserved, non-deliverable example address for scanner validation, not a working channel for personal data or rights requests.","matchStrength":"equivalent","matchedLocale":"en","disclosureType":"controller_contact","evidenceSource":"normalized_gdpr_transparency_article13_concern","productionCredit":true,"classifierProvenance":"gdpr_transparency_topic_classifier.v1","classifierReasonCodes":["matched_controller_contact","match_strength_equivalent","variant_requires_topic_context"],"productionCreditProfile":"gdpr_transparency_multilingual_article13_v1","selectedEvidenceStrength":"strong","selectedPolicySectionUrl":"https://ergoveritas.com/test1-privacy-policy.html","selectedPolicySectionHeading":null},"missingEvidenceNeeded":[],"selectedEvidenceReason":"Selected the strongest retained canonical coverage evidence available for this row.","weakerArtifactsIgnored":[],"policyEvidenceAssessment":{"result":"disclosure_observed","topicRelevance":"direct","contractVersion":"certscore.policy-topic-evidence-assessment.v1"},"policyEvidenceProvenance":{"sourceUrl":"https://ergoveritas.com/test1-privacy-policy.html","policyTitle":"Privacy Policy — ErgoVeritas test 1","artifactRefs":["policy_excerpt_3ef9ecff_7b1dd5b0","policy_surface_text_3ef9ecff_7b1dd5b0"],"bannerLanguage":"en","contractVersion":"certscore.policy-evidence-provenance.v1","discoveryMethod":"page_text_link","documentHeading":"Privacy Policy for the ErgoVeritas test 1 canary","lastUpdatedText":"Updated 20 October 2026","detectedLanguage":"en","retrievalTimestamp":"2026-10-21T03:05:24.978Z","targetRelationship":"target_controller","translationApplied":false,"documentOwnerEntity":"ErgoVeritas test 1","ownershipConfidence":0.98,"directlyLinkedFromScannedPage":true},"selectedEvidenceStrength":"moderate","selectedEvidenceArtifactId":"coverage_policy","gdprTransparencyArticle13Concern":{"state":"sufficient","topic":"controller_contact","originKey":"gdpr_transparency.article13.controller_contact","canonicalConcernKey":"runtime_artifact:gdpr_transparency.article13.controller_contact","regulatoryChecklistEligibility":"observed"}},"projectedFindings":[],"missingOrIncompleteSourceSignals":[]}

{"assessmentStatus":"checked","checklistItemId":"processing_purposes_disclosure","coverageArea":"Processing purposes disclosure","evidenceState":"observed","explanation":"Whether retained privacy-policy evidence described the purposes for processing personal data.","note":"Whether retained privacy-policy evidence described the purposes for processing personal data.","status":"Observed","tone":"warning","pipeline":{"projectionStage":"coverage_policy","concernPolicyKey":"gdpr_eprivacy_coverage.processing_purposes_disclosure.observed","ws01EvidenceRole":"observed runtime signal identification, evidence capture, and logging","wc01NormalizedConcernKey":"gdpr_eprivacy.coverage.processing_purposes_disclosure"},"statusBasis":"Processing purposes disclosure evidence was retained through adapter-approved multilingual GDPR Transparency Article 13 evidence.","retainedEvidence":{"remediation":{"kind":"none","steps":[],"message":"No remediation is established by this check alone. Retain its evidence and reassess after relevant changes."},"evidenceRefs":["Evidence: Processing purposes disclosure","Excerpt: Personal data and purposes of processing. We process cookie identifiers, browser and device attributes, page-view events, consent-choice events, and network-request metadata to validate analytics, advertising, session-replay and fingerprinting detection.","Locale: en","Policy URL: https://ergoveritas.com/test1-privacy-policy.html"],"signalObserved":true,"article13Signal":{"source":"normalized_concern","status":"observed","confidence":0.88,"surfaceUrl":"https://ergoveritas.com/test1-privacy-policy.html","evidenceText":"Personal data and purposes of processing. We process cookie identifiers, browser and device attributes, page-view events, consent-choice events, and network-request metadata to validate analytics, advertising, session-replay and fingerprinting detection.","matchStrength":"equivalent","matchedLocale":"en","disclosureType":"processing_purposes","evidenceSource":"normalized_gdpr_transparency_article13_concern","productionCredit":true,"classifierProvenance":"gdpr_transparency_topic_classifier.v1","classifierReasonCodes":["matched_processing_purposes","match_strength_equivalent","variant_section_semantic_clause"],"productionCreditProfile":"gdpr_transparency_multilingual_article13_v1","selectedEvidenceStrength":"strong","selectedPolicySectionUrl":"https://ergoveritas.com/test1-privacy-policy.html","selectedPolicySectionHeading":"Personal data and purposes of processing"},"missingEvidenceNeeded":[],"selectedEvidenceReason":"Selected the strongest retained canonical coverage evidence available for this row.","weakerArtifactsIgnored":[],"policyEvidenceAssessment":{"result":"disclosure_observed","topicRelevance":"direct","contractVersion":"certscore.policy-topic-evidence-assessment.v1"},"policyEvidenceProvenance":{"sourceUrl":"https://ergoveritas.com/test1-privacy-policy.html","policyTitle":"Privacy Policy — ErgoVeritas test 1","artifactRefs":["policy_excerpt_3ef9ecff_7b1dd5b0","policy_surface_text_3ef9ecff_7b1dd5b0"],"bannerLanguage":"en","sectionHeading":"Personal data and purposes of processing","contractVersion":"certscore.policy-evidence-provenance.v1","discoveryMethod":"page_text_link","documentHeading":"Privacy Policy for the ErgoVeritas test 1 canary","lastUpdatedText":"Updated 20 October 2026","detectedLanguage":"en","retrievalTimestamp":"2026-10-21T03:05:24.978Z","targetRelationship":"target_controller","translationApplied":false,"documentOwnerEntity":"ErgoVeritas test 1","ownershipConfidence":0.98,"directlyLinkedFromScannedPage":true},"selectedEvidenceStrength":"moderate","selectedEvidenceArtifactId":"coverage_policy","gdprTransparencyArticle13Concern":{"state":"sufficient","topic":"processing_purposes","originKey":"gdpr_transparency.article13.processing_purposes","canonicalConcernKey":"runtime_artifact:gdpr_transparency.article13.processing_purposes","regulatoryChecklistEligibility":"observed"}},"projectedFindings":[],"missingOrIncompleteSourceSignals":[]}

{"assessmentStatus":"checked","checklistItemId":"recipients_vendor_categories_disclosure","coverageArea":"Recipients/vendor categories disclosed","evidenceState":"observed","explanation":"Whether retained privacy-policy evidence described recipient, vendor, or 3rd party categories.","note":"Whether retained privacy-policy evidence described recipient, vendor, or 3rd party categories.","status":"Observed","tone":"warning","pipeline":{"projectionStage":"coverage_policy","concernPolicyKey":"gdpr_eprivacy_coverage.recipients_vendor_categories_disclosure.observed","ws01EvidenceRole":"observed runtime signal identification, evidence capture, and logging","wc01NormalizedConcernKey":"gdpr_eprivacy.coverage.recipients_vendor_categories_disclosure"},"statusBasis":"Recipients/vendor categories disclosure evidence was retained through adapter-approved multilingual GDPR Transparency Article 13 evidence.","retainedEvidence":{"remediation":{"kind":"none","steps":[],"message":"No remediation is established by this check alone. Retain its evidence and reassess after relevant changes."},"evidenceRefs":["Evidence: Recipients/vendor categories disclosure","Excerpt: We share personal data in the form of synthetic cookie identifiers and network-request metadata with analytics providers including Google Analytics, advertising provider Meta, replay providers Microsoft Clarity, Hotjar and FullStory, and product-measurement provider Segment.","Locale: en","Policy URL: https://ergoveritas.com/test1-privacy-policy.html"],"signalObserved":true,"article13Signal":{"source":"normalized_concern","status":"observed","confidence":0.86,"surfaceUrl":"https://ergoveritas.com/test1-privacy-policy.html","evidenceText":"We share personal data in the form of synthetic cookie identifiers and network-request metadata with analytics providers including Google Analytics, advertising provider Meta, replay providers Microsoft Clarity, Hotjar and FullStory, and product-measurement provider Segment.","matchStrength":"equivalent","matchedLocale":"en","disclosureType":"recipients_or_vendor_categories","evidenceSource":"normalized_gdpr_transparency_article13_concern","productionCredit":true,"classifierProvenance":"gdpr_transparency_topic_classifier.v1","classifierReasonCodes":["matched_recipients_or_vendor_categories","match_strength_equivalent","variant_semantic_clause"],"productionCreditProfile":"gdpr_transparency_multilingual_article13_v1","selectedEvidenceStrength":"strong","selectedPolicySectionUrl":"https://ergoveritas.com/test1-privacy-policy.html","selectedPolicySectionHeading":"Recipients and service providers"},"missingEvidenceNeeded":[],"selectedEvidenceReason":"Selected the strongest retained canonical coverage evidence available for this row.","weakerArtifactsIgnored":[],"policyEvidenceAssessment":{"result":"disclosure_observed","topicRelevance":"direct","contractVersion":"certscore.policy-topic-evidence-assessment.v1"},"policyEvidenceProvenance":{"sourceUrl":"https://ergoveritas.com/test1-privacy-policy.html","policyTitle":"Privacy Policy — ErgoVeritas test 1","artifactRefs":["policy_excerpt_3ef9ecff_7b1dd5b0","policy_surface_text_3ef9ecff_7b1dd5b0"],"bannerLanguage":"en","sectionHeading":"Recipients and service providers","contractVersion":"certscore.policy-evidence-provenance.v1","discoveryMethod":"page_text_link","documentHeading":"Privacy Policy for the ErgoVeritas test 1 canary","lastUpdatedText":"Updated 20 October 2026","detectedLanguage":"en","retrievalTimestamp":"2026-10-21T03:05:24.978Z","targetRelationship":"target_controller","translationApplied":false,"documentOwnerEntity":"ErgoVeritas test 1","ownershipConfidence":0.98,"directlyLinkedFromScannedPage":true},"selectedEvidenceStrength":"moderate","selectedEvidenceArtifactId":"coverage_policy","gdprTransparencyArticle13Concern":{"state":"sufficient","topic":"recipients_or_vendor_categories","originKey":"gdpr_transparency.article13.recipients_or_vendor_categories","canonicalConcernKey":"runtime_artifact:gdpr_transparency.article13.recipients_or_vendor_categories","regulatoryChecklistEligibility":"observed"}},"projectedFindings":[],"missingOrIncompleteSourceSignals":[]}

{"assessmentStatus":"checked","checklistItemId":"data_subject_rights_disclosure","coverageArea":"Data subject rights disclosure","evidenceState":"observed","explanation":"Whether retained privacy-policy evidence described data subject rights or a rights request path.","note":"Whether retained privacy-policy evidence described data subject rights or a rights request path.","status":"Observed","tone":"warning","pipeline":{"projectionStage":"coverage_policy","concernPolicyKey":"gdpr_eprivacy_coverage.data_subject_rights_disclosure.observed","ws01EvidenceRole":"observed runtime signal identification, evidence capture, and logging","wc01NormalizedConcernKey":"gdpr_eprivacy.coverage.data_subject_rights_disclosure"},"statusBasis":"Data subject rights disclosure evidence was retained through adapter-approved multilingual GDPR Transparency Article 13 evidence.","retainedEvidence":{"remediation":{"kind":"none","steps":[],"message":"No remediation is established by this check alone. Retain its evidence and reassess after relevant changes."},"evidenceRefs":["Evidence: Data subject rights disclosure","Excerpt: You have the right to access your personal data, the right to rectification of inaccurate personal data, the right to erasure, restriction of processing, data portability and objection to processing based on legitimate interests. Consent may be withdrawn without affecting the lawfulness of earlier processing.","Locale: en","Policy URL: https://ergoveritas.com/test1-privacy-policy.html"],"signalObserved":true,"article13Signal":{"source":"normalized_concern","status":"observed","confidence":0.9,"surfaceUrl":"https://ergoveritas.com/test1-privacy-policy.html","evidenceText":"You have the right to access your personal data, the right to rectification of inaccurate personal data, the right to erasure, restriction of processing, data portability and objection to processing based on legitimate interests. Consent may be withdrawn without affecting the lawfulness of earlier processing.","matchStrength":"direct","matchedLocale":"en","disclosureType":"data_subject_rights","evidenceSource":"normalized_gdpr_transparency_article13_concern","productionCredit":true,"classifierProvenance":"gdpr_transparency_topic_classifier.v1","classifierReasonCodes":["matched_data_subject_rights","match_strength_direct"],"productionCreditProfile":"gdpr_transparency_multilingual_article13_v1","selectedEvidenceStrength":"strong","selectedPolicySectionUrl":"https://ergoveritas.com/test1-privacy-policy.html","selectedPolicySectionHeading":"Data subject rights and withdrawal"},"missingEvidenceNeeded":[],"selectedEvidenceReason":"Selected the strongest retained canonical coverage evidence available for this row.","weakerArtifactsIgnored":[],"policyEvidenceAssessment":{"result":"disclosure_observed","topicRelevance":"direct","contractVersion":"certscore.policy-topic-evidence-assessment.v1"},"policyEvidenceProvenance":{"sourceUrl":"https://ergoveritas.com/test1-privacy-policy.html","policyTitle":"Privacy Policy — ErgoVeritas test 1","artifactRefs":["policy_excerpt_3ef9ecff_7b1dd5b0","policy_surface_text_3ef9ecff_7b1dd5b0"],"bannerLanguage":"en","sectionHeading":"Data subject rights and withdrawal","contractVersion":"certscore.policy-evidence-provenance.v1","discoveryMethod":"page_text_link","documentHeading":"Privacy Policy for the ErgoVeritas test 1 canary","lastUpdatedText":"Updated 20 October 2026","detectedLanguage":"en","retrievalTimestamp":"2026-10-21T03:05:24.978Z","targetRelationship":"target_controller","translationApplied":false,"documentOwnerEntity":"ErgoVeritas test 1","ownershipConfidence":0.98,"directlyLinkedFromScannedPage":true},"selectedEvidenceStrength":"moderate","selectedEvidenceArtifactId":"coverage_policy","gdprTransparencyArticle13Concern":{"state":"sufficient","topic":"data_subject_rights","originKey":"gdpr_transparency.article13.data_subject_rights","canonicalConcernKey":"runtime_artifact:gdpr_transparency.article13.data_subject_rights","regulatoryChecklistEligibility":"observed"}},"projectedFindings":[],"missingOrIncompleteSourceSignals":[]}

{"assessmentStatus":"coverage_limitation","checklistItemId":"international_transfers_disclosure","coverageArea":"International transfer disclosure","evidenceState":"not_testable","explanation":"Whether retained privacy-policy evidence described international transfers or transfer-relevant endpoint/vendor context.","note":"Whether retained privacy-policy evidence described international transfers or transfer-relevant endpoint/vendor context.","status":"Not confirmed","tone":"neutral","pipeline":{"projectionStage":"coverage_policy","concernPolicyKey":"gdpr_eprivacy_coverage.international_transfers_disclosure.not_confirmed","ws01EvidenceRole":"observed runtime signal identification, evidence capture, and logging","wc01NormalizedConcernKey":"gdpr_eprivacy.coverage.international_transfers_disclosure"},"statusBasis":"No production-approved topic match was established. This neutral result does not establish that the disclosure is absent.","retainedEvidence":{"remediation":{"kind":"steps","steps":["Review the governing policy section for the intended international transfers and applicable safeguard information; retain the exact excerpt and source URL.","If relevant wording exists, record it for review and investigate extraction coverage. Unconfirmed evidence alone does not establish a missing disclosure.","Retest the same policy version or record the revised version; verify that the extracted passage supports this specific topic, rather than nearby or unrelated wording."]},"signalObserved":"not_confirmed_canonical_projection_unavailable","missingEvidenceNeeded":[],"selectedEvidenceReason":"Selected the strongest retained canonical coverage evidence available for this row.","weakerArtifactsIgnored":[],"canonicalProjectionState":"normalized_concern_unavailable","policyEvidenceAssessment":{"result":"extraction_incomplete","topicRelevance":"unknown","contractVersion":"certscore.policy-topic-evidence-assessment.v1"},"policyEvidenceProvenance":{"sourceUrl":"https://ergoveritas.com/test1-privacy-policy.html","policyTitle":"Privacy Policy — ErgoVeritas test 1","artifactRefs":["policy_excerpt_3ef9ecff_7b1dd5b0","policy_surface_text_3ef9ecff_7b1dd5b0"],"bannerLanguage":"en","contractVersion":"certscore.policy-evidence-provenance.v1","discoveryMethod":"page_text_link","documentHeading":"Privacy Policy for the ErgoVeritas test 1 canary","lastUpdatedText":"Updated 20 October 2026","detectedLanguage":"en","retrievalTimestamp":"2026-10-21T03:05:24.978Z","targetRelationship":"target_controller","translationApplied":false,"documentOwnerEntity":"ErgoVeritas test 1","ownershipConfidence":0.98,"directlyLinkedFromScannedPage":true},"selectedEvidenceStrength":"missing","policyTextExtractionHealth":{"policyUrls":["https://ergoveritas.com/test1-privacy-policy.html"],"nanoInvoked":false,"contractVersion":"certscore.policy-text-extraction-health.v2","policyTextQuality":{"usable":true,"codeSignalCount":0,"codeSymbolRatio":0.0009038322487346348,"policyTermCount":14,"alphabeticWordRatio":0.8865710560625815,"accessChallengeSignalCount":0,"naturalLanguageSentenceCount":44},"policyUrlRetained":true,"extractedTextLength":5532,"policySurfaceObserved":true,"detectedPolicyLanguage":"en","minimumTextLengthRequired":500,"policyTextExtractionStatus":"ok","verifiedPolicyDocumentCount":1,"detectedPolicyLanguageSource":"policy_surface","supportedGdprTransparencyLocales":["en","de","fr","es","it","nl","pl","pt","ru","ja","zh","ar","sv","ro","cs","el","hu","da","fi","sk","bg","hr","nb","sl","lt","lv","et","uk","tr","fa","vi","id","ko","th","he","sr","ca","hi","az","gl"],"gdprTransparencyLanguageSupported":true,"policyTextEvidenceProjectionStatus":"verified_complete","policyTextEvidenceProjectionContractVersion":"certscore.policy-text-evidence-projection.v1"},"selectedEvidenceArtifactId":"coverage_policy","article13CoverageAssessment":{"topic":"international_transfers","status":"insufficient_retained_evidence","sourceUrls":["https://ergoveritas.com/test1-privacy-policy.html#demo-form"],"reasonCodes":["policy_absence_coverage_preconditions_not_met","typed_topic_coverage_diagnostic_missing_or_limited","policy_document_content_coverage_incomplete"],"coverageStatus":"insufficient","policyDocumentIds":["policy_surface_3ef9ecff"],"policyDocumentRoles":["policy_document"],"policyDocumentSha256":["f27cbfc0ba95f6d6b6ef68e7f1d2fe68a7df962140d8c427cc78d2aa76296c46"],"assessmentContractVersion":"gdpr_transparency_article13_coverage_assessment.v1","unresolvedMaterialPolicyChildUrls":[]},"gdprTransparencyReportStatusContract":"observed_not_confirmed_no_match_found.v1"},"projectedFindings":[],"missingOrIncompleteSourceSignals":[]}

{"assessmentStatus":"coverage_limitation","checklistItemId":"dpo_contact_point_disclosure","coverageArea":"DPO contact point (where applicable)","evidenceState":"not_testable","explanation":"Whether retained privacy-policy evidence identified a designated data protection officer or equivalent statutory DPO contact. A generic privacy mailbox is credited under controller/contact disclosure and does not by itself establish a DPO designation.","note":"Whether retained privacy-policy evidence identified a designated data protection officer or equivalent statutory DPO contact. A generic privacy mailbox is credited under controller/contact disclosure and does not by itself establish a DPO designation.","status":"Not confirmed","tone":"neutral","pipeline":{"projectionStage":"coverage_policy","concernPolicyKey":"gdpr_eprivacy_coverage.dpo_contact_point_disclosure.not_confirmed","ws01EvidenceRole":"observed runtime signal identification, evidence capture, and logging","wc01NormalizedConcernKey":"gdpr_eprivacy.coverage.dpo_contact_point_disclosure"},"statusBasis":"No production-approved topic match was established. This neutral result does not establish that the disclosure is absent.","retainedEvidence":{"remediation":{"kind":"steps","steps":["Review the governing policy section for an expressly designated Data Protection Officer and contact route, where applicable; retain the exact excerpt and source URL.","Determine whether DPO designation is required separately. A generic privacy mailbox does not prove a designation.","If relevant wording exists, record it for review and investigate extraction coverage. Unconfirmed evidence alone does not establish a missing disclosure.","Retest the same policy version or record the revised version; verify that the extracted passage supports this specific topic, rather than nearby or unrelated wording."]},"signalObserved":"not_confirmed_canonical_projection_unavailable","missingEvidenceNeeded":[],"selectedEvidenceReason":"Selected the strongest retained canonical coverage evidence available for this row.","weakerArtifactsIgnored":[],"canonicalProjectionState":"normalized_concern_unavailable","policyEvidenceAssessment":{"result":"extraction_incomplete","topicRelevance":"unknown","contractVersion":"certscore.policy-topic-evidence-assessment.v1"},"policyEvidenceProvenance":{"sourceUrl":"https://ergoveritas.com/test1-privacy-policy.html","policyTitle":"Privacy Policy — ErgoVeritas test 1","artifactRefs":["policy_excerpt_3ef9ecff_7b1dd5b0","policy_surface_text_3ef9ecff_7b1dd5b0"],"bannerLanguage":"en","contractVersion":"certscore.policy-evidence-provenance.v1","discoveryMethod":"page_text_link","documentHeading":"Privacy Policy for the ErgoVeritas test 1 canary","lastUpdatedText":"Updated 20 October 2026","detectedLanguage":"en","retrievalTimestamp":"2026-10-21T03:05:24.978Z","targetRelationship":"target_controller","translationApplied":false,"documentOwnerEntity":"ErgoVeritas test 1","ownershipConfidence":0.98,"directlyLinkedFromScannedPage":true},"selectedEvidenceStrength":"missing","policyTextExtractionHealth":{"policyUrls":["https://ergoveritas.com/test1-privacy-policy.html"],"nanoInvoked":false,"contractVersion":"certscore.policy-text-extraction-health.v2","policyTextQuality":{"usable":true,"codeSignalCount":0,"codeSymbolRatio":0.0009038322487346348,"policyTermCount":14,"alphabeticWordRatio":0.8865710560625815,"accessChallengeSignalCount":0,"naturalLanguageSentenceCount":44},"policyUrlRetained":true,"extractedTextLength":5532,"policySurfaceObserved":true,"detectedPolicyLanguage":"en","minimumTextLengthRequired":500,"policyTextExtractionStatus":"ok","verifiedPolicyDocumentCount":1,"detectedPolicyLanguageSource":"policy_surface","supportedGdprTransparencyLocales":["en","de","fr","es","it","nl","pl","pt","ru","ja","zh","ar","sv","ro","cs","el","hu","da","fi","sk","bg","hr","nb","sl","lt","lv","et","uk","tr","fa","vi","id","ko","th","he","sr","ca","hi","az","gl"],"gdprTransparencyLanguageSupported":true,"policyTextEvidenceProjectionStatus":"verified_complete","policyTextEvidenceProjectionContractVersion":"certscore.policy-text-evidence-projection.v1"},"selectedEvidenceArtifactId":"coverage_policy","article13CoverageAssessment":{"topic":"dpo_contact","status":"insufficient_retained_evidence","sourceUrls":["https://ergoveritas.com/test1-privacy-policy.html#demo-form"],"reasonCodes":["policy_absence_coverage_preconditions_not_met","typed_topic_coverage_diagnostic_missing_or_limited","policy_document_content_coverage_incomplete"],"coverageStatus":"insufficient","policyDocumentIds":["policy_surface_3ef9ecff"],"policyDocumentRoles":["policy_document"],"policyDocumentSha256":["f27cbfc0ba95f6d6b6ef68e7f1d2fe68a7df962140d8c427cc78d2aa76296c46"],"assessmentContractVersion":"gdpr_transparency_article13_coverage_assessment.v1","unresolvedMaterialPolicyChildUrls":[]},"gdprTransparencyReportStatusContract":"observed_not_confirmed_no_match_found.v1"},"projectedFindings":[],"missingOrIncompleteSourceSignals":[]}

{"assessmentStatus":"coverage_limitation","checklistItemId":"supervisory_authority_complaint_disclosure","coverageArea":"Supervisory authority complaint","evidenceState":"not_testable","explanation":"Whether retained privacy-policy evidence referenced a right to complain to a supervisory authority.","note":"Whether retained privacy-policy evidence referenced a right to complain to a supervisory authority.","status":"Not confirmed","tone":"neutral","pipeline":{"projectionStage":"coverage_policy","concernPolicyKey":"gdpr_eprivacy_coverage.supervisory_authority_complaint_disclosure.not_confirmed","ws01EvidenceRole":"observed runtime signal identification, evidence capture, and logging","wc01NormalizedConcernKey":"gdpr_eprivacy.coverage.supervisory_authority_complaint_disclosure"},"statusBasis":"No production-approved topic match was established. This neutral result does not establish that the disclosure is absent.","retainedEvidence":{"remediation":{"kind":"steps","steps":["Review the governing policy section for the right to complain to a supervisory authority; retain the exact excerpt and source URL.","If relevant wording exists, record it for review and investigate extraction coverage. Unconfirmed evidence alone does not establish a missing disclosure.","Retest the same policy version or record the revised version; verify that the extracted passage supports this specific topic, rather than nearby or unrelated wording."]},"signalObserved":"not_confirmed_canonical_projection_unavailable","missingEvidenceNeeded":[],"selectedEvidenceReason":"Selected the strongest retained canonical coverage evidence available for this row.","weakerArtifactsIgnored":[],"canonicalProjectionState":"normalized_concern_unavailable","policyEvidenceAssessment":{"result":"extraction_incomplete","topicRelevance":"unknown","contractVersion":"certscore.policy-topic-evidence-assessment.v1"},"policyEvidenceProvenance":{"sourceUrl":"https://ergoveritas.com/test1-privacy-policy.html","policyTitle":"Privacy Policy — ErgoVeritas test 1","artifactRefs":["policy_excerpt_3ef9ecff_7b1dd5b0","policy_surface_text_3ef9ecff_7b1dd5b0"],"bannerLanguage":"en","contractVersion":"certscore.policy-evidence-provenance.v1","discoveryMethod":"page_text_link","documentHeading":"Privacy Policy for the ErgoVeritas test 1 canary","lastUpdatedText":"Updated 20 October 2026","detectedLanguage":"en","retrievalTimestamp":"2026-10-21T03:05:24.978Z","targetRelationship":"target_controller","translationApplied":false,"documentOwnerEntity":"ErgoVeritas test 1","ownershipConfidence":0.98,"directlyLinkedFromScannedPage":true},"selectedEvidenceStrength":"missing","policyTextExtractionHealth":{"policyUrls":["https://ergoveritas.com/test1-privacy-policy.html"],"nanoInvoked":false,"contractVersion":"certscore.policy-text-extraction-health.v2","policyTextQuality":{"usable":true,"codeSignalCount":0,"codeSymbolRatio":0.0009038322487346348,"policyTermCount":14,"alphabeticWordRatio":0.8865710560625815,"accessChallengeSignalCount":0,"naturalLanguageSentenceCount":44},"policyUrlRetained":true,"extractedTextLength":5532,"policySurfaceObserved":true,"detectedPolicyLanguage":"en","minimumTextLengthRequired":500,"policyTextExtractionStatus":"ok","verifiedPolicyDocumentCount":1,"detectedPolicyLanguageSource":"policy_surface","supportedGdprTransparencyLocales":["en","de","fr","es","it","nl","pl","pt","ru","ja","zh","ar","sv","ro","cs","el","hu","da","fi","sk","bg","hr","nb","sl","lt","lv","et","uk","tr","fa","vi","id","ko","th","he","sr","ca","hi","az","gl"],"gdprTransparencyLanguageSupported":true,"policyTextEvidenceProjectionStatus":"verified_complete","policyTextEvidenceProjectionContractVersion":"certscore.policy-text-evidence-projection.v1"},"selectedEvidenceArtifactId":"coverage_policy","article13CoverageAssessment":{"topic":"supervisory_authority","status":"insufficient_retained_evidence","sourceUrls":["https://ergoveritas.com/test1-privacy-policy.html#demo-form"],"reasonCodes":["policy_absence_coverage_preconditions_not_met","typed_topic_coverage_diagnostic_missing_or_limited","policy_document_content_coverage_incomplete"],"coverageStatus":"insufficient","policyDocumentIds":["policy_surface_3ef9ecff"],"policyDocumentRoles":["policy_document"],"policyDocumentSha256":["f27cbfc0ba95f6d6b6ef68e7f1d2fe68a7df962140d8c427cc78d2aa76296c46"],"assessmentContractVersion":"gdpr_transparency_article13_coverage_assessment.v1","unresolvedMaterialPolicyChildUrls":[]},"gdprTransparencyReportStatusContract":"observed_not_confirmed_no_match_found.v1"},"projectedFindings":[],"missingOrIncompleteSourceSignals":[]}

{"assessmentStatus":"coverage_limitation","checklistItemId":"automated_decision_making_profiling_disclosure","coverageArea":"Profiling / automated decisions disclosure","evidenceState":"not_testable","explanation":"Whether adapter-approved Article 13 evidence retained automated decision-making or profiling disclosure context for review.","note":"Whether adapter-approved Article 13 evidence retained automated decision-making or profiling disclosure context for review.","status":"Not confirmed","tone":"neutral","pipeline":{"projectionStage":"coverage_policy","concernPolicyKey":"gdpr_eprivacy_coverage.automated_decision_making_profiling_disclosure.not_confirmed","ws01EvidenceRole":"observed runtime signal identification, evidence capture, and logging","wc01NormalizedConcernKey":"gdpr_eprivacy.coverage.automated_decision_making_profiling_disclosure"},"statusBasis":"No production-approved topic match was established. This neutral result does not establish that the disclosure is absent.","retainedEvidence":{"remediation":{"kind":"steps","steps":["Review the governing policy section for the applicable automated decision-making or profiling disclosures; retain the exact excerpt and source URL.","If relevant wording exists, record it for review and investigate extraction coverage. Unconfirmed evidence alone does not establish a missing disclosure.","Retest the same policy version or record the revised version; verify that the extracted passage supports this specific topic, rather than nearby or unrelated wording."]},"signalObserved":"not_confirmed_canonical_projection_unavailable","missingEvidenceNeeded":[],"selectedEvidenceReason":"Selected the strongest retained canonical coverage evidence available for this row.","weakerArtifactsIgnored":[],"canonicalProjectionState":"normalized_concern_unavailable","policyEvidenceAssessment":{"result":"extraction_incomplete","topicRelevance":"unknown","contractVersion":"certscore.policy-topic-evidence-assessment.v1"},"policyEvidenceProvenance":{"sourceUrl":"https://ergoveritas.com/test1-privacy-policy.html","policyTitle":"Privacy Policy — ErgoVeritas test 1","artifactRefs":["policy_excerpt_3ef9ecff_7b1dd5b0","policy_surface_text_3ef9ecff_7b1dd5b0"],"bannerLanguage":"en","contractVersion":"certscore.policy-evidence-provenance.v1","discoveryMethod":"page_text_link","documentHeading":"Privacy Policy for the ErgoVeritas test 1 canary","lastUpdatedText":"Updated 20 October 2026","detectedLanguage":"en","retrievalTimestamp":"2026-10-21T03:05:24.978Z","targetRelationship":"target_controller","translationApplied":false,"documentOwnerEntity":"ErgoVeritas test 1","ownershipConfidence":0.98,"directlyLinkedFromScannedPage":true},"selectedEvidenceStrength":"missing","policyTextExtractionHealth":{"policyUrls":["https://ergoveritas.com/test1-privacy-policy.html"],"nanoInvoked":false,"contractVersion":"certscore.policy-text-extraction-health.v2","policyTextQuality":{"usable":true,"codeSignalCount":0,"codeSymbolRatio":0.0009038322487346348,"policyTermCount":14,"alphabeticWordRatio":0.8865710560625815,"accessChallengeSignalCount":0,"naturalLanguageSentenceCount":44},"policyUrlRetained":true,"extractedTextLength":5532,"policySurfaceObserved":true,"detectedPolicyLanguage":"en","minimumTextLengthRequired":500,"policyTextExtractionStatus":"ok","verifiedPolicyDocumentCount":1,"detectedPolicyLanguageSource":"policy_surface","supportedGdprTransparencyLocales":["en","de","fr","es","it","nl","pl","pt","ru","ja","zh","ar","sv","ro","cs","el","hu","da","fi","sk","bg","hr","nb","sl","lt","lv","et","uk","tr","fa","vi","id","ko","th","he","sr","ca","hi","az","gl"],"gdprTransparencyLanguageSupported":true,"policyTextEvidenceProjectionStatus":"verified_complete","policyTextEvidenceProjectionContractVersion":"certscore.policy-text-evidence-projection.v1"},"selectedEvidenceArtifactId":"coverage_policy","article13CoverageAssessment":{"topic":"automated_decision_making_or_profiling","status":"insufficient_retained_evidence","sourceUrls":["https://ergoveritas.com/test1-privacy-policy.html#demo-form"],"reasonCodes":["policy_absence_coverage_preconditions_not_met","typed_topic_coverage_diagnostic_missing_or_limited","policy_document_content_coverage_incomplete"],"coverageStatus":"insufficient","policyDocumentIds":["policy_surface_3ef9ecff"],"policyDocumentRoles":["policy_document"],"policyDocumentSha256":["f27cbfc0ba95f6d6b6ef68e7f1d2fe68a7df962140d8c427cc78d2aa76296c46"],"assessmentContractVersion":"gdpr_transparency_article13_coverage_assessment.v1","unresolvedMaterialPolicyChildUrls":[]},"gdprTransparencyReportStatusContract":"observed_not_confirmed_no_match_found.v1"},"projectedFindings":[],"missingOrIncompleteSourceSignals":[]}

{"assessmentStatus":"checked","checklistItemId":"cookie_notice_policy_availability","coverageArea":"Cookie notice / cookie policy availability","evidenceState":"observed","explanation":"Whether a cookie notice, cookie policy, cookie settings surface, or equivalent cookie disclosure surface was retained.","note":"Whether a cookie notice, cookie policy, cookie settings surface, or equivalent cookie disclosure surface was retained.","status":"Observed","tone":"warning","pipeline":{"projectionStage":"coverage_policy","concernPolicyKey":"gdpr_eprivacy_coverage.cookie_notice_policy_availability.observed","ws01EvidenceRole":"observed runtime signal identification, evidence capture, and logging","wc01NormalizedConcernKey":"gdpr_eprivacy.coverage.cookie_notice_policy_availability"},"statusBasis":"A durable cookie disclosure surface was retained in the tested context; a granular named-cookie inventory or preference interface was not confirmed.","retainedEvidence":{"evidenceRefs":["Evidence: cookie policy or cookie disclosure surface retained","Not confirmed: granular named-cookie inventory","Not confirmed: cookie preference interface","Policy URL: https://ergoveritas.com/test1-privacy-policy.html"],"cookiePolicyUrls":["https://ergoveritas.com/test1-privacy-policy.html"],"cookiePolicyPresent":true,"cookieNoticeObserved":true,"observedPolicyTopics":["cookies","analytics","advertising","sale_or_share","global_privacy_control","third_party_disclosures"],"missingEvidenceNeeded":[],"observedPolicyControls":["global_privacy_control"],"selectedEvidenceReason":"Selected the strongest retained canonical coverage evidence available for this row.","weakerArtifactsIgnored":[],"selectedEvidenceStrength":"moderate","selectedEvidenceArtifactId":"coverage_policy","preferenceInterfaceConfirmed":false,"granularCookieInventoryConfirmed":false},"projectedFindings":[],"missingOrIncompleteSourceSignals":[]}