All checks

74 checks in the catalogue. 74 have been run on at least one site. Counts come from each site's most recent scan.

Click a column heading to sort.
ID Check Category (descending) Level Type Sites scanned Pass Fail Pass rate
resp-003 Worker wellbeing policy Published policies on worker wellbeing, pay, hours, and workplace support Responsibility to the Future 3 AI 107 0 78 0%
resp-002 Succession and continuity plan Published plan for what happens to the service if the organisation fails or exits Responsibility to the Future 3 AI 107 0 75 0%
resp-001 Environmental / sustainability disclosure Published environmental impact assessment or sustainability disclosure Responsibility to the Future 3 AI 107 0 78 0%
trans-011 Open source code or tech docs Source code or technical documentation is publicly available Transparency 3 AI 110 0 78 0%
trans-010 Algorithmic decision criteria published Criteria used in algorithmic decisions are published in detail Transparency 3 AI 110 1 85 1%
trans-009 Annual data practices statement An annual or regular statement about data practices is published Transparency 2 AI 110 2 85 2%
trans-008 Algorithm explanation if applicable If algorithms affect content or decisions, they are explained Transparency 2 AI 110 2 84 2%
trans-007 Governance structure disclosed Governance or editorial structure is disclosed Transparency 2 AI 110 23 56 29%
trans-006 Funding disclosed with detail Funding sources disclosed with meaningful detail Transparency 2 AI 110 1 77 1%
trans-005 Substantive statement of purpose About page provides a substantive, detailed statement of purpose Transparency 2 AI 110 54 24 69%
trans-004 Named responsible person in contact Contact page names a responsible person or team Transparency 2 AI 110 35 49 42%
trans-003 Funding/sponsorship disclosure Funding or sponsorship sources are disclosed if applicable Transparency 1 AI 110 31 47 40%
trans-002 Statement of purpose present An "About" or equivalent page exists with a clear statement of purpose Transparency 1 AI 110 63 15 81%
trans-001b Contact form present A contact form or email is available Transparency 1 Browser 110 77 33 70%
trans-001a Contact email present An email address is findable on the contact page Transparency 1 Browser 110 77 33 70%
trans-001 Contact information present Contact information is present and findable (email or contact form) Transparency 1 AI 110 68 9 88%
sec-007 Responsible disclosure or bug bounty Published vulnerability disclosure policy or bug bounty programme Security 3 AI 107 2 9 18%
sec-006 Incident response plan published Incident response plan with commitment to public notification Security 3 AI 107 1 72 1%
sec-005 security.txt published Site publishes a security.txt file at /.well-known/security.txt Security 2 Browser 110 27 83 25%
sec-004a TLS certificate not expiring soon TLS certificate has more than 30 days until expiry Security 1 Browser 110 107 0 100%
sec-004 Valid TLS certificate TLS certificate is valid, not expired, and not self-signed Security 1 Browser 110 110 0 100%
sec-003 No mixed content No HTTP resources loaded on HTTPS pages Security 1 Browser 110 110 0 100%
sec-002b Referrer-Policy header Referrer-Policy header is set to limit information leakage Security 1 Browser 110 44 66 40%
sec-002a Content Security Policy header Content Security Policy (CSP) header is present Security 1 Browser 110 45 65 41%
sec-002 Security headers present Essential security headers are set Security 1 Browser 110 61 49 55%
sec-001a HTTP to HTTPS redirect HTTP requests redirect to HTTPS Security 1 Browser 110 8 102 7%
sec-001 HTTPS enforced Site loads over HTTPS Security 1 Browser 110 83 27 75%
prov-002 Authorship metadata assessment About page communicates who is behind the content Provenance 2 AI 110 62 16 79%
prov-001 Basic authorship metadata Pages include basic authorship metadata (author, publication date) Provenance 2 Browser 110 24 86 22%
priv-014 Cookie banner partner disclosure Cookie banner discloses third-party data sharing and, when it does, states how many partners Privacy 2 AI 110 3 106 3%
priv-012 Advertising clearly labelled if present Any advertising or sponsored content is clearly labelled Privacy 2 AI 110 77 10 89%
priv-011 No dark patterns in consent flows No dark patterns or manipulative design in consent flows Privacy 2 AI 110 23 62 27%
priv-010 Published data retention periods Data retention periods are published Privacy 2 AI 110 8 73 10%
priv-009 Data collection limited to necessity Data collection is limited to what is necessary for the service Privacy 2 AI 110 15 66 19%
priv-008 Plain language data practices Data practices explained in plain, accessible language Privacy 2 AI 110 56 25 69%
priv-007 Human-readable privacy policy Published privacy policy in plain language Privacy 2 AI 110 54 27 67%
priv-013 Data-leaking third-party services Count of known third-party services (ads, analytics, fonts, tag managers) called from the page Privacy 1 Browser 110 50 60 45%
priv-006a No tracking pixels No 1x1 pixel images from third-party domains Privacy 1 Browser 110 104 6 95%
priv-006 No hidden iframes or tracking beacons No hidden iframes used for tracking Privacy 1 Browser 110 66 44 60%
priv-005a Session cookies only First-party cookies are session-based or clearly functional Privacy 1 Browser 110 108 2 98%
priv-005 First-party cookies functional only First-party cookies limited to functional necessity (session, preferences) Privacy 1 Browser 110 108 2 98%
priv-004 No behavioural or targeted advertising scripts No advertising network scripts or behavioural targeting loaded Privacy 1 Pattern 110 99 11 90%
priv-003 No fingerprinting script patterns No scripts using known tracking/fingerprinting patterns Privacy 1 Pattern 110 86 24 78%
priv-002 No third-party cookies No cookies set by third-party domains Privacy 1 Browser 110 90 20 82%
priv-001 No third-party tracking scripts No analytics pixels, ad tech, or fingerprinting scripts loaded Privacy 1 Pattern 110 105 5 95%
inter-002 Published uptime/status page Site publishes a status or uptime page Interoperability 3 Browser 110 5 105 5%
inter-003 Content in open formats Content is available in open, non-proprietary formats Interoperability 2 AI 110 76 2 97%
inter-001 RSS/Atom feeds present Site publishes RSS or Atom feeds for content syndication Interoperability 2 Browser 110 19 91 17%
ai-006 Human oversight of AI documented Human oversight processes for AI-generated content are documented AI & Automation 2 AI 110 1 85 1%
ai-005 AI-assisted content clearly marked Content created or assisted by AI is clearly marked AI & Automation 2 AI 110 2 84 2%
ai-004 Published AI use policy (detailed) Detailed AI use policy covering scope, limitations, and safeguards AI & Automation 2 AI 110 3 76 4%
ai-003a Dedicated AI policy page exists A dedicated AI policy or AI use page exists AI & Automation 1 Browser 110 23 87 21%
ai-003 AI use policy in place Published AI use policy covering how AI is used on the site AI & Automation 1 AI 110 5 74 6%
ai-002 No undisclosed AI-generated content No AI-generated content presented as human-authored without disclosure AI & Automation 1 AI 110 103 6 94%
ai-001a robots.txt AI crawler rules robots.txt contains rules for known AI crawlers AI & Automation 1 Browser 110 104 6 95%
ai-001 AI content disclosure in metadata If site is primarily AI-generated, disclosure present in metadata or visible element AI & Automation 1 Browser 110 110 0 100%
acct-005 Published moderation policies Moderation policies are published with clear criteria Accountability 3 AI 110 3 83 3%
acct-004 Clear appeals process Users can appeal decisions with a documented process Accountability 2 AI 110 13 70 16%
acct-003 Documented complaints process A clear complaints or feedback process is documented Accountability 2 AI 110 12 73 14%
acct-002 Published response timeframes Published timeframes for responding to user enquiries or complaints Accountability 2 AI 110 16 69 19%
acct-001 Named responsible person A named individual or role is identified as responsible for the site Accountability 2 AI 110 35 49 42%
acc-009 Published accessibility statement Dedicated accessibility statement with known issues and remediation timeline Accessibility 3 AI 107 5 70 7%
acc-008 Form labels accessible All form inputs have associated labels (axe-core label rules) Accessibility 2 Browser 110 109 1 99%
acc-007 Mobile responsive design Site uses viewport meta tag for mobile responsive design Accessibility 2 Browser 110 101 9 92%
acc-006a Media elements have controls All video and audio elements have controls attribute Accessibility 1 Browser 110 101 9 92%
acc-006 No auto-playing media without controls No video or audio auto-plays without user controls Accessibility 1 Browser 110 103 7 94%
acc-005 Sufficient colour contrast Text meets 4.5:1 contrast ratio for normal text Accessibility 1 Browser 110 85 25 77%
acc-004 Proper heading hierarchy Heading levels follow h1-h6 hierarchy without skipping Accessibility 1 Browser 110 79 31 72%
acc-003a Decorative images properly marked Images with empty alt text have role=presentation Accessibility 1 Browser 110 96 14 87%
acc-003 Text alternatives for images All images have alt attributes Accessibility 1 Browser 110 96 14 87%
acc-002a Skip navigation link present Skip-to-content link present for keyboard users Accessibility 1 Browser 110 69 41 63%
acc-002 Keyboard navigability All core functions accessible via keyboard navigation Accessibility 1 Browser 110 99 11 90%
acc-001a Valid semantic HTML structure HTML uses valid semantic structure without broken nesting Accessibility 1 Browser 110 55 55 50%
acc-001 WCAG 2.1 Level A automated testing Valid semantic HTML that passes automated WCAG 2.1 Level A testing Accessibility 1 Browser 110 55 55 50%