Cambridge University Press

https://www.cambridge.org · 34/92 checks passed · publishers

Compliance report (framework 0.8)

Gate passed (every Core check must pass) · not counted towards the gate: paused 35, draft 48, ready for review 54.

Site level: 0 (no scored checks yet).

By level

Level	Result
Level 1 — Basic	24/37 (9 failed)
Level 2 — Enhanced	4/27 (3 failed)
Level 3 — Advanced	0/10 (2 failed)

By category

Category	Result
Accessibility	9/13
Accountability	0/5
AI & Automation	3/8
Interoperability	0/3
Privacy	9/16
Provenance	0/2
Security	6/11
Transparency	1/13
Responsibility to the Future	0/3

Level 1 — Basic

Accessibility

FAIL WCAG 2.1 Level A automated testing

1 WCAG 2.1 Level A violation reported by axe-core: meta-refresh.

FAIL Valid semantic HTML structure

1 WCAG 2.1 Level A violation reported by axe-core: meta-refresh.

FAIL Skip navigation link present

PASS Keyboard navigability

PASS Text alternatives for images

PASS Decorative images properly marked

PASS Proper heading hierarchy

PASS Sufficient colour contrast

PASS No auto-playing media without controls

PASS Media elements have controls

AI & Automation

FAIL Dedicated AI policy page exists

Not found at any of: /ai-policy, /ai.

SKIPPED AI use policy in place

Skipped: Target page not found in captured content

PASS AI content disclosure in metadata

PASS robots.txt AI crawler rules

PASS No undisclosed AI-generated content

Privacy

PASS No third-party tracking scripts

PASS No third-party cookies

PASS No fingerprinting script patterns

PASS No behavioural or targeted advertising scripts

PASS First-party cookies functional only

PASS Session cookies only

PASS No hidden iframes or tracking beacons

PASS No tracking pixels

PASS Data-leaking third-party services

Security

FAIL HTTPS enforced

strict-transport-security: header not set on the response.

FAIL HTTP to HTTPS redirect

Redirect chain (1 hops): https://www.cambridge.org

FAIL Content Security Policy header

content-security-policy: header not set on the response.

PASS Security headers present

PASS Referrer-Policy header

PASS No mixed content

PASS Valid TLS certificate

PASS TLS certificate not expiring soon

Transparency

FAIL Contact email present

Not found at any of: /contact, /contact-us.

FAIL Contact form present

Not found at any of: /contact, /contact-us.

SKIPPED Contact information present

Skipped: Target page not found in captured content

SKIPPED Statement of purpose present

Skipped: Target page not found in captured content

SKIPPED Funding/sponsorship disclosure

Skipped: Target page not found in captured content

Level 2 — Enhanced

Accessibility

PASS Mobile responsive design

PASS Form labels accessible

Accountability

SKIPPED Named responsible person

Skipped: Target page not found in captured content

SKIPPED Published response timeframes

Skipped: Target page not found in captured content

SKIPPED Documented complaints process

Skipped: Target page not found in captured content

SKIPPED Clear appeals process

Skipped: Target page not found in captured content

AI & Automation

SKIPPED Published AI use policy (detailed)

Skipped: Target page not found in captured content

SKIPPED AI-assisted content clearly marked

Skipped: Target page not found in captured content

SKIPPED Human oversight of AI documented

Skipped: Target page not found in captured content

Interoperability

FAIL RSS/Atom feeds present

No RSS/Atom feeds discovered.

SKIPPED Content in open formats

Skipped: Target page not found in captured content

Privacy

FAIL Cookie banner partner disclosure

banner_present: The page is a Cloudflare security verification interstitial with no cookie or consent banner visible.
Fix: Ensure the cookie/consent banner is rendered even on security verification pages or immediately upon reaching the main site.
partner_sharing_mentioned: No consent copy or disclosure of third-party partner data sharing appears on this verification page.
Fix: Include a consent notice disclosing third-party data sharing either on the interstitial or on the first loaded page.
partner_count_specific: No partner sharing is disclosed, so no numeric count of partners is stated.
Fix: If partner sharing occurs, state the exact number of partners (e.g., 'we share data with X partners') in the consent banner.

SKIPPED Human-readable privacy policy

Skipped: Target page not found in captured content

SKIPPED Plain language data practices

Skipped: Target page not found in captured content

SKIPPED Data collection limited to necessity

Skipped: Target page not found in captured content

SKIPPED Published data retention periods

Skipped: Target page not found in captured content

SKIPPED No dark patterns in consent flows

Skipped: Target page not found in captured content

SKIPPED Advertising clearly labelled if present

Skipped: Target page not found in captured content

Provenance

FAIL Basic authorship metadata

No author or date metadata found on the page.

SKIPPED Authorship metadata assessment

Skipped: Target page not found in captured content

Security

PASS security.txt published

Transparency

SKIPPED Named responsible person in contact

Skipped: Target page not found in captured content

SKIPPED Substantive statement of purpose

Skipped: Target page not found in captured content

SKIPPED Funding disclosed with detail

Skipped: Target page not found in captured content

SKIPPED Algorithm explanation if applicable

Skipped: Target page not found in captured content

SKIPPED Annual data practices statement

Skipped: Target page not found in captured content

PASS Governance structure disclosed

Level 3 — Advanced

Accessibility

SKIPPED Published accessibility statement

Skipped: Target page not found in captured content

Accountability

SKIPPED Published moderation policies

Skipped: Target page not found in captured content

Interoperability

FAIL Published uptime/status page

Not found at: /status

Security

SKIPPED Incident response plan published

Skipped: Target page not found in captured content

SKIPPED Responsible disclosure or bug bounty

Skipped: Target page not found in captured content

Transparency

SKIPPED Algorithmic decision criteria published

Skipped: Target page not found in captured content

SKIPPED Open source code or tech docs

Skipped: Target page not found in captured content

Responsibility to the Future

FAIL Succession and continuity plan

plan_exists: The governance page describes Syndicate and Executive Board structures but contains no published plan for organisational failure or exit.
Fix: Publish a continuity or wind-down plan describing what happens if Cambridge University Press & Assessment ceases operations.
data_and_content_fate: The page does not address what would happen to user data or published content in the event of failure or exit.
Fix: Add a section explaining how user data and published content would be preserved, transferred, or handled if the organisation exits.
custodians_or_mirrors: No custodians, mirrors, or archive partners are identified anywhere on the page, though 'Archives and Heritage' is mentioned only as a navigation link.
Fix: Name specific archive partners, custodians, or mirror arrangements responsible for safeguarding content should the organisation cease to operate.

SKIPPED Environmental / sustainability disclosure

Skipped: Target page not found in captured content

SKIPPED Worker wellbeing policy

Skipped: Target page not found in captured content