Compliance Score

What It Does

Fetches the domain's main page and up to 5 sub-pages (privacy policy, terms, accessibility statement, contact, CCPA opt-out) plus /.well-known/security.txt. Detects consent management platforms (OneTrust, CookieBot, Quantcast, etc.), IAB TCF v2 API signals, and granular consent options. Analyzes privacy policy content for GDPR terms (data rights, legal basis, DPO, consent withdrawal, transfer mechanisms) and CCPA terms (California disclosures, right to know/delete). Parses security.txt per RFC 9116 for required fields. Detects accessibility statement with WCAG level references. Checks contact pages for physical address, email, and impressum compliance. Also evaluates technical accessibility via automated audit, children's data protection (COPPA, age gates), cookie security attributes, and multi-state US privacy signals (GPC, universal opt-out, AI disclosure).

Why It's Useful

Global privacy regulations (GDPR, CCPA/CPRA, ePrivacy Directive) require specific disclosures, consent mechanisms, and contact information. A single compliance score lets you audit your own domains, track improvements over time, and demonstrate compliance readiness to stakeholders. Component breakdowns identify exactly which compliance areas need attention.

Use Cases

Parameters

Response Fields

Code Examples

curl "https://api.edgedns.dev/v1/score/compliance" \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -d "domain=edgedns.dev"

const response = await fetch(
  'https://api.edgedns.dev/v1/score/compliance?domain=edgedns.dev',
  {
    headers: {
      'Authorization': 'Bearer YOUR_API_KEY'
    }
  }
);

const data = await response.json();
console.log(data);

import requests

response = requests.get(
    'https://api.edgedns.dev/v1/score/compliance',
    headers={'Authorization': 'Bearer YOUR_API_KEY'},
    params={
    'domain': 'edgedns.dev'
    }
)

data = response.json()
print(data)

Related Endpoints

External References

Learn more about the standards and protocols behind this endpoint.