# URL inspection policy method

This original compilation contains 22 named services and five submission-policy fields. The checked date is 24 October 2026 in the working timezone; exact UTC request timestamps are in the source ledger. Product modes are part of each row: a free public lookup, paid private sandbox and API are not interchangeable.

## Evidence rules

Terms and privacy notices were read first. Where those documents do not define operational visibility, official service documentation or visible interface wording is labelled separately. A documentation statement is not presented as a contractual promise. Every positive or limited statement refers to an exact short quotation. Unknown fields retain the sources checked and the reason the specific fact was not established. General account-data retention is never substituted for submitted-URL or report retention. A hidden listing and an unlisted report are not called private.

The quoted text is stored once in `source-ledger.json`; table fields reference quote IDs. Total quotations are capped at 25 words per source URL. Original compilation and commentary are CC BY 4.0; third-party quoted text retains its own rights.

## Access and boundaries

Only official public policy/documentation pages were requested. No URL was submitted, no account was created, no report was rescanned, and no destination under inspection was visited. HTTP response status and body usability are separate. The earlier direct reads returned an application shell for Hybrid Analysis and 403 for CheckPhish. In the E1 normal-browser follow-up, Hybrid Analysis terms, FAQ and its privacy notice effective 15 September 2026 rendered. CheckPhish home and API docs rendered, while its terms/privacy pages showed a WordPress critical error. The API-only no-sharing statement remains scoped to API data; remaining fields stay unknown. Some public PDF/page text was available through web retrieval after a direct-request failure; both outcomes are retained in the ledger. A web retrieval may expose a cached copy and is not represented as an authenticated live account view. Source dates are the dates stated by sources where identified, not inferred revision dates.

The table is a bounded policy snapshot, not a privacy ranking, security verdict or legal interpretation. Unknowns are a material result. Account requirements were not tested by attempting access. Private modes do not establish whether another copy was previously public. Service changes require a new dated read.

## Files and validation

`index.json` has 22 rows and 110 field objects. `source-ledger.json` joins every field to checked sources and every positive statement to exact quoted evidence. `index.csv` is authored separately from this canonical JSON. `hashes.txt` lists the current delivered data files; package assembly adds the CSV and refreshes hashes. No raw third-party page bodies are published.

## E1 product-documentation follow-up and counts

The delivered baseline had six fully Unknown rows, although the edit request described seven. All six were revisited through official product documentation, FAQs and browser retries where requested. Criminal IP and Web Risk were also revisited as near-empty records. Three rows remain fully Unknown: Dr.Web, FortiGuard and Trend Micro. The ledger preserves failed requests beside later successful observations. Browser observations record rendered text, not an inferred HTTP status. No source-body copies are included in this dataset.

`summary-counts.json` defines and lists the exact qualifying rows: two numeric submitted-URL or scan-report retention schedules; five documented private modes, including paid modes; ten services with explicit public/community visibility. A configurable but unquantified period, generic personal-data retention, unlisted report or hidden listing does not satisfy those respective definitions. A row excluded from a count means the positive condition was not established; it is not a negative finding. `index.json` carries the same counts and row flags. The previous policy snapshot remains separately under review evidence; no earlier and current fields are pooled.