DxtraBETA
Surface 10 · public verification page

dxtra.ai/privacy-posture/brightleaf.example

The long-lived public record of a domain’s privacy posture — one URL, three states.

Prototype. No persistence is wired up yet — this page renders the three Wireframe-Spec states with the fictional Brightleaf Botanicals sample data, not a stored scan of brightleaf.example. Per locked decision D6.1, v1 publishes claimed pages only; the unclaimed state (10b) and dispute workflow ship in v1.1.
Prototype state10a · Verified10b · Unclaimed10c · Remediation hold
✓ Verified · Privacy program live
Brightleaf Botanicals
brightleaf.example
93
/ 100
Low risk band
Authoritative assessment
0 high-severity findings · 1 medium · 3 commendable practices
Re-verified weekly · Scan ID DX-SAMPLE-0002 · Same business as the Unclaimed sample — after adopting Dxtra, brightleaf.example moved from High to Low

What this privacy posture means

The Low Risk band is the authoritative statement. It means: 0 high-severity findings, 1 medium-severity finding, assessed against the Methodology v1.25 finding catalog, under the law Dxtra grades each report against. The 93/100 is a secondary figure: the privacy practices observed on the site, plus practices the business has recorded in Dxtra. It is not a grade and not a regulatory determination.

Findings
0 high · 1 medium · 0 low
M10 (ROPA — record still populating)
Commendable · 3
C1 · C2 · C8
Privacy portal · Sub-processors list · Transparency Center — informational only, never move the band
For auditors, procurement reviewers, DPOs
The full methodology — severity rules, risk-band thresholds, and anchor regulator sources for every finding type — is published and auditable.
Download full PDF reportView sample reportView scan methodologyScan your site
This page is re-verified weekly. If brightleaf.example’s result changes, this page updates automatically — and the badge on the owner’s site footer shows the change.
Methodology: docs.dxtra.ai/methodology/scanner-methodology.html · Questions: methodology@dxtra.ai

Automated diagnostic indicator based on publicly available information — not legal advice, not a determination of breach. For material decisions, consult a qualified privacy professional. Methodology v1.25 · Research preview.