EU AI Act Transparency Lead Scanner

Scan submitted public URLs for observable AI-transparency signals in page HTML. The Actor fetches robots.txt first, then the submitted page, and returns deterministic Dataset rows with signal evidence, a transparency gap score, lead tier, and review flag. It does not crawl discovered links, call an LLM, or issue a legal or compliance verdict.

Contract

• Input is JSON with schemaVersion, requestId, urls, maxResults, freshnessMinutes, and detailLevel.
• urls contains 1-100 public HTTP(S) URLs. IP literals, credentials, fragments, and non-standard ports are rejected.
• The Actor checks robots rules, same-host redirects, public-address SSRF constraints, response limits, and timeouts.
• Useful observations are written to the default Dataset and summarized in the default Key-Value Store record OUTPUT.
• Errors, robots denials, source outages, invalid URLs, and budget failures are represented in the output envelope and do not become legal findings.

Input

{
  "schemaVersion": "1.0",
  "requestId": "demo-ai-001",
  "urls": ["https://www.w3.org"],
  "maxResults": 1,
  "freshnessMinutes": 60,
  "detailLevel": "compact"
}

Real Dataset row

Selected fields below come from production canary run K2xXAANSs3znnkAut, observed on 9 August 2026. The current additive contract also emits freshness.cacheReused so consumers can distinguish a new page fetch from a compatible cached report.

{
  "schemaVersion": "1.0",
  "requestId": "ryan20-ai-act-intercom-20260809-2017",
  "actor": "eu-ai-act-transparency-lead-scanner",
  "sourceUrl": "https://www.intercom.com/",
  "canonicalUrl": "https://www.intercom.com/",
  "observedAt": "2026-08-09T16:20:23.259Z",
  "transparencyGapScore": 70,
  "knownWeight": 100,
  "leadTier": "high",
  "isLead": true,
  "needsReview": true,
  "confidenceScore": 100,
  "confidenceBand": "high",
  "dataGaps": [
    "LEGAL_APPLICABILITY_NOT_DETERMINED",
    "BUYER_INTENT_NOT_OBSERVED"
  ],
  "recommendedAction": "REVIEW_AI_TRANSPARENCY_GAPS",
  "safeToAutomate": false
}

The full Dataset row also contains the observed signal set, source metrics, timestamps, robots result, and evidence hashes. The compact OUTPUT record contains the bounded run envelope described by .actor/business_output_schema.json.

dedupeKey is a stable fingerprint of the canonical URL for your own deduplication — it does not by itself decide whether a repeat request is billed again; caching and re-billing on this Actor also depend on the run's detail level and scanner version.

API

Start a run with a bearer token and explicit JSON input:

curl -sS -X POST 'https://api.apify.com/v2/acts/zinin~eu-ai-act-transparency-lead-scanner/runs?waitForFinish=60' \
  -H "Authorization: Bearer $APIFY_TOKEN" \
  -H 'Content-Type: application/json' \
  --data '{"schemaVersion":"1.0","requestId":"demo-ai-001","urls":["https://www.w3.org"],"maxResults":1,"freshnessMinutes":60,"detailLevel":"compact"}'

Read Dataset rows using the returned defaultDatasetId:

curl -sS "https://api.apify.com/v2/datasets/$DEFAULT_DATASET_ID/items?clean=true&format=json" \
  -H "Authorization: Bearer $APIFY_TOKEN"

Read the compact run envelope using the returned defaultKeyValueStoreId:

curl -sS "https://api.apify.com/v2/key-value-stores/$DEFAULT_KEY_VALUE_STORE_ID/records/OUTPUT" \
  -H "Authorization: Bearer $APIFY_TOKEN"

MCP

For an Apify MCP client exposing the standard call-actor tool, send this exact payload:

{
  "name": "call-actor",
  "arguments": {
    "actor": "zinin/eu-ai-act-transparency-lead-scanner",
    "input": {
      "schemaVersion": "1.0",
      "requestId": "demo-ai-001",
      "urls": ["https://www.w3.org"],
      "maxResults": 1,
      "freshnessMinutes": 60,
      "detailLevel": "compact"
    }
  }
}

Boundaries and pricing

This is a BYOD observation scanner. It does not discover prospects, decide whether the EU AI Act applies, assign a legal risk class, or provide legal advice. The Store pricing page is authoritative; each useful Dataset row uses one paid result-found event, while the platform may also charge the automatic run-start event. Internally, the SDK delivery receipt also includes a zero-price default-Dataset-item event; that receipt bookkeeping is not a second paid result.

Related tools

Related tools for adjacent workflows in compliance and public procurement, operational gap-lead generation.

Actor	What it does
EU Accessibility Privacy Lead Scanner	Pair it in the operational gap-lead generation workflow: BYOD compliance scanner for observed accessibility and privacy exposure signals on a submitted URL....
Clinic Reception Gap Lead Finder	Pair it in the operational gap-lead generation workflow: Analyze submitted clinic websites for reception-channel gaps with exact BYOD crawling and no discovery
Counterparty Risk Rollup — Sanctions, Courts, Registry, Hiring	Pair it in the compliance and public procurement workflow: One call, one row per counterparty: sanctions screening (OFAC + EU), legal-entity registry (GLEIF),...
Restaurant Booking Gap Lead Finder	Pair it in the operational gap-lead generation workflow: Analyze submitted restaurant websites for booking-channel gaps with exact BYOD crawling and no discovery
Company Registry Enricher	Pair it in the compliance and public procurement workflow: Turn a company name, LEI or UK company number into an official registry card: legal name, status,...

Machine use

The Actor is callable through the Apify API, SDK, and Apify MCP server. The input, Dataset row, and bounded OUTPUT envelope are the machine-facing contracts; observed signals are evidence, not a compliance conclusion.

Commercial guide: EU AI Transparency Website Signal Scanner — BYOD Leads

Scan buyer-supplied public pages for six deterministic AI-use and transparency disclosure signals, evidence coverage, weighted gaps, confidence, and legal-review-first lead routing.

This guide is written for buyers, operators, analysts, and automation builders. It explains what the Actor observes, how to turn the Dataset into a controlled workflow, and where human verification remains mandatory.

The decision this product supports

Which submitted pages show observable AI-transparency disclosure gaps worth a manual website audit, without claiming EU AI Act applicability, violation, or buyer intent?

The Actor reduces collection and first-pass triage work. It does not remove responsibility for source verification or authorize an external business action. The commercial value comes from a structured, repeatable evidence layer: stable identity, observation time, source evidence, confidence, gaps, recommended action, and failure semantics travel with the raw facts.

Who uses it

User	Value
Digital agencies	Create a source-linked AI-transparency website audit queue from an approved URL list.
AI consultancies	Identify missing disclosure topics before a human reviews product behavior and legal scope.
Web studios	Translate deterministic page observations into evidence-based remediation conversations.
Marketing researchers	Compare disclosed AI-use patterns across a bounded submitted cohort.
Compliance operations	Use observations as intake evidence while keeping legal applicability and conclusions outside the Actor.
Automation builders	Route useful rows by tier, confidence, gaps, and safeToAutomate=false.

Input contract

Input field	How to use it
schemaVersion	Required request-contract version. Use 1.0 until a published migration says otherwise.
requestId	Required idempotency and correlation key for this exact semantic request.
urls	One to 100 buyer-submitted absolute public HTTP(S) pages. The Actor does not discover prospects or crawl links.
maxResults	Maximum useful result rows delivered and billed.
freshnessMinutes	Maximum page-observation age for reuse of a compatible cached useful report; 0 forces a new page fetch. Returned rows expose the measured freshness.ageSeconds and freshness.cacheReused.
detailLevel	compact for summaries or evidence for selectors and bounded excerpts.

Recommended first Input

{
  "schemaVersion": "1.0",
  "requestId": "ai-transparency-demo-001",
  "urls": [
    "https://www.intercom.com",
    "https://www.w3.org"
  ],
  "maxResults": 10,
  "freshnessMinutes": 60,
  "detailLevel": "evidence"
}

Start with this bounded example, inspect every Dataset field, and only then expand the scope. Input limits are product controls, not inconveniences: they make cost, completeness, and error handling visible.

Field dictionary

Field or group	Meaning
entityId, dedupeKey, inputRef, sourceUrl, canonicalUrl	Stable website/request identities and bounded source page references.
signals	Six weighted present/absent/unknown AI-transparency observations with evidence.
ai_use_disclosure, interaction_notice, synthetic_content_label	Observed AI-use, AI-interaction, and synthetic-content notice topics.
purpose_scope, limitations_human_review, provider_identity_contact	Observed purpose, limitation/human-review, and provider identity/contact topics.
transparencyGapScore, leadTier, isLead, needsReview	Weighted observed-gap triage, not a legal risk or compliance verdict.
knownWeight, sourceMetrics, evidence	Signal coverage, page collection health, and hashed/selector evidence.
observedAt, firstSeenAt, lastSeenAt, freshness	Page-observation timing, measured age, and whether a compatible report cache was reused.
confidenceScore, confidenceBand, confidenceReasons	Evidence support derived from observable signal weight and source coverage.
sourceEvidence, dataGaps	Signal evidence counts/hashes and explicit legal-applicability, unknown-signal, and intent gaps.
recommendedAction, actionPriority, safeToAutomate, failureType, retryable	Manual transparency review routing and operational semantics.

Common decision fields

Field	Operational meaning
recordType	The semantic row family. Use it to distinguish a business result from an advisory or terminal record.
schemaVersion	Version of the additive decision-intelligence contract. Pin or validate it in strict consumers.
entityId	Stable entity identity for deduplication and joins. It is not necessarily a legal identifier.
inputRef	The relevant submitted input reference after normalization.
observedAt	When the Actor observed or finalized the evidence. It is not necessarily the source publication time.
firstSeenAt and lastSeenAt	Always-emitted observation boundaries. Stateful monitors use the compatible baseline/current boundary. Stateless rows set both equal to observedAt for the current run; that equality does not establish historical tenure.
freshness	Page-fetch evidence age. basis=page_fetched_at; ageSeconds is measured from the preserved observation timestamp, and cacheReused explicitly distinguishes a cached report from a new fetch. This is not a legal-freshness guarantee.
eventId	For monitors, the stable identity of one observed transition or monitor outcome. It is distinct from entityId.
before and after	For monitors, the bounded comparable snapshots used for the decision. Null means that side of a comparison was not honestly available.
changedFields and changeFlags	Machine-readable monitor deltas and normalized change labels. Empty arrays mean no supported changed field was established, not that every possible real-world fact stayed constant.
materialityScore and materialityBand	Magnitude of an observed monitor change when the Actor can calculate it. Materiality is separate from evidence confidence and may be unknown when the source lacks the required facts.
confidenceScore	Evidence support on a 0–100 scale. It is separate from materiality, lead score, or business value.
confidenceBand	Readable high/medium/low/unknown grouping of evidence support.
confidenceReasons	Observed facts that raise confidence.
confidenceRisks	Missing, partial, ambiguous, inferred, or conflicting aspects that reduce confidence.
confidenceConflict	Explicit consistency warning when structured evidence does not reconcile.
sourceEvidence	Source-linked observations supporting the row. Preserve this during export.
dataGaps	Important evidence the Actor did not observe or cannot establish. Keep these gaps visible in CRM, spreadsheet, and automation exports.
negativeSignals	Machine-readable risks or gaps. A negative signal is not automatically a negative business outcome.
recommendedAction	Bounded review label produced from the available evidence.
actionPriority	Suggested queue priority, not urgency guaranteed by the source.
actionReason	Plain-language explanation for the recommended action.
safeToAutomate	Whether the narrow recommended action is deterministic enough for automation. Organizational policy still applies.
failureType	Normalized terminal or partial failure classification. Null means no classified failure.
retryable	Whether a later retry may legitimately change an operationally incomplete result.
recommendation	Human-readable handling guidance, especially for terminal rows.

Evidence, confidence, and honest boundaries

What the evidence supports

• The Actor fetches robots.txt first and then only the submitted page through same-host, public-address, redirect, size, retry, and timeout controls.
• The six signal weights total 100 and use deterministic HTML/text/metadata rules.
• transparencyGapScore is absent observed weight divided by known observed weight; unknown evidence does not silently count as failure.
• A useful row requires at least 60 known signal weight under the scanner contract.
• Evidence mode exposes bounded selectors and excerpts while compact mode keeps the same scoring facts.

What this Actor never claims

• The Actor does not decide whether the EU AI Act applies to the organization, page, system, provider, deployer, or use case.
• It does not classify legal risk, determine compliance or violation, provide legal advice, or predict enforcement.
• A missing page phrase does not prove that an organization lacks off-page notices, product UI disclosures, policies, or controls.
• It does not prove the site uses AI, sells an AI system, targets the EU, has budget, needs services, or intends to buy.
• It does not crawl discovered links, log in, interact with an AI feature, or evaluate model behavior.

Reading data gaps correctly

A data gap is part of the result. Nulls, partial flags, confidence risks, source failures, and unavailable fields must survive export. Removing these fields makes the remaining facts look more complete than they are. When two sources conflict or a required identity cannot be proven, lower confidence and keep safeToAutomate=false.

Source evidence is not permission

A public source proves only that a value or statement was observable at the recorded time and URL. It does not establish consent, contractual rights, legal status, accuracy after observation, or authorization for a downstream action. Your organization remains responsible for source terms, privacy rules, outreach policy, retention, and human review.

Decision policy and action routing

Action	How to use it
REVIEW_AI_TRANSPARENCY_GAPS	Open failed/absent evidence, confirm the actual AI use case and legal scope, then prepare a human-reviewed website audit.
MONITOR_OR_ARCHIVE	Keep the bounded observation without claiming compliance or irrelevance.
RETRY_SOURCE_CHECK	Retry only a classified temporary robots, DNS, timeout, or source failure.

Confidence is not attractiveness

confidenceScore answers “how strongly does the available evidence support this factual classification?” It does not answer “how valuable is this lead, property, account, or address?” A high-confidence negative fact may be commercially uninteresting; a low-confidence positive signal may deserve research but not action. Keep the concepts separate in dashboards, exports, and CRM fields.

Why safeToAutomate is conservative

safeToAutomate is intentionally false whenever the next step could amplify an uncertain inference. It may be true only for narrow deterministic actions explicitly supported by the row, such as suppressing an email with invalid syntax. A true value does not waive legal, privacy, consent, contractual, or organizational rules.

Retry policy

• Retry when retryable=true and the failure is operational, such as a temporary source or DNS problem.
• Do not endlessly retry deterministic invalid input, policy refusal, or confirmed absence.
• A retry must preserve the original input reference and must not create duplicate downstream actions.
• Budget exhaustion is not negative evidence about the entity. Resume only the unprocessed scope with an authorized budget.
• A failed Actor run is an operational event. Never transform it into “no listing,” “no contact,” “bad lead,” or “invalid email.”

Commercial use-case playbooks

1. AI agency prospect audit

Goal. Scan an approved page list, review high/medium tiers, and validate AI use and legal scope before outreach.

Recommended runbook.

1. Define the submitted cohort and write down why it is in scope.
2. Start with the smallest useful Input and preserve the exact run ID.
3. Inspect the Dataset overview before exporting anything.
4. Check failureType, retryable, completeness indicators, and confidenceBand.
5. Open the relevant sourceEvidence or source URL for material rows.
6. Apply the recommended action as a review label, not as an instruction to contact, buy, delete, accuse, or publish.
7. Record the analyst's final disposition in the destination system.

Do not skip. A useful row proves the stated deterministic transparency observations on one submitted public page. It is a manual audit lead, not proof of EU AI Act applicability, violation, legal risk, AI use, buyer intent, or commercial need.

2. Product transparency checklist

Goal. Run on your own public pages and compare observed topics with internal disclosure requirements.

Recommended runbook.

1. Define the submitted cohort and write down why it is in scope.
2. Start with the smallest useful Input and preserve the exact run ID.
3. Inspect the Dataset overview before exporting anything.
4. Check failureType, retryable, completeness indicators, and confidenceBand.
5. Open the relevant sourceEvidence or source URL for material rows.
6. Apply the recommended action as a review label, not as an instruction to contact, buy, delete, accuse, or publish.
7. Record the analyst's final disposition in the destination system.

Do not skip. A useful row proves the stated deterministic transparency observations on one submitted public page. It is a manual audit lead, not proof of EU AI Act applicability, violation, legal risk, AI use, buyer intent, or commercial need.

3. Synthetic-content notice review

Goal. Inspect label evidence on the submitted page without inferring how all media was produced.

Recommended runbook.

1. Define the submitted cohort and write down why it is in scope.
2. Start with the smallest useful Input and preserve the exact run ID.
3. Inspect the Dataset overview before exporting anything.
4. Check failureType, retryable, completeness indicators, and confidenceBand.
5. Open the relevant sourceEvidence or source URL for material rows.
6. Apply the recommended action as a review label, not as an instruction to contact, buy, delete, accuse, or publish.
7. Record the analyst's final disposition in the destination system.

Do not skip. A useful row proves the stated deterministic transparency observations on one submitted public page. It is a manual audit lead, not proof of EU AI Act applicability, violation, legal risk, AI use, buyer intent, or commercial need.

4. AI interaction notice audit

Goal. Use the signal as a page-level observation and manually test the actual user interaction separately.

Recommended runbook.

1. Define the submitted cohort and write down why it is in scope.
2. Start with the smallest useful Input and preserve the exact run ID.
3. Inspect the Dataset overview before exporting anything.
4. Check failureType, retryable, completeness indicators, and confidenceBand.
5. Open the relevant sourceEvidence or source URL for material rows.
6. Apply the recommended action as a review label, not as an instruction to contact, buy, delete, accuse, or publish.
7. Record the analyst's final disposition in the destination system.

Do not skip. A useful row proves the stated deterministic transparency observations on one submitted public page. It is a manual audit lead, not proof of EU AI Act applicability, violation, legal risk, AI use, buyer intent, or commercial need.

5. Provider identity review

Goal. Check visible organization/contact evidence while keeping legal-entity verification outside this scanner.

Recommended runbook.

1. Define the submitted cohort and write down why it is in scope.
2. Start with the smallest useful Input and preserve the exact run ID.
3. Inspect the Dataset overview before exporting anything.
4. Check failureType, retryable, completeness indicators, and confidenceBand.
5. Open the relevant sourceEvidence or source URL for material rows.
6. Apply the recommended action as a review label, not as an instruction to contact, buy, delete, accuse, or publish.
7. Record the analyst's final disposition in the destination system.

Do not skip. A useful row proves the stated deterministic transparency observations on one submitted public page. It is a manual audit lead, not proof of EU AI Act applicability, violation, legal risk, AI use, buyer intent, or commercial need.

6. Agency client report

Goal. Deliver page URL, tier, confidence, signal states, evidence, gaps, and a no-legal-verdict statement.

Recommended runbook.

1. Define the submitted cohort and write down why it is in scope.
2. Start with the smallest useful Input and preserve the exact run ID.
3. Inspect the Dataset overview before exporting anything.
4. Check failureType, retryable, completeness indicators, and confidenceBand.
5. Open the relevant sourceEvidence or source URL for material rows.
6. Apply the recommended action as a review label, not as an instruction to contact, buy, delete, accuse, or publish.
7. Record the analyst's final disposition in the destination system.

Do not skip. A useful row proves the stated deterministic transparency observations on one submitted public page. It is a manual audit lead, not proof of EU AI Act applicability, violation, legal risk, AI use, buyer intent, or commercial need.

7. CRM staging

Goal. Store isLead and tier as research fields, never compliance fields, and require human approval before outreach.

Recommended runbook.

1. Define the submitted cohort and write down why it is in scope.
2. Start with the smallest useful Input and preserve the exact run ID.
3. Inspect the Dataset overview before exporting anything.
4. Check failureType, retryable, completeness indicators, and confidenceBand.
5. Open the relevant sourceEvidence or source URL for material rows.
6. Apply the recommended action as a review label, not as an instruction to contact, buy, delete, accuse, or publish.
7. Record the analyst's final disposition in the destination system.

Do not skip. A useful row proves the stated deterministic transparency observations on one submitted public page. It is a manual audit lead, not proof of EU AI Act applicability, violation, legal risk, AI use, buyer intent, or commercial need.

8. Quality exception lane

Goal. Quarantine robots denials, unknown signals, insufficient coverage, and source failures away from lead claims.

Recommended runbook.

1. Define the submitted cohort and write down why it is in scope.
2. Start with the smallest useful Input and preserve the exact run ID.
3. Inspect the Dataset overview before exporting anything.
4. Check failureType, retryable, completeness indicators, and confidenceBand.
5. Open the relevant sourceEvidence or source URL for material rows.
6. Apply the recommended action as a review label, not as an instruction to contact, buy, delete, accuse, or publish.
7. Record the analyst's final disposition in the destination system.

Do not skip. A useful row proves the stated deterministic transparency observations on one submitted public page. It is a manual audit lead, not proof of EU AI Act applicability, violation, legal risk, AI use, buyer intent, or commercial need.

Integration recipes

All examples use placeholders. Keep the Apify token in a secret manager and never write it into a Dataset, README, screenshot, or client-side application.

cURL: start a run and wait briefly

curl -sS -X POST 'https://api.apify.com/v2/acts/zinin~eu-ai-act-transparency-lead-scanner/runs?waitForFinish=60' \
  -H "Authorization: Bearer $APIFY_TOKEN" \
  -H 'Content-Type: application/json' \
  --data '{"schemaVersion":"1.0","requestId":"ai-transparency-demo-001","urls":["https://www.intercom.com","https://www.w3.org"],"maxResults":10,"freshnessMinutes":60,"detailLevel":"evidence"}'

The run response includes defaultDatasetId. Read clean JSON rows with:

curl -sS "https://api.apify.com/v2/datasets/$DEFAULT_DATASET_ID/items?clean=true&format=json" \
  -H "Authorization: Bearer $APIFY_TOKEN"

JavaScript with apify-client

import { ApifyClient } from 'apify-client';

const client = new ApifyClient({ token: process.env.APIFY_TOKEN });
const input = {
  "schemaVersion": "1.0",
  "requestId": "ai-transparency-demo-001",
  "urls": [
    "https://www.intercom.com",
    "https://www.w3.org"
  ],
  "maxResults": 10,
  "freshnessMinutes": 60,
  "detailLevel": "evidence"
};
const run = await client.actor('zinin/eu-ai-act-transparency-lead-scanner').call(input);
const { items } = await client.dataset(run.defaultDatasetId).listItems({ clean: true });

for (const row of items) {
    console.log({
        entityId: row.entityId,
        confidenceBand: row.confidenceBand,
        recommendedAction: row.recommendedAction,
        safeToAutomate: row.safeToAutomate,
        failureType: row.failureType,
    });
}

Python with apify-client

import os
from apify_client import ApifyClient

client = ApifyClient(os.environ["APIFY_TOKEN"])
run = client.actor("zinin/eu-ai-act-transparency-lead-scanner").call(run_input={
    "schemaVersion": "1.0",
    "requestId": "ai-transparency-demo-001",
    "urls": [
        "https://www.intercom.com",
        "https://www.w3.org"
    ],
    "maxResults": 10,
    "freshnessMinutes": 60,
    "detailLevel": "evidence"
})

for row in client.dataset(run["defaultDatasetId"]).iterate_items(clean=True):
    print({
        "entityId": row.get("entityId"),
        "confidenceBand": row.get("confidenceBand"),
        "recommendedAction": row.get("recommendedAction"),
        "safeToAutomate": row.get("safeToAutomate"),
        "failureType": row.get("failureType"),
    })

Apify MCP call

{
  "name": "call-actor",
  "arguments": {
    "actor": "zinin/eu-ai-act-transparency-lead-scanner",
    "input": {
      "schemaVersion": "1.0",
      "requestId": "ai-transparency-demo-001",
      "urls": [
        "https://www.intercom.com",
        "https://www.w3.org"
      ],
      "maxResults": 10,
      "freshnessMinutes": 60,
      "detailLevel": "evidence"
    }
  }
}

Generic webhook consumer policy

1. Trigger on a terminal Actor run event.
2. Confirm the run status is SUCCEEDED before reading business rows.
3. Retrieve rows from defaultDatasetId.
4. Reject or quarantine rows whose failureType is non-null unless your policy explicitly handles that failure.
5. Send safeToAutomate=false rows to a human-review queue.
6. Store entityId, observedAt, sourceEvidence, confidence, action, and the Apify run ID together.
7. Make retries idempotent by keying the destination on the stable entity ID plus the intended observation or event identity.

Where this fits in a practical stack

Destination	Recommended pattern
Apify Console	Use the visual Input form, start the run, then open the default Dataset overview. This is the fastest path for a one-off review and the best place to inspect evidence before automating anything.
Apify API	POST JSON input to the Actor run endpoint, wait or poll for completion, then read the default Dataset through the URL returned by the run object.
JavaScript client	Use apify-client from a Node.js service, pass the same JSON object as the Console Input, and preserve the returned run and Dataset IDs in your own audit log.
Python client	Use apify-client in a Python enrichment job, iterate Dataset items, and route rows by recommendedAction, confidenceBand, failureType, and retryable.
Make	Start the Actor from a scenario, wait for the run, retrieve Dataset items, filter unsafe or low-confidence rows, then insert review-ready rows into the destination application.
Zapier	Use an Apify run action or webhook trigger, fetch Dataset items, apply a Filter step, and send only review-approved fields into the next sales or operations step.
n8n	Use HTTP Request or Apify nodes, branch on failureType and retryable, keep a manual-review lane for safeToAutomate=false, and write sourceEvidence together with the business fields.
Google Sheets	Export the Dataset directly or append rows from an automation. Keep stable entityId as a hidden key so reruns update the correct record instead of creating ambiguous duplicates.
Airtable	Map entityId to a primary or deduplication field, store confidence and evidence in separate columns, and expose recommendedAction as the triage view.
Webhook	Configure an Apify webhook for terminal run states, retrieve the Dataset after SUCCEEDED, and treat FAILED or TIMED-OUT runs as operational events rather than negative business evidence.

A safe automation shape

The Actor is a collection and decision-support component. A production workflow should keep raw evidence, decision metadata, and business action in distinct layers:

1. Collect: run the Actor with explicit bounded input.
2. Validate: require a successful run and schema-valid Dataset rows.
3. Triage: branch on failureType, retryable, confidenceBand, and safeToAutomate.
4. Review: open source evidence for rows that may affect a person, campaign, investment, compliance decision, or customer record.
5. Act: execute only the action approved by your own policy and authorized operator.
6. Audit: retain run ID, Dataset ID, observation time, input reference, source evidence, and the final human decision.

This separation prevents a common automation error: turning “data was observed” into “a business action is justified.”

Operating guide

Before the first production run

1. Write the business question in one sentence: Which submitted pages show observable AI-transparency disclosure gaps worth a manual website audit, without claiming EU AI Act applicability, violation, or buyer intent?
2. Confirm every submitted input is within your authorized scope.
3. Use the prefilled small example and review all returned row types.
4. Map stable identifiers, confidence, evidence, actions, gaps, failure, and retry fields into the destination.
5. Establish a human owner for review exceptions.
6. Set a run budget and output bound appropriate to the test.
7. Verify that secrets are stored only in the platform or workflow secret manager.

After every scheduled run

1. Check terminal run status and logs.
2. Compare the number of submitted entities, produced business rows, and advisory rows.
3. Review partial, unknown, conflict, and low-confidence buckets.
4. Inspect a sample of source evidence, including at least one positive and one negative result.
5. Confirm the destination deduplicated on the intended stable key.
6. Verify that no downstream action was triggered from an error row.
7. Track cost per useful reviewed row rather than cost per raw request alone.

Production monitoring signals

Monitor source-unavailable rate, partial-row rate, low-confidence share, missing evidence, retry volume, run duration, Dataset row count, and spend. A sudden shift may indicate source drift, input drift, or an upstream outage. Stop automation and investigate before accepting a new pattern as business truth.

Cost control

Start with one known page and one control page, maxResults=2, and evidence mode. Inspect every signal and evidence excerpt, then verify useful-result billing before expanding an approved cohort.

Use maxTotalChargeUsd when calling a monetized Actor if your workflow supports it. Treat a buyer-set cap as a hard safety boundary. If the cap stops work, the unfinished items remain unprocessed; they do not become negative results.

Review templates and quality reporting

Row-review worksheet

For every material row, an analyst should be able to answer the following without relying on memory or an unstated assumption:

1. What submitted entity or query does this row refer to?
2. Is it a business result, a baseline/advisory row, a partial observation, or a failure?
3. Which exact source evidence supports the headline fact?
4. When was the evidence observed, and is there a different source publication time?
5. Which fields are direct observations, which are normalized, and which are deterministic derivations?
6. What important evidence is null, missing, partial, ambiguous, or conflicting?
7. Does confidence describe evidence support only, or has someone incorrectly treated it as business value?
8. What recommended action is present, and what additional verification does its reason require?
9. Is the narrow action marked safe to automate? If yes, does organizational policy also permit it?
10. What final human disposition was made, by whom, and from which run and Dataset item?

Field-group review prompts

1. entityId, dedupeKey, inputRef, sourceUrl, canonicalUrl

Contract meaning: Stable website/request identities and bounded source page references.

Reviewer prompts: Is the value present? Does its type match the schema? Is it supported by sourceEvidence or a documented deterministic transformation? Is any null being silently converted into a default? Would the value still mean the same thing after CSV export? Does the destination preserve the related confidence and gap fields?

2. signals

Contract meaning: Six weighted present/absent/unknown AI-transparency observations with evidence.

Reviewer prompts: Is the value present? Does its type match the schema? Is it supported by sourceEvidence or a documented deterministic transformation? Is any null being silently converted into a default? Would the value still mean the same thing after CSV export? Does the destination preserve the related confidence and gap fields?

3. ai_use_disclosure, interaction_notice, synthetic_content_label

Contract meaning: Observed AI-use, AI-interaction, and synthetic-content notice topics.

Reviewer prompts: Is the value present? Does its type match the schema? Is it supported by sourceEvidence or a documented deterministic transformation? Is any null being silently converted into a default? Would the value still mean the same thing after CSV export? Does the destination preserve the related confidence and gap fields?

4. purpose_scope, limitations_human_review, provider_identity_contact

Contract meaning: Observed purpose, limitation/human-review, and provider identity/contact topics.

Reviewer prompts: Is the value present? Does its type match the schema? Is it supported by sourceEvidence or a documented deterministic transformation? Is any null being silently converted into a default? Would the value still mean the same thing after CSV export? Does the destination preserve the related confidence and gap fields?

5. transparencyGapScore, leadTier, isLead, needsReview

Contract meaning: Weighted observed-gap triage, not a legal risk or compliance verdict.

Reviewer prompts: Is the value present? Does its type match the schema? Is it supported by sourceEvidence or a documented deterministic transformation? Is any null being silently converted into a default? Would the value still mean the same thing after CSV export? Does the destination preserve the related confidence and gap fields?

6. knownWeight, sourceMetrics, evidence

Contract meaning: Signal coverage, page collection health, and hashed/selector evidence.

Reviewer prompts: Is the value present? Does its type match the schema? Is it supported by sourceEvidence or a documented deterministic transformation? Is any null being silently converted into a default? Would the value still mean the same thing after CSV export? Does the destination preserve the related confidence and gap fields?

7. observedAt, firstSeenAt, lastSeenAt, freshness

Contract meaning: Page-observation timing.

Reviewer prompts: Is the value present? Does its type match the schema? Is it supported by sourceEvidence or a documented deterministic transformation? Is any null being silently converted into a default? Would the value still mean the same thing after CSV export? Does the destination preserve the related confidence and gap fields?

8. confidenceScore, confidenceBand, confidenceReasons

Contract meaning: Evidence support derived from observable signal weight and source coverage.

Reviewer prompts: Is the value present? Does its type match the schema? Is it supported by sourceEvidence or a documented deterministic transformation? Is any null being silently converted into a default? Would the value still mean the same thing after CSV export? Does the destination preserve the related confidence and gap fields?

9. sourceEvidence, dataGaps

Contract meaning: Signal evidence counts/hashes and explicit legal-applicability, unknown-signal, and intent gaps.

Reviewer prompts: Is the value present? Does its type match the schema? Is it supported by sourceEvidence or a documented deterministic transformation? Is any null being silently converted into a default? Would the value still mean the same thing after CSV export? Does the destination preserve the related confidence and gap fields?

10. recommendedAction, actionPriority, safeToAutomate, failureType, retryable

Contract meaning: Manual transparency review routing and operational semantics.

Reviewer prompts: Is the value present? Does its type match the schema? Is it supported by sourceEvidence or a documented deterministic transformation? Is any null being silently converted into a default? Would the value still mean the same thing after CSV export? Does the destination preserve the related confidence and gap fields?

Weekly quality report

Create a recurring internal report with these measures. The report is about pipeline health, not market demand unless the source contract explicitly measures demand.

Metric	Why it matters	Investigate when
Submitted inputs	Defines the actual denominator and scope of the run.	The count differs from the approved batch or schedule.
Business result rows	Shows how many usable observations were produced.	The rate changes sharply without an input explanation.
Advisory/failure rows	Prevents operational failures from disappearing in a results-only dashboard.	Any terminal class grows or is unmapped.
Partial-result rate	Measures incomplete source coverage or configured truncation.	It rises, or analysts stop seeing the partial warning.
Low-confidence rate	Shows the share of rows requiring more evidence.	It rises by source, cohort, or input pattern.
Retryable failure rate	Distinguishes temporary operational issues from deterministic outcomes.	Retries repeat without improving evidence.
Evidence-link coverage	Confirms material facts remain traceable after export.	Links or evidence objects are missing from delivered records.
Safe-automation share	Shows how little or much of the workflow can be deterministic.	A mapping change makes unsafe actions appear safe.
Manual-review backlog	Measures whether human verification capacity matches collection volume.	Rows age beyond the campaign or decision window.
Duplicate destination writes	Tests idempotency and stable identity mapping.	The same entity/run creates multiple external actions.
Cost per reviewed useful row	Relates platform spend to approved, decision-useful output.	Raw volume rises but reviewed utility falls.
Source-drift exceptions	Detects changed markup, response shape, policy, or source availability.	A new unknown pattern survives more than one bounded check.

Client-facing delivery note template

Use a note like this when delivering exports to a client or another team:

This Dataset contains bounded public-source observations produced by the Apify Actor for the submitted Input. Each row includes observation time, evidence confidence, recommended review action, and explicit gaps where available. A positive row is not proof of buyer intent, permission, legal status, future outcome, or any fact listed in the Actor's “never claims” section. Partial and failure rows are included so coverage is not overstated. Validate material rows at their source before acting.

Add the Actor URL, run URL, Dataset URL, build/version, exact Input scope, observation window, pricing model observed for the run, reviewer name, and date of approval.

CRM disposition vocabulary

Keep collection results and sales dispositions separate. A practical downstream vocabulary is:

• needs_evidence_review: useful signal exists but a reviewer has not approved it.
• needs_identity_review: entity or ownership association is not sufficiently proven.
• needs_policy_review: contact, privacy, suppression, legal, or contractual policy must be checked.
• approved_for_research: an analyst may perform more research; this is not approval for outreach.
• approved_for_authorized_action: a named operator approved one specific action under the organization's policy.
• retry_operational_failure: the source or infrastructure failed and a bounded retry is appropriate.
• closed_no_supported_signal: the completed bounded check found no supported signal; this is not a universal negative fact.
• closed_out_of_scope: the input should not have entered this workflow.

Never overwrite recommendedAction with the CRM disposition. The first is Actor-produced decision support; the second is your organization's accountable decision.

Sampling plan

For a new workflow, review every row in the first small run. When the contract is understood, sample all failure and partial rows plus a representative set of high-, medium-, and low-confidence results. Re-expand to full review whenever the source changes, the schema version changes, a new input cohort is introduced, the error distribution shifts, or a downstream user reports an unexplained result.

Change-management record

When you change field mappings or automation policy, record:

1. Previous mapping or rule.
2. New mapping or rule.
3. Actor build/version and schemaVersion used for validation.
4. Test run and Dataset URLs.
5. Positive, negative, partial, retry, and budget fixtures inspected.
6. Security and privacy review outcome.
7. Approver and activation time.
8. Rollback condition and responsible operator.

This makes a commercial data workflow supportable. Without the record, a later operator cannot distinguish a real source change from an undocumented mapping change.

Delivery patterns for marketing and small-business teams

One-off research

Run the Actor in Console, inspect the overview table, open evidence for each material row, and export only the approved subset. Record the run URL in the client or campaign notes.

Recurring watch or hygiene job

Use an Apify schedule. Write rows into a staging table keyed by entityId. Compare current and previous observations only when the Actor supplies valid state or your own pipeline implements an explicit comparable baseline. Never infer a change from a failed run.

Agency client delivery

Deliver three views: business results, evidence/quality exceptions, and operational failures. Include the run URL, observation time, configured scope, and a plain-language statement of what the Actor does not prove. This makes the deliverable auditable and reduces disputes caused by overclaiming.

CRM enrichment

Write into staging fields first. A human or approved policy promotes values into canonical CRM fields. Keep raw source values separate from normalized and decision fields, and do not replace a verified value with a lower-confidence observation.

AI-assisted review

An LLM can summarize rows, but it must receive the evidence, confidence risks, negative signals, and limitations. Require citations to sourceEvidence and prohibit invented identity, intent, legal, funding, mailbox, valuation, or availability facts.

Buyer and operator acceptance checklist

Use this checklist before calling the workflow production-ready.

Product fit

• The business question matches: Which submitted pages show observable AI-transparency disclosure gaps worth a manual website audit, without claiming EU AI Act applicability, violation, or buyer intent?
• The submitted entities were selected through an authorized process.
• A human owner understands the positive, negative, partial, and failure row types.
• The team accepts the boundaries listed in “What this Actor never claims.”
• The destination keeps evidence confidence separate from business scoring.

Input and run controls

• schemaVersion is explicitly reviewed and bounded.
• requestId is explicitly reviewed and bounded.
• urls is explicitly reviewed and bounded.
• maxResults is explicitly reviewed and bounded.
• freshnessMinutes is explicitly reviewed and bounded.
• detailLevel is explicitly reviewed and bounded.
• The first production-like run uses a small representative sample.
• A maximum charge or internal spend alert is configured where appropriate.
• The workflow records Actor ID, build/version, run ID, Dataset ID, and input hash.

Data handling

• entityId is mapped to an idempotent destination key.
• observedAt and source-specific time fields remain distinct.
• sourceEvidence, gaps, and nulls are preserved.
• Advisory and failure rows cannot enter the positive-results lane.
• Low-confidence and partial rows have a visible manual-review view.
• Retention and deletion rules match the type of data collected.

Action safety

• recommendedAction is treated as a review label.
• safeToAutomate=false blocks automatic external action.
• Consent, suppression, legal, contractual, and platform rules are evaluated downstream.
• A reviewer can trace a material action back to source evidence and run metadata.
• Retry logic cannot duplicate a downstream action.

Ongoing quality

• The team monitors failure, retry, partial, low-confidence, and empty-result rates.
• A source-drift threshold pauses the workflow for inspection.
• Sample evidence is manually reviewed on a recurring basis.
• Cost per useful reviewed row is measured.
• Documentation and field mappings are updated when schemaVersion changes.

Frequently asked questions

Is this a database?

No. It is an on-demand observation tool. Each run collects or evaluates the submitted scope and records evidence at that time.

Does a found row prove commercial interest?

No. A found row proves only the factual observation described by its fields. Buyer intent is never inferred.

Can I automatically contact every result?

No. Use recommendedAction as triage, verify the evidence and identity, and apply your own consent, privacy, suppression, and outreach rules.

Why is safeToAutomate often false?

Because a useful observation can still require identity, context, legal, or source verification before action. Conservative routing prevents false certainty from scaling.

What should I do with low confidence?

Open confidenceRisks and sourceEvidence, close the important gap, or keep the row in a manual queue. Do not hide the confidence field.

What does partial mean?

The Actor delivered some usable rows but could not finish the requested scope, for example because more submitted URLs remained after a budget boundary or source failure. A budget boundary reached after the final requested row does not make an otherwise fulfilled request partial. Partial is not the same as empty.

What is a confirmed zero?

Only an explicit source or deterministic rule can support a confirmed absence. An outage, truncation, or unreadable response is not a zero.

Should I retry every failure?

No. Retry only when retryable is true. Invalid input, policy refusal, or deterministic classification should be corrected or handled, not looped.

Can I delete failure rows?

You can exclude them from a business-results view, but retain them in operational logs so Dataset completeness and retry decisions stay explainable.

How should I deduplicate?

Use entityId for the entity and, for stateful monitors, eventId for the observed transition. Also retain the Apify run ID.

Can I treat confidence as conversion probability?

No. Confidence measures evidence support, not purchase probability, revenue, suitability, or expected return.

Can I change the recommended action?

Yes. It is an explainable default. Your downstream policy can be stricter, and should encode organization-specific authorization and risk tolerance.

How do I estimate cost?

Run the smallest representative input, inspect live event prices and run usage in Apify, then model one billable result-found event per useful Dataset row plus any platform run-start charge. A zero-price default-Dataset-item entry may appear in the SDK's aggregate receipt but is not another paid result. The live pricing panel is authoritative.

Why use a small prefill?

It produces a cheap, fast, inspectable first run and reduces the chance of scaling a wrong input or workflow assumption.

Can I schedule it?

Yes. Use an Apify schedule, but make the destination idempotent and review changes in failure, partial, and confidence rates.

Can I export CSV or Excel?

Yes. Apify Datasets support common export formats. JSON is recommended when you need nested evidence and decision fields.

Can I send results to Sheets or Airtable?

Yes. Preserve entityId, confidence, evidence, gaps, actions, and failure fields instead of mapping only the headline value.

Can I use it from Make, Zapier, or n8n?

Yes. Start the Actor, wait for a successful terminal state, read Dataset items, then branch on decision and failure fields.

Can an LLM consume the output?

Yes, but pass the structured evidence and limitations together. Instruct the model not to invent missing facts and to cite sourceEvidence.

What happens when a source changes?

The run may become partial, unavailable, or fail validation. Monitor these rates and inspect logs before treating changed output as a real-world shift.

Does public mean unrestricted?

No. Public visibility does not remove source terms, privacy obligations, retention rules, or the need for a legitimate downstream purpose.

Is a source URL permanent?

Not necessarily. Store observation time and material facts because web content can change or disappear.

Can I rely on one row for a high-stakes decision?

No. High-stakes legal, financial, employment, compliance, safety, or personal decisions require appropriate primary evidence and qualified review.

How do I report a suspected parsing issue?

Provide the Actor run ID, a redacted input, affected field, expected source evidence, and whether the issue reproduces. Never include tokens or private data.

What does success mean?

A useful row proves the stated deterministic transparency observations on one submitted public page. It is a manual audit lead, not proof of EU AI Act applicability, violation, legal risk, AI use, buyer intent, or commercial need.

Support information to include with an issue

Provide the public Actor name, Apify run ID, Dataset item index or stable entity ID, a redacted Input, the relevant source URL, expected behavior, observed behavior, and whether retrying produced the same result. Do not include an Apify token, API key, private customer record, or unnecessary personal data.

Final interpretation rule

A useful row proves the stated deterministic transparency observations on one submitted public page. It is a manual audit lead, not proof of EU AI Act applicability, violation, legal risk, AI use, buyer intent, or commercial need.