Skip to main content

Documentation Index

Fetch the complete documentation index at: https://docs.responsibleailabs.ai/llms.txt

Use this file to discover all available pages before exploring further.

Endpoint: POST /railscore/v1/compliance/check | Framework code: ccpa | Credits: 5.0 per call
The California Consumer Privacy Act (as amended by CPRA) grants California residents rights over their personal information and imposes obligations on businesses that collect or sell it. The compliance check evaluates AI content against CCPA requirements.

​
Supported checks

AreaSectionsWhat’s checked
Right to know1798.100, 110Whether consumers are informed about data collection and use
Right to delete1798.105Whether deletion mechanisms and disclosures are present
Right to opt-out1798.120Whether opt-out of sale/sharing is offered
Sale of PI1798.115Whether “sale” or “sharing” of data is disclosed
Financial incentives1798.125Whether incentive programs are properly disclosed
Sensitive data1798.121Whether sensitive PI categories are handled with additional protections
Service providers1798.140(ag)Whether processor/service provider contracts are referenced

​
Request

curl -X POST https://api.responsibleailabs.ai/railscore/v1/compliance/check \
  -H "Content-Type: application/json" \
  -H "Authorization: Bearer YOUR_RAIL_API_KEY" \
  -d '{
    "content": "We share user purchase history with advertising partners to show relevant ads.",
    "frameworks": ["ccpa"],
    "context": "E-commerce platform with California users"
  }'

​
Response

{
  "result": {
    "overall_compliant": false,
    "frameworks": {
      "ccpa": {
        "compliant": false,
        "issues": [
          {
            "clause": "1798.120 — Right to opt-out of sale/sharing",
            "description": "Sharing purchase history with advertising partners constitutes 'sharing' under CPRA. No opt-out mechanism is mentioned.",
            "severity": "high",
            "remediation": "Provide a 'Do Not Sell or Share My Personal Information' link and honor Global Privacy Control (GPC) signals."
          },
          {
            "clause": "1798.100 — Right to know",
            "description": "Categories of third parties receiving data are not disclosed.",
            "severity": "medium",
            "remediation": "Disclose the categories of personal information shared and the categories of third parties receiving it."
          }
        ]
      }
    }
  },
  "credits_consumed": 5.0
}
Dedicated CCPA endpoints for opt-out signal handling, CPRA amendment tracking, and privacy notice generation are under development.