Agent-Readiness Grade

Agent-Readiness Grade / Fix guides / Legal notices

Fix legal notices: publish the six notices and a way to send each request

The legal-notices check asks whether a visitor, or an agent acting for one, can find how to make the requests the law says you must accept. It reads your policy pages for six notices and, for each, a way to actually send the request.

Checked 2026-09-30 against grader version 1.3.0 and the 7 sources listed below.

Area: Legal notices. 2 of the 12 points.

What the grade checksWhy it mattersHow to fix itVerifyQuestionsSources

What the grade checks

  • The grade calls the free Compliance Desk check, which fetches your home page and /privacy, /privacy-policy, /terms, /legal, /accessibility, /dmca, /copyright, /report, /safety, /contact and /about (7-second timeout each; a page counts when it answers below 400 with some text).
  • For each of six topics it looks for a notice (1 point) and a request mechanism (1 point), 12 points in all: TAKE IT DOWN Act removal notice, DMCA or copyright agent, DSA notice-and-action, privacy request method, accessibility statement with a feedback channel, and marketing opt-out.
  • This area scores 2/2 at 6 or more desk points, 1/2 at 2 or more, 0/2 below that. It is a text search for notices and mechanisms, not a legal opinion.

2 of the 12 points. The full scoring rules are on the methodology page.

Why it matters for AI agents and crawlers

TAKE IT DOWN Act: the FTC enforces Section 3 from May 19, 2026. Covered platforms must give clear and conspicuous, plain-language information on how to request removal of intimate images shared without consent, and remove valid reports and known identical copies within 48 hours.

DMCA: the section 512 safe harbor depends on a designated agent registered with the U.S. Copyright Office and named on your site.

EU Digital Services Act: Regulation 2022/2065, Article 16, requires hosting services to offer an electronic notice-and-action mechanism for illegal content.

Privacy: the California regulations set the methods businesses covered by the CCPA must offer for consumer requests, generally two or more. Accessibility: the European Accessibility Act applies from June 28, 2025 to many consumer services in the EU. Marketing email: the FTC's CAN-SPAM guide requires a working opt-out honored within 10 business days.

Agents increasingly file these requests for people. A notice with a working channel is something an agent can act on; a notice without one fails the person and the check.

How to fix it

  1. Decide which notices apply

    Not every site needs all six. A site without user uploads is generally outside the TAKE IT DOWN Act, and the DSA applies to services with users in the EU. Publish the notices that apply to you; the score is a prompt to check, not a legal requirement to publish everything.

  2. Put each notice where people (and the check) look

    One /legal page with a section per topic works, as do separate /privacy, /accessibility or /dmca pages. Each notice needs a real channel: a form or a monitored address. Replace the names, addresses and deadlines below with your own; this is not legal advice.

    /legal (six sections, each with a way to send the request)

    <h2 id="takedown">Report intimate images shared without consent (TAKE IT DOWN Act)</h2>
    <p>If intimate images of you, real or AI-generated, were posted here without your consent,
      submit a removal request at <a href="/report">example.com/report</a> or email
      <a href="mailto:takedown@example.com">takedown@example.com</a>. No account is needed.
      We remove valid reports and known identical copies within 48 hours.</p>
    
    <h2 id="dmca">Copyright (DMCA)</h2>
    <p>Our designated agent: Jane Doe, <a href="mailto:copyright@example.com">copyright@example.com</a>,
      1 Main St, City, ST 00000. Send notices and counter-notices to this address.</p>
    
    <h2 id="dsa">Illegal content (EU Digital Services Act)</h2>
    <p>Report illegal content with the <a href="/report">notice form</a>; we acknowledge receipt,
      decide, and send a statement of reasons. Point of contact: <a href="mailto:legal@example.com">legal@example.com</a>.</p>
    
    <h2 id="privacy">Your privacy rights</h2>
    <p>Submit an access, deletion or correction request with the <a href="/privacy/request">request form</a>
      or at <a href="mailto:privacy@example.com">privacy@example.com</a>. We answer within 45 days.</p>
    
    <h2 id="accessibility">Accessibility</h2>
    <p>We aim to meet WCAG 2.2 AA. Report an accessibility barrier at
      <a href="mailto:accessibility@example.com">accessibility@example.com</a>; we reply within 5 business days.</p>
    
    <h2 id="optout">Marketing opt-out</h2>
    <p>Unsubscribe with the link in any marketing email, or opt out here without logging in:
      <a href="/unsubscribe">example.com/unsubscribe</a>.</p>
  3. Publish it on your stack

    Link the page from the footer of every page so people and agents find it from anywhere.

    Static site

    Save the page as legal/index.html so it answers at /legal, and link it in the footer.

    WordPress

    Create a page with the slug legal (or put sections on /privacy and /accessibility) and add it to the footer menu. Core includes personal-data export and erasure tools under Tools (WordPress privacy), which help you answer privacy requests.

    Next.js

    app/legal/page.tsx renders the same sections on the server; link it from the root layout's footer.

    Cloudflare

    Deploy the page with your static assets. If you have no backend for the request forms, a hosted desk can take the requests (next step).

  4. Give each request a working channel

    A mailbox nobody reads fails the law's intent. Compliance Desk runs hosted request forms for these topics with ticket numbers and deadline clocks; its free check is the one this grade calls.

How to verify

Run the free desk check to see which notices it found and the text it matched, then re-grade.

shell

curl -s "https://takeitdown.agentexchange.work/check.json?url=example.com" | node -e 'let s="";process.stdin.on("data",d=>s+=d).on("end",()=>{const j=JSON.parse(s);console.log("desk score",j.score+"/"+j.max);for(const [k,r] of Object.entries(j.results||{}))console.log(k,r.score+"/2")})'

A desk score of 6/12 or more gives 2/2 in the grade; each topic shows 0, 1 or 2.

Then re-grade your site: the result lists the evidence for this check.

$49 AI Visibility Full Report

The fixes on this site are free. The paid next step is the $49 AI Visibility Full Report (what ChatGPT, Claude and Perplexity say about your brand, with a prioritized fix list) from aivisibility.agentexchange.work. It includes:

  • 8 real buyer questions tested across ChatGPT-class models
  • Competitor share-of-voice: who AI names, how often, versus you
  • Full GEO site audit with prioritized, specific fixes
  • Agent-Readiness Score: crawler access, llms.txt, schema, discovery manifest
  • Custom 30/60/90-day action plan to get cited by ChatGPT, Perplexity and Google AI Overviews
  • Shareable report, generated in about 60 seconds after checkout

Get the Full Report — $49 Stripe checkout; you enter your brand and site right after paying.

Questions

Does my site need a TAKE IT DOWN Act notice?

The FTC says the law covers platforms that primarily provide a forum for user-generated content, or that regularly publish or host intimate content shared without consent; it names social media, messaging, image or video sharing and gaming platforms. A site without user uploads is generally outside it. This is information, not legal advice.

Is passing this check the same as being compliant?

No. It finds notices and request channels by text search; compliance depends on the process behind them.

Why does an agent-readiness grade check legal notices?

Agents act for people: filing a takedown, an opt-out or a privacy request. A site whose notices and channels can be found and used is one an agent can transact with.

Sources

Primary documentation, read 2026-09-30. Vendors change these pages; follow the link before relying on a detail.