Evidence Request
What to send for a certification review. Organize your submission against this list; the review cannot begin until all required items are received.
Before you start. Have you completed the self-assessment? It's free, runs in the browser, and locates the gaps you'll want to address before submitting evidence. Submitting with known low scores is fine — it just means the review will focus remediation there.
Confidentiality. All evidence is reviewed only by the assigned reviewers and the EII operations team. Reviewers sign a confidentiality agreement. Unsuccessful applicant materials are deleted within 90 days of decision.
How to submit
- Package your evidence. One folder or zip file per item below; name clearly (e.g., 01-manipulation-cancel-flow.pdf).
- Email
hello@thebluealgorithm.comwith subject "Certification evidence: [Product Name]". - For large packages (> 20MB), request a secure upload link in your first message; we'll respond with a one-time upload endpoint.
- For sensitive documents (unreleased features, legal matter, data flow diagrams with PII), use PGP. Request our public key in your first message.
Core documentation (required for every review)
- ☐ Cover letter — statement of intent to apply, named product, named legal entity, designated review liaison (name, role, email, phone)
- ☐ Registered entity documentation — certificate of incorporation, LLC formation doc, or equivalent
- ☐ Directors / officers list — current, with roles
- ☐ Conflict-of-interest disclosure — any relationships between your organization and EII, The Blue Algorithm LLC, Melissa Geurts, Joshua Hobson, or a proposed reviewer
- ☐ Written commitment to annual re-review — certifications are not static
- ☐ Written commitment to mark-usage compliance — you agree to follow Badge Usage Guidelines and to accept revocation for misuse
- ☐ Written commitment to public listing — you agree to be listed in the public EII Directory if certified
Evidence by dimension
Nine dimensions. Each has specific evidence we ask for. If an item doesn't apply to your product, say so in writing and explain why (e.g., "no user-facing AI — Dimension 08 N/A").
01 — Manipulation & Dark Patterns
- ☐ Sign-up flow — full screenshot walkthrough
- ☐ Cancellation flow — full screenshot walkthrough with click count (number of steps from intent-to-cancel to completed cancellation)
- ☐ Any surface using countdowns, scarcity claims, or urgency — with underlying data to verify truthfulness (e.g., if "only 3 left" — the actual inventory number)
02 — Consent & Autonomy
- ☐ Consent flow screenshots (registration, cookies, marketing, data-sharing)
- ☐ Policy on consent withdrawal — how users withdraw specific consents without canceling the whole product
- ☐ Global Privacy Control (GPC) signal handling documentation, or explicit statement of non-applicability
03 — Attention & Engagement Ethics
- ☐ Engagement-mechanic design documents — any internal documentation of streaks, notifications, infinite scroll, autoplay
- ☐ Notification default settings — user-facing state and internal category architecture
- ☐ If you use variable-reward or loss-aversion mechanics: internal rationale for the design choice
04 — Data Ethics
- ☐ Privacy policy (linked live URL)
- ☐ Data flow diagram — what data is collected, where it flows, who processes it, how long it's retained
- ☐ Demonstration of self-service data export, correction, and deletion (video walkthrough or screenshot sequence)
05 — Neurodivergent & Accessibility Safety
- ☐ WCAG 2.2 AA audit report (or a written attestation with methodology if no formal audit has been done)
- ☐
prefers-reduced-motionhandling demonstration - ☐ User-accessible toggle for animations / autoplay / sensory-heavy UI (if applicable)
06 — Protection of Vulnerable Users
- ☐ Age-verification design (if the product is accessible to minors) — method, enforcement, fallback
- ☐ Policy on targeting users in financial distress (or attestation if not applicable)
- ☐ Documentation of any emotional-state detection in the product: what's detected, how it's used, whether it feeds advertising / engagement / retention
07 — Transparency & Honesty
- ☐ Pricing display screenshots — point of commitment, recurring charges, auto-renewal terms
- ☐ Algorithmic decision disclosure — ranking, eligibility, pricing (plain-language explanation for material algorithmic decisions)
- ☐ Any verification or trust claims (badges, "certified," "verified") with substantiation
08 — AI Behavioral Safety
- ☐ Sycophancy audit methodology and results (or attestation of N/A if no user-facing AI)
- ☐ Crisis-signal detection design — what the product does if a user expresses self-harm or suicidal ideation
- ☐ Parasocial / dependency safeguards, especially for minors — session-length caps, persona-break disclosures, etc.
09 — Redress & Remediation
- ☐ Complaint / report flow demonstration
- ☐ SLA documentation — how quickly user-reported issues are addressed, who handles them
- ☐ Account deletion demonstration — self-service, same path as sign-up, confirmation in writing
What happens next
- Acknowledgment within 5 business days of receipt.
- Completeness review. If evidence is missing, we'll ask for it specifically. The review clock does not start until evidence is complete.
- Review. Two independent reviewers evaluate evidence against all 9 dimensions × 3 questions = 27 items. Target turnaround: 4–6 weeks for Charter Cohort, 6–10 weeks for standard reviews.
- Private Report. You receive a Private Review Report with scoring, rationale, evidence references, required remediation (if any), and recommended improvements.
- Remediation window. If the result is "Conditional," you have 90 days to remediate blocking dimensions. Second review on remediated items produces the Remediation Delta — the metric we think boards should actually be measured on.
- Public listing. On certification, your product is added to the Directory with per-dimension scores.
Confidentiality, in detail
- Evidence is accessed only by assigned reviewers and the EII operations team.
- Reviewers sign a confidentiality agreement before access.
- The Private Review Report is shared with the applicant only.
- If certified, a Public Directory Summary is published (overall score, per-dimension bands, date, next review date) — not the Private Report.
- If not certified, nothing is published. Unsuccessful applicant materials are deleted within 90 days of decision.
- If remediation is undertaken and certification granted, remediation is referenced in the public record ("certified after remediation of Dimension X").
Fees
Charter Cohort review fees are subsidized. Specific fees are case-dependent (product complexity, sector annex requirements, review depth) and quoted within 5 business days of acknowledgment. Fees are disclosed in the annual transparency report. EII does not accept funding from reviewed organizations outside the review fee.
Citation: EII-EVR-2026-01 · Evidence Request for Certification Review · EII v0.9 · April 2026.
Questions: hello@thebluealgorithm.com.
Apply: apply.html.