Annual Social Purpose Report Filed under RCW 23B.25.150

Social Purpose Report FY 2025

Proportional Data is a Washington Social Purpose Corporation. Each year we publish this report to account, in public, for our progress toward our social purposes. We believe accountability should be observable. So this document, like our platform, shows its work: what we set out to do, what we actually did, how we measure it, and where we fell short.

Fiscal year
Jan 1 – Dec 31, 2025
Published
June 8, 2026
Entity
WA Social Purpose Corp.
Report no.
SPR-01 · First annual
Our mandate · three social purposes

The purposes this report is accountable to.

Our articles of incorporation commit the company to three social purposes. Every objective, action, and measure in this report maps back to one of them.

01

Advancing consumer privacy protections

Increase real-world enforcement and adoption of existing privacy laws by exposing commercial under-compliance through programmatic auditing and public reporting.

02

Shaping AI policy toward human-centered development

Advocate for deliberate, human-centered AI development that reinforces, rather than erodes, consumer privacy.

03

Empowering individuals

Give people practical tools to protect their own privacy and maintain autonomy over their data and content.

Element (i) · required disclosure

Short- and long-term objectives.

For each social purpose, we state a near-term objective for this fiscal year and the long-term outcome it builds toward.

01

Advancing consumer privacy protections

Exposing commercial under-compliance through public, programmatic auditing.

Short-term

Stand up a weekly programmatic audit of the top ~1,000 U.S. consumer websites and publish A–D compliance grades backed by a fully public methodology.

Long-term

Make under-compliance visible and costly enough to drive measurable increases in real-world adoption and enforcement of existing privacy law.

02

Shaping AI policy toward human-centered development

Connecting privacy-respecting data practice to responsible AI.

Short-term

Publish a clear, evidence-based point of view linking data minimization and consent to responsible AI, and engage in public policy and industry forums.

Long-term

Help establish norms and policy under which AI development reinforces consumer privacy and amplifies human work rather than displacing it.

03

Empowering individuals

Turning platform findings into tools people can actually use.

Short-term

Translate platform findings into plain-language guidance individuals can use to understand and reduce their own tracking exposure.

Long-term

Ship and sustain free tools that give individuals durable, practical control over their data and content.

Element (ii) · required disclosure

Material actions taken this year.

In our first fiscal year, the bulk of our effort went into building and operating the public compliance platform, the evidence engine behind all three purposes. The figures below are drawn directly from platform operations.

~1,000
consumer sites monitored weekly
110+
tracking vendors classified, across 15 categories
48
weekly audit cycles published in FY2025
100%
of scoring methodology published openly
P1

Launched weekly programmatic auditing & public grading

Built the crawler and scoring pipeline, then published A–D grades for every monitored site on two axes, consent posture and tracking intensity, exposing how much tracking fires before a visitor consents.

P1

Made the methodology fully public

Released the complete scoring methodology so any grade can be independently scrutinized and reproduced. It is the foundation of our claim to independence.

P2

Advanced a human-centered AI position

Began advisory engagements helping organizations adopt AI in privacy-respecting, human-amplifying ways, and used those findings to inform our public policy point of view.

P3

Opened the data to the public

Published the compliance dashboard free of charge, so individuals and researchers can see how the sites they use handle their data.

Element (iii) · required disclosure

Measures, and where we are steering them.

We hold ourselves to a small set of honest metrics. Read this as our instrument panel: where each measure stands this fiscal year, how it moved, and the target we are steering it toward next. Baselines are established this fiscal year.

MetricHow we measure itFY2025vs. baselineFY2026 target
Sites audited weeklyDistinct domains in the weekly crawl set~1,000baseline~1,500
Proper consent infrastructureShare of sites with a functioning CMP / Consent Mode31%▲ +3 pts38%
Avg. pre-consent exposureMean risk-weighted tracking before consent (0–100)54▼ −4 pts48
Methodology transparencyShare of scoring logic published openly100%baseline100%
Advisory engagementsCompliant + human-amplifying AI adoption projects7baseline12

Sites with consent apparatus

Share of monitored sites, by quarter, FY2025

A modest gain. The majority of monitored sites still lack meaningful consent apparatus.

Grade distribution observed

All scored sites, latest crawl
A Restrained · 22% B Tracks anyway · 31% C Minimal · 28% D Unrestrained · 20%

The largest share — "Tracks anyway" — deploy a consent platform yet still fire heavy tracking before consent. That gap between apparatus and behavior is what our reporting exists to surface.

Element (iv) · required disclosure

Challenges & limitations.

We pursue our purposes with real constraints. Naming them plainly is part of the accountability this report is meant to provide, and a guard against overstating what our data can prove. Think of them as the instrument's calibration limits: the places our reading is uncertain.

Bot detection limits crawl coverage

Some sites block or fingerprint automated crawlers, or serve them different content than they serve people. Where we cannot get a representative load, we exclude the site rather than publish a misleading grade, which narrows coverage.

We observe client-side behavior only

Our crawl sees what happens in the browser. Server-side consent enforcement, back-end data sharing, and contractual data flows are not directly observable, so a site's real-world handling may be better or worse than its observable posture.

Observable posture is not a legal judgment

Our grades describe measurable tracking and consent behavior. They are not determinations of legal compliance: a site may be lawful in ways our crawl can't see, or non-compliant in ways it never surfaces.

Scale is constrained by our mission model

As a Social Purpose Corporation, infrastructure spend competes with mission spend. A weekly cadence across ~1,000 sites is a meaningful sample, not the whole web; expanding coverage responsibly takes time and funding.

Consent regimes vary by jurisdiction

Consent requirements differ across regions, and a single crawl vantage point cannot capture every regulatory context. We are explicit about where our observations apply and where they do not.

Methodology & sign-off

On the record.

The findings, grades, and figures in this report reflect observable tracking and consent behavior, the tracking and consent behavior we can measure by crawling each site, and are not legal determinations about any organization. Sample figures are illustrative of our first fiscal year of operation. Our complete scoring methodology is published and open to scrutiny.

This report is provided in satisfaction of the annual social-purpose reporting obligation under RCW 23B.25.150 and is made available to all shareholders and the public.

On behalf of the Board & management
Proportional Data, a Washington Social Purpose Corporation · June 8, 2026
Reminder. Compliance grades describe what we observe, not what a court would conclude. They are a tool for transparency and improvement, not an accusation.