Sites, platforms and apps

Which states you must age-gate, from what date, by what method — and how many days you were exposed before you did.

No payout leaves without a W-9 behind it. Threshold tracking, TIN matching, and the double-reporting your creators will find in January.

The DMCA registered agent renewal, the takedown log, the counter-notice clock and the repeat-infringer policy — the four things safe harbour actually depends on.

Identification, 2257, W-9 and banking, each with its own state, on one gate in front of the first payout.

W-8BEN on file, the treaty rate that applies, what you withheld, and the 1042-S that has to reconcile to it in March.

Verifying that the person on camera is the person who was verified, with a re-verification clock and a session record that survives a subpoena.

The evidence pack assembled before the representment deadline rather than after it, with the deadline itself on a clock.

Affiliate W-9s, the traffic sources you prohibit, and a termination record that holds up when the affiliate disputes it.

Order scoring against the operator's own factor table, and the card-network dispute ratio the month is actually running at.

A transcript or the rough SRT your editor spat out in; a clean SRT, WebVTT and plain transcript out, every cue re-split to that surface's line length and checked against its reading speed.

An identity document image in; pass, fail or unreadable out, with the age worked out in Python against the jurisdiction's minimum and an audit log the merchant can export.

The caption file you already have, in other languages - one SRT, WebVTT and plain transcript per language, plus a cue-by-cue CSV and a zip.

Bundles out of a catalogue with the arithmetic shown - which titles go together, and what the bundle is worth against the sum of its parts.

Paid ad copy for the networks that will actually run you, written per network and inside its own limits.

An auto-renewal consent file: proof of each member's renewal consent kept for the required period, the yearly renewal reminder scheduled, and cancellation checked against the way each member signed up - member references only.

A data protection impact assessment workbook: the processing described, consultation, necessity, every risk scored before and after its measures, the DPO's advice, and the signed, dated result with its review date.

A US state sensitive-data consent checker: which state privacy laws reach the site from its members per state, whether each needs opt-in consent or an opt-out and a written data protection assessment, with the assessment kept on file.

A high-risk registration calendar: each acquirer registration with its fee and yearly reassessment, the monthly per-transaction and volume charges checked against the statement, and the real twelve-month cost as a share of volume.

A held-funds release schedule: each processor's rolling reserve and post-closure hold, what is held from every payout and the day each slice should come back, releases matched oldest first, late ones flagged.

A US streaming-subscription sales-tax map: sales and transactions by member billing state, which states tax streaming, exempt it or have no sales tax, and where the economic-nexus line has been crossed.

An EU VAT worksheet for non-EU sellers: EU sales totalled by member country at its standard rate, the quarterly non-Union One Stop Shop return figures, the four due dates and nil returns.

A metered tagging API on our own GPUs: pictures or a video in, tags out from a fixed list of business words - setting, light, people, shot, wardrobe, colour, mood - with a rating of sfw, suggestive or nsfw, billed per frame.

An age gate a merchant pastes into their own site as one script tag: the visitor photographs their ID, the date of birth is read on our own GPU, and an adult walks in with a signed pass the merchant's server can check - with us or on its own.

A pay-per-token chat API on our own GPUs, speaking the chat-completions request most SDKs already send - change the base address and the key, and the app keeps its code.

Draws one banner design at every size TrafficJunky and ExoClick take - laid out for each shape, checked against both networks' rules, every file under 150 KB - and hands back one zip with a sheet.

A safety file for AI companion apps: the AI notice, the three-hour reminder, the published crisis protocol and the monthly referral count.

A New York ad log: each ad, whether it uses an AI-made person, the disclosure it carried, where it sat and the proof as it ran.

A watch on proposed adult-content taxes: each bill's rate and status, what it would cost on your receipts by state, and the reserve.

A register for adult game developers: each title on each store, every delisting, deindexing and payment notice and what was done, and revenue.

A high-risk merchant application pack: the merchant category code, billing descriptor, required site pages, ID, bank letter and three months of bank and processing statements, checked and kept with every package's outcome.

A Chicago streaming amusement tax tracker: the processor's charges export read in the browser, Chicago charges placed by billing address, and each month's Form 7510 figures, keeping totals only.

A state geoblock proof log: each blocked age-verification state tested from inside it on schedule, how the address was sourced and where it geolocated, the capture fingerprinted, and a signed proof statement.

A B-notice desk under Publication 1281: every CP2100 listing, each payee's first, second or disregarded notice worked out, B notices, W-9s and validations, backup withholding, and every deadline in business days.

An adult phone-line access-code file under 47 CFR 64.201: carrier notices, written applications and adult age checks, codes mailed only after the check, every cancellation stamped, and a monthly defence file.

A restricted-content share calculator: the catalogue counted in items, minutes, pages and bytes plus Kansas page views, compared with each of the 27 states' lines, with a dated result kept for the file.

An Alabama 10 percent content tax worksheet: each period's gross receipts from the statements split by buyer location and where content was made, the taxable base and tax, keeping totals only.

An app-store age-signal file under the App Store Accountability Acts: reading the store's age category and consent before download, what each bracket gets, ratings with reasons, change notices, and state status.

A California risk-assessment file under 11 CCR 7150-7157: each activity's trigger, the nine parts of the report, every review and update, the three-year clock, and the yearly attestation to the Agency.

A Video Privacy Protection Act consent record: consent on its own screen with a withdrawal link, pixels gated to live consents, each tool and what it receives, and closed accounts' records destroyed within a year.

A money-transmitter exposure check: how fan money moves, the four agent-of-payee conditions, signed creator agreements, and each state's status read off CSBS's map and dated, for counsel.

A dormant performer balance file: each unpaid balance aged against its state's dormancy rules, the due-diligence letter window, the report it lands on, and each state's report total.

A member breach notice planner: members per state, each state's notice rule confirmed against its statute, notices ready, and every notice an incident needs on its own dated line.

A Utah age-verification excise worksheet under S.B. 73: each period's covered sales to Utah customers and in all, the 2 percent excise on the chosen base, and every return's due date and payment.

A payout sanctions screening log: every payee matched on your own machine against the Treasury's SDN list, sanctioned places flagged, reviewed hits with what was compared, and every check kept ten years.

A California cybersecurity audit calendar under 11 CCR 7120-7124: each year's figures against the thresholds, the first and yearly April 1 dates, the auditor's independence, findings, and the certification.

An Illinois BIPA retention schedule: published policy versions, every batch of face scans with its release and destroy-by date, and every vendor receiving face data with its release and contract checked.

A member data request clock under Connecticut's privacy law: each request's 45-day due date, extension notices with reasons, refusals with the appeal route, appeals in 60 days, and withdrawals in 15.

A high-risk merchant control file for Visa's Integrity Risk Program: each merchant's registrations, KYC, six content policies, site reviews, monthly reports and dispute ratios, and the acquirer's own assessment.