Transparency & Ratings

Source Tier Ratings & Methodology

Our rating system ensures readers can distinguish between binding regulatory directives, independent legal analysis, and community commentary.

Tier 1 • Primary / Official

Official Regulators & Enforcement Agencies

Direct announcements, enforcement orders, penalty notices, and guidelines issued by official governing bodies (e.g., HHS OCR, EU EDPB, NIST, SEC, FTC, CISA, PCI SSC).

Characteristics: Highest factuality score (High), primary source documentation, direct binding authority.
Tier 2 • Secondary / Trade Press

Major Industry & Legal Outlets

Journalistic coverage from established legal news, cybersecurity publications, and industry journals (e.g., Dark Reading, Law360, Cybersecurity Dive, SC Media, BleepingComputer).

Characteristics: High to Medium factuality, editorial review, contextual analysis and expert quotes.
Tier 3 • Community / Commentary

Blogs, Vendors & Independent Research

Analysis from security researchers, compliance software vendors, consulting blogs, and community submissions.

Characteristics: Medium factuality, opinion/interpretation pieces, advisory insights.

How Coverage Distributions are Calculated

When a compliance story is created, our algorithm counts the number of reporting sources across each Tier. The percentage representation (e.g. 50% Official Regulators, 30% Trade Press, 20% Community) forms the Ground News-style visual coverage bar on every story card.

← About Compliance HubView FAQ