# gosurrey.co.uk EcoMark analysis | v4 Dated EcoMark analysis for gosurrey.co.uk: C 73/100 using algorithm v4. Canonical: https://ecomark.app/assessment/0d38600a-9b04-40b8-b515-71f1595ab9d0 EcoMark analysis · Algo v4 # gosurrey.co.uk Published 29 Aug 2026 Rescan website [Site history](/site/gosurrey.co.uk) C 73 #2 of 5 at publication This grade belongs to gosurrey.co.uk. It is based on a bounded sample of up to 5 connected public pages plus public evidence. It is not a grade for any one page. Automated EcoMark v4 approximation using up to 5 connected pages, DNS, active policy/sitemap discovery, browser security checks and lightweight performance diagnostics. Browser Run was blocked or incomplete, so the normal public HTML response was used instead. Analysis quality: good. [Algorithm v4](/methodology/v4) · [Raw evidence](/evidence/0d38600a-9b04-40b8-b515-71f1595ab9d0) Improve ## Start with these changes. 1 responsibility ### Add or strengthen these basic browser protections: HSTS, Content Security Policy, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, Frame protection. Transparent, secure defaults make digital impact understandable and give visitors meaningful choices. 2 sovereignty ### Avoid concentrating most third-party delivery in one provider ecosystem. A more portable and less concentrated stack gives organisations more control over technology and jurisdiction. 3 efficiency ### Add long-lived cache headers to versioned static assets. Lighter pages consume less bandwidth and device work and remain usable on slower connections. Breakdown ## Evidence by category. Efficiency 75 #2 of 5 5 connected pages · ~245 KB measured/page · 63 KB JavaScript/page · 32 resource references/page · 10% sampled assets cacheable. PageSpeed-style checks: 4/7; 5 obvious blocking candidates; 33 images without width/height. **Evidence and scoring** Evidence: 5 connected pages · ~245 KB measured/page · 63 KB JavaScript/page · 32 resource references/page · 10% sampled assets cacheable. PageSpeed-style checks: 4/7; 5 obvious blocking candidates; 33 images without width/height. - Payload Measured HTML and sampled asset payload is proportionate and optimised. 20/20 - JavaScript Referenced JavaScript weight is kept proportionate. 20/20 - Requests Pages avoid excessive resource references and third-party connections. 15/20 - Media Images and video avoid obvious loading and autoplay waste. 20/20 - Caching and compression Sampled static assets expose effective cache policy. 0/20 Privacy 90 #1 of 5 1 known trackers · 0 tracking-style response cookies · 7% third-party resource references. **Evidence and scoring** Evidence: 1 known trackers · 0 tracking-style response cookies · 7% third-party resource references. - Behavioural tracking Known advertising pixels and cross-site trackers are absent or minimised. 15/20 - Analytics minimisation Analytics technology is absent or privacy-preserving and proportionate. 20/20 - Cookies and consent Non-essential response cookies are avoided before interaction. 20/20 - Third-party disclosure Resource loading does not unnecessarily disclose visits to third parties. 15/20 - Invasive techniques Known session replay and similarly invasive tools are absent. 20/20 Sovereignty 65 #3 of 5 2 US-headquartered visitor-facing provider ecosystems · 93% first-party assets · open technology 93/100 · WordPress. DNS: NS dante.ns.cloudflare.com, etta.ns.cloudflare.com · MX 10 mail.protonmail.ch, 20 mailsec.protonmail.ch. **Evidence and scoring** Evidence: 2 US-headquartered visitor-facing provider ecosystems · 93% first-party assets · open technology 93/100 · WordPress. DNS: NS dante.ns.cloudflare.com, etta.ns.cloudflare.com · MX 10 mail.protonmail.ch, 20 mailsec.protonmail.ch. - Provider jurisdiction Observable visitor-facing dependencies minimise reliance on US-headquartered platform ecosystems. 10/20 - Third-party geography Known non-EU third-party data exposure is minimised. 15/20 - Portable delivery Pages minimise proprietary embeds and platform-specific content dependencies. 20/20 - Supplier concentration Third-party resource loading is not dominated by one provider ecosystem. 0/20 - Open technology Open standards, first-party delivery, open-source technology and public source code are preferred where practical. 20/20 Accessibility 80 #2 of 5 9 semantic issues · 0 keyboard markup issues · 0% unlabelled controls · 100% raw/rendered text ratio. **Evidence and scoring** Evidence: 9 semantic issues · 0 keyboard markup issues · 0% unlabelled controls · 100% raw/rendered text ratio. - Semantics HTML exposes basic language, heading and landmark structure. 0/20 - Keyboard access Markup avoids obvious keyboard-hostile interaction patterns. 20/20 - Forms and controls Form controls expose labels or accessible names. 20/20 - Visual accessibility Viewport and media markup avoid obvious visual accessibility barriers. 20/20 - Resilience Meaningful text remains present without relying entirely on client rendering. 20/20 Responsibility 45 #4 of 5 Privacy ✓ · Cookies ✗ · Terms ✓ · Accessibility ✗ · Contact/About ✓. Public registration IDs: UK company number 09981304. verified green hosting (Cloudflare). carbon.txt ✗ · sitemap ✓ · security 0/6. Missing: HSTS, Content Security Policy, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, Frame protection. **Evidence and scoring** Evidence: Privacy ✓ · Cookies ✗ · Terms ✓ · Accessibility ✗ · Contact/About ✓. Public registration IDs: UK company number 09981304. verified green hosting (Cloudflare). carbon.txt ✗ · sitemap ✓ · security 0/6. Missing: HSTS, Content Security Policy, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, Frame protection. - Public accountability Privacy, terms, accessibility, contact and applicable registration information are discoverable. 10/20 - Security basics The main response exposes sensible browser security headers. 0/20 - Consent design Tracking and consent markup avoids obvious one-sided choice patterns. 5/20 - Supplier disclosure Detected material visitor-facing providers are reflected in discoverable privacy information. 20/20 - Sustainability evidence Green hosting, carbon.txt and public sustainability information provide discoverable evidence of digital sustainability practice. 10/20