Compliance Desk · Reports · census

TAKE IT DOWN Act compliance census, September 2026

Published Sep 29, 2026 · Last reviewed Sep 29, 2026 · by Agent Exchange

Since May 19, 2026, every "covered platform" in the United States has had to run a notice-and-removal process for nonconsensual intimate imagery: a clear, plain-language notice of the process on the platform, a way for the person depicted (or someone authorized to act for them) to request removal, a right the statute gives to the identifiable individual rather than only to account holders, and removal within 48 hours with reasonable efforts to remove identical copies. This census measures which of 254 platforms people actually use publish such a notice, and what the notice says. Every number below comes from pages fetched on 2026-09-29 (US time; 00:12 to 00:54 UTC on 2026-09-30) by a crawler that identifies itself, obeys robots.txt and never logs in; the full per-platform table with links is further down and the dataset is free to reuse (CC BY 4.0).

What the law requires

Section 3 of the TAKE IT DOWN Act (Pub. L. 119-12, enacted May 19, 2025) required covered platforms, within one year (by May 19, 2026), to establish a process by which an identifiable individual, or an authorized person acting for them, can notify the platform of an intimate visual depiction published without consent and request its removal (sec. 3(a)(1)). The platform must provide "a clear and conspicuous notice" of that process, which may be a link to another page, that is easy to read, in plain language, and describes how to submit a request (sec. 3(a)(2)). On a valid request it must remove the depiction "as soon as possible, but not later than 48 hours" and make reasonable efforts to identify and remove known identical copies (sec. 3(a)(3)). A failure to reasonably comply is treated as a violation of an FTC rule defining an unfair or deceptive act or practice (sec. 3(b)), enforceable against non-profits as well (sec. 3(b)(2)(D)).

A covered platform (sec. 4(3)) is a website, online service, online application or mobile application that serves the public and either primarily provides a forum for user-generated content, including messages, videos, images, games and audio files, or in the regular course of business publishes, curates, hosts or makes available nonconsensual intimate visual depictions. Excluded are broadband internet access providers, electronic mail, and services consisting primarily of content preselected by the provider where chat, comments or interactivity are incidental to that content. The likely_covered column applies that definition to each platform with a one-line reason; it is an informed reading, not a legal determination.

Method

Population: 254 user-generated-content platforms and services widely used in the United States: the 44 covered by this site's platform guides plus 210 added across social networks, video, live streaming, image hosting, meme and GIF sites, forums and Q&A, anonymous boards, messaging with public content, dating, gaming, marketplaces and crowdfunding, creator platforms, adult platforms, blogging and site builders, fan-fiction and art communities, review sites, app-store review surfaces, music and audio, cloud storage with public links, AI generation platforms, and one search engine for contrast. Each platform carries a coverage reading (yes, probably, unclear) against the statutory definition of "covered platform" in Pub. L. 119-12 sec. 4(3) and a reach bucket from the Tranco global rank of its registrable domain (list N2PGW, downloaded 2026-09-29; large = rank 1 to 1,000, medium = 1,001 to 10,000, small = the rest; unranked when absent). Fetching: three passes on 2026-09-29 (2026-09-30 00:12 to 00:54 UTC) by a Node crawler identifying itself as agentexchange-census/1.0 (+https://takeitdown.agentexchange.work/reports), one request per second per host, robots.txt honored for every URL, no logins, no JavaScript execution, 15-second timeout. Passes 1 and 2 (at most 24 requests per platform each) read the homepage, URLs recorded by earlier research for the 44 guide platforms, footer and policy links (terms, legal, safety, help, report, abuse, content removal, community guidelines; Act- and intimate-image-named links first), the paths /takeitdown, /take-it-down, /take-it-down-act and /ncii, generic policy paths when little was readable, the help-center homepage, and, where a help center blocked page fetches or rendered only with JavaScript, its sitemap (Zendesk /hc/sitemap.xml or robots-declared), then read up to two English help or policy pages whose URL names the Act or intimate imagery. Pass 3 (at most 16 requests per platform) re-read every notice found in full and fetched the request forms it links to, recording form structure so that login, search, newsletter and feedback widgets are not mistaken for request forms; and, for platforms without a notice, followed policy links to related-brand domains, policy links not yet read, and robots-declared sitemaps of the main and help hosts. 6297 requests in total including robots.txt and sitemap files; pages from all three passes are pooled per platform. Reading rules: a page is a notice when it names the TAKE IT DOWN Act (or TIDA beside intimate-image language) and describes or is the removal process, or when it describes a report or removal path for nonconsensual intimate imagery (title or URL naming the process, or request language within 250 characters of the intimate-image phrase; on guidelines and terms pages only explicit request language such as a removal form, a removal request or an email address counts; on news and blog posts only explicit request language within 600 characters of the Act, so announcements of support do not count). Weaker evidence tiers, reported separately: an Act-named page title or URL on the platform's own help or policy hosts whose body rendered only with JavaScript, an English help-center sitemap entry whose URL names the Act or intimate imagery, and a link on a readable page whose anchor names the Act or NCII removal. "States 48 hours" requires the deadline within 1,200 characters of the Act's name or 800 of the intimate-image language on a notice page. "Dedicated form" means the notice contains, or links to, a request form or channel. "No account needed" is "yes" only when pass 3 fetched the linked request form anonymously and received a qualifying form without a sign-in redirect, or when an email address on the platform's domains (or within 400 characters of the notice language) is published with the notice; "no" when the linked form redirected to sign-in and no email route was published. "No notice" requires at least four readable non-content pages, at least two of them policy, legal or help pages, and a help center that was either read or scanned through its sitemap (or three readable pages plus a sitemap of 50 or more help URLs with no matching entry); anything short of that, and every block, JavaScript-only shell, robots disallow or network error, is "unclear". Hash-program participation is "yes" when StopNCII or NCMEC Take It Down is named on the platform's own pages or the platform appears on either program's participant page as read on 2026-09-29.

• Population: 254 platforms: the 44 already covered by this site's platform guides plus 210 more user-generated-content platforms and services widely used in the United States, across 21 categories. Reach buckets come from the Tranco global ranking (list N2PGW, downloaded 2026-09-29): large = rank 1 to 1,000, medium = 1,001 to 10,000, small = below that; US-specific reach was not measured.
• Fetch budget: 6297 HTTP requests in three passes on 2026-09-29 (at most 24 per platform in each of the first two, 16 in the third), one request per second per host, user agent agentexchange-census/1.0, robots.txt honored (19 main hosts disallow all crawling), 15-second timeout, no logins, no JavaScript execution; 329 sitemap files read.
• Reading: a notice is a page on the platform's own site that names the Act and is or describes the removal process, or that describes how to report or request removal of intimate images shared without consent; a guideline that only bans such content, or a news post announcing support for the Act, is not a notice. "States 48 hours" requires the deadline in the notice passage; "dedicated form" means the notice contains or links to a request form or channel; "no account needed" was confirmed by fetching the linked form anonymously or by an email address published with the notice. Where a page body could not be read, an Act- or NCII-named help page title, URL, sitemap entry or link counts as a weaker "yes" and is labeled as such.
• Never inferred: a fetch failure, a 403, a JavaScript-only shell or a robots.txt disallow produces "unclear", not "no".

By category

By reach

By likely coverage

Largest likely-covered platforms with no notice found

Platforms whose likely coverage is "yes" or "probably", ordered by Tranco rank. Across all categories, including services whose coverage is unclear (app stores, retail reviews, search), the ten largest without a notice are: Apple App Store (ratings and reviews), Microsoft OneDrive (public links), Amazon (customer reviews), Bing (Microsoft), WhatsApp, Roblox, Snapchat, Dropbox (public links), Tumblr, Weebly. "No notice found" means the crawler read at least four non-content pages, two or more of them policy, legal or help pages, with the help center read or its sitemap scanned (or three such pages plus a sitemap of 50 or more URLs with no matching entry), and found neither the Act nor a way to request removal of intimate images. A notice may still exist behind a login, inside an app, or on a page this method did not reach.

Named the Act, published no process

These platforms mention the TAKE IT DOWN Act on their own site, in a news post or announcement, but no page read by the census tells a person how to submit a removal request, which is what section 3(a)(2) requires the notice to do.

• Roblox (#61): page naming the Act; census result: no
• Snapchat (#130): page naming the Act; census result: no

Largest platforms whose notice was read

All 254 platforms

Notice links go to the platform's own page as fetched on 2026-09-29. Labels in parentheses mark notices evidenced by a title, URL or link whose body the crawler could not read; for those rows the 48-hour, form and account columns are unclear. Sort is by Tranco rank; unranked hosts last. The JSON dataset carries the method, evidence and basis for every cell.

Limitations

• Unclear is not no: 120 platforms (47.2%) could not be assessed because they blocked the census user agent (403, 429, 503 or a challenge page), served only JavaScript shells, disallow crawling in robots.txt, or exposed too few policy pages; 19 main hosts disallow all crawling by unlisted agents. A browser-based re-check would move some to yes; X, for example, publishes a TAKE IT DOWN Act page (recorded by earlier research) that the census could not fetch.
• No is bounded by what was readable: a notice inside an app, behind a login, on a page not linked from the homepage, policy or help pages, or in a help center without a sitemap would be missed. "No" means no notice was found on the pages a person would reasonably check, which is also the statute's test of a clear and conspicuous notice, but it is not proof that no process exists.
• Title and link evidence (11 platforms) proves that an Act- or NCII-named help page or link exists on the platform's own hosts on the pull date, but not what it says; the 48-hour, form and account fields are unclear for those rows.
• The 44 platforms with earlier research also had their recorded URLs re-fetched, which raises their chance of a yes (24 of 44) relative to the 210 added platforms (24 of 210), which were assessed by discovery alone; the guide platforms are also the largest.
• Platforms owned by the same operator (Meta's Messenger and WhatsApp, Google's Tenor and Play, Microsoft's OneDrive, Bing and GroupMe, Match Group's apps) were assessed from their own homepages and help centers; an operator-wide notice that none of those surfaces links to is not credited.
• Phrase matching reads English pages and can miss notices written without the Act's name or the phrases searched (nonconsensual intimate, intimate image or imagery, intimate visual depiction, NCII, revenge porn, image-based abuse, uploaded without consent); a policy that only bans such content, without saying how to request removal, is not counted.
• Reach buckets use the Tranco global rank of the registrable domain, not measured US audiences: OneDrive carries live.com's rank, Google Photos and Drive carry google.com's, and app-first services (Snapchat, BeReal, dating apps) rank lower on the web than their use warrants. The bucket is a sort key, not an audience estimate.
• "Likely covered" applies the statutory definition from each platform's public function; it is an informed reading, not a legal determination, and the exclusions (broadband providers, email, provider-preselected content with incidental interactivity) turn on facts a crawl cannot see.
• Hash-program lists were read once on 2026-09-29: StopNCII's industry-partner page listed ten recipients that day, fewer than press coverage names, so "no" for hash programs means "not named on the platform's pages or the two participant lists today", not a denial of participation.
• "No account needed" is confirmed only from what an anonymous visitor receives: forms that render only with JavaScript (Meta's two TIDA forms, for example) or sit behind a challenge read as unclear, and a form that loads anonymously may still ask for sign-in on submission.
• Single day, three passes: pages change, help centers reorganize and FTC enforcement is new. The census will be re-run monthly with the same population and rules, each run published separately so the series shows movement.

Dataset: take-it-down-act-compliance-census-2026-09.json (CC BY 4.0; cite as "Agent Exchange, TAKE IT DOWN Act compliance census, September 2026, https://takeitdown.agentexchange.work/reports/take-it-down-act-compliance-census-2026-09"). Statute text: govinfo.gov, Pub. L. 119-12. Hash-program lists: StopNCII industry partners and NCMEC Take It Down participants, both read on 2026-09-29. This report is measurement, not legal advice; whether any platform is a "covered platform" or complies with the Act is for the FTC and the courts. Platforms change pages; re-check the linked source before relying on a row.

Compliance Desk by agentexchange.work · This service provides software and informational templates, not legal advice. Laws cited link to their primary sources; confirm your obligations with counsel. · Privacy · Terms · Free check · For requesters · Platform guides · Generators · Templates · Badges · Regulations · Compare · Reports · DMCA agents · llms.txt
All properties: network.agentexchange.work · Agent-Readiness Grade · Agent Economy Index · MCP Registry Integrity Report · ToolDrift · AI Visibility