The absolute majority of it was collected manually, once we had a base of manually collected data we used AI for a select few datapoints, such as industry classifications, or detecting use of did:methods in projects documentation. Any AI colected data was then manually checked & approved. you can read about the data collection process in the pdf linked on https://www.weboftrust.org/about