vDPO Auditor icon

vDPO Auditor

vDPO Auditor plugs into your AI coding assistant and audits your actual codebase against applicable privacy laws. It runs entirely on your machine and never connects to the internet.

  1. vDPO Auditor plugs into Claude Code, Codex, VS Code Copilot and OpenCode.
  2. It audits your actual codebase, APIs and infrastructure for personal-data handling under 167 laws across 106 jurisdictions.
  3. Every finding is mapped to a specific law and line of code, including security safeguards the law requires.
  4. The checklists for your chosen laws are built into your download, so it works fully offline.

vDPO Auditor is included with an active Learner or SaaS Edition account.

See plans
See it work

How it works

Claude Code

      

Your code never leaves your machine.

Your machine — everything here stays local
Your codebase
AI coding assistant
Claude Code · Codex · VS Code Copilot · OpenCode
vDPO Auditor
Local output pack
vdpo.org
and the internet
never contacted

vDPO Auditor makes no network connections: your licence is checked on your machine and your checklists come inside the download. Your coding assistant still sends code to its own AI provider (Anthropic, OpenAI or GitHub), as it does for any task you give it.

Your output

Output files

Every document opens directly in your browser. No software to install. And you can print or save any of them as a PDF.

Always included

  • Technical privacy audit: every finding, with severity, exact code evidence, and a recommended fix
  • Data Inventory Register: a full personal-data inventory of what your code touches, and where
  • ROPA Builder: a Record of Processing Activities, auto-generated from real data flows, not a form
  • Integration Risk Register: every third-party API, SDK, and AI integration your code actually talks to, flagged for cross-border transfer and AI-governance risk
  • Retention findings: where data outlives its stated retention period
  • Remediation plan: findings turned into a prioritized, ownable action plan

Included when relevant

  • Draft privacy notice: for public-facing products
  • Draft cookie policy: when cookies are found
  • Draft AI transparency notice: when AI use is found
  • DPIA screening: sensitive data, children, or high-risk findings
  • Jurisdiction checklist: every requirement mapped to its specific law citation (e.g. DPDPA §8(6)), marked met, gap, or unknown, for each law in your package