THE PLATFORM

Enter a company name. See what regulators and litigators already see.

See exactly how it works, from what Privaini observes to the exposure it surfaces.

See Your ExposureBook Assessment →
Privaini
Companies✓ 23
Open findings47
Coverage✓ 90 countries
StatusLive

Three steps. One outside-in intelligence loop.

01 · Observe
Any company. Any market.
From a company name and website, Privaini sees what regulators see. No deployment, access, or cooperation required.
02 · Detect
100+ signals. Every applicable regulation.
Signals are scored against statutes across 90 countries and 20 US states.
03 · Recommend
Evidence-backed and prioritized.
Regulator-grade findings with a defensible exposure range and clear next steps.

From a company name to regulator-grade, evidence-backed findings.

Eight finding categories, each statute-mapped.

Wrongful Collection
CCPA / CPRA
Data collected outside disclosed purpose, beyond scope, or without a lawful basis.
See statute →
Consent Flow Failures
GDPR / ePrivacy
Banners that fail validity: pre-checked, dark-pattern, or firing before rejection.
See statute →
AI Governance Gaps
EU AI Act / State AI
Automated decisioning and model use without disclosure or assessment.
See statute →
Video & Tracking Disclosure
VPPA / CIPA
Pixels and trackers that trigger video-privacy and wiretap exposure.
See statute →
Biometric Handling
BIPA
Face, voice, or fingerprint processing without notice or consent.
See statute →
Children’s Data
COPPA
Collection from minors without verifiable parental consent.
See statute →
Data Sharing & Sale
CCPA / CPRA
Undisclosed sharing or sale of personal data to third parties.
See statute →
Retention & Deletion
GDPR / CCPA
Data kept beyond stated periods; deletion rights unhonored.
See statute →

Every category has at least one governing statute with reproducible, timestamped evidence.

Four exposure vectors. One range per finding.

Litigation
Modeled from lawsuit settlements for comparable findings.
Worked example →
Regulatory
Modeled from regulator fines under the governing statute.
Worked example →
Remediation
Modeled from the engineering and legal effort to fix the finding.
Worked example →
Reputational
Modeled from disclosure obligations and customer-churn impact.
Worked example →

A defensible range for every finding, modeled from legal precedent, not guesswork.

90 countries. 20 US states.

Coverage is verified at every assessment. Statutes change; our corpus tracks them.

90
Countries covered
Verify coverage →
20
US states with privacy statutes
View statutes →
8
Finding categories, each statute-mapped
See categories →
100+
Signals evaluated per assessment
How it works →

What the platform does not do.

Does not scan internal systems
Company name and domain are the only input. Privaini observes from the outside.
Does not require credentials
No API keys, no access, no cooperation from the company being assessed.
Does not provide legal advice
Findings are evidence; exposure is range-modeled. Both inform your counsel.
Does not predict liability
Ranges are defensible estimates from precedent, not verdicts.

No agents, SDKs, or firewall presence. Observation only, the same vantage as regulators.

Your exposure is already visible. See it before they do.

No sales pitch. No questionnaires. No IT lift. Just your domain name.

See Your Exposure →See a sample report

No generic alerts · No installation · Domain name only · Statute-mapped findings

Opt-Out Signal Honored