Image
Skip to main content
Code auditCheck every pull request for privacy riskWebsite auditCatch scripts and vendors that appear in productionInth AgentAsk what changed and follow the answer to its sourceCookie consentFast consent that lives in your codebase
AboutHandbookBlogOSS
AI feature reviewsFundraising Due DiligencePrivacy impact reviewsEnterprise customer reviewsCookie and tracking audits
Pricing
Sign inRun a free scan
Run a free scan

Monitor and fix product privacy issues before they block growth

Inth monitors your pull requests, codebase and website to catch privacy issues and turns them into fixes and evidence.

Run a free scanTalk to us
Inbox - Inth
Inbox

Open

9 items

Reviewing evidence

  • PII in request logs

    4m

    api-gateway forwards email addresses to the logging vendor.

    P0Code scan·Project finding

  • Script calls new domain

    22m

    cdn.thirdparty.io detected in production before consent.

    P1Website activity·Project finding

  • New tracker: pixel.js

    1h

    Marketing category script added without a vendor record.

    P1Website activity·Project finding
Inbox - Inth
INInthPro
Search⌘ K

Products

Inbox
OpenResolvedDismissedAccepted risk
Agent
Audit
Consent
Billing
Settings
Getting started
Help
AMAlex Morgan

Open

9 items

  • PII in request logs

    4m

    api-gateway forwards email addresses to the logging vendor.

    P0Code scan·Project finding

  • Script calls new domain

    22m

    cdn.thirdparty.io detected in production before consent.

    P1Website activity·Project finding

  • New tracker: pixel.js

    1h

    Marketing category script added without a vendor record.

    P1Website activity·Project finding

  • New SDK: analytics-node@4

    5h

    Adds a data flow to Segment. Policy v9 has no match.

    P2Code scan·Project finding
P0Code scan·Open

PII in request logs

Summary

The API gateway forwards email addresses to a logging vendor without an approved data flow.

Evidence

Open scan report →
src/logging/request.ts:42-44
42
43
44logger.info({
  email: request.user.email,
});

Recommended action

Remove the email field or replace it with a non-identifying internal user ID.
Inbox item resolved

New agent

Privacy agent

Research privacy requirements and turn guidance into practical next steps.

Ask anything about privacy…
Research

Legal information grounded in curated guidance, not legal advice.

Trusted by
  • Expo
  • Zed
  • Infisical
  • Unkey
  • Chelsea Piers
  • Mario Testino
  • Roboto Studio
  • Cal.com
  • Mastra
Image
Image
Image
Image

Code Audit

Scan PRs and code for privacy issues before they hit production

All audits - Inth
Audit

All audits

inth/dashboardCompleted
Full audit·Entire repository · mainToday, 14:08

6 findings

inth.comCompleted
Web audit·marketing-siteToday, 12:42

3 vendors

inth/checkoutFailed
PR audit·Pull request · feature/checkoutToday, 10:17

Scan failed

All audits - Inth
INInthPro
Search⌘ K

Products

Inbox
Agent
Audit
OverviewAll auditsCode auditsWebsitesVendorsCookies
Consent
Billing
Settings
Getting started
Help
AMAlex Morgan

Audit

All audits

Search auditsAll statuses
AuditTypeStatusOutcomeStarted
inth/dashboardEntire repository · mainFull auditCompleted6 findingsToday, 14:08View audit
inth.commarketing-siteWeb auditCompleted3 vendorsToday, 12:42View audit
inth/checkoutPull request · feature/checkoutPR auditFailedScan failedToday, 10:17View audit
app.inth.comdashboardWeb auditCompletedNo changesYesterday, 18:31View audit
inth/apiBranch · mainFull auditCompleted2 findingsYesterday, 16:04View audit

5 audits

Inth checks every product change for new data flows, trackers, SDKs, and vendor calls that create privacy issues, then helps you fix and evidence them.

Run free code scanLearn more

Website Audit

Monitor your website for privacy gaps the moment they appear

All audits - Inth
Audit

All audits

inth/dashboardCompleted
Full audit·Entire repository · mainToday, 14:08

6 findings

inth.comCompleted
Web audit·marketing-siteToday, 12:42

3 vendors

inth/checkoutFailed
PR audit·Pull request · feature/checkoutToday, 10:17

Scan failed

All audits - Inth
INInthPro
Search⌘ K

Products

Inbox
Agent
Audit
OverviewAll auditsCode auditsWebsitesVendorsCookies
Consent
Billing
Settings
Getting started
Help
AMAlex Morgan

Audit

All audits

Search auditsAll statuses
AuditTypeStatusOutcomeStarted
inth/dashboardEntire repository · mainFull auditCompleted6 findingsToday, 14:08View audit
inth.commarketing-siteWeb auditCompleted3 vendorsToday, 12:42View audit
inth/checkoutPull request · feature/checkoutPR auditFailedScan failedToday, 10:17View audit
app.inth.comdashboardWeb auditCompletedNo changesYesterday, 18:31View audit
inth/apiBranch · mainFull auditCompleted2 findingsYesterday, 16:04View audit

5 audits

Inth monitor your website for vendor changes, scripts and cookies, then compares what loaded with your consent state and policies.

Run website scanLearn more

Chat

Chat directly with global privacy laws with your product's context

Inth Agent - Inth
Agent

Inth Agent

What changed in checkout this week?

Two privacy-impacting changes shipped since Monday.

  • analytics-node@4 added to checkout-service

    Opens a new data flow to Segment. Flagged for review.

EvidencePR #482scan-1042
Ask about your product…
Research

Legal information grounded in curated regulations and guidance, not legal advice. Always confirm with a qualified lawyer.

Inth Agent - Inth
INInthPro
Search⌘ K

Products

Inbox
Agent
Checkout changesPolicy coverage
Audit
Consent
Billing
Settings
Getting started
Help
AMAlex Morgan

Inth Agent

What changed in checkout this week?

Two privacy-impacting changes shipped since Monday.

  • analytics-node@4 added to checkout-service

    Opens a new data flow to Segment. Flagged for review.

  • Marketing category added to the consent banner

    Approved by privacy on Tuesday. Policy still matches.

EvidencePR #482scan-1042signal 88c1policy v9

Does our privacy policy still cover the Segment flow?

Not yet. Policy v9 lists no analytics processor for checkout data. Legal review is queued, and the evidence pack is ready to attach.

Ask about your product…
Research

Legal information grounded in curated regulations and guidance, not legal advice. Always confirm with a qualified lawyer.

Chat helps you cite real privacy laws against your product to make informed decisions about your obligations in every market you operate in.

Chat nowLearn more

FAQ

Frequently asked questions

Questions we hear from engineering, privacy and legal teams.

Talk to our team

Developers install it. Privacy, security, legal, and platform teams run on it once review work becomes operational. If product changes create work your company has to review and defend, Inth is built for you.

Run a free scan and find your privacy gaps

Run a free scanTalk to us
Inbox - Inth
Inbox

Open

9 items

Reviewing evidence

  • PII in request logs

    4m

    api-gateway forwards email addresses to the logging vendor.

    P0Code scan·Project finding

  • Script calls new domain

    22m

    cdn.thirdparty.io detected in production before consent.

    P1Website activity·Project finding

  • New tracker: pixel.js

    1h

    Marketing category script added without a vendor record.

    P1Website activity·Project finding
Inbox - Inth
INInthPro
Search⌘ K

Products

Inbox
OpenResolvedDismissedAccepted risk
Agent
Audit
Consent
Billing
Settings
Getting started
Help
AMAlex Morgan

Open

9 items

  • PII in request logs

    4m

    api-gateway forwards email addresses to the logging vendor.

    P0Code scan·Project finding

  • Script calls new domain

    22m

    cdn.thirdparty.io detected in production before consent.

    P1Website activity·Project finding

  • New tracker: pixel.js

    1h

    Marketing category script added without a vendor record.

    P1Website activity·Project finding

  • New SDK: analytics-node@4

    5h

    Adds a data flow to Segment. Policy v9 has no match.

    P2Code scan·Project finding
P0Code scan·Open

PII in request logs

Summary

The API gateway forwards email addresses to a logging vendor without an approved data flow.

Evidence

Open scan report →
src/logging/request.ts:42-44
42
43
44logger.info({
  email: request.user.email,
});

Recommended action

Remove the email field or replace it with a non-identifying internal user ID.
Inbox item resolved

New agent

Privacy agent

Research privacy requirements and turn guidance into practical next steps.

Ask anything about privacy…
Research

Legal information grounded in curated guidance, not legal advice.

Notes from building privacy into the product

Notes from building Inth. Sent occasionally.

Inth connects what your company promised to what engineers just shipped.

Platform

  • Code audit
  • Website audit
  • Inth Agent
  • Consent banner
  • Pricing

Use Cases

  • Privacy Impact Review
  • AI Feature Reviews

Company

  • About
  • Blog
  • Open source
  • Contact

Resources

  • Documentation
  • GitHub
  • Cookiebench
  • Status

© 2026 Inth. All rights reserved.

  • Contact us
  • Privacy
  • Cookies
  • Terms
Advertisement
Advertisement