Free scan for any website or app · no card

Is your website or app breaking the law?

Every country has rules about privacy, cookies and data. We show you, in plain words, what breaks them — and how to fix it.

Works with:
3 free scans every month No card neededSign in with Google in one tap

Checks 54 countries and states

EUEuropean UnionUKUnited KingdomCHSwitzerlandDEGermanyFRFranceUSUnited States (federal)US-CACaliforniaUS-TXTexasUS-NYNew YorkUS-VAVirginiaUS-COColoradoUS-ILIllinoisUS-FLFloridaUS-CTConnecticutUS-OROregonUS-UTUtahUS-MTMontanaUS-IAIowaUS-DEDelawareUS-NJNew JerseyUS-NHNew HampshireUS-TNTennesseeUS-MNMinnesotaUS-MDMarylandUS-INIndianaUS-KYKentuckyUS-RIRhode IslandUS-NENebraskaUS-WAWashingtonCACanadaBRBrazilMXMexicoINIndiaSGSingaporeAUAustraliaJPJapanKRSouth KoreaCNChinaAEUnited Arab EmiratesSASaudi ArabiaZASouth AfricaNGNigeriaIDIndonesiaTHThailandVNVietnamPHPhilippinesMYMalaysiaTRTürkiyeILIsraelNZNew ZealandHKHong KongARArgentinaCOColombiaCLChileEUEuropean UnionUKUnited KingdomCHSwitzerlandDEGermanyFRFranceUSUnited States (federal)US-CACaliforniaUS-TXTexasUS-NYNew YorkUS-VAVirginiaUS-COColoradoUS-ILIllinoisUS-FLFloridaUS-CTConnecticutUS-OROregonUS-UTUtahUS-MTMontanaUS-IAIowaUS-DEDelawareUS-NJNew JerseyUS-NHNew HampshireUS-TNTennesseeUS-MNMinnesotaUS-MDMarylandUS-INIndianaUS-KYKentuckyUS-RIRhode IslandUS-NENebraskaUS-WAWashingtonCACanadaBRBrazilMXMexicoINIndiaSGSingaporeAUAustraliaJPJapanKRSouth KoreaCNChinaAEUnited Arab EmiratesSASaudi ArabiaZASouth AfricaNGNigeriaIDIndonesiaTHThailandVNVietnamPHPhilippinesMYMalaysiaTRTürkiyeILIsraelNZNew ZealandHKHong KongARArgentinaCOColombiaCLChile

Ready to launch?

3 things to fix

Europe · Needs work61

UK · Not ready47

California · Almost there88

Works with what you use

Made your app with any of these? We can check it.

Lovable
GitHub
Cursor
Claude
Bolt
Replit
v0
Supabase
Stripe
Vercel
Webflow
WordPress
Shopify
Firebase

Swipe to see more →

Works with any website, however it was built. If you used an AI builder like Lovable, Cursor or Claude, we even write the fix instructions for it.

Why SafeLaunch

You built something great. Now make sure it follows the rules.

Laws are long and hard to read. We read them for you and tell you what they mean for your website, in plain words.

Every country has different rules. Tell us where your customers live, and we only check the rules that apply to you.

We don't just say what's wrong. We show exactly what to change — or give you a message to paste into your AI app builder, and it fixes it for you.

Search findings…

Monday, October 26 2026

Good morning, Emily!

3 critical items need attention before you launch in Texas and the UK.

Launch blockers

03 critical

9 fixes ready · +34 pts possible

56

Score by severity

Critical 03

High 04

Passed 11

AI brief

2.1h to fix all

Paste the master prompt into Lovable. 5 files change, no new dependencies.

Copy master prompt
JurisdictionsAll 5

US-TX · TX Rule 7.04 · TDPSA

Texas 38

Critical

EU · GDPR · ePrivacy

European Union 61

Partial

UK · UK GDPR · PECR

United Kingdom 47

Critical

US-CA · CCPA · CalOPPA

California 82

Passing
Findings feedAll (12)

Stripe live key exposed in client bundle

src/lib/pay.ts:12

Rotate & move

Analytics load before consent

src/routes/__root.tsx:31

Copy prompt

Testimonials without disclaimer

Testimonials.tsx:9

View diff
Why it matters

Small sites get sued. Every day.

Most lawsuits and fines don't hit big companies. They hit small businesses that never checked.

3,117

US websites sued over accessibility in 2025, up 27%

Seyfarth Shaw

€1.2B

in GDPR fines in 2025, €7.1B since 2018

DLA Piper, Jan 2026

1,556

California lawsuits over website tracking in 2025

Fisher Phillips

20

US states with their own privacy law in force in 2026

State statutes

What you get

Everything you need to launch safely

One check. Every rule that applies to you. Fixes you can copy and paste.

European UnionUnited KingdomSwitzerlandGermanyFranceUnited States (federal)CaliforniaTexasNew YorkVirginiaColoradoIllinoisFloridaConnecticut+40 more

54 countries and states

Europe, the UK, every US state privacy law, India, Southeast Asia, Latin America and more. Pick where your customers are.

Your website's codeFix: ask before tracking
- <script src="googletagmanager.com/gtag/js" />+ {consent === "accepted" && <Analytics />}+ <CookieBanner onChoice={setConsent} />

The exact change to make

Red is what you have now, green is what to change it to. No guessing.

Prompt for Lovable

"Add a cookie banner with equal Accept and Reject buttons. Don't load Google Analytics until Accept…"

Copy

Built with AI? Let AI fix it

Made your app with Lovable, Cursor or Claude? Copy our message, paste it in, and your AI tool makes the fix.

Passwords left where anyone can see
Customer data anyone can read
Missing browser safety settings
Secure connection (padlock) on

Safety check included

We look for the leaks hackers love: visible passwords and customer data left open.

Ready-made policies

A first draft of your privacy, cookie and terms pages.

Rules for your job

Extra rules for lawyers, doctors and other professions.

PDF report

A clear report you can share with a lawyer, investor or app store.

Check again

Fix things, check again, and watch your score go up.

and a lot more — see how it works

What others miss

The checks that catch what actually gets small sites in trouble.

Lawsuits, fines and app-store rejections rarely come from a missing paragraph. They come from what your product does. That's what we test.

Every US state privacy law

23 US states, including every one with a comprehensive privacy law, each with its own size thresholds, so you see which ones really reach you.

The laws people sue under

Chat widgets, session recording and ad pixels that start before consent (wiretap claims), pixels on video pages, and text sign-ups without consent wording.

Global Privacy Control, tested

We visit your site with the GPC signal on and watch whether ad tools stop, as US state laws require.

Vulnerable and copyleft packages

Your dependencies at the versions you actually install, checked for known vulnerabilities and for licences that could force you to publish your code.

Proof of consent

Not just a banner: whether your code records who agreed to what and when, which several laws make your job to prove.

EU product and cyber laws

The Cyber Resilience Act, product safety rules for online shops, the new Product Liability Directive and the Data Act.

In your customers' language

Privacy notices, cookie banners and policy pages are read in the languages of the markets you sell to, not just English.

Told when the law changes

When a rulebook update affects a report you paid for, we email you what changed and a link to re-run it free.

How it works

Four simple steps. A few minutes.

01

Share what you built

Paste a website link, pick a repo from your GitHub, or upload your code or app (APK).

02

Sign in

Google, GitHub, Apple or email. No card, and nothing to fill in.

03

We scan it, free

Your score, the top problems and what you already do right. 3 free scans a month.

04

Fix and launch

Unlock the full list of fixes. Pay once, no subscription.

Works where you build

From your repo to your AI assistant. You stay in control.

Connect GitHub, ask about your audits from your coding tools, and prove what you shipped. Nothing runs on its own: every scan starts when you click.

GitHub

Your repos, ready to scan

Sign in with GitHub and your repositories are already in SafeLaunch. No copying links.

  • Private repositories included, only the ones you pick
  • One click to scan, from your dashboard
  • Pro and Agency: check for changes since your last scan
  • Launch Fix: open every fix as a pull request
How the GitHub connection works

MCP server

Ask your AI assistant

Connect SafeLaunch to Claude, Cursor, VS Code or any MCP client and ask about your audits where you code.

  • “What should I fix first?” answered from your full report
  • Fix prompts shaped for the tool you build with
  • Read-only: it can't start scans or spend anything
  • You sign in and approve the connection yourself
Connect an AI assistant

Sign-offs

Proof for the version you ship

When a version passes, get a signed record of that exact commit or upload, with a public page anyone can check.

  • Locked to one commit, so later changes aren't covered by mistake
  • Certificate, badge and public verification link
  • Names the rulebook version it was checked against
See a sample report

No background jobs watching your code. You decide when to scan, what to fix and which version to sign off. Pull requests open only when you ask.

Coverage

54 markets. One rulebook.

Privacy, security, accessibility, consumer, AI and professional rules across six continents, read in each market's own language — versioned, cited to the article, and when a law changes, we tell you if your report is affected.

54

jurisdictions

497

mapped provisions

~3m

per audit

Every law we check

Drag to spin · every dot is land, every pulse a market we check

GDPREU AI ActEuropean Accessibility ActUnfair Commercial Practices & Unfair Terms Directivese-Commerce Directive (provider information)Product Liability Directive (2024)EU Data ActData Protection Act 2018Age Appropriate Design CodeConsumer Rights Act 2015 & Consumer Contracts Regulations 2013Gambling Act 2005revFADPDDG §5 (Impressum)LCEN (mentions légales)COPPACAN-SPAMGLBADMCA §512 (copyright safe harbour)Video Privacy Protection ActCCPA / CPRACalifornia Age-Appropriate Design Code (partly enjoined)Automatic Renewal LawCIPA (wiretapping and tracking claims)TX Rule 7.04HB 1181 (age verification for sexual material)App Store Accountability Act (SB 2420)NY RPC 7.1NY General Business Law (automatic renewal, AI companions, algorithmic pricing)Age verification for material harmful to minorsColorado ADMT law (SB 26-189, from 1 Jan 2027)Illinois AI Interview ActAutomatic Contract Renewal ActFlorida Bar 4-7Connecticut Data Privacy ActUtah Consumer Privacy ActMontana Consumer Data Privacy ActDelaware Personal Data Privacy ActNew Hampshire Privacy ActMinnesota Consumer Data Privacy ActIndiana Consumer Data Protection ActRhode Island Data Transparency and Privacy Protection ActMy Health My Data ActCASLAODAConsumer Defense CodeLFPDPPPIT Act 2000 & SPDI RulesBCI Rule 36Dark Patterns Guidelines 2023PDPAPrivacy Act 1988 (APPs)Australian Consumer LawAPPIAI Basic Act (from 22 Jan 2026)PIPLCybersecurity LawUAE PDPLSaudi PDPLNDPA 2023Thailand PDPA (B.E. 2562)Data Privacy Act 2012 (Philippines)KVKK (Law 6698)Israel Protection of Privacy LawNZ Privacy Act 2020Hong Kong PDPO (Cap. 486)Colombia Law 1581 of 2012WCAG 2.2 AAPCI DSSGDPREU AI ActEuropean Accessibility ActUnfair Commercial Practices & Unfair Terms Directivese-Commerce Directive (provider information)Product Liability Directive (2024)EU Data ActData Protection Act 2018Age Appropriate Design CodeConsumer Rights Act 2015 & Consumer Contracts Regulations 2013Gambling Act 2005revFADPDDG §5 (Impressum)LCEN (mentions légales)COPPACAN-SPAMGLBADMCA §512 (copyright safe harbour)Video Privacy Protection ActCCPA / CPRACalifornia Age-Appropriate Design Code (partly enjoined)Automatic Renewal LawCIPA (wiretapping and tracking claims)TX Rule 7.04HB 1181 (age verification for sexual material)App Store Accountability Act (SB 2420)NY RPC 7.1NY General Business Law (automatic renewal, AI companions, algorithmic pricing)Age verification for material harmful to minorsColorado ADMT law (SB 26-189, from 1 Jan 2027)Illinois AI Interview ActAutomatic Contract Renewal ActFlorida Bar 4-7Connecticut Data Privacy ActUtah Consumer Privacy ActMontana Consumer Data Privacy ActDelaware Personal Data Privacy ActNew Hampshire Privacy ActMinnesota Consumer Data Privacy ActIndiana Consumer Data Protection ActRhode Island Data Transparency and Privacy Protection ActMy Health My Data ActCASLAODAConsumer Defense CodeLFPDPPPIT Act 2000 & SPDI RulesBCI Rule 36Dark Patterns Guidelines 2023PDPAPrivacy Act 1988 (APPs)Australian Consumer LawAPPIAI Basic Act (from 22 Jan 2026)PIPLCybersecurity LawUAE PDPLSaudi PDPLNDPA 2023Thailand PDPA (B.E. 2562)Data Privacy Act 2012 (Philippines)KVKK (Law 6698)Israel Protection of Privacy LawNZ Privacy Act 2020Hong Kong PDPO (Cap. 486)Colombia Law 1581 of 2012WCAG 2.2 AAPCI DSS
ePrivacy DirectiveDigital Services ActConsumer Rights DirectiveMiCA (crypto-asset marketing)Cyber Resilience ActGeneral Product Safety RegulationUK GDPRPECROnline Safety ActDMCC Act 2024 (consumer protection)FSMA 2000 s. 21 (financial promotions)TDDDG (cookies and device access)Loi Informatique et Libertés art. 82 & CNIL cookie rulesFTC Act §5ADA Title IIIHIPAAROSCA (online subscriptions)18 U.S.C. §2257 & PACT Act (adult content and tobacco sales)TCPA (calls and texts)CalOPPAUnruh ActCalifornia AI laws (BOT Act, SB 243 companion chatbots, AI Transparency Act)Texas TDPSASCOPE Act (largely enjoined)Texas Responsible AI Governance Act (from 1 Jan 2026)NY SHIELD ActNYC Local Law 144VCDPAColorado Privacy ActBIPAHuman Rights Act AI amendment (HB 3773, from 1 Jan 2026)Florida Digital Bill of RightsHB 3 (2024) online protection of minorsOregon Consumer Privacy ActApp Store Accountability Act (SB 142)Iowa Consumer Data Protection ActNew Jersey Data Privacy ActTennessee Information Protection ActMaryland Online Data Privacy ActKentucky Consumer Data Protection ActNebraska Data Privacy ActPIPEDAQuebec Law 25LGPDDigital ECA (Law 15.211/2025)DPDP Act 2023 & DPDP Rules 2025India E-Commerce RulesIT Rules 2021 (Intermediary Guidelines)Promotion and Regulation of Online Gaming Act 2025Spam Control ActSpam Act 2003Online Safety Act 2021 (incl. social media minimum age)PIPANetwork Act (youth-harmful media)Data Security LawGenerative AI Measures & AI Content Labelling MeasuresDIFC Data Protection LawPOPIAIndonesia PDP Law (Law 27/2022)Vietnam Personal Data Protection Law (91/2025)Malaysia PDPA 2010Türkiye Law 6563 (commercial electronic messages)Israel Communications Law s. 30A (advertising messages)NZ Unsolicited Electronic Messages Act 2007Argentina Data Protection Law 25,326Chile Data Protection Law 21,719OWASP Top 10Open-source licencesePrivacy DirectiveDigital Services ActConsumer Rights DirectiveMiCA (crypto-asset marketing)Cyber Resilience ActGeneral Product Safety RegulationUK GDPRPECROnline Safety ActDMCC Act 2024 (consumer protection)FSMA 2000 s. 21 (financial promotions)TDDDG (cookies and device access)Loi Informatique et Libertés art. 82 & CNIL cookie rulesFTC Act §5ADA Title IIIHIPAAROSCA (online subscriptions)18 U.S.C. §2257 & PACT Act (adult content and tobacco sales)TCPA (calls and texts)CalOPPAUnruh ActCalifornia AI laws (BOT Act, SB 243 companion chatbots, AI Transparency Act)Texas TDPSASCOPE Act (largely enjoined)Texas Responsible AI Governance Act (from 1 Jan 2026)NY SHIELD ActNYC Local Law 144VCDPAColorado Privacy ActBIPAHuman Rights Act AI amendment (HB 3773, from 1 Jan 2026)Florida Digital Bill of RightsHB 3 (2024) online protection of minorsOregon Consumer Privacy ActApp Store Accountability Act (SB 142)Iowa Consumer Data Protection ActNew Jersey Data Privacy ActTennessee Information Protection ActMaryland Online Data Privacy ActKentucky Consumer Data Protection ActNebraska Data Privacy ActPIPEDAQuebec Law 25LGPDDigital ECA (Law 15.211/2025)DPDP Act 2023 & DPDP Rules 2025India E-Commerce RulesIT Rules 2021 (Intermediary Guidelines)Promotion and Regulation of Online Gaming Act 2025Spam Control ActSpam Act 2003Online Safety Act 2021 (incl. social media minimum age)PIPANetwork Act (youth-harmful media)Data Security LawGenerative AI Measures & AI Content Labelling MeasuresDIFC Data Protection LawPOPIAIndonesia PDP Law (Law 27/2022)Vietnam Personal Data Protection Law (91/2025)Malaysia PDPA 2010Türkiye Law 6563 (commercial electronic messages)Israel Communications Law s. 30A (advertising messages)NZ Unsolicited Electronic Messages Act 2007Argentina Data Protection Law 25,326Chile Data Protection Law 21,719OWASP Top 10Open-source licences
Use cases

Builders just like you, launching in every market

Example scenarios showing what an audit catches, market by market.

"Built my firm's site in Lovable over a weekend. SafeLaunch flagged that Texas Bar Rule 7.04 needs the site filed before launch, and that my case-results headline needed a disclaimer."
TXAustin, Texas · ExampleSolo attorney
"We run every client site through it before handover and attach the PDF to the delivery."
SGSingapore · ExampleAgency lead
"Our intake form asks about symptoms. The report flagged it as sensitive health data under the Australian Privacy Act and GDPR, and wrote the consent step for us."
AUSydney, Australia · ExampleClinic founder
"It found a Stripe secret key in my client bundle and two tables without row-level security. That alone was worth it."
CAToronto, Canada · ExampleIndie hacker
"Google Analytics was firing before consent. One prompt in Cursor and the cookie banner was done."
EUBerlin, EU · ExampleSaaS founder

See a full audit, end to end.

A Texas law-firm site, checked against Texas, US and EU rules.

Open sample report
Compared

Not another banner. Not just a security scan.

The tools you know each cover one slice. SafeLaunch checks the whole product against the law.

Security scanners

Lovable's scan, Vibe App Scanner

  • Leaked keys and open databases
  • Not covered: Privacy, cookie or accessibility law
  • Not covered: Which countries' rules you break

Banner and policy tools

Termly, CookieYes, LexVibe

  • A cookie banner
  • Policy text
  • Not covered: Whether your product follows the law
  • Not covered: Fixes to your code

SafeLaunch

One check, before you launch

  • 138 laws in 54 markets, cited
  • Real-browser cookie, Global Privacy Control and accessibility tests
  • The US laws behind most website lawsuits
  • Vulnerable and copyleft packages in your code
  • Security, AI, consumer and content rules
  • Fixes for your AI builder, and the paperwork

See detailed comparisons with Termly, OneTrust, Privisy, Vibe App Scanner and more.

Pricing

Start free. Pay only for the full audit.

Every account gets 3 free scans a month, no card needed. Liked what you saw? Pay once for the full audit. No subscription.

Start here

Free scan

See where you stand.

$0

3 scans every month · no card

Start a free scan
  • What your product is and does, in plain words
  • Which legal pages you have, and which are missing
  • Red, amber or green for each area of the law
  • The most serious problems, and what you're doing right
  • Website, GitHub repo, or a file or app (APK)

Launch Report

Know what's wrong.

$49/audit

one-time

Get started

Starts with a free scan · pay after, if you want

  • Every problem we find, in plain words
  • All 54 countries and states, every US state privacy law included
  • A score for each market
  • What to change, step by step
  • PDF download
  • An email if a law change affects your report
  • 5 extra free scans this month

Launch Fix

Fix it and prove it.

$149/audit

Best value · one-time

Get started

Starts with a free scan · pay after, if you want

  • Everything in Launch Report
  • The exact code change for every problem
  • Copy-paste prompts for Lovable, Cursor, Claude and more
  • Draft privacy, cookie and terms pages
  • Patch file and version-locked sign-off
  • 1 free re-check within 30 days
  • 10 extra free scans this month

Every market included · Re-check $29 · Upgrade for the difference · Compare plans

FAQ

Questions, answered.

Still unsure? Run a free scan and see your score first: 3 a month, no card needed.

Start a free scan

No. SafeLaunch is not a law firm. We map your product against published laws and standards and show where it appears compliant, where it does not, and what to change. For advice on your situation, talk to a licensed lawyer — your report makes that conversation faster and cheaper.

A free account, then your website address, a public GitHub link or a .zip of your code.

Code is processed only to produce your report. We keep the findings and a fingerprint of the version (file names and hashes), not your source; the short excerpts our AI reads are deleted as soon as the report is written (if the AI analysis of an upload fails, they are kept up to 7 days so you can retry it, then deleted). Zip uploads are unpacked in your browser and only text source files are sent. Secrets we find are redacted.

Anything that produces a website or a codebase: Lovable, Bolt, Replit, v0, Cursor, Claude Code, Webflow, WordPress, Shopify or hand-written code. Fix prompts are written for the builder we detect — Lovable, Cursor, Claude Code, Bolt, v0, Replit or Windsurf — each with a "done when" check.

You need a clear answer before launch, not another subscription. Pay once per scan. Re-check your next version for $29, or free once within 30 days with Launch Fix.

Yes. Our MCP server connects SafeLaunch to Claude, Claude Code, Cursor, VS Code and other MCP clients. Your assistant can list your audits, read findings from reports you've unlocked, fetch fix prompts and check sign-offs. It's read-only: it can't start scans or spend anything. Setup is on the MCP page in the footer.

Yes. Move from Launch Report to Launch Fix on the same scan and pay only the $100 difference.

We cover 54 markets today, including every US state with a comprehensive privacy law, the EU with Germany and France, Southeast Asia and Latin America, and we add more each rulebook release. Every report states the rulebook version it was checked against, and if a later update affects a report you paid for, we email you.