A tool for looking, built not to be seen

Privatrol examines other organisations, so it is built to keep your address out of it, to stay passive unless told otherwise, and to keep what it collects on your server.

Self-hosted

You install it on your own server. The evidence, findings and reports it makes are stored there.

Every query through a VPN exit

Lookups leave through a VPN exit, not from your own address. Where two exits are available, residency checks use two in different geographies and require them to agree.

Egress fails closed

If the VPN is down, queries stop. Nothing falls back to your own connection.

Passive by default

It collects public information. It does not scan, intrude or exploit.

Active only with permission

An active check is made only with the target's written permission.

Bring your own AI provider

The analysis uses the provider and key you set. Evidence sent for analysis goes to that provider, under your own agreement with it.

What it keeps

Privatrol keeps what a dive collects, the findings, the law-data results and the reports in its own database on your server: public-source evidence about the organisations you look at, including names and email addresses of people who work there. You decide who can see it and how long it stays, and you are responsible for it under the privacy laws that apply to you.

API keys for sources and for your AI provider are stored encrypted on the server.

What it does not see

Privatrol does not read contracts, and it does not sign in to the organisations it looks at. Residency findings are potential issues seen from outside, each with the document to ask for. The law data is checked periodically and is not legal advice.

What we hold about you

Only the email you send us, such as a request for an invitation or a bug report. See the privacy notice.

Reporting a vulnerability

If you find a security problem in Privatrol, please write to [email protected] with the details, and give us a reasonable time to fix it before you tell anyone else. We will acknowledge your report and tell you what we do about it.