[DPOLens]
DPOLens is an open-source MCP server that gives your AI coding assistant your
organisation's privacy policies and the law, with exact, versioned citations.
[CI]
[Release]
[Licence: Apache-2.0]
Docs ·
Get started ·
Community version ·
Supported laws ·
Contribute
Get started
DPOLens runs on your own servers with Docker Compose, so your policies stay there.
Get started takes you from the first command to your
first question, and Connect your AI assistant sets up Claude
Code, Codex, Cursor and GitHub Copilot in VS Code.
To try it first, add the community version to your AI assistant: public privacy law only, with
no sign-in and no token.
[Install in Cursor]
[Install in Copilot in VS Code]
[Connect in Claude]
For Claude Code, Codex, ChatGPT and the others, the community version's page
has the line to add.
What's inside
- An MCP server with four tools to search and read the law and your policies, quoting each
clause word for word with its key, its version and the days it applies, including a duty that
starts later. The MCP server
- Laws as packs, each from its official source: GDPR and the UAE PDPL today, and more as
their packs are released. Supported laws
- Your own policies, from Word or Markdown files, read into clauses without an AI model and
published as versions that never change. Your own policies
- Search by words and by meaning, in English and Arabic, on the CPU, with no LLM and no API
key.
- A dashboard and two logs: a governance log that is append-only and hash-chained, and every
question asked, with personal data taken out. The governance log
- An HTTP API, the same one the dashboard and the MCP server use.
The HTTP API
Measured
- Search: on held-out questions, the clause the guidance points at is among the top five
answers 73% of the time for GDPR, and 53% for the UAE's law.
How it was measured
- Use: Claude Code with the plugin searched before writing code in 36 of 36 runs of tasks
that touch personal data, and in 3 of 45 runs of tasks that do not.
How it was measured
Contributing
Law packs are the contribution that matters most, and CONTRIBUTING.md says
what one needs. A security problem is reported privately, as SECURITY.md says.
Licence
The code is Apache-2.0, with DCO sign-off and no CLA. packs/ carries its own licence: the law
text keeps its source's, and the structure around it is CC-BY-4.0.