What Lintsure looks for in your code

16 rules, each tied to the controls it relates to in the EU AI Act, GDPR, SOC 2 and ISO 27001. All are in Beta.

Personal data

Personal data written to logsGDPR · SOC 2 · ISO 27001
Personal data sent to an analytics or tracking toolGDPR · SOC 2 · ISO 27001
Personal data or tokens in a URLGDPR · SOC 2 · ISO 27001

Secrets and encryption

Secret or private key committed to sourceSOC 2 · ISO 27001 · GDPR
Data sent over plain HTTPSOC 2 · ISO 27001 · GDPR
Passwords hashed with a weak or fast algorithmGDPR · SOC 2 · ISO 27001
TLS certificate checks turned offSOC 2 · ISO 27001 · GDPR

Web and app security

SQL query built from stringsSOC 2 · ISO 27001 · GDPR
API open to requests from any websiteSOC 2 · ISO 27001
Session cookie without Secure or HttpOnlySOC 2 · ISO 27001
Debug mode switched on in codeSOC 2 · ISO 27001

AI

AI makes a decision about a person with no human check in the codeEU AI Act · GDPR
AI call with no record kept in this fileEU AI Act · SOC 2
AI told to hide that it is an AIEU AI Act
AI-generated images, audio or videoEU AI Act
Emotion recognition or biometric categorisationEU AI Act · GDPR

Rule mappings are our own reading of public texts and are in Beta until a qualified compliance professional reviews them. Not legal advice. Disclaimer