Why LexLint?
LexLint is built by UnGovr, a nonprofit
transparency platform that documents governments across 200+
countries. Working at that scale means crawling public sites, processing
recordings and publishing under many legal regimes at once, so UnGovr had to
know, continuously, which AI, scraping, privacy, cybersecurity, communications,
content-moderation, product-liability, digital-accessibility, digital-identity, cloud-service, export-control, age-gating and reuse law applied where. LexLint is the tool it
built to lint its own work: it checks what an app declares against all thirteen, and
cites the instrument behind every finding. Now any coding agent can use it.
Who builds it
Co-Founder and CEO, UnGovr
Sean built the law library for UnGovr's own needs: a researched, cited record
of the law that governs a platform crawling and publishing government records
in 200+ countries. LexLint is that library turned into a tool
any developer's agent can call. He spent 20 years at Akamai helping build its
CDN and bot protections, and is now retired from that side of the industry.
Chief Security Officer, UnGovr
Neil ran security programs at Meta, Capital One, NYSE Euronext, HP and Intel
over two decades. In LexLint's law library and tooling he saw what security
already has: a CVE database, and the vulnerability scanners that read it. Law
that reaches software can be cataloged, versioned and scanned for in the same
way, and that is the product he and Sean set out to build.
The rest of the team is on the
UnGovr people page. They are engineers
and operators rather than lawyers, which is worth knowing before you read a finding.
Advisory board
LexLint is forming an advisory board. Its initial group already includes industry
leaders from technology, law and cybersecurity, because every finding has a reader
in each of the three.
- Technology The engineer who fixes it.
- Law The lawyer who weighs it.
- Cybersecurity The security team, which already runs scanners built this way.
Before the end of 2026 the group becomes a formal advisory board, and its members
will be named on this page. Their advice shapes what LexLint becomes; it does not
make a finding legal advice.
What it is, in one paragraph
A lint that gives legal information, not a legal assessment. Findings are research summaries of public
legal sources, with citations and as-of dates. They are not legal advice, they create
no attorney-client relationship, and they are never authorization to access any
system. The passing state is "no basic issues found", never "compliant". LexLint is
in beta. Counsel should start at
LexLint for legal teams, and the
words this site uses are defined in the glossary,
in United States legal usage first.
How current the law data is
The legal news wire is swept every day across every jurisdiction in the law library, and
a story that outruns what we hold opens a research request rather than writing a law
row by itself. The law library is rebuilt and republished every day. Every law carries the
date it was last checked against its sources, and the footer of every page gives the
range, oldest check included, because a heartbeat that only ever shows its best
number is not a heartbeat. How LexLint decides what counts as law, and what sits
around it, is on the methodology page.
AI and this site
LexLint does not need access to your code. Your own agent reads your code where it lives
and writes the declaration, and that declaration is the whole input: the lint is
deterministic, a rule-based match against a researched law library, never a model
reasoning about the law. When UnGovr reads a company's public website for it instead,
that reading is AI-assisted and still sees no code.
AI does help build what the lint reads. The law library is researched with AI assistance,
and citations are verified against primary sources. The pages on this site, including
the law notes, are drafted with AI assistance under the direction of UnGovr staff and
checked against primary sources. Where a note has had a substantive editorial review,
the note says so and gives the date. UnGovr holds editorial responsibility for every
page; write to hello@ungovr.org. Illustrations on
the Scraping Brief's long reads are
generated with AI and carry that claim in their file metadata. The
News page carries publishers' own headlines: AI
selects the stories and resolves their jurisdictions, it does not write them. This
section is the disclosure several jurisdictions in the law library now require of
AI-assisted publishing, and a lint should pass its own checks. How every UnGovr and
LexLint site is made is on
How this site is made.
Terms and privacy
LexLint is an UnGovr service: the
UnGovr terms of service and
privacy policy apply to all of it,
including the MCP server and the UnGovr key a lint runs on. That key
passes through to the UnGovr Open Data API on each call and LexLint never writes it
down; the API keeps a request log of its own, set out at
https://www.ungovr.org/open-data/api-keys,
holding which collection was asked for and a one-way hash of the key, never which
jurisdiction you looked up. Apart from the records listed below, LexLint
stores nothing you have not deliberately sent it.
- Collected automatically: which plugin version you are running.
Forwarded with the preflight LexLint already makes and stored on its own, in a
place that holds nothing but version numbers, so we can tell whether retiring an
old tool name would break anyone (we retired three names in August 2026 without
being able to check). A version string and nothing else, with no record of what
you linted.
- Collected automatically: a record of each request to the LexLint server.
What the request was (which tool, or a step of connecting), which coding tool sent it
(Claude Code, Codex, Cursor or another, never the model), what kind of credential it
carried and whether it succeeded, plus the country and region Cloudflare reports for
the connection. That is where the connection came from, which for a VPN or a
cloud-hosted agent is a data center, and it plays no part in which laws a lint
applies. No IP address, key or account, and nothing from what you linted. Kept for
three months, with daily totals after that.
- Sent only when you choose: feedback and lint runs.
/lexlint:lexlint-feedback, which you run yourself when you have something to
tell us, shows you the exact text first and sends only what you approve, recorded
against your account so we can write back. A lint run reaches the portal only at
the close of the run that produced it, after your agent has shown you exactly what
it contains and you have approved the upload, and it is kept against your UnGovr
account, never against a session or a repository.
- Deleting and exporting. You can delete a run or delete a project
at any time from the portal: a deleted run is removed immediately and its stored
payload purged within 30 days, and a deleted project goes at once with everything
under it. You can also export a project's own runs as JSON. A run can be shared by
an unguessable, expiring link that works without signing in, and revoking it
deletes the link immediately, not merely marks it inactive. A trial key's runs
move to your account when you
sign in (an account is
free) and paste the key at my.lexlint.io/claim;
to have a trial run deleted without an account, write to
hello@ungovr.org quoting the share link and
we delete the run, or the link alone, within one working day.
- Collected by this website: page views. The LexLint website
counts page views with Cloudflare Web Analytics, which sets no cookies, and with
Google Analytics, which sets cookies and sends information about the visit to
Google. Visitors in the European Economic Area or the United Kingdom are asked
first and Google Analytics loads only if they accept; it never loads for a
browser that sends a Global Privacy Control signal.
We also count page views by the name of the network a visit comes from, as the
privacy policy describes.
- Collected by this website: your visits across LexLint.
A cookie of our own, set by our servers, links your visits across LexLint websites and,
when you sign in, take a trial key from our website or subscribe to our weekly email, to
that account or subscription, as the
privacy policy describes. We keep a record
of each page view, your visit history, for 25 months, and the identifier is never shared
with anyone. Whether the cookie is set follows the same choice as Google Analytics, in the
item above. Forgetting this browser deletes its visit history and removes the cookie; a
new identifier starts with your next visit, unless Global Privacy Control is on or, where
you are asked, you decline in the notice.
Done: the visit history for this browser is deleted.
LEM
LEM is a fictional robot, the character in the illustrations on the Scraping
Brief's long reads. LEM stands in
for the UnGovr crawler, which is real, and every situation LEM is drawn into is one
the crawler has met: the sign on the lawn, the padlock on the gate, the contract
that will not stop unrolling. There are more
pictures of LEM on ungovr.org.