Why LexLint?

LexLint is built by UnGovr, a nonprofit transparency platform that documents governments across 200+ countries. Working at that scale means crawling public sites, processing recordings and publishing under many legal regimes at once, so UnGovr had to know, continuously, which AI, scraping, privacy, cybersecurity, communications, content-moderation, product-liability, digital-accessibility, digital-identity, cloud-service, export-control, age-gating and reuse law applied where. LexLint is the tool it built to lint its own work: it checks what an app declares against all thirteen, and cites the instrument behind every finding. Now any coding agent can use it.

Who builds it

Sean McDermott

Sean McDermott

Co-Founder and CEO, UnGovr

Sean built the law library for UnGovr's own needs: a researched, cited record of the law that governs a platform crawling and publishing government records in 200+ countries. LexLint is that library turned into a tool any developer's agent can call. He spent 20 years at Akamai helping build its CDN and bot protections, and is now retired from that side of the industry.

Neil Barlow

Neil Barlow

Chief Security Officer, UnGovr

Neil ran security programs at Meta, Capital One, NYSE Euronext, HP and Intel over two decades. In LexLint's law library and tooling he saw what security already has: a CVE database, and the vulnerability scanners that read it. Law that reaches software can be cataloged, versioned and scanned for in the same way, and that is the product he and Sean set out to build.

The rest of the team is on the UnGovr people page. They are engineers and operators rather than lawyers, which is worth knowing before you read a finding.

Advisory board

LexLint is forming an advisory board. Its initial group already includes industry leaders from technology, law and cybersecurity, because every finding has a reader in each of the three.

  • Technology The engineer who fixes it.
  • Law The lawyer who weighs it.
  • Cybersecurity The security team, which already runs scanners built this way.

Before the end of 2026 the group becomes a formal advisory board, and its members will be named on this page. Their advice shapes what LexLint becomes; it does not make a finding legal advice.

What it is, in one paragraph

A lint that gives legal information, not a legal assessment. Findings are research summaries of public legal sources, with citations and as-of dates. They are not legal advice, they create no attorney-client relationship, and they are never authorization to access any system. The passing state is "no basic issues found", never "compliant". LexLint is in beta. Counsel should start at LexLint for legal teams, and the words this site uses are defined in the glossary, in United States legal usage first.

How current the law data is

The legal news wire is swept every day across every jurisdiction in the law library, and a story that outruns what we hold opens a research request rather than writing a law row by itself. The law library is rebuilt and republished every day. Every law carries the date it was last checked against its sources, and the footer of every page gives the range, oldest check included, because a heartbeat that only ever shows its best number is not a heartbeat. How LexLint decides what counts as law, and what sits around it, is on the methodology page.

AI and this site

LexLint does not need access to your code. Your own agent reads your code where it lives and writes the declaration, and that declaration is the whole input: the lint is deterministic, a rule-based match against a researched law library, never a model reasoning about the law. When UnGovr reads a company's public website for it instead, that reading is AI-assisted and still sees no code.

AI does help build what the lint reads. The law library is researched with AI assistance, and citations are verified against primary sources. The pages on this site, including the law notes, are drafted with AI assistance under the direction of UnGovr staff and checked against primary sources. Where a note has had a substantive editorial review, the note says so and gives the date. UnGovr holds editorial responsibility for every page; write to hello@ungovr.org. Illustrations on the Scraping Brief's long reads are generated with AI and carry that claim in their file metadata. The News page carries publishers' own headlines: AI selects the stories and resolves their jurisdictions, it does not write them. This section is the disclosure several jurisdictions in the law library now require of AI-assisted publishing, and a lint should pass its own checks. How every UnGovr and LexLint site is made is on How this site is made.

Terms and privacy

LexLint is an UnGovr service: the UnGovr terms of service and privacy policy apply to all of it, including the MCP server and the UnGovr key a lint runs on. That key passes through to the UnGovr Open Data API on each call and LexLint never writes it down; the API keeps a request log of its own, set out at https://www.ungovr.org/open-data/api-keys, holding which collection was asked for and a one-way hash of the key, never which jurisdiction you looked up. Apart from the records listed below, LexLint stores nothing you have not deliberately sent it.

  • Collected automatically: which plugin version you are running. Forwarded with the preflight LexLint already makes and stored on its own, in a place that holds nothing but version numbers, so we can tell whether retiring an old tool name would break anyone (we retired three names in August 2026 without being able to check). A version string and nothing else, with no record of what you linted.
  • Collected automatically: a record of each request to the LexLint server. What the request was (which tool, or a step of connecting), which coding tool sent it (Claude Code, Codex, Cursor or another, never the model), what kind of credential it carried and whether it succeeded, plus the country and region Cloudflare reports for the connection. That is where the connection came from, which for a VPN or a cloud-hosted agent is a data center, and it plays no part in which laws a lint applies. No IP address, key or account, and nothing from what you linted. Kept for three months, with daily totals after that.
  • Sent only when you choose: feedback and lint runs. /lexlint:lexlint-feedback, which you run yourself when you have something to tell us, shows you the exact text first and sends only what you approve, recorded against your account so we can write back. A lint run reaches the portal only at the close of the run that produced it, after your agent has shown you exactly what it contains and you have approved the upload, and it is kept against your UnGovr account, never against a session or a repository.
  • Deleting and exporting. You can delete a run or delete a project at any time from the portal: a deleted run is removed immediately and its stored payload purged within 30 days, and a deleted project goes at once with everything under it. You can also export a project's own runs as JSON. A run can be shared by an unguessable, expiring link that works without signing in, and revoking it deletes the link immediately, not merely marks it inactive. A trial key's runs move to your account when you sign in (an account is free) and paste the key at my.lexlint.io/claim; to have a trial run deleted without an account, write to hello@ungovr.org quoting the share link and we delete the run, or the link alone, within one working day.
  • Collected by this website: page views. The LexLint website counts page views with Cloudflare Web Analytics, which sets no cookies, and with Google Analytics, which sets cookies and sends information about the visit to Google. Visitors in the European Economic Area or the United Kingdom are asked first and Google Analytics loads only if they accept; it never loads for a browser that sends a Global Privacy Control signal. We also count page views by the name of the network a visit comes from, as the privacy policy describes.
  • Collected by this website: your visits across LexLint. A cookie of our own, set by our servers, links your visits across LexLint websites and, when you sign in, take a trial key from our website or subscribe to our weekly email, to that account or subscription, as the privacy policy describes. We keep a record of each page view, your visit history, for 25 months, and the identifier is never shared with anyone. Whether the cookie is set follows the same choice as Google Analytics, in the item above. Forgetting this browser deletes its visit history and removes the cookie; a new identifier starts with your next visit, unless Global Privacy Control is on or, where you are asked, you decline in the notice.
    Done: the visit history for this browser is deleted.

LEM

Lem, a small boxy robot with a large LEM name plate across their front, seen from the chest up against a bare grey wall, head turned slightly to one side, the amber visor lit.

LEM is a fictional robot, the character in the illustrations on the Scraping Brief's long reads. LEM stands in for the UnGovr crawler, which is real, and every situation LEM is drawn into is one the crawler has met: the sign on the lawn, the padlock on the gate, the contract that will not stop unrolling. There are more pictures of LEM on ungovr.org.