Lokker offers a privacy intelligence platform that continuously scans the network activity of web properties across all consent states, identifying trackers, transmitted identifiers, and compliance gaps. It provides risk scores, legal‑grade reason codes, and evidence‑ready reports, while its Guardian component enforces real‑time outbound request policies to block non‑compliant data flows. Additional tools such as Consent Validator, a Partner API, and Privacy Academy support automated testing, integration, and team upskilling for enterprise privacy and compliance teams.
Funding
Funding not disclosed
Founders
Product
Problem
Organizations with many web properties struggle to verify that consent management platforms and tag managers actually prevent unauthorized data collection, leading to hidden third‑party trackers, regulatory exposure, and costly remediation.
Solution
Lokker provides a privacy intelligence platform that continuously scans the network layer of every website, across all consent states, to reveal which trackers fire, what identifiers are transmitted, and whether consent signals (including Global Privacy Control) are honored. The platform assigns a risk score (0–1000) and maps findings to legal‑grade reason codes, delivering evidence‑ready reports for privacy, legal, and underwriting teams. Real‑time enforcement is achieved with Guardian, a JavaScript snippet that intercepts outbound requests and applies granular trust‑rule policies at the edge, blocking non‑compliant data flows before they leave the browser. Complementary tools—Consent Validator for automated consent‑state testing, Partner API for integrating scans into underwriting workflows, and Privacy Academy for upskilling teams—enable organizations to monitor, validate, and remediate privacy risks at portfolio scale.
Target Audience
Primary customers are enterprise privacy and compliance teams, legal and defense counsel, insurance underwriting groups, and web‑risk analysts responsible for large portfolios of web properties.
Features
- Privacy Edge scans every page, aggregates thousands of network events, and generates a 0–1000 risk score with severity‑tiered reason codes linked to GDPR, CCPA/CPRA, HIPAA, and other regulations
- Guardian JavaScript enforces outbound request policies in real time, with payload‑aware blocking, edge deployment, and sub‑millisecond overhead
- Consent Validator automates testing of no‑interaction, accept, reject, and GPC states across sites, prioritizing remediation with P1‑P3 guidance
- Partner API enables programmatic onboarding, scheduled scans, risk‑score retrieval, and event‑driven notifications for underwriting and risk platforms
- Evidence exports (PDF, Excel, JSON) and audit trails tailored for privacy engineers, legal counsel, and insurance underwriters
- Privacy Academy offers role‑based training from fundamentals to advanced risk analysis, supporting continuous upskilling of cross‑functional teams