Vault JS is an independent, third-party privacy compliance monitoring platform for enterprise web, mobile, and Connected TV (CTV) properties. It continuously tests what your properties actually do in the wild, the way regulators and plaintiff's attorneys do, detecting consent violations, rogue tracking scripts, pre-consent data collection, and regulatory non-compliance across GDPR, CCPA/CPRA, CIPA, HIPAA, and VPPA. Nothing is installed on the customer's site or app.
A consent management platform (CMP) is the control; Vault JS is the audit. Vault JS verifies whether the banner and consent settings actually worked on every page, app screen, and CTV session, and documents the result.
On mobile, Vault JS goes beyond static code analysis. It runs the live iOS and Android app through real user journeys (install, first open, consent prompt, login, browse, purchase) and observes every SDK and network call as it happens, including pre-consent SDK traffic, what each SDK transmits, and how the third-party footprint drifts from release to release. The same runtime approach covers CTV apps, where VPPA and state-law exposure is highest and almost nobody is looking.
Vault JS turns global privacy laws into a clear technical to-do list: it finds violations first, tells engineering teams exactly what to fix, and produces audit-ready evidence that holds up against regulators and class-action plaintiffs. Its pre-built Control Library maps regulatory frameworks to digital properties, its automated Gap Analysis delivers prioritized remediation roadmaps, and its AI-maintained Privacy Libraries classify more than 500,000 cookies and 10,000 AdTech vendors.
Built for privacy counsel, general counsel, marketing operations, and security/GRC teams at multi-property enterprises in retail, healthcare, gaming, media and streaming, and financial services.