# DPOLens

> An open-source, self-hosted MCP server that gives AI coding assistants your privacy policies and the law, so they cite the exact clause while code is written. Laws come as packs, GDPR and the UAE PDPL today.

## Docs
- [Introduction](https://dpolens.com/docs/introduction.md): DPOLens is an open-source, self-hosted MCP server that gives AI coding assistants your organisation's privacy policies and the privacy law that applies to it, so they can cite the exact, versioned clause while code is being written.
- [Get started](https://dpolens.com/docs/get-started.md): Run DPOLens on your own machine with Docker, connect your AI assistant, and ask your first question.
- [Connect your AI assistant](https://dpolens.com/docs/connect.md): Connect Claude Code, Codex, Cursor, GitHub Copilot in VS Code or any other MCP client to a DPOLens instance, with its URL and your personal access token.
- [Your own policies](https://dpolens.com/docs/policies.md): How DPOLens reads your organisation's policies into clauses with keys, how a draft becomes a policy in force, and what happens to a citation when a policy changes.
- [Laws and their versions](https://dpolens.com/docs/laws.md): How each law in DPOLens is a versioned pack, how to load a newer version of a law, and how to check a pack archive.
- [Configuration](https://dpolens.com/docs/configuration.md): Every setting of a DPOLens instance, how to change one, and what the worker does.
- [Running an instance](https://dpolens.com/docs/running.md): What machine a DPOLens instance needs, what it connects to, how to run it behind a proxy or with no internet, what it writes to its logs, and how to back it up and restore it.
- [Releases and upgrades](https://dpolens.com/docs/releases.md): What a DPOLens release publishes, how to choose the version an instance runs, how to upgrade and go back, and how to check that an image was built from the DPOLens repository.
- [The MCP server](https://dpolens.com/docs/mcp.md): The four tools and two prompts the DPOLens MCP server gives your AI assistant, who it says is asking, what it records, and how to run it.
- [The HTTP API](https://dpolens.com/docs/api.md): The DPOLens HTTP API: how to authenticate, every route from search to the governance log, and the errors and limits they share.

## Laws
- [Supported laws](https://dpolens.com/laws): every law, its version and source
- [GDPR: General Data Protection Regulation](https://dpolens.com/laws/gdpr.md): the privacy law of the European Union, version 2026.1, 99 articles and 173 recitals, each with a Markdown copy
- [UAE PDPL: Federal Decree by Law No. (45) of 2021 Concerning the Protection of Personal Data](https://dpolens.com/laws/uae-pdpl.md): the privacy law of the United Arab Emirates, version 2026.1, 31 articles, each with a Markdown copy

## Blog
- [Does Claude Code actually use an MCP server? I measured it](https://dpolens.com/blog/does-claude-code-use-it.md): I gave Claude Code 30 tasks in a small shop app, none of them mentioning privacy. It searched DPOLens before writing code in 36 of 36 runs that touched personal data, and in 3 of 45 that didn't.
- [A reranker made my legal search worse](https://dpolens.com/blog/reranker-made-search-worse.md): I added a cross-encoder reranker to DPOLens's hybrid search and measured it on 30 held-out GDPR questions. It brought recall@5 down from 0.77 to as low as 0.43, so DPOLens ships without one.

## Community version
- [DPOLens, hosted for anyone](https://dpolens.com/community): add https://mcp.dpolens.com to an AI assistant, with no sign-in and no token; public law only

## Project
- [Source code, README and releases](https://github.com/alkhatibdev/dpolens)
- [Security policy](https://github.com/alkhatibdev/dpolens/blob/main/SECURITY.md)