Spencer security and privacy compliance platform

AI based security/privacy problem detection and dynamic analysis platform. The detection content covers multiple dimensions such as privacy policy detection, personal information collection and use detection, and user rights protection, which can accurately identify the risk points of app violations and deeply explore the source of risk. Help enterprises to complete the self inspection of App privacy compliance efficiently and cheaply, and give early warning of privacy violation risks.

Upload detection
Help Documents
  • Core advantages
  • Product Functions
  • Application scenarios
  • Industry solutions
  • Customer Stories
  • Test basis

Product advantages

Standard advantages
Technical advantages
Product advantages
Cooperation advantages
Service advantages
Standard advantages

Depth alignment policies and regulations

The professional legal team closely followed the national policies and regulations to achieve a deep alignment with the relevant laws and regulations, such as the Identification Method for Illegal Collection and Use of Personal Information by App, the national standard GB/T35273 Personal Information Security Specification for Information Security Technology, and the Network Security Law of the People's Republic of China, and made a corresponding analysis on the collection and use of personal information by App item by item.

Product Functions

Special privacy detection

Benchmarking the national/industrial standards issued and implemented by the country, the legal concept is implemented into the real running behavior of the app, and through AI cloud mobile phones to simulate the real scenarios of the app running in different environments, the risk behavior of illegal collection of personal information in the running process of the app is monitored in real time, so that privacy risk items can be easily found and solved.

Privacy compliance detection

The privacy compliance detection is based on AI automatic detection and AI auxiliary detection capabilities, and carries out comprehensive and efficient detection and analysis on privacy policy content, personal information collection and use, user rights protection and other aspects to judge their compliance. Output comprehensive and high-quality risk assessment reports to help enterprises monitor the risk of violations in an all-round way.

Expert mode

It provides multi-dimensional compliance detection capabilities such as privacy policies, personal information collection types, third-party SDKs, product privacy design integrity, permission use behavior, data security, etc., as well as automated identification of violations of privacy behavior in different operating environments, which is an important basis for judging App privacy compliance. And based on the application traffic monitoring scheme of VPN service technology, it automatically analyzes whether the App uploads personal sensitive information in the process of network data transmission, and realizes positioning to specific services.

Permission analysis

Upload APK SDK to immediately detect the application and use of sensitive permissions, which can accurately identify the risk of excessive application permissions, redundant permissions, code use location and other permission calls, and judge the rationality of the use of sensitive permissions. In addition, it can also detect the third-party SDKs integrated in the App and their application permissions, so as to easily solve the third-party SDK compliance problem.

Security Services

Based on the powerful multi engine security detection system vulnerability detection engine, it provides customers with fast, efficient and comprehensive security monitoring services, and discovers the potential risks of the app in advance for safe launch.

Application scenarios

  • Regulators

    It can meet the detection demand of high concurrency, and the automated standardized detection replaces the traditional manual screening, so as to solve the problems of heavy manual screening tasks, inconsistent standards, and high miss rate. Maximize the reduction of labor and time costs, and can accurately and comprehensively discover the problems of App privacy violations.

  • Application market

    Provide customized interfaces with efficient parallel processing task clusters, and accurately locate risks without destroying the original operating framework and platform size. Implement management responsibility for the apps launched on the platform, strictly implement the launch audit process, find illegal apps and deal with them in a timely manner.

  • App developer

    In combination with the characteristics of the enterprise and the regulatory requirements of the whole industry, SAAS services are used to provide necessary security protection for the product matrix of the enterprise, and a comprehensive and efficient privacy compliance monitoring and management system is established. One stop solution to corporate App matrix privacy risk governance. Avoid public opinion or compliance risks caused by the flow of problematic products to the market, and provide a strong guarantee for good reputation and healthy development of enterprises.

  • App Developer

    Automatically detect the macro status of sensitive permission application and use of apps and third-party SDKs, and accurately locate problem scenarios and problem code locations. Multidimensional evaluation of the integrity of personal information protection for the collection, use, storage and transmission of privacy data.

Industry solutions

Education industry
Financial industry

Service Overview

In order to ensure that the education APP meets many compliance requirements, Spencer provides one-stop compliance testing services in terms of content compliance, advertising compliance, personal information security and security assurance.

We can provide

  • Content compliance: In order to ensure that education APP meets many compliance requirements, Spencer provides one-stop compliance testing services from content compliance, advertising compliance, personal information security and security assurance.
  • Advertising compliance: Education APP provides the recognition ability of third-party advertising SDK for the strict requirements of advertising content.
Education industry

Customer Stories

Assist a live broadcast app to re launch

A live broadcast app with a DAU scale of 120000 has been taken off the shelf by relevant departments, and needs to be rectified and re launched within a time limit; Spencer cloud delivery, assist in detecting violations and completing rectification, output rectification report to CNAAC, and successfully re launch.

Assist a short video app in efficient self inspection

A short video app with a DAU scale of 300 million needs to efficiently identify and deal with the compliance risks of internal apps within the group; Spencer cloud delivery, export through the standardized interface of raw data detection, and integrate compliance detection into the App detection process in the form of plug-ins, making the App launch process safer and more efficient.

Assist regulators to carry out special governance of apps

1. The regulatory authority should carry out in-depth monitoring of the national app security, efficiently find the illegal apps in the Android market, and safeguard the legitimate rights and interests of citizens; Spencer provides API full-automatic batch detection and in-depth detection capabilities. Through full-automatic batch detection, it can efficiently capture potentially risky apps to complete the preliminary screening, and then the auditors can conduct in-depth detection on the focused apps to identify the risk of violations and retain the certificate information.

Test basis