PII Radar - Privacy audit for legacy PHP
PII Radar finds where a legacy PHP application stores, logs and leaks personal data, in minutes instead of weeks. Deterministic scanners read the database schema and the code. Then a Symfony AI agent, helped by a Hugging Face NER model and a RAG index of the codebase, confirms each field, traces its flows (collected, stored, logged, sent to a third party) and flags security issues with ready-to-apply Symfony fixes. The result is a privacy map, a draft data-processing register for Quebec’s Law 25 or the GDPR, and an MCP server, so any coding assistant can ask “where does the patient’s email live?” or “am I allowed to log this field?” before writing a line. The LLM only ever sees metadata, never personal values, and the whole stack can run locally with Ollama.