Vetly — dependency due-diligence for founders

The problem

Five documents nobody reads

Each one is a latent liability — until a questionnaire, fundraise, or C&D makes it expensive.

📜

Terms of Service

Cache? Resell? Train on it? Compete?

🚫

Acceptable use

Bans & lawsuits (Google v. SerpApi).

🔐

Data terms

PII to an unvetted sub-processor. GDPR/CCPA.

⚖️

OSS licenses

AGPL copyleft in your private code.

💸

Pricing fine print

Overage cliffs, auto-tier, lock-in.

🕷️

Scraping / CFAA

Bot-circumvention = DMCA exposure.

How it works

One command. Sixty seconds.

Scan

Reads your manifests. Infers how each API is used.

Triage

Matches the fine print. Ranks by priority.

Advise

Plain-English. Sourced. Calm — not scary.

vetly scan ./part-classifier

  Points to review  1 address first · 2 look into soon · 1 plan
  ● Address first  Bypassing bot protection (DMCA anti-circumvention)
     why: deps include curl_cffi, cloakbrowser — the theory in Google v. SerpApi
     do:  use an official API / data license   §1201
  ● Look into soon Stripe — PII / sub-processor   ·   ● Plan OpenAI — outputs can't train rivals

What it catches

One job, done deeply: the legal layer of your stack

Not another security or cost scanner — those have giants. Vetly reads the contractual fine print everyone else skips: every clause that creates a legal, license, or data-rights obligation, ranked by priority.

RedistributionCaching limitsAI trainingCompete clauses Rate-limit / AUPAttributionPII / sub-processorOSS license Scraping / CFAAPricing trapsLock-inLiability

Why Vetly

More than a one-off prompt

Capability	One-off prompt	Vetly
Knows how your code uses each API	—	✓
Tracks when terms change	—	✓
Portfolio across deps & clients	—	✓
Exact clause + precedent	partial	✓
Runs in CI / Claude Code	—	✓
Code stays on your machine	—	✓

For counsel & vCISOs

One heatmap across every client

Newest scan per client, by priority. White-label brief in a click.

Client

Address first

Look soon

Plan

Providers

Acme Fintech

plaid

Northwind AI

openai, pinecone

Mapleleaf SaaS

stripe, supabase, segment

Pricing

Start free. Pay when it earns it.

Free

Try any repo, no card

Analyze

1 project
Full legal triage + risk grade
GitHub + local folder
Community support

Questions

Is this legal advice?

No — informational triage. It quotes the clause and says when to look closer; it never says "you're cleared."

Do you store my code?

No. Local & in-browser modes send only provider names + boolean flags. A public GitHub URL is fetched on our server; private code → use the CLI.

Can I run it in CI or Claude Code?

Yes — a CLI (exits non-zero on a critical) and an MCP server.

You didn't read the ToS.
Vetly did.