Does your SDK receive consent in your publishers’ apps?
Your publishers integrate your SDK however they like, out of your sight. Skanopy runs their apps on a real phone and shows, publisher by publisher, whether it receives the user’s choice and when it fires relative to that choice.
Aube
See your SDK the way a regulator will.
In France, the CNIL’s mobile-app recommendation also targets SDK providers, and compliance has been checked since spring 2025. Without the user’s consent, your SDK cannot personalize what it serves either: consent lost in the publisher’s app weighs on your revenue as it does on theirs.
Apps you finally control.
Liability reaches you
The CNIL’s recommendation explicitly targets SDK providers, whose practices have been checked since spring 2025: not just the publisher.
Consent, all the way to your SDK
In each publisher’s app, does your SDK receive the user’s consent? Without it, it cannot personalize what it serves.
Your blind spot on the publisher side
Integration happens inside the app, not on your servers. Real behavior only shows on the device.
Before or after consent
Does your SDK fire before the banner, and keep sending after the user refuses.
Evidence, app by app
For each app analyzed, a dated, reproducible finding: what your SDK receives of the user’s choice, and what it is missing.
The concrete gain, exactly as it appears in the report you receive.
No technical skills required.
Aube- A Google Play Store link
- Or the .apk of an unreleased version
- No integration in the app
- On real phones
- A real user journey replayed
- Every exchange logged
- A recommended action per finding
- A priority and dated evidence
- The fix verified on the next version
Your questions, our answers.
Skanopy runs real apps that already embed your SDK on a real phone, and observes its actual behavior.
The CNIL explicitly addresses SDK providers in its mobile-app recommendation, and a provider may be responsible, alone or with the publisher, if it uses all or part of the data for its own purposes. Knowing what your SDK does in your publishers’ apps becomes a sensible precaution.
The ones you point us to, among the Android apps that embed your SDK. Each analysis runs on a real app, under real usage conditions.
Yes. Skanopy records the user’s choice as the banner expresses it (IAB TCF, Google Consent Mode) and shows whether your SDK obtained it. It also places each firing relative to that choice. These are facts; the compliance assessment stays yours.
No. Skanopy produces a technical, factual and reproducible finding. The legal assessment stays yours, or your counsel’s.
No. Skanopy analyzes Android apps today; iOS is on our roadmap. Your analyses stay in Europe.