naisho.app

What it is

Naisho is a free, open-source privacy rights exercise tool. Its core purpose is to help users send personal information deletion requests to data brokers. It is not a traditional cybersecurity protection product: it does not provide malware protection, intrusion detection, or perimeter security capabilities. Instead, it focuses on managing personal data exposure and supporting privacy protection workflows. The text explicitly states that it does not track, collect, or store user data, which is especially important for privacy-focused tools.

Core capabilities and deployment

Naisho’s workflow is fairly simple: users draft deletion request emails using templates, then send them in bulk to multiple data brokers through their own email provider’s SMTP service. Any follow-up replies go directly to the user’s inbox and are handled by the user. The data broker list is sourced from the California Privacy Protection Agency and DataBrokersWatch.org, giving it a basis in public sources. For deployment, in addition to using the website directly, Naisho also supports local operation and self-hosting. The source code and documentation are available on GitHub, making it suitable for users who want to audit the code or control the runtime environment.

Pricing, compliance, and integrations

In terms of pricing, the text clearly describes Naisho as free and open source, with no commercial edition, subscription, or paid support disclosed. No compliance certifications are mentioned, so it should not be treated as having enterprise security certifications such as SOC 2 or ISO 27001. Its integration capabilities are mainly limited to SMTP email sending and open-source self-hosting. There is no mention of API, SSO, SIEM, enterprise directory, or automated ticketing integrations.

Pros, cons, and who it is for

Its strengths are high transparency, data minimization, self-hosting support, and keeping control of communications in the user’s own mailbox. The limitations are also clear: successful deletion depends on whether data brokers respond, and the tool cannot enforce compliance; users need to understand SMTP or email sending configuration; and management and alerting features are limited, with no centralized dashboard, status tracking, or automatic reminders mentioned. It is best suited to individual users, privacy advocates, open-source enthusiasts, and people who want to submit deletion requests in bulk. It is not a replacement for enterprise-grade data exposure management or security compliance platforms.

Access from China and alternatives

The text does not provide information on access from mainland China, payments, or localization. Because the service depends on external websites, GitHub, and the user’s email provider, actual availability needs to be tested case by case. Payments are not relevant because it is free and open source. Alternatives include manually sending deletion requests to data brokers, using complaint channels provided by regional regulators, or choosing other personal information deletion services.