FlowConsent
How it worksPricingComparisonsBlogDocumentationLog inTry FlowConsent
Try FlowConsent
Frameworks

AdonisJS

UnclassifiedOfficial website

AdonisJS is a full-stack open-source web framework for Node.js, inspired by Laravel. It is a developer tool, not a data processor or tracking service. GDPR obligations do not arise from the framework itself but from the web application built with it and the infrastructure where it is deployed. Developers using AdonisJS are responsible for implementing GDPR-compliant data handling in their applications.

Block AdonisJS until consentScan my site
Overview

What does AdonisJS do?

What is AdonisJS?

AdonisJS is a full-featured, open-source web framework for Node.js that follows the MVC (Model-View-Controller) architectural pattern. Inspired by Laravel for PHP, it provides built-in tooling for routing, authentication, ORM (Lucid), validation, and templating. AdonisJS is used by development teams to build API backends, server-rendered web applications, and microservices. It is a developer tool and not itself a data processor, tracking service, or third-party vendor.

How does GDPR apply to AdonisJS?

AdonisJS is open-source software that runs on the developer's own infrastructure. GDPR obligations are not triggered by the framework itself but by the application built with it. The organisation deploying the AdonisJS application is the data controller. GDPR compliance depends on what personal data the application processes, how it processes it, where it is hosted, and what third-party services it integrates.

Session cookies and consent

AdonisJS includes built-in session management that uses cookies to maintain server-side sessions. Session cookies used solely for authentication (keeping a user logged in) are generally considered strictly necessary and do not require ePrivacy consent. Analytics, tracking, or personalisation cookies added by the developer do require consent. Developers should configure AdonisJS session settings to use secure, HttpOnly, SameSite cookies and implement appropriate consent management.

Developer GDPR responsibilities

When building with AdonisJS, developers are responsible for implementing data minimisation in database models, access controls for personal data, data subject rights endpoints (access, erasure, portability), audit logging for sensitive data access, encryption for sensitive fields, and secure password hashing. AdonisJS's Lucid ORM and authentication package provide solid foundations for these requirements.

Deployment and data location

AdonisJS can be deployed on any infrastructure. For EU data residency, deploy on EU-based hosting such as OVHcloud, Hetzner, or AWS Frankfurt. The hosting provider acts as a data processor and requires a DPA. The framework itself does not determine data location.

Practical compliance steps

Implement a cookie consent management system. Configure session cookies as strictly necessary only. Use EU-based hosting with a signed DPA. Implement data subject rights handlers. Apply data minimisation in database models. Encrypt sensitive fields. Conduct DPIAs for high-risk processing features.

Compliance

AdonisJS and the GDPR

Legal basis
AdonisJS is a framework, not a data processor. GDPR obligations arise from the application built with AdonisJS and its deployment infrastructure, not from the framework itself. The developer is responsible for implementing appropriate legal bases in their application.
Risk level
low
Applicable regulations
GDPR compliance is the responsibility of the application developer, not the AdonisJS framework

Impact assessment (DPIA)

A DPIA is not required for using AdonisJS itself. DPIAs may be required for specific applications built with AdonisJS that process large-scale personal data, perform automated decision-making, or handle special category data.

Sample text for your banner

This website is built using AdonisJS, an open-source Node.js framework. Cookies and data collection on this site are described separately in our privacy policy and cookie notice.
Cookies and trackers

What AdonisJS sets and contacts

Tracking method
Server-side Node.js web framework, no client-side tracking by default
Server location
Self-hosted (deployer's infrastructure)
Cookieless mode available
Yes

Cookies set (1)

NameTypeDurationPurpose
adonis-sessionsessionSessionStrictly necessary server-side session cookie used for user authentication in AdonisJS applications

Third-party domains contacted (2)

  • adonisjs.com
  • npm.adonisjs.com
Questions

Frequently asked questions about AdonisJS

Can't find your question? Write to us, we answer fast.

Is AdonisJS itself subject to GDPR?

No. AdonisJS is an open-source framework, not a data processor or third-party service. GDPR applies to the application built with AdonisJS and the organisation running it, not to the framework code itself. The framework does not collect or process personal data independently.

Do AdonisJS session cookies require consent?

Authentication session cookies are generally considered strictly necessary and do not require ePrivacy consent. However, any analytics, tracking, or personalisation cookies added to an AdonisJS application by the developer require prior consent under the ePrivacy Directive.

What is the legal basis for data processed in AdonisJS applications?

The legal basis depends on the application's purpose and design, not the framework. Common bases include contract performance for user accounts and services, legitimate interest for security logging, and consent for optional features like newsletters or tracking.

Does AdonisJS transfer data outside the EU?

AdonisJS itself does not transfer data anywhere. Transfer obligations depend entirely on where the developer deploys their AdonisJS application and which third-party services they integrate.

Do I need a DPIA for my AdonisJS application?

A DPIA is not required for AdonisJS itself. It may be required for specific features in your AdonisJS application that process large-scale personal data, perform automated decision-making, or handle special category data.

How should I implement GDPR compliance in my AdonisJS application?

Implement cookie consent management, configure secure session cookies, build data subject rights endpoints (access, erasure, portability), apply data minimisation in database models, encrypt sensitive fields, implement access controls, and sign DPAs with any third-party services you integrate.

Where should I host my AdonisJS application for GDPR compliance?

For EU data residency, deploy on EU-based infrastructure such as OVHcloud, Hetzner, Scaleway, or AWS Frankfurt. Sign a Data Processing Agreement with your hosting provider. Avoid logging unnecessary personal data and implement appropriate data retention policies.

Does using AdonisJS affect my privacy policy?

AdonisJS itself does not need to be mentioned in your privacy policy. However, all data processing in your AdonisJS application must be described, including what data is collected, the legal basis, retention periods, and any third-party processors integrated with the application.

Same category

More services: Frameworks

See the whole category

Highstock

Highstock is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Highstock supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Highstock ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Frameworks

Redux

Redux is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Redux supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Redux ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Frameworks

Fluid Framework

Fluid Framework is a development framework and toolkit providing developers with a structured foundation for building modern web applications. It offers reusable components, standardized architecture patterns, and comprehensive documentation. Fluid Framework accelerates development through code generation, testing utilities, and build optimization. With an active community and extensive ecosystem, Fluid Framework enables teams to build scalable, maintainable applications following industry best practices.

Frameworks

Kotlin

Kotlin is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Kotlin integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Kotlin helps organizations maintain robust websites that meet user expectations and technical requirements.

Frameworks

PrimeReact

PrimeReact is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. PrimeReact supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, PrimeReact ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Frameworks

JavaServer Faces

JavaServer Faces is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. JavaServer Faces integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, JavaServer Faces helps organizations maintain robust websites that meet user expectations and.

Frameworks

Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.

Create my bannerScan my site