PostHog

Prepare accessCopy Anchor Link

Use the regional application URL, such as https://us.posthog.com or https://eu.posthog.com. An ingestion host or public project token cannot read this evidence.

Create a scoped personal API key with:

organization:read
project:read
activity_log:read

The key's user needs organization administrator or owner access for organization activity. Enter the organization UUID and numeric project ID in Sparta.

Configure and collectCopy Anchor Link

Set the administrator-count threshold. Run the connection check, select supplemental checks and collect evidence.

Provide privacy-report JSON where requested, using the form's example. Check imported masking, consent and retention statements against the deployed application and approved policy.

Evidence limitsCopy Anchor Link

The API alone does not establish consent behavior, deployed masking or retention compliance. Imported privacy statements need human review.

Activity evidence uses minimized exports; it is not a raw session-replay archive.

Automated evidence · Connect evidence sources