Capture consent. Prove it later.
DPDP Act 2023 penalties: ₹250 Cr for security failures, ₹200 Cr for breach notification failure, ₹50 Cr for consent violations. ConsentXpert covers all three — Capture (S.6), Store (S.8), Withdraw (S.6), Data Principal Rights (S.11–14) and DPB-ready Audit — across web, mobile and email in 9 Indian languages with a roadmap to all 22 DPDP scheduled languages.
Every DPDP obligation. One system.
Capture — Web SDK (9 Languages)
JS/TS SDK for consent banners, notices and modals — five layout types, 9 Indian languages, roadmap to all 22 DPDP scheduled languages.
Capture — Mobile OTP & Email
OTP consent in 9 languages. Email-based capture timestamped and stored in the immutable vault.
Withdraw — S.6(4)
One-click withdrawal as easy as giving consent. Purpose-level granularity with real-time webhooks to downstream systems.
Store — Immutable Vault
Cryptographically hashed at write time. 7-year DPDP retention enforced automatically. Produce cryptographic proof in seconds when the DPB asks — not a spreadsheet.
Audit — DPB Ready
State-machine trail with actor attribution. Signed PDF export formatted for Data Protection Board submissions.
Children's Data — S.9
Age-gate flows, verifiable guardian consent via OTP or Email. SDK-level marketing restrictions for child profiles — not just policy.
Rights Portal — S.11–14
Self-service access, correction, nomination, erasure and grievance — tracked, timestamped and auditable.
Up and running in days, not months.
Create account & get API token
Register your organisation as a Data Fiduciary on ConsentXpert. Log in via the Developer Portal or POST /auth/login/fiduciary to get your JWT Bearer token and OAuth client credentials — client_id, client_secret and webhook_secret.
Define purposes & set up webhooks
Create purpose templates in the Developer Portal — health records, marketing, login consent, etc. Each purpose gets a UUID required by the API. Point your webhook URL to receive consent.granted, consent.revoked and consent.expired events in real time.
Request consent & go live
Call POST /consents/request-by-email from your backend. The user approves from their dashboard or email notification — your webhook fires instantly. Verify the consent token with one API call, then process their data. Full 7-year audit trail maintained automatically.
Built for your stack
Full technical documentation and API references available after onboarding call.
Frequently asked questions.
Ready to implement ConsentXpert?
Our engineers will map your current workflow and show you exactly what ConsentXpert changes.