Replace black-box cookie banners with audit-ready, tamper-evident proof. One sub-12KB widget, region-aware notices in 22 languages, HMAC-SHA256 signed receipts sealed into Merkle roots, and signed webhooks that stream every decision to your own database. We store pseudonymous consent records only.
The Digital Personal Data Protection Rules operate on phased statutory deadlines. Prepare your consent mechanisms and rights infrastructure before regulatory enforcement begins.
Deploy the ConsentPlix SDK today to automate 22-language notices and cryptographic Merkle receipts before November 13.
These are not marketing estimates; they are cryptographically enforced architectural properties of the platform. Click any metric to inspect the statutory verification trail.
ConsentPlix intercepts tracking scripts before execution, captures unambiguous visitor decisions through itemized statutory notices, computes an HMAC-SHA256 signature across 11 canonical fields, and anchors the record into daily Merkle checkpoint roots. Every event yields a tamper-evident, independently verifiable audit receipt.
Sub-12KB autonomous SDK loads deterministically before Google Tag Manager and third-party ad pixels fire. Holds non-essential trackers in queue until affirmative consent is given.
Renders clear, itemized notice in English and all 22 Eighth Schedule Indian languages. Discloses the Grievance Redressal Officer with instant Section 6(4) withdrawal.
Every consent grant, refusal, or revocation is canonicalized across 11 fields and signed in hardware HSMs. Produces an unforgeable receipt code for legal audit.
Daily cryptographic Merkle tree roots seal the consent vault. Any auditor or judge can mathematically verify that a specific receipt existed on a given date without leaking customer identity.
Engineered to replace fragile client-side cookie banners with provable, mathematically sound consent infrastructure that stands up to regulatory scrutiny worldwide.
Every consent event is normalized into an 11-field canonical JSON receipt, HMAC-SHA256 signed with KMS custody, and batched into verifiable Merkle tree roots.
Zero runtime dependencies. Intercepts non-essential scripts before GTM loads, automatically relays ad_storage and analytics_storage signals to Google tag containers.
Edge CDN detects visitor jurisdiction automatically. European visitors receive granular GDPR opt-ins; California visitors see "Do Not Sell" opt-outs; Indian users receive DPDP notices in their language.
Hosted citizen intake portal featuring statutory countdown timers, automated identity verification, and conflict-of-law holds for banking, PMLA, and tax audit compliance.
Headless browser crawls your web properties on a scheduled cadence, detecting newly added marketing pixels, unclassified cookies, or rogue tags that violate policy.
We store cryptographic consent records only. HMAC-SHA256 signed webhooks stream every grant, refusal, and revocation directly into your own data warehouse in real time.
From India’s DPDP mandate to Europe’s GDPR and California’s CCPA opt-out rules, our lightweight SDK enforces region-specific consent standards at the edge, compiling every decision into a single verifiable ledger.
Unambiguous, affirmative notice presentation across all 22 Eighth Schedule official languages. Verifiable 1-click consent withdrawal mechanism, zero dark patterns, and a built-in grievance and rights request workflow.
Granular purpose categorization, automatic client-side script interception before any cookie execution, and built-in Google Consent Mode v2 signal dispatch.
Automatic Global Privacy Control (GPC) signal detection, itemized "Do Not Sell or Share My Info" opt-out receipts with an audit-ready evidence trail.
Explicit cookie consent aligned with UK Information Commissioner’s Office guidance. Purpose switchboards and non-essential tracker quarantine.
National Data Protection Authority (ANPD) governance, legal basis attribution (Art. 7), Portuguese notices, and designated DPO receipt logging.
You deploy one sub-12KB script. When a visitor arrives from Mumbai, Berlin, California, London, or São Paulo, region detection selects and renders the exact statutory notice required by local privacy regulators.
Paste the sub-12KB autonomous SDK before your tag managers. The engine initializes Consent Mode v2 synchronously, handles multilingual rendering, and starts streaming HMAC-signed receipts immediately.
Embed the sub-12KB bundle prior to Google Tag Manager or marketing pixels to ensure deterministic tracking control.
Consent keys initialize to denied automatically. Tracking tags remain blocked until the visitor grants affirmative consent.
Every granted or revoked decision streams a signed HMAC-SHA256 receipt verifiable at your unique ledger URL.
<!-- 1. ConsentPlix SDK (load first) -->
<script
src="https://cdn.consentplix.com/cp.min.js"
data-site-token="YOUR_SITE_TOKEN"
data-api-base="https://api.consentplix.com"
></script>
<!-- 2. Your Existing Google Tag Manager (Held deterministically) -->
<script>(function(w,d,s,l,i){w[l]=w[l]||[];w[l].push({'gtm.start':
new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],
j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src=
'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f);
})(window,document,'script','dataLayer','GTM-XXXXXXX');</script>Every plan includes the sub-12KB autonomous SDK, cryptographically signed consent receipts, immutable audit trails, and sovereign hosting in AWS Mumbai (ap-south-1).
Evaluate DPDP compliance with zero commitment on single websites and personal apps.
For D2C brands, developers, and single-store sites building custom consent user interfaces.
For scaling platforms, multi-brand e-commerce and companies requiring automated audit defense.
For high-volume brands, BFSI, and Significant Data Fiduciaries requiring dedicated VPC custody and SLA.
Authoritative briefings on DPDP Act enforcement, cryptographic ledger design, and autonomous SDK performance from our engineering team.
Key insights on DPDP statutory obligations, cryptographic receipt verification, and enterprise deployment.
ConsentPlix is India’s sovereign Consent Management Platform (CMP) and cryptographic consent ledger. It enforces Section 5 itemised notices in 22 Eighth Schedule languages, captures unconditional affirmative consent under Section 6, generates audit-ready HMAC-SHA256 consent receipts anchored to Merkle trees, and automates Section 11 to 14 Data Principal rights fulfillment.
Explore our comprehensive legal FAQ or speak directly with our privacy engineering team.
Deploy in minutes with our sub-12KB SDK or schedule a customized technical consultation with our privacy engineering team.
