When a regulator asks you to prove a specific visitor's consent on a specific date, a screenshot of your banner is not evidence. A consent receipt is. ConsentX issues a receipt for every decision and binds it into a SHA-256 hash chain, following the Kantara consent-receipt model, so the record is independently verifiable and hard to backdate.
In ConsentX
Related terms
The Data Protection Board of India is the body that enforces the DPDPA, investigates breaches and consent complaints, and imposes penalties of up to ₹250 crore per instance.
A consent management platform (CMP) is software that collects, stores and enforces a user's choices about cookies and personal-data processing, and proves those choices to regulators.
The DPDPA (DPDP Act 2023) is India's national data-protection law, requiring clear notice and free, specific, informed consent before processing personal data, with the DPDP Rules notified on 13 November 2025.