DPDPA-ready consent, built for India
The §9 age-gate, verifiable consent, consent receipts and tamper-evident evidence the DPDPA asks for. Built in, not bolted on by a US or EU tool. Live in about five minutes.
Free forever for one site. No credit card.
Your consent, your choice
We ask before we use non-essential cookies. We verify age and seek parental consent where required under the DPDPA.
Most consent tools were not built for the DPDPA
US and EU platforms retrofit India onto a GDPR model. The DPDPA has its own rules for children, for verifiable consent and for evidence. Generic banners leave those gaps open.
Up to ₹250 crore
the penalty the DPDPA allows for certain breaches, per instance.
§9 children
verifiable parental consent is required, and tracking of children is barred.
Prove consent
the Data Protection Board can ask you to demonstrate it, not just claim it.
Get ahead while you still set the timeline
The rules are published and the obligations are landing. Early movers put consent and evidence in place now, on their own terms, not under a Board notice.
DPDP Act passed
India's data protection law is enacted.
DPDP Rules published
Operational rules for notice, consent and children's data.
Consent Manager registration
Registration for the regulated Consent Manager entity opens. Most businesses just need a CMP like ConsentX.
Obligations land
Data-fiduciary consent and notice duties phase in. The Board can ask you to prove consent.
DPDPA, handled the way the law is written
Native support for the parts of the DPDPA that generic tools skip.
§9 age-gate and parental flows
DPDPA requires verifiable parental consent for children. ConsentX ships a §9 age-gate and parental flow out of the box, an area underserved by US and EU incumbents.
Verifiable consent and receipts
Capture consent that can be demonstrated, and issue a consent receipt to the data principal. Notice is versioned, so you can show exactly what was agreed and when.
Tamper-evident evidence
Every consent is bound into a per-record SHA-256 hash chain you can verify. When the Data Protection Board asks you to prove a choice, you have provable evidence, not just a stored row.
Region rules for India and beyond
A database-backed Region Rule Engine applies DPDPA behavior to Indian visitors and the right rules everywhere else, all from the dashboard without a redeploy.
DPDPA-native, and ready for every other framework you serve
Generic consent tool vs DPDPA-native ConsentX
Generic tool
- ✕ India bolted onto a GDPR model
- ✕ No real §9 age-gate or parental flow
- ✕ Stores a row, hard to demonstrate
- ✕ Rules hardcoded, need a deploy
ConsentX
- DPDPA-native, built for India
- §9 age-gate and parental consent flow
- Verifiable consent plus receipts
- Tamper-evident SHA-256 evidence chain
ConsentX helps you comply with the DPDPA. It does not by itself guarantee compliance. Verify your configuration against your own legal advice.
DPDPA consent questions
Get DPDPA-ready before the Board asks
Launch consent built for India in minutes. Free to start, no credit card.