Governance & Compliance
Complete control over your consent data
Audit trails, role-based access, retention policies, and compliance tooling built for teams that take TCPA seriously.
Audit Logging
Every action is tracked — certificate generation, consent revocation, user logins, API calls, and configuration changes. Searchable, filterable, and exportable for compliance reviews.
Role-Based Access
Control who can view sessions, generate certificates, manage billing, and configure properties. Invite team members with granular permission sets tailored to their role.
Retention Policies
Configure how long consent data is retained per property. Certificates archived in S3 with Object Lock are immutable for up to 7 years — meeting TCPA statute of limitations requirements.
Organization Management
Multi-organization support built in
Manage multiple brands, clients, or business units from a single account. Each organization gets isolated data, separate properties, and independent billing — with a unified view at the top.
- Switch between organizations instantly without logging out
- Invite users per organization with role-based permissions
- Separate billing and usage tracking per organization
- Super root access for parent companies managing child accounts
Compliance Features
Built for compliance teams
Features designed for the people who have to demonstrate compliance at any time.
Consent Revocation
Single, bulk, CSV upload, or organization-wide revocation. Every revocation is logged with who, when, and why. Revoked certificates are permanently marked — the original consent record is preserved alongside the revocation for litigation defense.
Webhooks
Real-time HTTP notifications when certificates are created, consent is revoked, or risk is detected. Configure field mappings and static values to match your CRM's expected format. HMAC-SHA256 signed payloads for verification.
Scheduled Reports
Automated daily, weekly, or monthly reports delivered to your team. Session counts, consent rates, certificate volumes, and revocation activity — broken down by property. No more pulling numbers manually.
Tamper-Evident Certificates
Every certificate includes a SHA-256 cryptographic hash. Certificates archived with S3 Object Lock in COMPLIANCE mode cannot be modified or deleted for the duration of the retention period — not even by us.
Session Replay
Visual replay of the exact consumer experience — what they saw, what they clicked, what they entered. Recordings are tied to the consent certificate and can be shared via secure link or QR code for legal review.
Ready to protect your organization?
Start capturing verifiable consent today. One script tag and you're live.
