Consent Management Architecture

Consent is not a checkbox. It is an auditable state machine.

The State Machine

You must prove exactly what the user saw when they consented, the timestamp, and their IP. Storing `marketing_opt_in = true` is insufficient.

Required FieldDescription
TimestampISO-8601 UTC time of action.
Banner VersionHash of the exact text displayed.
Granular Flags`analytics: true, marketing: false`

Tool: Consent String Generator





Explore Architecture Requirements