How ExpressConsent works
ExpressConsent records what a person saw and agreed to on your website, so you can prove it later.
When someone submits a consent form on your site, you call our script. It captures a screenshot of the whole page, and securely stores it in the cloud as a Certified Digital Record, or CDR. You get back a cdrId, which is your confirmation that the evidence is saved.
Capture at submission, not before
Capture the CDR at the moment the person submits the form.
Capture on submit and you have proof of what the completed form said when they sent it, including the phone number they agreed to be called at.
We detect which control the person actually pressed. The SDK marks the control that triggered it, so the stored record shows how the form was submitted and not merely that it was. The pressed control is outlined in the visual record.
What a CDR contains
- The visual record. A full-page image of what the person saw.
- Signer telemetry. IP address, the observed IP chain, user agent, and geolocation based on IP. Timestamps sit on the record itself.
- The consent facts we derived. The disclosure text that was on the page, whether a consent checkbox was bound to it, and whether that checkbox was checked when the form was submitted. They are written only when a submission was detected.
- Your own fields. Anything you attach at capture time, such as a phone number, email, or campaign ID.
Records are retained for five years, which covers the relevant statute of limitations.
What you do with a CDR
Look at it. Open it in the dashboard or fetch it over the API.
Send it to a buyer. If you sell the lead, the buyer needs the consent evidence with it. You can generate a share URL as you capture, pass it along with the lead, and the buyer pulls the evidence into their own account with one request.
Find it again. Attach your own fields at capture time and you can look a CDR up by any of them later.