Consent and rights management platform

The challenge

Organisations that process personal data at scale must evidence what each person agreed to, in which version of which notice, and must honour withdrawal and rights requests within set deadlines. Spreadsheet and ad hoc database approaches rarely produce records an auditor can verify independently.

What we built

The system publishes multilingual notices built from a purpose registry and freezes each version with a content hash. Each consent decision becomes a self-contained artifact signed with Ed25519 so a third party can verify it offline. A citizen portal supports one-step withdrawal, and a rights engine handles access, grievance, nomination and erasure requests with deadline tracking. Retention policies queue erasure jobs, breaches are registered with a notification clock, and all actions are appended to a per-tenant hash-chained audit log. The whole system runs as one Node process and one Postgres database.

Key capabilities

• Versioned multilingual notices with content hashing
• Signed, immutable consent artifacts with offline verification
• Citizen self-service portal with one-action withdrawal
• Rights, grievance and nomination workflows with deadline clocks
• Retention policies feeding queued erasure jobs and a breach register
• Tamper-evident hash-chained audit log with a verification routine

What it delivers

• Consent evidence can be checked by a third party without trusting the operator
• Withdrawal and rights requests are tracked against explicit deadlines
• Removing or editing an audit entry breaks the hash chain and is detectable
• The deployment footprint is deliberately small, with no broker, cache or ORM to operate