Skip to main content

Product status

What is live. What is planned. What is delivered by people.

Last reviewed: 9 October 2026

This page is generated from the claims table that governs every ConsentOS marketing surface. A capability is listed as live only when it runs in production. Planned work carries its target period. Services are delivered by the ConsentOS team under engagement, not as software. The pricing page draws its tier inclusions from the same table.

Live
11
Planned
10
Service
5

Live

In production

Capabilities running in the product today. Each is claimable in the present tense on every ConsentOS page.

  • Consent capture via API and dashboard

    Consent events recorded from the dashboard, the org-scoped API, the import route and the hosted consent page. Growth tier and up.

  • Electronic Consent Artifacts (HMAC-SHA256)

    Every consent event is signed with a per-organisation HMAC-SHA256 key and verifiable by anyone holding that key. Growth tier and up.

  • Signed consent withdrawal events

    Withdrawals are signed the same way as grants, so the ledger shows both halves of each consent.

  • Rights Management Portal (public DSR intake)

    Public intake for access, correction, erasure and consent-withdrawal requests from Data Principals. Growth tier and up.

  • Privacy Notice generator (English)

    Generates an English-language privacy notice aligned with the DPDP Rules 2025 and publishes it at a public URL.

  • Data Inventory portal (CRUD)

    A manual record of processing activities: create, read, update and delete entries per data category.

  • Conflict-of-law documentation register (Scale+)

    A register that documents where RBI, PMLA, SEBI or IRDAI retention duties meet DPDP erasure rights. Scale tier and up.

  • Legal Obligation Override with denial register (flag on erasure, Vault-gated)

    Each erasure request is checked against the conflict register on submission and flagged for an admin decision. A denied request produces a signed denial record. Compliance Vault.

  • Compliance posture reports (PDF)

    A PDF report of the organisation's current posture across its DPDP obligations.

  • Consent record import

    Bulk import of historical consent records into the signed ledger.

  • Breach Incident Register

    Logs and tracks breach incidents against the CERT-In six-hour window and the Rule 7 clock, with notification letter drafts.

Planned

On the roadmap

Work that is planned but not built. Items without a target period are not yet scheduled. A planned item is never sold as included in a tier; the pricing page lists these apart from included features.

  • Breach notification alerts / automated 72-hour pipeline

    H2 2026

    Automated alerting and submission for the 72-hour Board notification under Rule 7.

  • Vendor Compliance Tracker

    H1 2027

    Tracking of Data Processor obligations and contract status per vendor.

  • DPA auto-generation

    H1 2027

    Generation of a Data Processing Agreement from the organisation's processor records.

  • Custom domain portal

    H1 2027

    The rights portal and published notices served from the organisation's own domain.

  • Multi-product dashboard

    H1 2027

    One dashboard across several product domains inside a single organisation.

  • Retention schedule dashboard

    H1 2027

    A per-data-category view of statutory retention periods and their legal source.

  • AI-powered data asset discovery

    H1 2027

    Discovery of personal-data assets across connected systems to seed the data inventory.

  • Consent Manager network API

    Late 2026

    Integration with registered Consent Managers under Rule 4, which applies from 13 November 2026.

  • Hindi and Eighth Schedule language notices

    Not scheduled

    Privacy notices in Hindi and the languages of the Eighth Schedule. English is live today.

  • Guided data-inventory wizard

    Not scheduled

    A guided walkthrough for building the data inventory. The portal is manual entry today.

Service

Delivered by the ConsentOS team

Engagements carried out by people under contract, not self-serve software. Listed so a buyer can tell the two apart.

  • DPIA preparation and DPBI submission readiness

    Data Protection Impact Assessments prepared with a dedicated compliance manager. SDF tier.

  • SDF designation readiness assessment

    A structured review of whether the organisation could be designated a Significant Data Fiduciary under Section 10.

  • Employee training

    DPDP obligations training delivered to staff by the ConsentOS team. SDF tier.

  • Dedicated compliance manager

    A named compliance manager assigned to the organisation. Compliance Vault and SDF tiers.

  • Readiness Assessment engagement

    A fixed-fee gap analysis and remediation plan delivered as a one-time engagement.

A target period is a plan, not a commitment. A planned item moves to the live list when it ships, and nowhere before. Questions about a specific capability go to hello@consentos.in.