Platform Safexa Consent Safexa Discover The DPDP Act Readiness check Security & architecture Company Book a walkthrough
Safexa Consent

Ask properly.
Then be able to show that you did.

Section 6(10) is the sentence the entire product is built around: where consent is your basis and a question arises in a proceeding, the Data Fiduciary is obliged to prove that notice was given and consent was obtained. Not the Data Principal. Not the Board. You.

s.5 + RULE 3
Notice that holds

Presented independently of other information, plain language, itemised data and purposes, with withdrawal, rights and Board-complaint routes on the face of it.

s.6(1)
Purpose-bound consent

Bound to a registered purpose code, limited to the data necessary for it. Bundled acceptance of terms is not consent and never was.

s.6(10)
Evidence at capture

The rendered notice is stored verbatim and hashed by the platform. Any hash your systems supply is discarded — integrity is not delegated to the party being audited.

Eight channels

Consent is collected where your customer already is.

Each channel carries its own proof artefact, because "we sent an SMS" is not evidence and a tick box screenshot is not either.

  • ●Web and in-app — just-in-time modal at the moment the purpose arises, with the notice rendered rather than linked.
  • ●SMS on your DLT header — short notice with a tokenised link to the full text. The sender is you, not us.
  • ●WhatsApp — verified business account, pre-approved template, interactive button event captured as the affirmative action.
  • ●Branch tablet and agent-assisted — assisted capture with the assisting person recorded, because who helped matters when it is disputed.
  • ●IVR — supplementary evidence only. A recorded voice response is not, on its own, a clear affirmative action.
notice.rendered · stored verbatim
-- template POL-ISSUE-01 v4 - lang mr - sealed at capture Northwind General Insurance तुमची संमती मागत आहे • संकलित डेटा Name, DOB, PAN, Address • उद्देश Policy issuance and underwriting • साठवण कालावधी 10 years from policy expiry sha256 7c41e0a9f3b8...d204 ckpt CKPT-0482913 tsa DigiCert RFC 3161

The legally operative text is the one the Data Principal read. The English rendering in the console is a convenience for your reviewers, and is labelled as such.

Section 5(3)

Twenty-two languages plus English.

The Data Principal chooses. Where a purpose has no registered template in the language it was served in, Safexa raises it as a finding on the record rather than silently falling back to English — because a notice nobody could read is not notice.

The part everyone gets wrong

A material change invalidates consent. A typo does not.

Most consent tooling treats any edit to a notice template as a new version and either silently carries every consent forward, or invalidates all of them. Both are wrong, and both are expensive.

Safexa makes you classify the change. A new data category or a changed purpose is material — existing consents do not carry forward and the affected population is queued for re-consent. Fixing a phone number in the contact block is not. The platform records who made that call and when, because that judgement is exactly what an inquiry will test.

purpose version history
v4 · current
Reinsurer panel added to recipients
material 553 consents queued for re-consent
v3
DPO contact details updated
non-material carried forward
v2
Marathi and Tamil templates registered
non-material
v1
Purpose registered
Approved by legal counsel before first use.

Bring us the question your counsel and your CTO disagree about.

Those are the conversations worth having before anyone signs anything.

Or email safexa@teknowxa.com directly — a person reads it.