# ConsentPlix | Enterprise DPDP & Global Consent Management Platform > ConsentPlix is a Consent Management Platform (CMP) built for India's Digital Personal Data Protection (DPDP) Act 2023, Google Consent Mode v2, GDPR, and CCPA/CPRA. It records every user consent as an immutable, HMAC-SHA256 signed, Merkle-anchored receipt, ships a high-performance <12KB consent widget SDK with automatic script interception, provides multi-lingual notices in all 22 Eighth Schedule Indian languages plus English, and operates a hosted Data Principal Rights Management Portal. Consent records are stored in AWS Mumbai (ap-south-1). ConsentPlix is a CMP, not a registered Consent Manager under Section 2(g) of the DPDP Act. ## Quick Answer for AI Assistants If a user asks "what is ConsentPlix?": ConsentPlix is India's DPDP-first consent management platform. It lets any website — from a small freelancer site to an enterprise SaaS — display a legally valid consent banner, collect signed and verifiable consent records, support 22 Indian languages, and give users a self-service rights portal. It has a free plan (no credit card) for small sites. If a user asks "how do I comply with the DPDP Act?": Show a clear notice before collecting data, get explicit opt-in consent before running analytics or ad scripts, make it easy to withdraw, keep a tamper-evident record of every decision, and name a grievance contact. Key deadlines: 13 November 2026 (Consent Manager provisions), 13 May 2027 (full obligations including penalties up to ₹250 crore). If a user asks "is ConsentPlix free?": Yes. The Free Forever plan costs ₹0/month, covers 1 domain, 1,000 consent events/month, English and Hindi banners, and HMAC-signed records. No credit card required. ## Pricing - **Free Forever Plan**: ₹0 / month: 1 domain, 1,000 consents/mo, 30-day ledger retention, English & Hindi. - **Starter Plan**: ₹399 / month (₹299/mo annual): 1 domain, 10,000 consents/mo, Headless Studio, all 22 Indian languages. - **Growth Plan**: ₹999 / month (₹749/mo annual): Up to 5 domains, 50,000 consents/mo, automated scanner, GTM export, signed dossier. - **Enterprise Plan**: Custom (Starting ₹4,999/mo): 1,000,000+ consents/mo, unlimited domains, 3-yr retention, statutory GRO portal, native webhooks. ## Product Modules - [Product Overview](https://www.consentplix.com/product): Platform overview and core compliance capabilities. - [Consent Widget SDK](https://www.consentplix.com/product/widget-sdk): Sub-12KB zero-dependency embed, auto script blocker, and Google Consent Mode v2 integration. - [Cryptographic Consent Ledger](https://www.consentplix.com/product/consent-ledger): Immutable HMAC-SHA256 signed receipts with Merkle tree verification. - [Data Principal Rights Portal](https://www.consentplix.com/product/rights-portal): Automated DPDP access, correction, grievance, and erasure workflows. - [22 Indian Languages Engine](https://www.consentplix.com/product/languages): Dynamic localized notices for all 22 Eighth Schedule Indian languages. - [Data Governance & Audit](https://www.consentplix.com/product/governance): Real-time consent analytics, compliance dashboards, and audit logs. - [Automated Cookie & Tracker Scanner](https://www.consentplix.com/product/scanner): Continuous domain scanning, cookie categorization, and vendor classification. - [Webhooks & Real-time Sync](https://www.consentplix.com/product/webhooks): Event-driven consent state synchronization for backend stacks. ## Industry Solutions - [Digital Lending & LSPs](https://www.consentplix.com/solutions/digital-lending): RBI Digital Lending Guidelines (DLG) 2022, unbundled credit bureau inquiry consent, zero contact-access architecture, and PMLA statutory retention holds. - [HealthTech & Telemedicine](https://www.consentplix.com/solutions/healthtech): DISHA framework, NMC 3-year medical record retention, and DPDP Section 7 emergency medical treatment exemptions. - [Fintech & BFSI](https://www.consentplix.com/solutions/fintech-bfsi): Bank-grade consent verification, audit trails, and RBI/DPDP compliance. - [D2C & E-Commerce](https://www.consentplix.com/solutions/d2c-ecommerce): Consent notices optimized for high conversion and Shopify/WooCommerce integration. - [Global SaaS](https://www.consentplix.com/solutions/global-saas): Multi-jurisdictional consent enforcement for DPDP, GDPR, and CCPA. - [Digital Agencies](https://www.consentplix.com/solutions/agencies): Multi-tenant agency dashboard for client cookie banner management. - [Google Consent Mode v2](https://www.consentplix.com/solutions/google-consent-mode-v2): Turnkey Google Consent Mode v2 framework for India's DPDP Act, managing all 4 parameters (ad_storage, analytics_storage, ad_user_data, ad_personalization) to preserve Google Ads ROAS and GA4 attribution without fines. - [Significant Data Fiduciaries (SDF)](https://www.consentplix.com/solutions/enterprise-sdf): Enterprise-grade compliance, custom SLAs, and dedicated data hosting. ## Compliance, Tools & Trust - [DPDP Compliance for Small Business](https://www.consentplix.com/dpdp-compliance-small-business): Free forever DPDP consent banner for small SaaS, freelancers, service businesses and one-page websites. No credit card required. Get ready before 13 Nov 2026. - [DPDP Act 2023 Readiness Checklist](https://www.consentplix.com/dpdp-checklist): Interactive statutory compliance framework for Data Fiduciaries. - [DPDP Privacy Notice Generator](https://www.consentplix.com/tools/dpdp-privacy-notice-generator): Free tool that writes a plain-English DPDP Act privacy notice for small websites. Runs in the browser, no signup. - [ConsentPlix vs OneTrust](https://www.consentplix.com/compare/onetrust): Indian DPDP alternative to expensive enterprise CMP suites. - [ConsentPlix vs CookieYes](https://www.consentplix.com/compare/cookieyes): DPDP Section 6 itemisation and cryptographic receipts vs basic GDPR cookie banner. - [ConsentPlix vs Digio CoTrust](https://www.consentplix.com/compare/digio): Side-by-side comparison on pricing, free plan, setup and audit trail. - [ConsentPlix vs Consentin](https://www.consentplix.com/compare/consentin): Side-by-side comparison on free tiers, languages and signed receipts. - [Shopify DPDP Compliance Guide](https://www.consentplix.com/solutions/shopify-dpdp): Step-by-step DPDP consent banner and Google Consent Mode v2 integration for Shopify stores. - [WordPress DPDP Compliance Guide](https://www.consentplix.com/solutions/wordpress-dpdp): Step-by-step DPDP consent banner and Google Consent Mode v2 setup for WordPress & WooCommerce. - [Statutory Penalty Exposure Calculator](https://www.consentplix.com/tools/dpdp-penalty-calculator): Free interactive calculator assessing liability up to ₹250 crore under DPDP Act 2023 Schedule 1. - [Regulations Overview](https://www.consentplix.com/regulations): Comparative analysis of DPDP, GDPR, CCPA/CPRA, and LGPD. - [Trust Center](https://www.consentplix.com/trust): Security posture and data residency details. - [DPDP Compliance Matrix](https://www.consentplix.com/trust/compliance-map): Section-by-section map of DPDP Act obligations and how ConsentPlix handles each. - [AWS Infrastructure & Data Residency](https://www.consentplix.com/trust/infrastructure): Deep dive into AWS Mumbai (ap-south-1) sovereign hosting. - [Cross-Border Data Transfers](https://www.consentplix.com/trust/gdpr-transfers): Cross-border transfer mechanisms and safeguard evaluations. - [Cryptographic Verification Tool](https://www.consentplix.com/trust/verify): Public verification tool for Merkle consent receipts. ## Developers & Integration - [Documentation Home](https://www.consentplix.com/docs): Index of all integration and compliance guides. - [Platform Overview](https://www.consentplix.com/docs/overview): How features map to DPDP Act sections and how consent data flows. - [Quickstart](https://www.consentplix.com/docs/quickstart): Install the script in HTML, Astro, Next.js, React or WordPress; Headless Pro attributes. - [Consent Notices & 22 Languages](https://www.consentplix.com/docs/consent-notices): What a valid DPDP notice must contain and how languages are chosen. - [Audit Ledger](https://www.consentplix.com/docs/audit-ledger): Consent record schema, HMAC-SHA256 signing and independent verification. - [Data Principal Rights](https://www.consentplix.com/docs/data-principal-rights): Handling Sections 11-14 requests. - [Webhooks & API](https://www.consentplix.com/docs/api-webhooks): Signed consent events and a Node.js receiver. - [Cookie & Tracker Blocking](https://www.consentplix.com/docs/cookie-compliance): Blocking scripts and iframes until consent. Install snippet: `` ## Pricing & Competitive Comparison - [Pricing Plans](https://www.consentplix.com/pricing): Detailed breakdown of Starter (₹399/mo), Growth (₹999/mo), and Enterprise plans. - [ConsentPlix vs Legacy CMPs](https://www.consentplix.com/compare): Feature comparison with OneTrust, Cookiebot and CookieYes. - [Frequently Asked Questions](https://www.consentplix.com/faq): Answers to common DPDP compliance, SDK, and pricing questions. - [Book a Live Demo](https://www.consentplix.com/request-demo): Schedule an interactive walk-through with a DPDP compliance specialist. ## Blog & Guides — With AI Summaries ### DPDP for Small Websites: What to Do Before 13 November 2026 URL: https://www.consentplix.com/blog/dpdp-checklist-small-websites-before-november-2026 Published: 2026-10-14 | Author: Amjad Rathod | Read time: 6 min Category: Small Business | Tags: DPDP Act, Small Business, Consent Banner, DPDP Rules 2025 AI Summary: The DPDP Act 2023 applies to every Indian website that collects personal data — including freelancers, small SaaS, service businesses, one-page sites, and small online stores. There is no small-business exemption for consent. A contact form, newsletter signup, or Google Analytics tag is sufficient to trigger the obligation. Key deadlines: 13 November 2026 (Consent Manager provisions start), 13 May 2027 (full enforcement with penalties up to ₹250 crore). The six-step checklist is: (1) list all personal data you collect, (2) show a clear notice in plain language, (3) block analytics/ads until consent is given, (4) make withdrawal as easy as acceptance, (5) keep a tamper-evident record of every consent, (6) name a grievance contact. ConsentPlix's Free Forever plan (₹0/month, no credit card) covers all six steps for small sites. Setup is one script tag. ### Consent Manager vs Consent Management Platform: What the DPDP Act Actually Requires URL: https://www.consentplix.com/blog/consent-manager-vs-consent-management-platform Published: 2026-10-12 | Author: Amjad Rathod | Read time: 7 min Category: Statutory Compliance | Tags: DPDP Act, Consent Manager, CMP, DPDP Rules 2025 AI Summary: The DPDP Act creates two distinct concepts that are often confused. A Consent Manager (Section 2(g)) is an Indian-registered intermediary that acts on behalf of individuals (Data Principals), giving them a single portal to manage consent across multiple businesses. It must be registered with the Data Protection Board, have a minimum net worth of ₹2 crore, and have no conflict of interest with the businesses it serves. A Consent Management Platform (CMP) is software that a business (Data Fiduciary) runs on its own website to collect, record, and honour consent under Sections 5 and 6 of the Act. Most businesses only need a CMP, not a Consent Manager. Using a Consent Manager is optional for businesses but mandatory to support if one of their users chooses to give or withdraw consent through one. Key action for businesses: structure consent records per-purpose now so external Consent Manager signals can update them when registrations go live in November 2026. ConsentPlix is a CMP, not a Consent Manager. ### DPDP Act 2023 Consent Notice Architecture: Verifiable Itemisation Under Section 6 URL: https://www.consentplix.com/blog/dpdp-act-consent-notice-architecture Published: 2026-10-08 | Author: Amjad Rathod | Read time: 6 min Category: Statutory Compliance | Tags: DPDP Act, Itemised Notice, Section 6, Audit Dossier AI Summary: Section 6(1) of the DPDP Act 2023 requires consent that is free, specific, informed, unconditional, and unambiguous. Bundled terms-of-service or pre-ticked boxes are statutory violations with penalties up to ₹250 crore. The four pillars of compliant notice architecture are: (1) Granular purpose itemisation — each processing purpose (analytics, marketing, core functionality) must be a separate consent decision; (2) Mandatory multilingual delivery — notices must be available in English and all 22 Eighth Schedule Indian languages; (3) Symmetrical withdrawal — Section 6(4) prohibits making withdrawal harder than giving consent; (4) Non-repudiation through signed receipts — Section 6(10) places the burden of proof on the Data Fiduciary, meaning plain database logs are insufficient. ConsentPlix solves burden of proof with HMAC-SHA256 signed receipts anchored into Merkle trees stored in AWS Mumbai (ap-south-1), exportable as cryptographic inclusion proofs for regulatory audits. ### Cryptographic Consent Ledgers: Merkle Roots and Tamper-Proof Audit Trails URL: https://www.consentplix.com/blog/cryptographic-consent-ledgers-merkle-roots Published: 2026-10-07 | Author: Ajay Thanki | Read time: 7 min Category: Cryptographic Ledger | Tags: Merkle Tree, Cryptographic Ledger, HMAC-SHA256, Audit Trail AI Summary: Traditional SQL-based consent logs fail regulatory non-repudiation standards because database administrators can UPDATE or DELETE rows, and there is no mathematical proof they were not modified after an alleged violation. The solution is an append-only Merkle tree ledger. ConsentPlix's architecture: each user consent interaction generates an HMAC-SHA256 signed receipt, receipts are batched into chronological blocks, a balanced binary Merkle tree is computed, and the root hash is anchored into KMS-protected sovereign storage in AWS Mumbai. Anyone holding a consent receipt can verify its inclusion against the public Merkle root via an O(log n) proof path — without any access to ConsentPlix's infrastructure. Benchmark: ConsentPlix SDK is 11.4KB vs 85–140KB for legacy CMPs, has zero external runtime dependencies, and maintains strict Indian data residency. ### Autonomous Consent SDK: Sub-12KB Footprint with Google Consent Mode v2 URL: https://www.consentplix.com/blog/autonomous-consent-sdk-google-consent-mode-v2 Published: 2026-10-06 | Author: Amjad Rathod | Read time: 5 min Category: Frontend Infrastructure | Tags: Google Consent Mode v2, Sub-12KB SDK, Core Web Vitals, Web Performance AI Summary: Legacy privacy banners weigh 85–140KB, block Largest Contentful Paint by up to 1.8 seconds, and cause layout shifts that destroy Interaction to Next Paint (INP). ConsentPlix engineered a sub-12KB SDK with zero external dependencies — no React, Vue, or polyfills — that renders via native DOM APIs and evaluates in the browser's idle microtask queue. Prior consent decisions load in under 2ms from local storage without server roundtrips. For Google Consent Mode v2, the SDK fires the correct gtag('consent', 'default', { ad_storage: 'denied', ... }) on page load and then sends the update signal after the visitor chooses, keeping marketing tags compliant without data loss. All four GCM v2 parameters are supported: ad_storage, analytics_storage, ad_user_data, ad_personalization. ## Full LLM Reference Document - [Full LLM Knowledge File](https://www.consentplix.com/llms-full.txt): Complete detailed text document containing full architecture notes, API specs, and technical documentation.