Compliance · SaaS · 2025
Consent Hub
A consent management admin portal with API integrations — purposes, preferences, regional rules, and audit-ready history.
Purpose-level consent · API-enforced withdrawals
Client identity & deeper metrics available under NDA
Consent Hub
Purpose-level consent · API-enforced withdrawals
Challenge
A multi-product company collected consent in three places and enforced it in none. Legal needed purpose-level records; marketing needed a preference center; engineering needed APIs that actually blocked processing when consent was withdrawn.
Approach
- 01Modeled purposes, legal bases, and regional variants as first-class admin objects.
- 02Built an admin portal for versions, publishers, and audit timelines.
- 03Shipped APIs and webhooks so CRM, analytics, and messaging respect the same source of truth.
- 04Designed for compliance reviewers: readable history, exportable evidence, no dark patterns.
Stack, with reasons
Next.js admin
Operators needed a dense but calm console for policy work.
REST APIs + webhooks
Consent only matters if every system can subscribe to changes.
PostgreSQL audit log
Immutable history is the product for legal and security reviews.