Consent, DSR and vendor evidence at campaign scale.
Marketing keeps shipping. Binary AIQ keeps a receipt for every consent, withdrawal and data-principal request — and reconciles both against your processing record.
For storefronts, marketplaces and D2C brands running paid acquisition, personalisation and third-party trackers under the DPDP Act.
Every tracker, retargeting pixel and lookalike audience creates a lawful-basis question.
The DPDP Act requires purpose-specific, informed consent for personal data processing not otherwise permitted. Consent obtained for shipping cannot be repurposed for advertising without a fresh notice and a fresh consent.
"The consent given by the Data Principal shall be free, specific, informed, unconditional and unambiguous" — DPDP Act 2023, §6(1).
Marketing velocity outruns the privacy team.
New campaigns, new pixels and new SaaS tools land weekly. The DPO learns about them from a support ticket, not a change log.
- Consent captured differently on web, app and checkout — no single source of truth.
- Withdrawal handled by email, without reconciliation into vendor systems.
- DSR volume spikes at campaign windows, missing the DPDP §13 SLA.
- New martech tools onboarded before a DPA is in place.
One Consent Center, one DSR queue, one vendor register — all tied to processing records.
Binary AIQ wires the marketing stack into a single consent surface, a single rights portal and a single vendor register, each linked back to the RoPA.
- 01Consent CenterPurpose-specific consent block deployed to storefront, PDP and app; captures and reconciles withdrawals across destinations.
- 02Tracker inventoryCookie and pixel discovery mapped to processors, purposes and lawful basis.
- 03DSR queue with SLAPublic portal with intake, verification, fulfilment and closure — SLA clock against DPDP §13 timelines.
- 04Vendor registerEvery martech vendor has a live DPA status, sub-processor list and DPIA where required.
- 05Marketing change logNew campaigns and destinations queued for privacy review before go-live.
- 06Executive reportingWeekly consent, withdrawal and DSR metrics rolled up to the DPO and CMO.
Regulator-ready evidence for every consent moment.
Consent, withdrawal and DSR events are cryptographically time-stamped and linked to the exact notice and processing purpose that were live at the moment of capture.
- Consent receipts with purpose, notice version and destination
- Withdrawal ledger reconciled with downstream vendors
- DSR case files with verification and fulfilment lineage
- Cookie and tracker inventory per property
- Vendor DPA and sub-processor register
- Campaign privacy review sign-offs
Growth continues. Privacy stops being the bottleneck.
Marketing ships. Legal has the receipts. The regulator gets the trail. Nothing depends on a spreadsheet.
- DSR SLA (DPDP §13)
- On-time
- Consent surfaces
- Web · App · PDP
- Vendor DPA cover
- 100%
