A tamper-evident store of every consent event your AI ever touched. Provenance, scope, expiry, revocation — all signed, all linkable, all exportable. 5-year DE retention default; per-jurisdiction overlays for the rest of the EU.
Channel, jurisdiction, language, exact wording shown, timestamp, subject hash.
What was consented to, for how long, under which entity, with what processing purposes.
Every revocation linked to the original capture. Replay-safe, audit-evident.
Same subject moves countries — vault re-evaluates eligibility under the new regime.
Consent provenance is the data primitive compliance teams need most. The vault exports structured, signed evidence that downstream modelling and claims-data systems can ingest directly — no custom extract pipeline to build and maintain.