Every consent event — the grant when someone applies, a later withdrawal, a deletion request — is appended to the candidate's consent ledger with a timestamp and a hash that links it to the entry before. Rows are never edited or deleted; a deletion leaves a tombstone that records the request was honoured, with no personal data in it.
Because each entry is chained to the last, a changed or missing row breaks the chain, and the platform checks every ledger for breaks.
Alongside it, Offerrole keeps an append-only audit log of what people do in the console — who did what, when, and from where.
Ready to see it in your own console?
Posting and reviewing are free. Every stage, e-mail and export described here is in the console from the first sign-in.