Consent Management

Parental consent, verified — not just checked.

Before Avaril lets a child's personal data get processed, it verifies that a parent or lawful guardian actually consented — through DigiLocker, not a self-reported checkbox — and enforces that check in code every time, not just at sign-up.

DigiLocker-Verified Parental Consent

Before any data belonging to a child is processed, the parent or lawful guardian verifies their identity and relationship to the child through DigiLocker — not a checkbox someone can tick on the child's behalf. Avaril records the verification alongside the consent itself.

100%

Verification rate

3 consent types supported

  • Child consentDigiLocker verified
  • Disability consentGuardian verified
  • Electronic consentRecorded

Enforced at the Point of Processing

Wrap a function with Avaril's consent gate and it checks for a verified guardian consent before the code runs — not after, and not as a manual review step. If consent isn't in place, the operation is blocked, not merely flagged.

How it works

01

Flag the data as child data

Mark the relevant data category or processing activity as involving a Data Principal under 18, as defined by the DPDPA.

02

Guardian verifies and consents

The parent or lawful guardian confirms their identity and relationship to the child via DigiLocker, then grants or denies consent for the specified processing purpose.

03

Consent is enforced and logged

Processing is gated on that verified consent at runtime, and every check — granted, denied, or withdrawn — is logged for your compliance record.

Why this matters under DPDPA

Section 9 of India's Digital Personal Data Protection Act, 2023 requires a Data Fiduciary to obtain verifiable consent from a parent or lawful guardian before processing the personal data of a child, and prohibits processing likely to cause detrimental effect on a child's wellbeing, or tracking, behavioral monitoring, or targeted advertising directed at children. A consent checkbox with no identity or relationship verification behind it doesn't satisfy that bar. Avaril ties the verification and the enforcement together, so every instance of processing a child's data has a matching, verified guardian consent behind it — and a log to prove it.

Also managing consent for a person with a disability?

See Verifiable Consent for Persons with Disabilities — the same guardian-verified consent gate, applied to a lawful guardian for an adult with a disability.

Limited Beta Access

Build Privacy Governing Workflows Faster business-ready?

Built for Startups and MSMEs navigating Privacy legal compliance, privacy operations, and consent management at scale.

No spam, ever. We'll only send you product updates.