Active Consent Platform (DPDP Act)
Ascenra Technologies
The challenge
Individuals have no central way to track, review and withdraw the consent they have given to many enterprises. Enterprises, in turn, find it complex to deliver transparent notices, keep immutable logs and handle grievances in line with India's Digital Personal Data Protection (DPDP) Act, 2023.
Our solution
Quantana is designing, engineering, testing and deploying the Active Consent Platform end to end. It operates on a data-blind architecture that routes consent notices and records without accessing or storing personal data.
Scope and delivery
A fixed-scope, milestone-driven plan of 15 weeks, agreed in July 2026. It includes a dedicated compliance quality assurance phase and a third-party penetration test with structured remediation.
Key capabilities
- Active Consent Connect: Flutter mobile app on Android and iOS for consent dashboard, notices, plain-language summaries, grievance submission through a conversational interface, signed consent receipts and Hindi language support
- Active Consent Enterprise: web console for notice versioning, analytics, a grievance inbox and consent ledger access
- API and integration layer: OpenAPI 3.0 specification, webhooks and an enterprise SDK
- Security: AWS Mumbai for India data residency, write-once-read-many consent ledger with chained hashing, mutual TLS between services, tenant isolation and OWASP Top 10 coverage
- Four purpose-built AI agents on a retrieval-augmented architecture for notice simplification, version comparison, grievance classification and routing
Outcomes
- Platform designed to support Ascenra's registration as a Consent Manager under the DPDP Act
- Tamper-evident consent records and signed receipts for every transaction
Ready to audit your enterprise AI readiness?
Discover where AI can make a meaningful difference — and what it takes to get there responsibly.