SAMMATI Cloud

DPDP consent and compliance,
as a cloud service.

One platform, two portals. In the Consent Manager your team makes the consent policy and every consent is kept with a signed receipt. In the Compliance Portal your DPO sees what is still held, what has been erased and what is overdue. Your developer integrates once; SAMMATI runs the rest.

One plan · ₹1,000 a month
Consent Manager
Consent Manager overview with the company's consent totals
Compliance Portal
Compliance Portal summary with the DPDP readiness score and open obligations
One product, two portals

From your consent policy to proof of erasure.

Both portals are part of the same SAMMATI platform. Consent records flow from the Consent Manager into the Compliance Portal, and the compliance side needs no extra code.

Consent Manager · CMS

Make the policy. Record every consent.

Where your admin and developer work.

  • Make your consent policy in Policy Studio, from an industry template or the guided editor
  • Publish it as a test policy and a live policy; each published version is locked
  • Customers consent in your app or in SAMMATI's hosted consent widget
  • Every grant, withdrawal, renewal and update is kept with a signed receipt
  • Check before each use whether you may process a customer's data right now
Compliance Portal

See what happens to the data.

Where your DPO works.

  • Readiness score and data mapping
  • "Consent ended, data still present", with erase and verify tasks
  • Rights requests, ROPA, DPIA and breach
  • Processors told when consent ends, with 72-hour escalation
  • Audit log and evidence export
Getting started

You set it up once. SAMMATI runs it every day.

Your developer integrates SAMMATI once. After go-live, your company writes nothing more.

What you do, once
  1. Make your policyChoose your purposes in Policy Studio and publish a test and a live policy.
  2. Add consent to your appA few consent calls, or SAMMATI's hosted consent widget.
  3. Register one webhook endpointSAMMATI tells your app whenever a consent changes.
  4. Set up the collectorA configuration file that maps your tables. No code.
  5. Go liveTry everything on the test key, then switch your app to the live key.
  6. Add your processorsYour DPO lists who receives data, and how they want to be told.
What SAMMATI does, every day
  • Keeps every consentwith a signed receipt, against the policy version the customer saw.
  • Runs your compliance portalreadiness, data mapping and what is still held after consent ends.
  • Tells your processorswhen consent ends, and escalates notices nobody acknowledges.
  • Raises erase taskswhen consent ends but data remains; the collector closes them once you erase.
  • Gives auditors proofthey can verify themselves.
For your developer

Three things to integrate. That's all.

Consent in your app

Five calls: grant, withdraw, check before each use, renew and update. Or drop in the hosted consent widget.

One webhook endpoint

Your app receives a signed event whenever a consent changes.

The collector

A configuration file that maps your tables, with no code. It sends placeholders, never personal data.

Build and test on a test key first. When everything works, switch to the live key. After go-live, your company writes nothing more.
A customer choosing a purpose and giving consent at sign-up
Consent in your own sign-up page
SAMMATI's hosted consent widget showing a consent notice
Or SAMMATI's hosted consent widget
How it works

Four steps, two portals, one platform.

Your customers' choices and what your systems still hold, side by side.

Consent Manager
1

Make your policy

Your admin publishes your purposes in Policy Studio, as a test policy and a live policy.

Consent Manager
2

Customers decide

They give or withdraw consent in your app or the hosted widget. Each decision is kept with a signed receipt.

Collector
3

Your data stays with you

A collector beside your database maps where personal data sits and sends placeholders instead of personal data.

Compliance Portal
4

Your DPO sees it all

When consent has ended but the data is still there, an erase task goes to your team; once you erase it, the collector closes the task.

For your whole team

Everyone gets the part they need.

Admin

Makes the policy

Signs up, completes the company profile and publishes your purposes in Policy Studio.

Consent Manager
Developer

Integrates once

Adds the consent calls or widget, one webhook endpoint and the collector.

Consent Manager
DPO

Works in the portal

Sees readiness, data mapping and erase tasks, and registers your processors.

Compliance Portal
Processors

Hear when consent ends

By daily email, webhook or API, and acknowledge each notice.

Auditors

Check the proof

Verify each signed receipt themselves.

Going live

Seven steps from sign-up to live.

1
Admin
Consent Manager

Sign up, verify your email and complete the company profile

2
Admin
Consent Manager

Make your policy in Policy Studio, as a test and a live policy

3
Developer
Consent Manager

Set your allowed website and register the webhook endpoint

4
Developer
Consent Manager

Build on the test key with the consent calls or the hosted widget

5
Developer
Collector

Register your database and map your tables

6
Developer
Consent Manager

Switch your app to the live key

7
DPO
Compliance Portal

Register each processor, its purposes and how it wants to be told

After go-live, your company writes nothing more.

Pricing

One plan, one price.

Sign up, pay ₹1,000 a month, and your account, keys, compliance portal space and your DPO's login are created for you.

SAMMATI Cloud

₹1,000a month
  • Both portals: the Consent Manager and the Compliance Portal
  • Your account, keys and a login for your DPO
  • Every consent kept with a signed receipt
  • Processor notices by email, webhook or API
  • Proof your auditors can verify
Book a demo
Book a demo

See both portals running on a live store.

Tell us a little about your company and we'll get in touch to set up your walkthrough.

Making a consent policy in the Consent Manager
A customer's consent, from sign-up to withdrawal
The collector on a real database
Your DPO's Compliance Portal

Questions

Good to know

What are the two portals?

The Consent Manager is where your team makes the consent policy and where every consent is kept with a signed receipt. The Compliance Portal is where your DPO tracks readiness, data mapping, erasure and processor notices. Both are one SAMMATI platform: consent records flow from one to the other.

How much work is it for our developer?

Five consent calls in your app (or the hosted consent widget), one webhook endpoint, and a collector set up from a configuration file with no code. After go-live, your company writes nothing more.

Can we try it before going live?

Yes. Your developer builds on a test key with a test policy, and switches your app to the live key when everything works.

Does our customers' personal data go to SAMMATI?

The collector sends SAMMATI placeholders instead of personal data. That is enough for data mapping and for checking whether data is still present after consent ends.

What happens when a customer withdraws consent?

SAMMATI records the withdrawal, tells your processors, and sends your team an erase task. Once you erase the data in your own systems, the collector closes the task.

What does it cost?

₹1,000 a month, which includes your account, keys, compliance portal space and your DPO's login.

Ready to see SAMMATI in action?

Book a demo and we'll walk you through both portals on a live store.

Book a demo