AI user consent audit
If you rely on consent to process personal data through AI systems, that consent has to clear a high bar. The GDPR requires it to be freely given, specific, informed, and unambiguous, with withdrawal as easy as opting in — and you must be able to prove it. This tool walks you through the conditions for valid consent, scores each one based on how your flow actually behaves, and produces a report that flags exactly where you fall short.
How it works
You answer a focused checklist covering five dimensions: granularity (separate choices per purpose), clarity (plain-language, no pre-ticked boxes), freely-given nature (no service conditioned on unnecessary consent), the withdrawal mechanism (as easy as opting in), and documentation (records you can produce on demand). Each answer is scored, weak areas are flagged with specific remediation notes, and you get an overall rating. The audit is entirely local — nothing you enter leaves the browser.
Tips and notes
- Unbundle your purposes. A single “I agree” for service delivery and model training is the most common failure — split them.
- Kill pre-ticked boxes. Silence, inactivity, or a pre-checked box is not valid consent; require a clear affirmative action.
- Make opt-out symmetric. If opting in is one click, opting out must be too.
- Keep records. You must be able to demonstrate when, how, and to what each user consented — re-run this audit after any flow change.