The Business Case for DPDP Act Compliance

Read Now

Get privacy insights in your inbox.

Compliance

11 Best Consent Management Platforms for DPDP in India

IQWorks ResearchSeptember 17, 202626 min readUpdated November 6, 2026
Share
11 Best Consent Management Platforms for DPDP in India

Last updated: 6 November 2026

A consent management platform (CMP) collects a person's choices, stores a retrievable record, honours withdrawal, and syncs the latest status into the systems that use the data. We compared eleven platforms from their own public pages on 5 November 2026 for Indian privacy teams preparing for the DPDP Act and Rules. From 13 May 2027, s.6(1) to (8) and (10) on consent apply under clause (c) of G.S.R. 843(E), and Rule 3 on notice applies the same day. Six of the eleven name the DPDP Act or DPDPA on a product or solution page: ConsentIQ, miniOrange, Securiti, Redacto, GoTrust and Consently.

Source: IQWorks | Last updated: November 2026

A consent management platform is the system that asks for consent, keeps the record, and pushes the latest choice into CRM, marketing and analytics tools. Once someone withdraws, that choice has to reach every system that still holds their data.

Start with what the DPDP Act expects as proof of consent if you need the proof standard. For the statutory walk-through of s.6, Rule 3 and withdrawal with no vendor comparison, use DPDP Act consent requirements.

This roundup covers eleven consent management platforms for DPOs and privacy operations leads at Indian BFSI and D2C teams that also handle GDPR or CCPA. Disclosure: IQWorks makes ConsentIQ, one of the platforms below.

Key takeaways

Key Takeaways

  • Six vendors name the DPDP Act or DPDPA on a product or solution page checked on 5 November 2026: ConsentIQ, miniOrange, Securiti, Redacto, GoTrust and Consently. The other five name GDPR, CCPA/CPRA, LGPD or similar but not the DPDP Act; BigID's India page names the PDPB.
  • Under s.6(4), withdrawal must be as easy as giving consent. Under s.6(10), the Data Fiduciary carries the burden of proving notice and valid consent. The CMP has to produce a record an auditor can retrieve.
  • Consently publishes annual plan prices in INR and Ketch publishes monthly plan prices in USD. The other nine keep CMP pricing on request or behind a demo.
  • OneTrust appears in the criteria and an also-considered note.
  • In demos, ask for a DPDP withdrawal that updates CRM state and exports an audit file in the same session.

TL;DR

Nothing here is ranked. Each line pairs a situation with what that vendor's own page says.

  • ConsentIQ, if you want India-first consent with CRM write-back and a signed consent record. The product and consent solution pages name the DPDP Act and GDPR.
  • miniOrange, if you want CMP records alongside a wider DPDP product suite. Its CMP page says it maintains records for "GDPR, CCPA, and DPDP Act compliance".
  • Securiti, if first-party consent has to run across web, mobile and a branded preference centre. Its CMP page names no law; a separate DPDP Act solution page covers consent tracking.
  • Redacto, if you want an India-built consent governance product that names the DPDPA Consent Manager model.
  • GoTrust, if purpose-level consent and CRM integration matter and the page names DPDPA with GDPR.
  • BigID, if consent has to sit next to discovery and data governance. Its Universal Consent page names GDPR, CPRA and LGPD.
  • Osano, if you want cookie and broader preference management with multi-language notices. Its CMP page does not name the DPDP Act.
  • Consently, if you need a DPDPA-native CMP with published INR pricing and Indian language banners.
  • Lightbeam.ai, if consent and cookies should share one audit trail with DSR automation. The page FAQ names GDPR, CCPA/CPRA and Québec Law 25.
  • Didomi, if multi-region notices and five-year proof of consent storage are the priority. No DPDP naming on the pages we read.
  • Ketch, if consent choices must sync into tags, vendors and systems from one auditable record. No DPDP naming on the page we read.

At a glance

All entries summarise the linked vendor pages as checked on 5 November 2026. A law is listed only when a product or solution page says the product supports or helps with that law.

PlatformRecord and sync focus (as stated)Laws named on product or solution pagesPricing on public page
ConsentIQSigned consent record; CRM write-back; preference centreDPDP Act, GDPROn request
miniOrangeRecords with timestamps and history; sync across sites, apps, APIsGDPR, CCPA, DPDP ActOn request
SecuritiFirst-party consent across channels; mobile; preference centreNone in CMP page body; solution pages: DPDP Act, GDPR, CPRA, LGPD, PIPEDA, PIPLOn request
RedactoOne record per Data Principal; systems connection for withdrawalsDPDPA (Consent Manager model)On request
GoTrustPurpose-level consent; real-time status; CRM and marketing integrationsDPDPA, GDPR; solution pages add CPRA, LGPDOn request
BigIDCentralised consent; CRM and marketing sync; preference portalsGDPR, CPRA, LGPD; India page names PDPB, not the DPDP ActOn request
OsanoCookie and broader preferences; multi-language noticesGDPR, CCPA/CPRA, LGPD, PIPEDA; solution pages add US state laws; no India pageOn request
ConsentlyAudit logs with export; Indian language bannersDPDPA 2023Free and paid INR plans published
Lightbeam.aiNative consent with geo-aware banners; one audit trail with DSRGDPR, CCPA/CPRA, Québec Law 25On request
DidomiCapture and retrieve every consent event; proofs kept five yearsGDPR, CCPA/CPRA, VCDPA, LGPD and other named lawsOn request
KetchAuditable record synced to tags, vendors and systemsGDPR, CCPA/CPRA, LGPD and US state lawsFree, Starter and Plus USD plans published; Pro custom
Grid of eleven consent management platforms showing which name India's data protection law on a product or solution page and which publish plan prices

Source: IQWorks, from each vendor's own product, solution and pricing pages linked in the cards below, checked 5 and 6 November 2026. Six of eleven name the DPDP Act or DPDPA; Consently and Ketch publish CMP plan prices.

What a CMP must handle under the DPDP Act

From 13 May 2027, most of the Act and Rules apply (G.S.R. 843(E), clause (c); Rules under G.S.R. 846(E)). Three CMP duties sit on top of everyday banner work:

  1. Valid consent. s.6(1) requires consent that is free, specific, informed, unconditional and unambiguous, given by a clear affirmative action.
  2. Notice. Rule 3 sets what the notice must contain, in clear and plain language.
  3. Withdrawal and proof. s.6(4) makes withdrawal as easy as giving consent. s.6(10) puts the burden of proving notice and valid consent on the Data Fiduciary.

A CMP is software a Data Fiduciary runs. A Consent Manager is different: under s.6(7) to (9), it is a person registered with the Board through which a Data Principal can give, manage, review or withdraw consent, with registration conditions and duties in Rule 4 and the First Schedule. Rule 4 and s.6(9) apply from 13 November 2026 (clause (b) of G.S.R. 843(E)).

DPDP Act Section 6(1) text on free, specific, informed, unconditional and unambiguous consent

Source: Digital Personal Data Protection Act, 2023, s.6(1) (MeitY Gazette PDF)

DPDP Rules 2025 Rule 3 notice requirements text

Source: Digital Personal Data Protection Rules, 2025, Rule 3(a) and (b) (MeitY, G.S.R. 846(E))

DPDP Act Section 6(4) text on withdrawal of consent

Source: Digital Personal Data Protection Act, 2023, s.6(4) (MeitY Gazette PDF)

For parental consent under Rule 10, see verifying age and guardian consent under DPDP. For Indian language notices, see Indian language consent notices.

A usable consent record usually needs:

  • Timestamp and timezone of the decision
  • Source (web, app, call centre, paper) and property or brand
  • Notice version shown at the time
  • Purposes and categories accepted or refused
  • Withdrawal events that do not overwrite the original grant
  • Central retrieval by person identifier the team already uses
  • Exportable audit file (CSV, JSON or PDF)
  • Retention and deletion rules for the record itself
  • Sync status into CRM and marketing tools

Tamper-evident storage (hash-chained or similarly checkable artefacts) helps when someone challenges the record later. Our note on tamper-evident consent and portable proof goes deeper on that design.

How we chose

We checked every platform, ConsentIQ included, for five signals on 5 November 2026:

  1. Collection and notice: banners, preference centres, multi-channel capture, notice versioning (s.6(1), Rule 3).
  2. Record quality: fields stored, retention, export, whether withdrawal is a separate event.
  3. Withdrawal and sync: how a change reaches CRM, marketing, tags and apps (s.6(4)).
  4. Laws named: only when a product or solution page says the product supports or helps with that law. Regulation explainers, menus, help centre articles and use-case pages do not count.
  5. Pricing transparency: published plan prices, or clearly on request.

We did not run hands-on tests. Marketing savings claims are left out. "Best for" lines and summaries are our reading of each page, and each con points to something on the vendor's own pages. Ratings come from public G2, Capterra or Gartner Peer Insights pages checked on 6 November 2026; where a listing covers a vendor's wider platform rather than its consent product, the card says so.

Also considered: OneTrust Consent Management says it can "Capture and store consent receipts in an audit-ready database, with change history" and supports "GDPR, CCPA, CPRA, and other global regulations". Its India DPDPA solution page says it can "Automate the collection, management, and withdrawal of consent across digital channels." We left OneTrust out of the eleven cards; readers comparing its modules can start with our OneTrust alternatives post.

1. ConsentIQ by IQWorks

Best for: India-first teams that need CRM write-back and a signed, retrievable consent record under DPDP and GDPR.

ConsentIQ is IQWorks' consent product for Indian teams that also need GDPR-ready notices. The ConsentIQ product page and ConsentIQ consent management solution page name the DPDP Act and GDPR, and the solution page FAQ answers "Does it cover both the DPDP Act and GDPR? Yes."

Features

  • CRM write-back: ConsentIQ "matches on hashed identifiers and writes back only the consent decision, across HubSpot, Salesforce, Zoho, Dynamics 365, Marketo, and LeadSquared".
  • Consent record: "A digitally signed record of each consent, in a console that masks personal identifiers".
  • Withdrawal: "A public preference center for withdrawing or updating consent", plus a "Preference Center" for users to manage communication and data preferences.
  • Cookies: "Cookie scanning, cookie banners and tags held until consent".
  • Capture: "Capture tied to your registered domain, so other sites cannot submit consent in your name".
ConsentIQ consent workflow in five steps from registering websites to handling withdrawals in the preference center

Source: IQWorks, consent management solution page, iqworks.ai/solutions/consent-management-solution

Pricing

Not published on the product or solution page. Pricing is on request.

Pros and Cons

Pros:

  • Names the DPDP Act and GDPR on both the product and solution pages.
  • Writes back only the consent decision to six named CRMs, matched on hashed identifiers.
  • Keeps a digitally signed record of each consent in a console that masks identifiers.

Cons:

  • No published plan prices; both pages offer a demo request instead.
  • CRM write-back is listed for six named CRMs; teams on another CRM should confirm the connector in a demo.

Reviews

We found no public reviews of ConsentIQ on G2, Capterra or Gartner Peer Insights as of 6 November 2026.

Summary

ConsentIQ fits teams that want DPDP and GDPR consent tied to CRM state and a signed record. Pricing is on request, so budget holders will need to ask.

2. miniOrange

Best for: teams that want CMP records next to other miniOrange DPDP modules.

miniOrange sells a Consent Management Platform inside a broader data privacy suite. The miniOrange CMP page says: "Maintain consent records for GDPR, CCPA, and DPDP Act compliance." A DPDPA section on the same page describes clear consent notices for DPDPA work.

Features

  • Records: "Record timestamps, purposes, policies, statuses, and consent history".
  • Sync: "Synchronize consent across websites, apps, APIs, and systems".
  • Withdrawal: "Let users modify or withdraw individual consent preferences".

Pricing

The miniOrange DPDP Compliance Suite pricing page says: "Choose the capabilities you need and get pricing custom to your use case and organizational requirements." No figures are listed. Pricing is on request.

Pros and Cons

Pros:

  • Names GDPR, CCPA and the DPDP Act on the CMP page itself.
  • Records timestamps, purposes, policies and consent history, with per-preference withdrawal.

Cons:

  • No published price; the pricing page asks you to choose capabilities and get custom pricing.

Reviews

We found no reviews of the miniOrange CMP on G2, Capterra or Gartner Peer Insights as of 6 November 2026. miniOrange's G2 seller page lists reviews for its identity, access and security products, none of them for the CMP.

Summary

miniOrange suits buyers who already use or plan to use its DPDP suite and want consent records in the same place. Expect a sales call for pricing.

3. Securiti

Best for: multi-channel first-party consent with a branded preference centre.

Securiti's Consent Management Platform focuses on first-party consent across channels. The Securiti CMP page body names no law. Securiti's DPDP Act solution page, last updated 9 June 2026, says Securiti "enables organizations to comply with India's Digital Personal Data Protection Act 2023". Its solution pages for GDPR, CPRA, LGPD, PIPEDA and PIPL make the same kind of claim.

Features

  • "cookie & first party consent management through AI-driven automation and orchestration".
  • "collection and orchestration of first-party consent across multiple channels".
  • "Mobile App Consent Management" and a "Dynamic Preference Center".
  • DPDP consent tracking (solution page): "Track consent revocation of data principals to prevent the transfer or processing of data without their consent".

Pricing

The Securiti pricing page offers "Personalized Pricing For Your DataAI Command Platform" and says "Our platform lets you procure modules based on use cases that fit your unique needs." It lists no figures. Pricing is on request.

Pros and Cons

Pros:

  • Consent capture across web, mobile and other channels, with a dynamic preference centre.
  • A DPDP Act solution page that covers tracking consent revocation.

Cons:

  • The CMP page itself names no law; the DPDP mapping sits on a separate solution page for the wider platform.
  • No published price; modules are bought by use case and pricing is on request.

Reviews

On G2, Securiti is rated 4.6 out of 5 from 116 reviews as of 6 November 2026. That listing covers Securiti's wider data security and privacy platform, not the CMP alone. Reviewers often praise running security, privacy and compliance from one platform and the support team. The most common complaints are a steep learning curve, complex initial setup, and pricing that some reviewers call high for smaller teams.

Summary

Securiti fits enterprises that want first-party consent inside a larger data platform. Its DPDP claims sit on a separate solution page, so check that page against the consent product you would buy.

4. Redacto

Best for: Indian teams that want DPDPA-native consent governance and Consent Manager alignment.

Redacto is an India-focused consent governance product. The Redacto Consent Governance page is titled for DPDP and says: "Capture consent where it happens, honour it everywhere it matters, and answer every Data Principal request on the clock."

Features

  • "One record per Data Principal, on web, app, phone or paper".
  • Connects "consent to the systems that use the data, so a withdrawal is acted on and not filed".
  • "Structured to work with the DPDPA Consent Manager model".
  • "Audit logging On every consent event".
Redacto consent overview dashboard with consents today, withdrawals synced, consents by channel and a table of records by Data Principal and status

Source: Redacto, Consent Governance page, redacto.ai/products/consent-governance (vendor sample data)

Pricing

Not published; the page offers "Book a consent demo". Pricing is on request.

Pros and Cons

Pros:

  • Uses DPDP terms throughout, with one record per Data Principal and a Consent Manager model.
  • Withdrawals are pushed to the systems that use the data.

Cons:

  • The consent governance page names only the DPDP Act, with no GDPR or CCPA claim, on 6 November 2026.
  • No published price.

Reviews

We found no reviews of Redacto on G2, Capterra or Gartner Peer Insights as of 6 November 2026.

Summary

Redacto suits Indian teams whose consent work is DPDP first. Multi-law programmes will need to confirm coverage beyond India in a demo.

5. GoTrust

Best for: purpose-level consent with CRM and marketing integrations under DPDPA and GDPR.

GoTrust offers Consent and Preference Management with purpose-level controls. The GoTrust Consent and Preference Management page is titled for "DPDPA & GDPR Compliance". GoTrust's solution pages for CPRA and LGPD each describe how GoTrust supports compliance.

Features

  • Purpose-level consent: customers can "provide specific consent for different data usage purposes, such as marketing, analytics, or personalization".
  • Status: the platform "enables businesses to track consent status in real-time".
  • Integrations: it "seamlessly integrates with existing marketing automation, customer relationship management (CRM), and other enterprise systems".
  • Records: "centralized consent records, preference management, audit trails".
GoTrust Universal Consent Management dashboard with consent totals and processing purpose categories

Source: GoTrust, Consent and Preference Management page, gotrust.tech/consent-and-preference-management (vendor demo data)

Pricing

Not published on this page; it offers "Book your demo". Pricing is on request.

Pros and Cons

Pros:

  • Names DPDPA and GDPR on the consent page, with separate CPRA and LGPD solution pages.
  • Purpose-level consent and CRM integration described on the product page.

Cons:

  • No published price for Consent and Preference Management.

Reviews

On Gartner Peer Insights, GoTrust is rated 5.0 out of 5 from 1 rating as of 6 November 2026. The listing covers GoTrust's wider privacy and data security platform. The single review, from a CISO at a non-banking finance firm, credits the implementation team's support during rollout. One rating is too few to show a pattern. We found no G2 or Capterra reviews.

Summary

GoTrust fits teams that want purpose-level consent and CRM sync with DPDPA and GDPR named on the page. Public reviews are thin, so ask for references.

6. BigID

Best for: teams that already run BigID discovery and want consent next to data governance.

BigID's Universal Consent app ties consent into a wider data and AI privacy stack. The BigID Universal Consent page states support for "GDPR, CPRA, LGPD, and beyond". "Beyond" is not treated as a DPDP credit. BigID's India compliance page is written for the PDPB, not the DPDP Act, and does not cover consent.

Features

  • "Centralize consent from web, mobile, API, cookie banners, and even offline forms".
  • "Sync user preferences across CRM, marketing, analytics, and engagement tools".
  • "Surface consent gaps, misalignments, and potential violations".
  • "Gain real-time insight into consent status by user, region, and purpose".
  • Preference portals keep "audit-ready logs of every preference change".
BigID Privacy consent management table of topics with collection point, opt in or opt out value and target systems

Source: BigID, Universal Consent page, bigid.com/universal-consent (vendor demo data)

Pricing

Not published. Pricing is on request.

Pros and Cons

Pros:

  • Collects consent from offline forms as well as web, mobile, API and cookie banners.
  • Syncs preferences into CRM, marketing, analytics and engagement tools.

Cons:

  • The Universal Consent page does not name the DPDP Act, and the India page is written for the PDPB.
  • No published price.

Reviews

On G2, BigID is rated 4.3 out of 5 from 16 reviews as of 6 November 2026. The listing covers BigID's data intelligence platform as a whole, and most reviews discuss data security and discovery rather than consent. Reviewers mention an easy interface; G2's summary of the reviews names high cost as the common limitation.

Summary

BigID makes most sense where BigID discovery is already in place. For DPDP-specific consent, ask how its consent records map to s.6.

7. Osano

Best for: multi-language cookie and preference programmes outside India-specific DPDP naming.

Osano Consent Management covers cookies and broader preference choices. The Osano Consent Management page FAQ names GDPR, CCPA/CPRA, LGPD and PIPEDA. Osano's data privacy compliance page adds that the platform "manages data compliance" for laws including LGPD "and all state laws". We found no India page.

Features

  • Cookie consent and broader preference workflows.
  • Multi-language notices: "Osano supports over 40 languages".
Osano console editing a German cookie banner on a map of Europe beside a Privacy Protocols list with toggles

Source: Osano, Consent Management Platform page hero, osano.com/solutions/consent-management-platform

Pricing

The Osano plans page leads with "Get a Demo" and shows no plan prices. Pricing is on request. The same page says "Schedule a demo or try a free 30-day trial today."

Pros and Cons

Pros:

  • Notices in over 40 languages.
  • A free 30-day trial offered on the plans page.

Cons:

  • No page we read names the DPDP Act, and we found no India page.
  • No published plan prices.

Reviews

On G2, Osano is rated 4.5 out of 5 from 173 reviews as of 6 November 2026. The listing covers Osano's whole privacy platform, not consent management alone. Reviewers often mention easy setup, automatic regional rules and quick support. Complaints include limited banner customization without code and, in one review, bugs when straying from default settings.

Summary

Osano suits cookie and preference programmes run mainly for US, EU and other non-Indian laws. If DPDP is in scope, ask Osano about India support before a trial.

8. Consently

Best for: Indian sites that want published INR pricing and DPDPA-native banners with Indian language support.

Consently is a DPDPA-native CMP built for Indian websites and apps. The Consently homepage describes a "DPDPA 2023 Consent Management Platform for India" with "DPDPA 2023 native compliance".

Features

  • "22 Indian Languages".
  • "Complete audit logs with timestamps, IP addresses, and exportable compliance reports (CSV/JSON/PDF)."

Pricing

The Consently pricing page publishes annual plans (exclusive of 18% GST, billed annually, priced per website or mobile application): Free at ₹0 (100 cookie + 100 DPDPA consents), Starter at ₹25,000, Growth at ₹60,000, Business at ₹1,20,000, and Enterprise as custom. Rechecked 6 November 2026.

Consently annual subscription plan cards from Free to Enterprise with rupee prices and consent limits

Source: Consently, pricing page, consently.in/pricing

Pros and Cons

Pros:

  • Published INR plan prices, including a free plan.
  • Banners in 22 Indian languages and exportable audit logs.

Cons:

  • "Each website/app requires its own subscription", so costs rise with every property.
  • The Consently pages we read claim support only for the DPDP Act; confirm GDPR or CCPA coverage in a demo.
  • DPDPA consents beyond the plan limit are charged at "Rs. 10 per additional DPDPA Consent".

Reviews

We found no reviews of Consently (consently.in) on G2, Capterra or Gartner Peer Insights as of 6 November 2026.

Summary

For an Indian site that wants a published INR price and DPDPA-native banners, Consently is the most direct option here. Teams with many properties or several laws should work out the per-site cost first.

9. Lightbeam.ai

Best for: teams that want consent, cookies and DSR automation on one audit trail.

Lightbeam folds native consent and geo-aware cookie banners into a wider privacy operations product. An FAQ on Lightbeam's Privacy at Scale page asks whether Lightbeam can adapt to "GDPR, CCPA/CPRA, and Québec Law 25". The page does not name the DPDP Act.

Features

  • "Native consent, geo-aware cookie banners, simplified deployment, with one audit trail".
  • Streams "consent decisions back to one audit log" tied to identities.
  • GTM category-level control.

Pricing

Not published. Pricing is on request.

Pros and Cons

Pros:

  • Consent and cookie decisions land in one audit log tied to identities.
  • Consent sits in the same product as DSR automation.

Cons:

  • The page does not name the DPDP Act.
  • No published price.

Reviews

On G2, Lightbeam is rated 4.4 out of 5 from 12 reviews, and on Gartner Peer Insights it is rated 4.5 out of 5 from 7 ratings, both as of 6 November 2026. Both listings cover Lightbeam's data security and privacy platform as a whole. G2 reviewers praise the interface and data classification. Complaints include a complex configuration and difficulty grasping the full set of capabilities.

Summary

Lightbeam suits teams that want consent proof and DSR work on one audit trail. DPDP buyers should ask how it handles Indian notices, since the page names other laws.

10. Didomi

Best for: multi-region notice programmes that need long-lived proof of consent exports.

Didomi is a multi-region CMP focused on notices, preference centres and proof retention. Product pages we read name GDPR, CCPA/CPRA, VCDPA, LGPD and related laws. None named the DPDP Act.

Features

  • The Didomi CMP page describes "collecting and managing user consent across every state, region, domain, app, and connected device".
  • Notices in "45+ languages".
  • "Capture, version, and retrieve every consent event".
  • Proof storage: Didomi's support article How Didomi manages proof of consent says it stores "individual proof of consent as well as the notice configuration" and keeps "this information for a period of 5 years".
Didomi console step to choose the platform for a consent notice, with website, AMP website and mobile app options

Source: Didomi, Consent Management Platform page, didomi.io/consent-management-platform

Pricing

Enterprise CMP pricing is demo-led. Pricing is on request.

Pros and Cons

Pros:

  • Captures, versions and retrieves every consent event, according to the CMP page.
  • Notices in 45+ languages across regions, domains, apps and devices.

Cons:

  • If you use a local configuration file instead of the console, "Didomi does not store the notices' configuration versions".
  • No product page we read names the DPDP Act.

Reviews

On G2, Didomi is rated 4.5 out of 5 from 182 reviews, and on Capterra it is rated 4.5 out of 5 from 14 reviews, both as of 6 November 2026. Both listings cover Didomi's privacy platform as a whole. Reviewers often praise responsive support, and one credits handling GDPR and IAB TCF consent in one platform. Recurring complaints are banner customization that needs custom work or CSS, setup that takes some background knowledge, and price.

Summary

Didomi fits multi-country brands that need retrievable proof of consent across regions. Indian DPDP coverage is not claimed on the pages we read.

11. Ketch

Best for: teams that need consent state synced into tags and downstream systems from one record.

Ketch Consent Management stores choices as an auditable record and pushes them into the stack. FAQ copy on the Ketch Consent Management page lists "GDPR, CPRA, LGPD, and dozens of U.S. state laws". The page does not name the DPDP Act.

Features

  • "stores them as an auditable record, and syncs those choices to the tags, vendors, and systems" that use the data.
  • Preference centre and audit trail.

Pricing

The Ketch pricing page lists Free at $0 (up to 5k unique users a month), Starter at $150 a month billed monthly (up to 30k), Plus from $499 a month billed annually (up to 100k), and Pro at custom pricing. Every tier includes the consent management platform. Rechecked 6 November 2026.

Ketch plan cards for Free, Starter, Plus and Pro with prices, user limits and included features

Source: Ketch, pricing page, ketch.com/pricing

Pros and Cons

Pros:

  • Published USD prices, starting with a free tier.
  • Consent choices sync to tags, vendors and systems from one auditable record.

Cons:

  • The pricing page says "DSR automation, data mapping, marketing preference management, and risk assessments are priced and sold separately from consent management."
  • Free, Starter and Plus each list 2 data system integrations, with add-ons available on Plus.
  • The consent page does not name the DPDP Act.

Reviews

On G2, Ketch is rated 4.6 out of 5 from 222 reviews as of 6 November 2026. The listing covers the whole Ketch platform, not consent management alone. Reviewers often praise ease of use and responsive support, and one valued starting on the free plan. G2's summary notes the interface can be overwhelming at times, and one review says products are hard to understand without talking to sales.

Summary

Ketch suits teams that want transparent USD pricing and consent synced into tags. Indian teams would need to confirm DPDP notices themselves.

Privacy reviews in India often show the same record mistakes:

  1. Storing only the latest flag, so the original grant and later withdrawal cannot both be shown.
  2. Leaving notice version out of the record, which breaks s.6(10) proof when the notice changes.
  3. Treating website consent as done while CRM and ESP still message the person.
  4. Making withdrawal harder than opt-in (extra steps, buried links), which conflicts with s.6(4).
  5. Exporting screenshots instead of a structured audit file when the Board or a partner asks.
  6. Assuming a global CMP "covers India" without a product or solution page that names DPDP or DPDPA.
  7. Keeping consent records indefinitely with no retention rule, which means holding personal data longer than needed.

Which CMP fits BFSI and D2C teams

BFSI teams usually care about purpose-level records, withdrawal that reaches every servicing system, and exportable proof for audits. ConsentIQ, GoTrust, Redacto, miniOrange, Securiti and Consently are the ones whose product or solution pages name DPDP or DPDPA in this list.

D2C and ecommerce teams usually care about banner performance, Indian language notices, CRM and ESP sync, and a price they can put in a budget line. Consently publishes INR plans, and Ketch publishes USD plans from a free tier. ConsentIQ lists HubSpot, Salesforce, Zoho, Dynamics 365, Marketo and LeadSquared write-back. Didomi and Ketch fit multi-country catalogue brands that already run GDPR/CCPA stacks, with the India gap called out above.

For how consent work sits next to the rest of a DPO stack, see the DPO operating system.

Soft next step

To see ConsentIQ collect a purpose-level consent, honour a withdrawal into CRM, and export the signed record in one walkthrough, contact IQWorks. Bring your current banner vendor and one CRM object you already care about.

FAQ

A CMP collects a person's consent or refusal, stores a retrievable record, lets them withdraw, and syncs the latest status into systems that use the data. Under the DPDP Act, that record has to support s.6(10) proof and s.6(4) withdrawal once those provisions apply from 13 May 2027.

At minimum: timestamp, source, notice version, purposes accepted or refused, withdrawal events that do not erase the grant, a way to retrieve the file by person, an export format, a retention rule, and sync status into CRM or marketing tools. Extra hash or signature fields help when someone disputes the record.

Yes, when the CMP writes decisions into CRM or marketing tools. ConsentIQ lists HubSpot, Salesforce, Zoho, Dynamics 365, Marketo and LeadSquared. BigID, GoTrust, Ketch, miniOrange and others describe CRM or downstream sync on their pages. Confirm the exact objects in a demo.

Which tools name the DPDP Act on a product page?

Of the eleven, ConsentIQ, miniOrange, Securiti, Redacto, GoTrust and Consently name DPDP or DPDPA on a product or solution page checked on 5 November 2026. The other five name GDPR, CCPA/CPRA, LGPD or similar but not the DPDP Act on the pages we read; BigID's India page names the PDPB.

Does pricing have to be public?

No. On 5 November 2026, Consently published CMP plan prices in INR and Ketch published them in USD. The other nine quote on request. Compare total cost once you have seen withdrawal sync into CRM and an audit export in the same demo session.

Our verdict

ComplyIQ4.8out of 5

29 ratings, from Customer Success Research.

Free DPDP Implementation Workshop

A 90-minute session for your team, on-site or remote: the DPDP Act applied to your organization, a 90-day roadmap, and the top five actions per department.

Book the workshop

Related Solutions

Consent & Preference Management

Consent captured per purpose, evidenced with a signed record, and honored in your campaigns.

Related Articles