Compliance & Consent Engine Audit

compliance-consent-engine · v1.1.0 · paid

Audits the engineering of compliance systems — consent storage schema, opt-out processing pipeline, GDPR/CCPA data subject rights implementation, and compliance audit trails for email campaign platforms.

Consent Storage & Schema

consent-storage · weight 0.3

Consent stored as structured records, not boolean flags
ab-000775
critical
Granular consent preferences supported
ab-000776
high
Consent records are immutable (append-only)
ab-000777
critical
Consent queryable by contact ID with an index
ab-000778
low
Consent version tracking (policy version recorded)
ab-000779
medium

Opt-Out Processing

opt-out-processing · weight 0.25

Unsubscribe triggers async processing job
ab-000780
high
Opt-out processed within regulatory window
ab-000781
critical
Global unsubscribe suppresses all campaign types
ab-000782
high
Fail-safe blocks sends to pending-unsubscribe contacts
ab-000783
high
Opt-out honored during queue backlog
ab-000784
medium

Data Subject Rights

data-subject-rights · weight 0.25

GDPR Article 17 deletion path exists and is tested
ab-000785
high
Deletion cascades to all related personal data records
ab-000786
high
Deletion produces an audit receipt
ab-000787
low
CCPA data export in machine-readable format
ab-000788
low
Deletion does not corrupt aggregate analytics
ab-000789
low

Compliance Audit Trail

compliance-audit-trail · weight 0.2

All consent changes logged with actor, timestamp, and reason
ab-000790
high
Audit log is append-only (tamper-resistant)
ab-000791
high
Audit logs retained per regulatory requirement
ab-000792
medium
Compliance evidence exportable for legal review
ab-000793
info
Audit trail covers opt-out processing events
ab-000794
low