Skip to content

Consent management

Consent that remains tamperproof

The value of a consent record lies in its reliability and legal compliance. Ensuring signed consents are locked and tamperproof is essential. LightRocket uses hashing technology to prevent unauthorised modifications, and keeps a log (with timestamps and IP addresses) of any events linked to a signed form.

A person’s consents in LightRocket: three records against one template, marked pending, signed and superseded, each with its expiry date and whether it is currently validA person’s consents in LightRocket: three records against one template, marked pending, signed and superseded, each with its expiry date and whether it is currently valid

Consent events

General photoshoot consent · Amara Okonkwo

Scroll sideways for the times and addresses

The events recorded against one signed consent, as an example
EventWhoWhenFrom
Request sentAdministrator1 Aug 2026, 09:14203.0.113.24
Form openedAmara Okonkwo3 Aug 2026, 18:02198.51.100.7
SignedAmara Okonkwo3 Aug 2026, 18:04198.51.100.7
PDF downloadedAdministrator4 Aug 2026, 10:31203.0.113.24
Snapshot hash
6015b9e332435fdead66676e97ba3b114a3033f50dc5c0853cc5a27072d56e7e

Taken over the signed document at the moment it was signed. Any later change to the stored copy produces a different hash, and the mismatch is the proof.

Illustrative example — not a live record

Consent forms you can rely on

Signed consent forms are as valuable as any asset in your system. LightRocket stores signed tamperproof consent forms exactly as they were at the moment of signing.

  • 01

    A snapshot of what was signed

    The wording, the ticked usages, the completed fields and the signature, stored as one document. Editing the template afterwards does not change it.

  • 02

    A hash key makes it tamperproof

    A checksum taken at the moment of signing. Any change to the stored copy, however small, produces a different hash and shows up as a mismatch.

  • 03

    Every event logged and trackable

    Sent, opened, signed, downloaded, revoked, superseded. Every single event with a record who did it, when, and the IP address it came from.

  • 04

    A PDF you can hand over

    Download a signed consent as a PDF, for a legal team, an auditor or the person who signed it. It is an exact copy of the real thing, not an approximation of it.

Admin reporting

Audit trails for consent and downloads

System generated consent and download records mean administrators can always track key actions – be it for consent or for files downloaded from the platform.

  • Download usage across the library, by person and by file
  • Share history, so link sent outside the organisation are accounted for
  • Consent events with IP addresses, for the ones that end up disputed
  • Read from the platform rather than multiple export files

We’d love to explain more…

Still got questions?

Curious to see LightRocket in action? Want to know more about pricing? We’re always happy to show off our system and, yes, we’ll even help out with discounts and pricing.

For the best experience on LightRocket, we recommend that you accept all cookies. However, we respect your privacy and you can choose from the options below:

These are cookies that are required to use LightRocket.

These cookies help us understand your behaviour across the site and are used for analytics and research only.

These cookies are shared with trusted third parties to allow for a personalised ads experience.