ConsentPass™
One-tap consent for information sharing — you approve or deny every request to access your data, with a permanent audit trail.
Overview
What is it?
ConsentPass™ is IDFlow's consent management system. Whenever a business, bank, doctor, or government department wants to access your information, they send a request. You approve or deny with one tap on your phone.
What does it do?
It puts you in complete control of your personal information. No one accesses your data without your explicit permission. Every request, approval, and denial is permanently logged.
Why was it created?
Currently, your personal information is shared without your knowledge or consent. Terms and conditions are accepted without reading. Data is sold, leaked, and misused. ConsentPass™ was created to give you back control.
Who is it designed for?
Every IDFlow user — citizens, businesses, and organisations that need to request or grant access to personal information.
Current Industry Problems
Your personal information is shared without your knowledge or meaningful consent
Terms and conditions are too long to read — you don't know what you're agreeing to
Once you share information, you can't take it back or track who has it
There's no record of who accessed your data and when
Businesses store copies of your documents — creating security risks
You can't selectively share — it's all or nothing
Withdrawing consent is nearly impossible
Data breaches expose your information because too many organisations hold copies
How IDFlow Solves These Problems
Every information request comes through ConsentPass™ — you receive a notification
You see exactly what information is being requested, by whom, and for what purpose
You approve or deny with one tap — no lengthy forms
You can share selectively — only the specific fields requested, nothing more
Every request, approval, and denial is permanently logged in your audit trail
You can revoke access at any time — instantly
Businesses receive verified information without storing copies — Zero Document Exposure™
Consent expires automatically based on the duration you set
How It Works
Business requests access to specific information via ConsentPass™ API
You receive a notification: 'Bank XYZ wants to verify your income for a loan application'
You see exactly what's requested: monthly income, employer name — nothing more
You approve with biometric authentication — one tap
Business receives the verified information instantly
Access expires automatically (e.g., after 30 days, or one-time use)
You can revoke access at any time
Every step is logged in your permanent audit trail
Benefits
citizens
- ✓Complete control over your information
- ✓One-tap approval — no forms
- ✓See exactly what's shared and with whom
- ✓Revoke access anytime
- ✓Permanent audit trail
businesses
- ✓Verified, consent-based information
- ✓Reduced compliance risk (POPIA, GDPR)
- ✓No document storage liability
- ✓Faster processing
- ✓Reduced fraud
regulators
- ✓Compliance with privacy laws
- ✓Transparent data sharing
- ✓Permanent audit trails
- ✓Better data protection
Financial Benefits
Businesses reduce compliance costs through automated consent management
Reduced data breach liability — businesses don't store copies of documents
Faster processing through instant consent — no waiting for signed forms
Reduced fraud through verified, consent-based information
Citizens avoid costs of certified copies and document sharing
Security
Biometric authentication for every consent approval
Zero Document Exposure™ — businesses receive verified data, not document copies
Every request, approval, and denial is permanently logged
Consent expires automatically — no permanent access
You can revoke access instantly at any time
Role-based permissions for business staff who can send requests
Encrypted data transmission
Compliance with POPIA, GDPR, and other privacy regulations
Real-World Example
A bank needs to verify your income for a loan application.
Bank sends a ConsentPass™ request: 'Verify monthly income and employer for loan application'
You receive a notification on your phone
You see: Bank XYZ, requesting monthly income + employer name, purpose: loan application, duration: one-time
You approve with your fingerprint — one tap
Bank receives verified income and employer data instantly — no documents
The bank does not store a copy — they receive a verified result
Access expires immediately (one-time use)
Your audit trail records: 'Approved income verification for Bank XYZ on 4 July 2026'
If you had denied, the bank would receive nothing — no questions asked
Frequently Asked Questions
What information can businesses request through ConsentPass™?
Can I deny a request?
What happens after I approve?
Can I revoke access after approving?
How long does access last?
Can I see who accessed my information?
Does the business store my documents?
Is ConsentPass™ compliant with POPIA and GDPR?
What if I accidentally approve a request?
Can businesses request information without ConsentPass™?
How fast is the approval process?
Can I set up automatic approvals for trusted businesses?
What if I don't respond to a request?
Can I download my consent history?
Does ConsentPass™ cost extra?
Future Roadmap
Future plans include AI-powered consent recommendations, smart contracts for automated consent, cross-border consent recognition, consent-based data monetization (you get paid for sharing your data), and integration with national privacy frameworks.