Scroll

Consent management for medical practices

Control website tracking before patient data is collected.

Block non-essential tracking, document patient choices, and keep connected systems aligned.

Built for medical practices AWS-hosted Encrypted audit logs WordPress + GHL compatible
/rhinoplasty-consultation /eyelid-surgery /book-a-consult /contact-us /patient-forms

The product

Every vendor in this category sells you a feeling. document.

Consential produces a record: what was running on your site, what a patient chose, what changed since last month, and the date each of those was true. It arrives whether or not anyone on your team opens it.

Compliance isn't a promise. It's a paper trail.

Append-only, at the database level

The record writes itself, and then it won't move.

Every choice a visitor makes appends a new row. UPDATE and DELETE are revoked at the database permission level, so the history can't be quietly rewritten later — including by us. Corrections are new entries, never overwrites.

Chain intact·6 events · retained six years
consent_eventsappend-only
09:14:02 vis_9f3c… · banner_shown · policy v4 sha256 7c1e94… written
09:14:19 vis_9f3c… · accept · analytics, marketing prev 7c1e94… → sha256 a2b8d0… written
09:14:19 vis_9f3c… · consent_mode_v2 · granted ×2 prev a2b8d0… → sha256 4e07fa… written
11:02:47 vis_9f3c… · withdraw · marketing prev 4e07fa… → sha256 d519c3… written
11:02:47 webhook · crm.sync · signed, delivered prev d519c3… → sha256 08bb71… written
11:02:48 vis_9f3c… · preference_center · confirmed prev 08bb71… → sha256 be3402… written
UPDATE consent_events SET action='accept' WHERE id=4;
ERROR: permission denied for table consent_events
0 cycle

What runs, every cycle, without anyone asking

01

Consent is enforced

Non-essential trackers stay dark until the visitor chooses. Consent Mode v2 signals go out in the right order.

02

The record is written

Append-only at the database level. Corrections are new entries, never overwrites. Six-year retention.

03

The site is re-observed

Accessibility scanned against WCAG 2.1 AA. Live scripts compared to what your configuration declares. Policy age checked.

04

The evidence is delivered

A dated report with your domain on it, showing what was found, what changed, and what it means. Nobody has to request it.

No feature here requires you, your webmaster, or your developer to act for the product to function. Install, run, document, report.

Consent module

Three controls, one script tag.

01 · Tracking control

Held before they execute

Non-essential scripts stay dark until a visitor takes an affirmative, granular opt-in action across Essential, Analytics, Marketing, and Communications. Consent Mode v2 compatible, so GA4, Meta Pixel, Google Ads, and GTM only fire once gatekeeping rules allow it.

02 · Audit trail

Nothing is edited after the fact

Documented, append-only consent records. Nothing is rewritten or deleted after the fact, only added to — and the permission to do otherwise doesn't exist.

03 · Preference center

Patients can change their mind

View, update, or revoke consent by category anytime, without contacting the practice. Every change appends to the record, and syncs downstream over signed webhooks.

Pricing

Billed per practice, not per visitor.

Consent
$199 /mo

One practice, one domain.

  • Consent gate, deny by default
  • Append-only audit log, six years
  • Google Consent Mode v2
  • State-aware notices
  • Patient preference center
  • CRM sync and signed webhooks
Consent + Disabilities · most common
$299 /mo

Both compliance surfaces, one install.

  • Everything in Consent
  • Scheduled WCAG 2.1 AA scans
  • Conversion-path-first discovery
  • Platform-aware remediation guidance
  • Timestamped evidence report each cycle
Multi-location
Custom

Groups, networks, and several domains.

  • Multi-location rollup
  • White-label option
  • Full API access, practice-scoped keys
  • Dedicated support

Consential provides technical consent management infrastructure for healthcare websites. It is not legal advice, does not guarantee regulatory compliance, and does not replace a comprehensive HIPAA compliance program. Your attorney should review all consent language before deployment.

Consential Research

What we publish, and why it is sourced.

Articles on website tracking under HIPAA, consent mechanics for medical sites, state consumer health data law, and the WCAG failures we actually find. Every claim carries a primary source.

Article title card reading Which Google Consent Mode Are You Running, from Consential Research Consent Which Google Consent Mode Is Your Site Actually Running? Not a setting anyone picked. It is decided by how the tags were installed, and most sites are running both at once. Jul 24, 2026 Article title card reading The Trackers We Find Almost Everywhere, from Consential Research Research The Trackers We Find on Almost Every Practice Website Written from the detection rules our scanner uses and the sites we have run it against. What each is and why it is there. Jul 21, 2026 Article title card reading Anatomy of a Pre-Consent Data Leak, from Consential Research Research Anatomy of a Pre-Consent Data Leak: One Site, Request by Request A real practice site scanned in July 2026. Six trackers, seven cookies, no consent platform, score of zero. Jul 14, 2026
Read all articles

Start with evidence

See what's running on your website today.

Run a free live scan and see exactly which trackers fire before a patient consents — in about 15 seconds, no signup.

Run a free scan See pricing
Consential · scrollytelling prototype Not deployed · review copy only