Integrate Privacy Everywhere.
A REST API, two-way webhooks, and widget SDKs for React, Angular, and JavaScript, plus a native MCP server so your AI agents respect consent too.
Widget SDKs
React, Angular, and vanilla JS. Consent, DSR, and cookie widgets you drop straight in.
AI Agents
A native MCP server, backed by the same REST endpoint you can call directly.
Consent Validation API
The call most systems make the most: is this user still consented for this?
Webhooks
Two-way event delivery to your systems, scoped purpose by purpose.
Bring Your Own Tooling
Your DSPM tool, your pace. Manual or automated, system by system.
Developer-First Privacy Infrastructure.
Consent, DSR, and cookie-consent components you can drop into React, Angular, or any vanilla JavaScript site.
SDK support
import "@privtrust/react-consent";
export default function App() {
return (
<>
<consent-widget />
<data-subject-rights-widget />
</>
);
}Give Your AI Agents a Consent Boundary.
Most privacy platforms stop at APIs for your backend. This one speaks natively to the agents your backend is starting to call.
Consent checks your agent can call directly.
- Connect over the Model Context Protocol and your agent gets three tools: check one user’s consent, check consent in bulk, and discover the purposes your notice actually defines.
- Consent is checked per data field, not just per purpose, so an agent can be denied "email" while still being allowed "name."
- Every agent check lands in the same audit trail as a human-initiated request, so agent access is never invisible.
claude mcp add --transport http \ privtrust https://<your-tenant>/api/v1/mcp
Authenticated with the same client credentials as the rest of the API. No separate agent-only backdoor.
Check Consent Before You Act.
This is the call most systems will make the most: is this user's consent still active for what I'm about to do?
- Pass a user and the purposes you are about to act on. Get back an allow or deny for each one, checked down to the specific data field if you asked for one.
- Checking a batch of users before a campaign or a job run? The bulk endpoint takes a list of user IDs in one call instead of one request per user.
- Authenticated the same way as the rest of the public API: a client ID and secret, nothing MCP-specific to set up separately.
curl -X POST https://<your-tenant>/api/v1/consent-validation \
-H "X-Client-Id: <client-id>" \
-H "X-Client-Secret: <client-secret>" \
-d '{
"user_id": "user-42",
"purposes": ["marketing"],
"data_items": ["email"]
}'Need many users at once? Same shape, at POST /api/v1/consent-validation/bulk with a user_ids array, up to 100 per call.
Two-Way Integration With Your Systems.
Not a one-way fire-and-forget webhook. Your systems and ours stay in sync on both ends.
Register an endpoint per purpose
Point us at your system and map it to the specific consent purposes it should hear about. Nothing outside that mapping is ever sent your way.
Get consent events as they happen
Consent grants and withdrawals deliver to exactly the endpoints mapped to that purpose, in order, so your system stays in sync without polling.
Failures retry on their own
A brief outage on your side does not lose an event. Delivery backs off and retries automatically before anything is flagged for attention.
Your system reports back
Once your endpoint confirms it processed the event, that request auto-resolves on our side, so nothing sits open that you have already handled.
Fits Your Systems, At Your Own Pace.
privtrust.ai plugs into what you already run: bring your own tooling, integrate on your own timeline, and stay compliant the whole way through.
Bring Your Own Data Discovery
Connect the data-security and discovery (DSPM) tooling you already run to pull a live inventory of where sensitive data actually lives. Access and erasure requests then route automatically to the right data owner, with no manual data-mapping spreadsheet.
Vendor-neutral: bring your own DSPM tool, or work with one of our partners.
See how it fits the platformCompliant on Day One, Automated on Your Terms
Every Data Subject Request can be fully resolved through a manual console workflow out of the box, with no integration required to go live compliant. Automate it system by system, at your own pace, wherever a webhook integration makes sense.
Manual and automated modes run side by side, per system.
See how it fits the platformPrivacy You Can Prove. Data You Can Protect.
privtrust.ai combines cryptographically verifiable compliance evidence with confidential-computing-grade data protection: one platform, not two vendors to stitch together.