TrustFlowPDPA Consent & Privacy Management
One record of consent
for every channel you use
Your organization sees what each customer and employee has agreed to, wherever they agreed to it, and can prove it when asked. TrustFlow is the PDPA consent management platform that sits behind your business applications, website and chat channels and keeps their consent records in step through APIs.
What You Gain
PDPA consent that is complete, provable and easy for people to change
One Place for Every Consent
See the whole picture and stop relying on records scattered across systems. Consent given at sign-up on your website, in a chat channel such as a LINE Official Account, or as an employee in your ERP arrives in TrustFlow and is updated in real time.
Ready for an Audit
Answer a PDPA regulator or a dispute with evidence. The audit log shows who gave consent, when, through which channel and which version of the policy they accepted, and a report can be produced from it at once.
Customer Trust
Let people manage their own rights without writing to you. Through a portal connected to TrustFlow, a customer can opt out of marketing e-mail or ask for their data to be erased, which shows them how their data is handled.
No Extra Sign-In for Staff
Your employees keep working in the system they know. TrustFlow runs in the background and its screens match the modules of your ERP, so nobody has to sign in to another system to handle consent.
Use Cases
Where organizations use TrustFlow first
Website & Membership Sign-Up
Consent given when a visitor registers is recorded with the policy version shown at that moment, and is available to every connected system straight away.
Chat & Messaging Channels
Consent collected in a chat conversation is stored with the same detail as consent from a form, so marketing and service teams work from one record.
Employee Data in the ERP
Consent for the personal data of employees is captured where HR already works and kept apart from the ERP's main database.
Marketing Preferences
A customer who opts out of marketing e-mail does it once, and the change reaches every system that sends to them.
Data Subject Requests
Requests such as erasure of personal data are received through the portal and recorded with the same history as every other consent event.
Policy Updates
When a privacy policy or the terms of use change, users are asked to accept the latest version before they continue to the systems that depend on it.
How It Works
A separate service that your systems reach through APIs
TrustFlow is built API-first as a standalone service. Your applications ask it whether consent exists and tell it when consent is given or withdrawn. With an API key, your team can connect the tools the company already uses.
Consent produces a large volume of log records. Keeping them in a service of their own means the main database of your ERP does not carry that load, so the core system keeps its performance.
Privacy policies and terms of use are managed in versions. When the law or your policy changes, TrustFlow can require users to accept the latest version before they enter the other systems, automatically.
- API-first, standalone service
- Connects with an API key to tools you already use
- Consent logs kept out of the core ERP database
- Versioned privacy policies and terms of use
- Acceptance of the latest version enforced before access
Questions
Frequently asked questions
Is TrustFlow a cookie banner?
No. A pop-up that asks for acceptance is only the visible part of consent. TrustFlow is the infrastructure behind it: the place where consent from every channel is recorded, versioned, audited and made available to your other systems.
Which privacy laws is it designed for?
TrustFlow was designed around the consent and data subject rights requirements of Thailand's Personal Data Protection Act (PDPA). The same records, who agreed to what, when, where and under which policy version, are what other privacy laws ask organizations to keep. Tell us which laws apply to you and we will go through the requirements with you.
Do we need GlowScale to use it?
TrustFlow is a standalone service with its own APIs, so it can be connected to the systems you already run. It also works with the ERP so that employees handle consent inside the modules they already use.
What does the audit log record?
For each consent event: who gave or withdrew consent, when, through which channel, and which version of the policy was accepted. Reports are produced from the same log.
What happens when we change our privacy policy?
You publish a new version. TrustFlow keeps the earlier versions and what was accepted under each, and can require users to accept the latest one before they continue.
See how TrustFlow would hold your consent records
Tell us which channels collect personal data in your organization and we will show how their consent would be recorded, audited and changed by the people it belongs to.