Attestio records how consent was presented and submitted, preserves the record as tamper-evident evidence built to withstand challenge, and scores the lead before your team ever picks up the phone.
Most companies learn how this works the week a demand letter arrives. Here’s the short version, while it’s still theoretical — three questions, no legal background needed.
A federal law called the TCPA requires prior written consent for certain marketing calls and texts. Certain violations can expose the caller to claims of $500 per communication, potentially increased to $1,500 for willful or knowing violations.
trueA database field that reads consent = true may not be enough. It may not show the disclosure presented, the consumer’s interaction, when the record was created, or whether it was later changed. Attestio preserves the underlying context.
The moment someone submits your form, Attestio documents the consent language displayed and seals the issued record so later changes are detectable. Choose a full session replay, or an HD screenshot or MP4 focused on the consent event.
When a demand letter arrives, one of the first questions is whether you can produce reliable evidence quickly, with enough context and integrity to withstand scrutiny.
No field mapping to configure, no acceptance rules to write, no API documentation to read before you see your first certificate.
Drop it before the closing </body> tag, or add it through Google Tag Manager. It automatically detects supported forms on the page, and setup flags any fields that need manual mapping.
Fill in your own form the way a real visitor would. Submit a test lead and review the resulting certificate to confirm that Attestio is reading the intended fields and consent language before real traffic arrives.
Each captured submission is designed to produce a sealed certificate. Pull certificates by API, push them to your CRM through Zapier or a webhook, or open the dashboard when you need the record.
Interactive product demonstration. Nothing you type leaves your browser.
These capabilities are built into the platform and will be available to early-access accounts as they open.
Async, no jQuery and no framework dependency. Events are transmitted using sendBeacon where supported, and Attestio does not sit between the visitor and form submission. Keeping the script light is a permanent product constraint.
Attestio identifies configured TCPA- and FCRA-related language, captures it as displayed, and measures attributes such as font size and prominence. If your form changes, the next certificate reflects the changed content.
Choose an HD screenshot or MP4 focused on the consent event, a full session replay, or both, configured per domain. Each capture is tied to a synchronized event log.
Typing rhythm, timing and device signals help distinguish ordinary user activity from possible automation. Suspicious submissions are flagged on the certificate itself, with the supporting signals available for review.
Every certificate carries a 0–100 lead-quality score with the components that produced it, so you can route, price or review leads before anyone dials. Thresholds are configurable per vertical.
Ask the consumer to confirm outside the browser and record the affirmative response. This creates a second timestamped consent signal outside the original browser session.
SSN, date of birth and other fields you designate as sensitive are redacted on Attestio’s servers before persistent storage. Session-replay and visual-capture settings apply the same configured protections.
A single ZIP with the certificate PDF, replay video, event log CSV, consent screenshot, hash verification file and a system integrity declaration template.
Claim certificates programmatically and store the ID against your own records. Salesforce, VanillaSoft and Zapier guides are in the developer docs.
Every row is scored the same way: a capability counts only where the vendor documents it publicly. Undocumented capabilities are recorded as not published rather than assumed absent — a vendor may well offer something it has chosen not to publish.
| Capability | Attestio | Competitor 1 | Competitor 2 | Competitor 3 | Competitor 4 |
|---|---|---|---|---|---|
| Certificate retentionRetention should cover the period in which claims may arise | Per plan terms; no separate storage fee | 90 days free · up to 5 years paid | 3 years · up to 5 via API | Not published | 7 years · S3 Object Lock |
| Script weightA lighter script is less risk to your page speed | Very light | Not published | Not published | Not published | Not published |
| Session replay of the submission | ✓ | ✓ | ✓ | Not published | ✓ |
| Lead score returned with the certificateNot a separate paid data product | ✓ | Add-on | Not published | ✕ | Not published |
| Optional SMS/email confirmationA second signal recorded outside the browser | ✓ | ✕ | Not published | ✕ | Not published |
| Independent RFC 3161 timestampCreation time doesn't depend on the vendor's word | ✓ | ✕ | Not published | ✕ | HMAC-SHA256 |
| SHA-256 hash + write-once storage | ✓ | Not published | Not published | Not published | ✓ |
| Consent readability scoredFont size and prominence, not just presence | ✓ | Add-on | Not published | Not published | Not published |
| One-click audit ZIP for counsel | ✓ | Partial | Share link | Not published | ✓ |
| Sign up without a sales call | ✓ | ✕ | Not published | ✕ | ✓ |
| Pricing published on the website | ✓ | Partial | ✓ | ✕ | ✓ |
| Free tier | 100 certs / month | Create free, pay to keep | Not published | ✕ | Free to start |
| Time from account activation to first certificate | Under 5 minutes | Sales-led | Not published | Sales-led | Not published |
Move the slider to your monthly lead volume. Change the comparison rate to whatever your current vendor actually charges you.
No seat licenses, no annual commitment and no separate storage fee. You pay for the certificates you claim, subject to the applicable plan terms.
It shouldn’t. The script is deliberately light, loads asynchronously, and sends events with sendBeacon, which fires without blocking the page or delaying unload. It never sits between your visitor and your form — if our servers were down entirely, your form would still submit normally.
The honest way to check is to measure it on your own site: run Lighthouse before and after installing, on your real traffic. It takes a few minutes and beats taking any vendor’s word for it.
No. The script finds the forms on the page by itself and reads your existing consent wording as it’s written. If a field doesn’t get matched automatically, you’ll see it flagged during setup and can map it in a few seconds.
Admissibility is decided by a judge on the facts of a particular case, and no vendor can promise it. What we can do is make the record as hard to challenge as possible: a SHA-256 hash of the content, a timestamp issued by an independent RFC 3161 authority, storage in write-once mode so neither you nor we can alter it, and an exportable system integrity declaration for your counsel.
We are not a law firm and nothing here is legal advice.
Yes, and most people do at first. Running both in parallel for a few weeks is the fastest way to compare coverage, speed and the quality of the evidence on identical traffic. The scripts don’t conflict.
Mark the field as sensitive and it’s redacted on our servers before anything is written to storage — not merely masked in the browser, where the raw value would still have reached us. Session replay honours the same rule.
Potentially, but capture mode alone does not determine compliance. Session replay is optional and configurable by domain; customers may instead use a screenshot or limited MP4 focused on the consent event.
Requirements vary based on what is captured, when it is captured, the notices presented and the parties receiving the data. Customers should configure Attestio consistently with their own disclosures and counsel’s guidance.
The first 100 certificates each month, with screenshot, session replay, consent detection, bot detection and lead scoring. No card to start. We only ask for one if you go past 100 in a month, and we tell you before you do.
Anyone who buys or sells leads that get called or texted — debt relief, insurance, mortgage, solar, home services, legal and education are the heaviest users, because those verticals carry the most litigation risk. If you’re a publisher, the certificate is what makes your leads worth more to buyers. If you’re a buyer, it’s what stops you paying for leads you can’t defend.
Attestio is opening to a first group of teams who buy and sell regulated leads. Request access and we will be in touch to get your account set up, walk you through the certificate, and answer whatever your compliance team asks.