Shield is the TagPipes consent management platform. Banner, preference centre, consent records, and a cookie declaration built from an actual scan of your site rather than a questionnaire. Privacy request handling comes with it, in the same place.
14-day free trial. No credit card required.
They are assembled from a questionnaire, signed off once, and then quietly diverge from what the site is doing. Shield builds yours from a scan of the real site, keeps a record of every consent decision, and puts a person in front of anything new before it gets published.
A branded consent banner and a full preference centre, served from a global CDN. Choose opt-in, opt-out, or let Shield pick per visitor region. Separate banner copy for EU and US audiences.
The cookie declaration comes from scanning your site with a real browser, not from a form somebody filled in. Every item carries provenance and a dated evidence snapshot showing where it was seen.
When a scan finds something new it lands in a review queue. Nothing reaches your published declaration until a person approves it, so the page on your site is always something you signed off.
Every decision is stored with the consent version, the categories granted, the timestamp and the SDK version that captured it. Configuration changes are audited separately, so you can see who changed the banner and when.
Full Google Consent Mode v2 signalling, including ads data redaction, URL passthrough and wait-for-update. US state opt-out is handled as its own mode, and Global Privacy Control and Do Not Track signals are applied where you enable them.
Group the domains that belong to the same brand, including a white-label ordering domain, and a visitor's choice carries across them instead of being asked for again on each one.
The banner and preference centre have a published conformance statement, verified by source audit plus scripted keyboard and focus testing against a live deployment.
Shield emits consent state into Echo, so per-destination consent gates act on it before any server-side event is dispatched, and Pulse scans check that what the banner promises matches what the site does.
Shield records the decision and signals it: to Google Consent Mode v2, to your tag manager, and to Echo's per-destination consent gates, which refuse to dispatch an event without the consent that destination requires. Tags managed through your tag manager honour that signal. Scripts hardcoded into a page template do not read it, and Shield says so rather than implying otherwise. Pulse scanning is how you find those, and it names the exact tags to move.
To look at one page yourself, TagPipes Companion, a free Chrome extension, shows the consent signals, tag requests and cookies around a visitor's choice as the page loads.
The moment someone asks for their data, a response deadline starts: 30 days under GDPR, 45 under CCPA. Most teams track these requests in a shared inbox and hope nothing slips.
DSARs arrive by email, contact form, or word of mouth. Without a single intake point, requests sit unread while the deadline runs.
GDPR, PIPEDA, and Quebec Law 25 give you 30 days. CCPA, VCDPA, CPA, and CTDPA give you 45. Tracking which clock applies to which request is manual work that invites mistakes.
When a regulator asks how a request was handled, an email thread is not evidence. You need a timestamped record of every action, by whom, and when.
Build a form with your logo, colors, and custom fields, then publish it to a global CDN. It loads instantly, needs no login to submit, and stays up independently of anything else. Drop the link in your privacy policy or Do Not Sell page.
Every valid submission automatically becomes a tracked request. No manual triage. Shield detects the requester's jurisdiction from their country and state, sets the legal response deadline, emails the requester an acknowledgment with a reference number, and alerts your team.
Move each case through a clear workflow: New, Acknowledged, In Progress, Complete or Rejected. Review uploaded identity documents and mark them verified. Add internal notes. Shield warns you at 7 and 3 days before the deadline, and flags anything overdue.
Every action writes to an immutable audit trail: status changes, notes, emails, identity checks, document accesses. Export it as a CSV evidence packet whenever a regulator, auditor, or lawyer asks. Closed requests auto-purge after your retention window.
CDN-hosted public forms with your branding, custom fields (text, dropdowns, checkboxes, file uploads), and built-in bot protection. Run multiple forms for different brands, jurisdictions, or employee vs consumer requests.
Shield detects the applicable law from the requester's location: 30 days for GDPR, PIPEDA, and Quebec Law 25; 45 days for CCPA, VCDPA, CPA, and CTDPA. Unknown jurisdictions fall back to a default you set.
Requesters can upload a JPEG, PNG, or PDF ID (up to 10 MB). Files live in private storage, viewable only through 5-minute expiring links. An admin reviews and attests, and every verification or revocation is logged.
Acknowledgment on submission, completion notice on close, and rejection notices that carry your written reason. Your team gets new-request alerts, deadline warnings at 7 and 3 days, and an overdue flag.
Every action is recorded with actor and precise timestamp: submissions, status changes, notes, identity checks, document accesses, emails. One click exports a standards-compliant CSV, and even exports themselves are logged.
Closed requests are automatically purged after a retention window you control (90 days by default), including any identity documents. You keep proof of process without hoarding personal data.
Requesters check their own progress with a reference number and email address. No login, no support tickets, and the lookup is designed so outsiders cannot fish for other people's requests.
Shield will not let a request be rejected without a written reason. The reason is saved, audited, and sent to the requester verbatim, so every decision is defensible.
Metered on domains and sessions. Annual billing pays for ten months and covers twelve. One-time setup fee applies.
14-day free trial on every plan. No credit card required. Questions about tier limits or bundles? .
Put the banner, the declaration and the request queue in the same place as the tracking they govern.
Not legal advice. TagPipes monitors, configures and reports. It does not determine legal compliance and does not provide legal advice. Everything on this page describes what the software does. It does not determine which laws apply to your organisation, how a regulator would interpret them, or whether your organisation is in compliance. Rawsoft's expertise is technology, not law. Please have your own counsel confirm any regulatory interpretation before you rely on it.