Compliance guidance
Consent evidence and limitations
Understand which technical facts CookieWall records and which legal or organizational conclusions require separate evidence.
Last reviewed September 12, 2026
CookieWall records technical evidence about observed identifiers, their sources and providers, project classifications, configured signals, and consent events. Those records can support privacy and audit reviews, but they do not establish lawful basis, notice sufficiency, jurisdiction, vendor obligations, or overall legal compliance.
CookieWall evidence model
Use the following table to understand how each area supports the task.
| CookieWall can support | Requires separate review |
|---|---|
| Observed cookies, local-storage keys, source resources, providers, and sessions. | The lawful basis and legal necessity for each processing purpose. |
| Project-specific category and description decisions. | Accuracy and completeness of the organization’s privacy notice and records of processing. |
| Recorded consent choices and GPC handling. | Identity-level proof, jurisdiction, age, contract, and retention requirements. |
| Configured signal targets and observed browser behavior. | Confirmation that every downstream recipient honored the signal and handled previously collected data. |