Collect patient intake and consent on your WordPress site and keep a record you can stand behind: the exact wording each person agreed to, when, from what device, e-signed, sealed in a tamper-evident chain you can verify with one click. No data leaves your server.
Most sites collect consent with a general form plugin. It saves a submission — but it does not prove what the person agreed to, and it does not show whether the record has been edited since. Change the consent wording on your site a year later and the old submissions say nothing about what those people actually saw. Edit a row in the database and nothing flags it.
For a health or wellness practice, a clinic, a gym, or anyone who might one day have to show a consent was genuinely given, that gap is the whole problem. Consent Ledger closes it, and does one thing well.
When someone submits the form, the plugin takes a SHA-256 hash of the record — the intake answers, the exact consent wording they saw, the signature, the time, the IP and the device.
Each record's hash also folds in the hash of the record before it, like numbered, initialled pages in a ledger. The records form a chain, not a loose pile.
Edit a record, delete one, or reorder them, and its hash no longer matches — and every record after it breaks too. One click verifies the whole ledger and points to exactly where it broke.
The consent text a person saw is stored with their record and hashed. Change the wording on your site later and old records still show what those people actually agreed to — not today's version.
Date and time in UTC, the connecting IP address, the device (user agent), and a typed signature are recorded with each consent. Not a bare "submitted at".
No third-party service, no external API call, no account. Every record stays in your own WordPress database. That is a deliberate design choice, and a privacy one.
Your intake questions, your consent language. The plugin records what a person agreed to; it does not put words in your mouth. An example form is included and clearly marked to be replaced.
The full ledger — every field and every hash — exports to CSV, so your records are portable and never locked in.
Consent Ledger does not do booking or payments. Drop it beside whatever tools you already run; it handles the one thing they leave out.
Consent Ledger is in development and heading to the WordPress.org plugin directory. Leave your email and I'll tell you the day it's available. No newsletter, no spam, just that one note.
Prefer to talk first? Get in touch.