When a customer says stop, everything stops.
The single source of customer truth. Profiles, segments, imports — and a consent ledger every send has to honour.
Consent is an event, not a flag
Every grant and revocation is recorded as an event, in order.
Consumers keep a read-model. If the state is unknown, the answer is no.
- Grant slow, revoke fast
- Revokes push immediately — they do not wait for the next sweep
- A stale grant is a fail-open risk; the platform degrades to check live or do not send
- Heartbeats prove the delivery channel is alive
People, not just lists
Profiles, segments, imports and a behavioural event store.
Consent is truth about a person. It does not live in the company kernel, and it is not inferred from a conversation.
The contract other products keep
Webhooks: consent.changed, HMAC-signed, at-least-once, in-order per consumer.
Dedup on seq. A failing consumer never blocks the others.
Connect’s hot path does not call Contact synchronously. It reads a local projection and fails closed.
Works with
Contact on the spine.
Connect
Every message checked before it leaves. Every message accounted for after.
Engage
Where conversations actually happen — humans and agents, same rules.
Trust
Prove who is allowed to send, and keep the evidence.
Coach
An assistant that notices what the suite already knows.