Skip to main content

Dynamic 50-State & Global Geo-Rules Engine

Consent Shield AI includes a sub-5ms Edge Geo-Rules Engine that dynamically switches consent modes based on the visitor's verified geographic location.

Supported Compliance Modes​

1. US Opt-Out Mode (CCPA / CPRA / VCDPA / CPA / CTDPA)​

  • Behavior: Trackers load normally unless the visitor activates Global Privacy Control (GPC) or clicks "Do Not Sell / Share My Personal Information".
  • Notice: Displays a persistent footer link or non-blocking notice.

2. EU / UK Strict Opt-In Mode (GDPR / ePrivacy / UK GDPR)​

  • Behavior: Complete zero-trust blocking of all analytics, marketing, and personalization scripts until the visitor explicitly clicks "Accept All" or customizes categories.
  • Notice: Blocking modal or bottom banner with granular category toggles.

3. Brazil LGPD & Global Mixed Modes​

  • Behavior: Dynamic opt-in requirement for sensitive marketing and profiling pixels with explicit legitimate interest documentation.

Geo-Rules Configuration Matrix​

Navigate to Dashboard → Geo-Rules to adjust the jurisdictional triggers:

{
  "rules": [
    {
      "jurisdiction": "US-CA",
      "framework": "CCPA_CPRA",
      "mode": "opt-out",
      "respect_gpc": true,
      "notice_type": "footer_link"
    },
    {
      "jurisdiction": "EU",
      "framework": "GDPR",
      "mode": "strict_opt_in",
      "respect_gpc": true,
      "notice_type": "blocking_modal"
    },
    {
      "jurisdiction": "GLOBAL_DEFAULT",
      "framework": "STANDARD",
      "mode": "opt-out",
      "respect_gpc": true,
      "notice_type": "banner_pill"
    }
  ]
}

Testing Geo-Location via Headers​

You can test how your website responds to visitors from different regions by inspecting the CF-IPCountry and CF-Region edge simulation headers:

# Simulate visitor from California (CCPA)
curl -H "X-Simulate-Region: US-CA" https://example.com/

# Simulate visitor from Germany (GDPR)
curl -H "X-Simulate-Region: DE" https://example.com/