You're the one who has to answer for what shipped. So the thing you need isn't a promise that everyone consented — it's the receipt. PPL is built around a consent ledger: every step from a person's yes to the finished, labeled frame is time-stamped, in scope, and exportable. The record is the product.
Consent, identity verification, liveness, the license scope, the AI label, and every render are written to one ledger as they happen. Nothing is reconstructed after the fact. When someone asks how you know a person agreed to this exact use, you point at the row, not at a policy. That trail is the thing competitors can't fake by adding a badge.
A license names the use, the media, the territory, the channel, and the term. Nothing is implied; an unwritten use is an unlicensed use. Terms are time-boxed and renewable — never forever rights — so a license expires by design rather than lingering as an exposure you have to remember to close.
A person can withdraw, and when they do nothing new is made from that moment, renewal closes, and the public verify record says so — while work already delivered in-term winds down to the end of its term, not silently, and out-of-scope use comes down immediately. A withdrawn yes is honored across every surface — not just the one where it was clicked. You can show that the off-switch works, not just that it exists.
Consent to finished frame is exportable as a complete, time-stamped chain — per person, per license, per render. Biometric templates verify only; they are never licensed or sold and are destroyed on revocation. PPL is designed to BIPA, GDPR, CCPA, and the AI-transparency rules forming around likeness and voice. It supports your review. It never replaces your counsel.
Questions about how this works? We'll walk you through it.