Proving Subscriber Consent (Getting Approved to Send)
Every email provider you connect — Amazon SES, SendGrid, Elastic Email — will eventually ask you the same question:
“Prove that these recipients gave you permission to email them. When, where, and how was each address collected?”
You’ll hit this when applying for SES production access, when a new SMTP account is under review, or after an abuse complaint. This guide shows you what Cyber Mail 9000 records automatically and how to hand it to a provider.
What Cyber Mail 9000 records automatically
Every subscriber gets a consent record at the moment they’re created, based on how they arrived:
| How they were added | Consent method | What’s recorded |
|---|---|---|
| Landing page with double opt-in | double_opt_in | Landing page URL, submit IP + time, confirmation click IP + time |
| Landing page (single opt-in) | single_opt_in | Landing page URL, submit IP + timestamp |
| Stripe purchase (Stripe Connect) | purchase | Checkout session / invoice ID + timestamp |
| Indie Member or an inbound webhook | integration | Integration source + event ID + timestamp |
| Manual add or CSV import | import_attested | Your permission attestation, who attested, import batch ID + timestamp |
You can see the consent record on any subscriber’s detail page under Consent.
Subscribers added before consent tracking existed show “No consent record.” New additions are covered from here on.
Exporting proof of consent
On the Subscribers page, click Export CSV. The export includes consent columns for every subscriber:
- Consent Method — how permission was obtained
- Consent Source — the landing page, integration, or import that added them
- Consent Recorded — when
- Consent IP — the subscriber’s IP at signup (where available)
- Consent Evidence — e.g. the public landing-page URL or Stripe session ID
- Consent Confirmed — the double opt-in confirmation time, if applicable
This CSV is exactly what a provider’s compliance team wants to see when they ask for proof.
Getting approved: what to tell your provider
When a provider asks how you collect consent, answer with specifics:
- Point to your signup form. If you use a Cyber Mail 9000 landing page, send the public URL. If double opt-in is enabled, say so — it’s the gold standard and often ends the conversation.
- Separate transactional from marketing. Purchase receipts and account emails are transactional (no opt-in needed). Newsletters and promotions are marketing (consent required). Describe them separately.
- If subscribers come from purchases (Stripe, Indie Member): add an explicit newsletter checkbox at checkout, unchecked by default, with clear wording like “Send me product updates and the newsletter.” Consent tied to a purchase alone often isn’t enough for stricter providers.
- Offer the records. State that for every address you retain the email, signup source, timestamp, IP where available, and consent method — and that you can export it on request. (That’s the CSV above.)
Importing subscribers from another provider
When you import contacts (CSV or paste), Cyber Mail 9000 requires you to confirm that the contacts gave you express permission and that you can produce proof. That attestation — with your account email and the import batch — becomes each imported subscriber’s consent record.
Permission carries over when you switch providers: if they opted in on your old platform, that consent is still valid here. Keep your old provider’s signup records (export them before closing the account) in case you ever need to show the original opt-in.
Tips for staying approved
- Prefer double opt-in on landing pages when the list quality matters more than list size.
- Never import purchased, scraped, or “shared” lists. No attestation makes those legitimate, and one spam-trap hit can suspend your sending account.
- Remove stale addresses. Recipients who haven’t engaged in years complain more and bounce more. See Cleaning Your List — and prefer unsubscribing over deleting, since deleting erases the consent record described above.
- Act on complaints immediately. Cyber Mail 9000 auto-suppresses bounces, complaints, and unsubscribes from connected providers — don’t work around it.