Onboarding shouldn't take longer than the GDPR requires
One link or QR code. Identity verified, consent collected, documents exchanged — in a single guided flow on their phone. Every step signed and auditable. No app. No integration. No IT department. Every decision issues a portable, signed receipt.
Five tools, two weeks, no Article 7 compliance
GDPR Article 7 requires demonstrable consent: a clear record of what was disclosed, when consent was given, and proof the record hasn't been altered. Most onboarding processes scatter this across email threads, PDF attachments, and CRM notes that no DPO can audit. When the DPA asks for evidence, you're searching five systems for a form someone might have signed.
- GDPR Article 7(1) requires controllers to demonstrate consent — an email attachment saying 'please sign and return' doesn't satisfy the demonstrability requirement
- Article 13 requires transparent disclosure of every processing purpose, legal basis, and retention period before data collection begins — most onboarding forms bury this in page 7 of a PDF
- DPAs across the EU have fined organisations for inadequate consent records during onboarding, particularly in financial services and healthcare
- Client drop-off during multi-system onboarding costs European SMEs an estimated 15-20% of potential revenue
One flow. Every step. Auditable forever.
The person scans a QR code or clicks a link and completes identity verification, consent, and document exchange in a single journey
Scan and go — no app, no integration
Print a QR poster for your reception desk. Send a link by email. Embed it on your website. The person opens it in their browser — no download, no account creation, no IT department on your end. Works on any phone, any browser.
Identity verification built in
Email-only for a gym membership. Full KYC with document verification for a financial advisory client. The flow adapts to the template — same infrastructure, different assurance levels. You choose; they complete.
Granular consent, not a wall of text
Each data practice gets its own toggle: what you collect, why, who sees it, how long you keep it. Required purposes are locked. Optional ones are clearly marked. The person chooses — and you have a record of every choice.
Documents in the same flow
Contracts, certificates, ID scans — exchanged within the consent flow. No separate upload portal. No 'please email us a scanned copy.' Encrypted in transit, linked to the consent record, stored per your retention policy.
Watch them complete it
Real-time progress: who started, which step they're on, who finished. Drop-off analytics show where people abandon. Channel attribution shows whether your QR poster, email link, or website embed converts better.
Proof that holds up
Every consent decision is cryptographically signed and tamper-evident. The record includes what was disclosed, when they consented, and which version of the terms they saw — continuously anchored. Export as JSON any time.
How it works
Pick a template
Choose from 6 industry templates — client intake, patient registration, member enrollment, student registration, tenant screening, vendor qualification. Pre-configured consent purposes, identity levels, and compliance settings.
Share a link
Generate a QR code, send an email link, or embed on your website. Every link is tracked — scan counts, channel attribution, conversion rates.
They complete it
Phone or laptop. Verify identity, review each data practice, toggle consent choices, submit. Average completion: under 3 minutes.
You have proof
Signed, timestamped, tamper-evident. Exportable, machine-readable, regulator-ready. No filing cabinets. No 'I think they signed something.'
Before and after
Without Overturo
- Identity check in system 1, consent form in system 2, documents in system 3, CRM in system 4, compliance notes in system 5
- Average onboarding time: 8-14 business days per person
- Staff spend 40+ hours per month on onboarding admin
- 23% of prospects abandon before completing all steps
- Consent records scattered across email, PDFs, and filing cabinets
- Regulator asks for proof — you need 3-5 days to find it
- Paper waivers challenged in court — no proof of what was shown
With Overturo
- One link. One flow. Identity, consent, documents, and audit trail in a single guided journey
- Average completion time: under 3 minutes on any phone
- Staff spend zero time chasing forms — the flow is self-service
- Completion rates above 90% — no extra logins, no app downloads
- Every consent record signed, timestamped, and searchable in one place
- Regulator asks for proof — export the full trail in under 60 seconds
- Digital signatures with a tamper-evident audit trail — tamper-proof by design
Works everywhere you meet someone new
Financial services
KYC identity verification, AML consent, third-party referral disclosure, data sharing agreements. Your compliance officer gets a signed consent trail for every client — searchable by name, date, or purpose. The FCA audit that used to take a week now takes an afternoon.
Healthcare
Patient intake: treatment consent, medical records access, emergency contacts, research opt-in. Each purpose has its own legal basis (vital interest for emergency, explicit consent for research). HIPAA-aware. Parental consent flow for minors. Integrates via webhooks.
Fitness & wellness
Liability waivers that hold up in court — with the exact text shown, the timestamp, and a digital signature. Members see the terms before creating an account (consent-first flow). Marketing opt-in is a separate toggle, not buried in paragraph 12. Your 6am regulars never see it again.
Education
Student registration with guardian consent for under-16s. Academic records transfer consent (FERPA-aware). School policy acknowledgment as a separate informed-consent step — not a checkbox at the bottom of a form, unless that checkbox issues a signed receipt with the wording the parent saw. COPPA-compliant age verification for younger students.
Property & lettings
Tenant screening starts with explicit consent for background checks, credit checks, and reference collection — before the check is run, not after. Every authorisation is timestamped and signed. When a tenant disputes a check, you can prove they consented on March 15th at 2:47pm.
Enterprise & procurement
Vendor qualification with data processing agreements, NDA acknowledgment, compliance documentation, and regulatory disclosure. Multi-party signing for contracts that need a CFO and a legal officer. One flow replaces a 47-email thread and a shared Google Drive folder.
Four ways to start onboarding
Choose what fits your workflow — or use all four
QR code
Print a poster. Mount it at reception. Clients scan with any phone camera — the flow loads in their browser. Track which posters get the most scans. Replace the poster any time without changing the link.
Email link
Send a personalised onboarding link. They click, they complete, you get notified. Bulk-send to 50 people at once. Each link tracks who opened it and who finished.
Website embed
Embed the flow on your website as an iframe, popup, or redirect. Publishable key authentication — no backend integration. Styled to match your brand. The person never leaves your site.
Your own sign-up form
Already have an intake or registration form? Keep it. Place the Overturo field where the consent checkbox is, or add one script to your existing checkbox, and every submission issues a signed receipt with the wording the person saw. Terms acceptance stays your own control.
Questions
- Can I keep my own sign-up form?
- Yes. Place the Overturo field where the consent checkbox is, or add one script to the checkbox you already have. Every submission issues a signed receipt with the wording the person saw; your terms checkbox stays your own control.
- Do people need an app or an account?
- No. The person scans a QR code or opens a link and completes the flow in their browser on any phone or laptop. Creating an account is optional.
- What does the person receive?
- A signed receipt with the exact wording they saw, when they decided and under which version of the terms, plus a page to withdraw from at any time.
- Is identity verification required?
- You choose per template: email-only for a gym membership, document verification for a financial advisory client. The same flow adapts to the assurance level you set.
Built for GDPR compliance
Every consent record satisfies the EDPB's requirements for demonstrable consent under Article 7(1)
Your data stays home
Overturo keeps each person's data in their home region — it never crosses a border to make onboarding work. Residency is preserved by architecture, not by promise, and verifiable proof travels with every record.
Onboarding included in every plan
The free plan includes 10 completed onboardings a month. Paid plans unlock higher volumes, QR tracking, progress analytics, document exchange, and priority support.
More from Overturo
The five-tool scramble ends here
Pick a template. Share a link. Start onboarding people in minutes, not weeks. No credit card required.