A: Hi Mr Johnson,
Thanks, glad to hear that. To verify "Who" the person giving consent is, you can enable "Login Protection" on the forms, under the "Security" menu item on the right menu. This way you know for certain the verified e-mail address of the person giving consent on your form to whatever it is they're giving consent to (usually via a checkbox on the form), because they needed to login with that e-mail to see the form in the first place. E.g. if james@microsoft.com was logged on you know for certain that someone with that existing email address, from that organisation *definitely* was the person who gave the consent to whatever it is they are ticking on the form that was submitted. Email ID verification is a strong form of verification of "Who" it is giving the consent than other methods.
For publicly available forms though, where anyone can claim to be anyone because there is no login, (or for login protected forms where random logins are being accepted like "mr-johnson@yahoo.com"), it's a bit less straightforward. There's two pieces being developed to address this for more "public/anonymous form" scenarios:

#1. IP/client display (so form owners can see digital stamp of what device made the submission). This is often enough evidence, but you would need to get legal advice on your specific scenario.
#2 a "Signature Pad" style field too which is already in development but waiting on a client encryption key module to be completed where each customer can have their own individual encryption password to double encrypt sensitive content like signatures and is a big job so signature pad will be delay a bit.

Hope that helps!
Riaz