What data should be logged at opt-in for future verification?

At opt in you should record the email address, timestamp, IP address, signup source, form location, referral parameters, and consent status. This information is stored to safeguard compliance, demonstrate proof of consent, satisfy GDPR expectations, and maintain non repudiation, which is irrefutable proof that the person took the action of subscribing. This record protects both sender and subscriber.