Every European consent management tool reviewed
Milan, Italy
Founded 2011
Published plans per site per year
Free tier
Best for: Small and mid-sized sites that need the policies as well as the banner
iubenda s.r.l. in Milan built the product that most of the web actually needs: a cookie banner that blocks scripts, together with a generated privacy policy and cookie policy that stay current as the law and your third-party services change. Pricing is published per site per year and there is a free tier, which in a category where enterprise vendors quote everything is the reason it reaches the audience it does.
The bundle is the point. A small company without a lawyer needs the policy text as much as the consent dialogue, and buying those separately costs more than the subscription.
Two things to know: the wider legal-document features are generated from templates and are a starting point rather than counsel, and iubenda operates under the direction of team.blue NV, the Belgian hosting group, with consentmanager AB as a subsidiary. Still entirely European, and stated here rather than left to be discovered.
What iubenda does well
- Banner, privacy policy and cookie policy in one subscription
- Published per-site pricing and a free tier
- Italian company, EU processing
- Script blocking that works across platforms, not just WordPress
Where iubenda falls short
- Generated legal documents are a starting point, not legal advice
- Part of the team.blue group, with consentmanager as a sibling product
- Less granular than Didomi for complex advertising setups
Standout feature. The policies come with it: for a company without a lawyer, the document generator is worth more than the banner it is attached to.
Wroclaw, Poland
Founded 2013
Free core plan / paid plans on request
Free plan
Best for: Organisations that want consent and analytics from one European vendor
Piwik PRO SA in Wroclaw is unusual here because consent management is one module of an analytics suite rather than the product itself. For an organisation replacing Google Analytics anyway, that combination is efficient: the consent manager governs the analytics, the tag manager and the customer data platform beside it, all from one Polish company and with the option of private cloud or on-premises deployment.
That framing is also the limit. As a standalone CMP for a site running a mixed advertising stack, it is not aimed at you, and Didomi or consentmanager will fit better. There is a free core plan, but the paid tiers are quoted rather than published. Worth noting from the privacy policy: the group includes a German GmbH and a US LLC used for recruitment, with the Polish SA as the controlling entity you contract with.
What Piwik PRO does well
- Consent, analytics, tag manager and CDP from one European vendor
- Polish company, with EU cloud, private cloud or on-premises options
- Free core plan
- Consent governs the analytics rather than sitting beside it
Where Piwik PRO falls short
- Not aimed at being a standalone CMP
- Paid tiers quoted rather than published
- Group includes a German GmbH and a US LLC alongside the Polish parent
Standout feature. Consent that governs the analytics it ships with: one vendor for the question and for what happens after the answer.
Paris, France
Founded 2017
Quoted per organisation
Demo on request
Best for: Publishers and enterprises with complex advertising and granular purposes
Didomi SAS in Paris is the enterprise end of this category and the closest European equivalent to what OneTrust and Sourcepoint sell. It is a registered IAB TCF vendor, which matters if you run programmatic advertising, and it handles the parts that get hard at scale: many purposes, many vendors, multiple brands and domains, consent synchronised across web, app and connected TV.
It is not the product for a small site, and the pricing model reflects that — quoted per organisation, with implementation support assumed.
What you get for it is the audit trail and granularity that a publisher facing a data protection authority actually needs. One detail worth noting from their own legal notice: the site is hosted with Amazon Web Services, which does not affect where Didomi is established but is the sort of thing readers of this directory tend to want stated.
What Didomi does well
- IAB TCF registered, built for programmatic advertising
- Granular purposes, multi-brand and multi-domain support
- Consent synchronised across web, app and connected TV
- French company, EU processing
Where Didomi falls short
- Quoted per organisation; not aimed at small sites
- Implementation assumes technical resource
- Their own site is hosted on AWS
Standout feature. Built for the publisher facing a regulator: granularity and an audit trail that hold up when someone asks for proof.
Groningen, Netherlands
Founded 2018
Free plugin / paid licences per site per year
Free version
Best for: WordPress sites that want blocking that actually works, for very little money
Complianz B.V. in Groningen made the decision the rest of this category avoided: it does one platform properly rather than every platform adequately. As a WordPress plugin it can integrate at a depth a generic script cannot, detecting the services a site actually uses, blocking them before consent, and generating the cookie policy from what it found rather than from what you remembered to declare.
For the very large share of the web that runs on WordPress, that is the strongest option here and it costs a fraction of the alternatives, with a free version that covers a simple site. Outside WordPress it is not applicable at all, which is the trade. It is a small Dutch company, and a plugin is only as current as its updates — worth weighing for something that sits between your visitors and your analytics.
What Complianz does well
- Genuine script blocking through deep WordPress integration
- Scans the site and generates the cookie policy from what it finds
- Free version, paid licences per site at low cost
- Dutch company, runs on your own site
Where Complianz falls short
- WordPress only
- Small vendor for a component this critical
- Depends on plugin updates keeping pace with service changes
Standout feature. It scans your site and blocks what it finds: the cookie policy describes what is actually there rather than what you declared.
Vasteras, Sweden
Founded 2015
Published plans by monthly page views
Free tier
Best for: Sites that want TCF-grade consent on published, traffic-based pricing
consentmanager AB, registered in Vasteras, sells a serious consent platform on pricing published by monthly page views rather than quoted per organisation. It is an IAB TCF registered CMP with A/B testing on banner variants, which is a genuinely useful feature nobody else here emphasises: consent rates differ substantially by wording and layout, and most companies never measure it.
The group relationship belongs in any comparison. consentmanager AB is a subsidiary of iubenda s.r.l., which itself sits under team.blue NV, so this and the entry at the top of this list are siblings rather than independent competitors. They are priced and sold separately and the products differ, but if you are shortlisting both as a way of comparing two vendors, you are not. The entity you contract with is Swedish; the group is Italian and Belgian.
What consentmanager does well
- IAB TCF registered with published, traffic-based pricing
- A/B testing on banner variants, which few competitors offer
- Free tier available
- Swedish entity, EU processing
Where consentmanager falls short
- A subsidiary of iubenda, so not an independent alternative to it
- Interface is functional rather than polished
- Support is thinner than the enterprise options
Standout feature. It measures the banner: A/B testing consent wording is the only honest way to find out what your acceptance rate could be.
Netherlands
Founded 2019
Published plans per domain per month
Free trial
Best for: Agencies and companies managing consent across a number of domains
Digital Data Solutions B.V. sells CookieFirst as a straightforward, well-priced consent platform: automatic cookie scanning, a configurable banner in a long list of languages, script blocking and consent logging, priced per domain per month and published on the site. For an agency managing consent across many client sites, per-domain pricing that you can read without a call is the practical advantage.
It sits between Complianz at the low end and Didomi at the high end, and does not pretend otherwise. The multi-language coverage is genuinely broad, which matters for a business operating across several European markets. Its own site does not publish a registered address or KvK number, which for a directory that checks these things is worth stating: what is confirmed is a Dutch B.V. rather than a registered address we have read.
What CookieFirst does well
- Published per-domain pricing, easy to scale across client sites
- Automatic scanning and script blocking
- Broad language coverage for multi-market operations
- Dutch company, EU processing
Where CookieFirst falls short
- Registered address and KvK number are not published on the site
- Less granular than Didomi for programmatic advertising
- Smaller vendor with a lighter support offering
Standout feature. Priced per domain and published: the only entry here built for someone running consent on fifty sites at once.
Copenhagen, Denmark
Founded 2013
Quoted per organisation
Free trial
Best for: Nordic and northern European enterprises that need documented consent at scale
Cookie Information in Copenhagen has been doing this since 2013, which in this category means it was building for the ePrivacy Directive before GDPR made everyone else care. It is an IAB TCF registered CMP aimed at larger organisations, with the audit trail, multi-domain management and reporting that a company with a compliance function actually has to produce.
The pitch is documentation rather than features: what was shown, what was chosen, when, and for how long it is retained. That is the right emphasis for an enterprise, and it is also why the pricing is quoted per organisation with nothing published. Strongest in the Nordics and northern Europe, and for a small site it is more product and more process than the problem warrants.
What Cookie Information does well
- IAB TCF registered, built for documented consent at scale
- Strong audit trail and reporting for compliance functions
- Danish company since 2013, EU processing
- Multi-domain and multi-brand management
Where Cookie Information falls short
- Quoted pricing with nothing published
- Aimed at enterprises rather than small sites
- Strongest in the Nordics and northern Europe
Standout feature. Proof rather than a banner: built around producing the consent record a regulator asks for, which is the part that gets tested.
Munich, Germany
Founded 2017
Free up to 1,000 sessions/month (1 domain, 1 regulation); Essential €7/month (1,500 sessions); Plus €15/month (3,000 sessions, unlimited regulations); Pro €30/month (15,000 sessions, 3 domains); Business €50/month (50,000 sessions, 10 domains); Corporate on request (1M+ sessions, unlimited domains); monthly billing
14-day free trial, no credit card required
Best for: Mid-market teams that want a large, well-known European CMP
Usercentrics GmbH in Munich is the largest name in this category most readers will already recognise, and one of the few consent platforms with published pricing at every tier: a free plan for up to 1,000 sessions on one domain, then €7, €15, €30 and €50 a month as sessions and domains grow, with a 14-day trial before any card is needed.
Auto-blocking, a privacy policy generator and TCF v2.4 support cover the same ground as the enterprise vendors, at a price a small marketing team can approve without a procurement process.
Founded in Munich in 2017, Usercentrics GmbH is registered at Sendlinger Straße 7 (HRB 241272, Amtsgericht München).
In September 2021 it merged with the Danish company behind Cookiebot — itself the American-market incumbent this whole category is often measured against — so Cookiebot is now sold as "Cookiebot by Usercentrics" under a separate Danish entity, Usercentrics A/S. That is worth knowing before shortlisting both names as independent options. One gap: Usercentrics publishes no data-residency statement for where consent records are actually stored, which several smaller entries in this list do give.
What Usercentrics does well
- Published pricing at every tier, including a free plan
- Auto-blocking and a privacy policy generator in one product
- German company, IAB TCF v2.4 support
- 14-day free trial, no credit card required
Where Usercentrics falls short
- No published data-residency statement for consent records
- Now the parent of Cookiebot, sold as a separate Danish product
- Higher tiers priced by session volume, which climbs quickly for busy sites
Standout feature. Usercentrics is the only entry here that also owns the incumbent the rest of this category gets compared to: Cookiebot.
Montpellier, France
Founded 2016
Extra Small €90/year or €7/month (up to 30,000 pageviews/year, 1 domain); Small €313/year or €29/month (60,000 pageviews); Medium €745/year or €69/month (1.2M pageviews); Large €1,393/year or €129/month (6M pageviews); Enterprise on request; annual billing saves about 10%
Best for: Small French and Benelux sites that want a free scanner and clear prices
Axeptio is published by AGILITATION SAS, trading as Axeptio, from Montpellier, and its free "Shake" scanner is the fastest way in this category to see what a site is actually tracking before buying anything.
The consent banner is no-code, pricing is published down to the Extra Small tier at €90 a year (or €7 a month), and TCF support, a cookie scanner and basic statistics arrive from the Small plan at €29 a month. Axeptio holds IAB TCF v2.3 certification and a Gold rating in Google's CMP Partner Programme, which puts it on the same accreditation footing as Didomi for programmatic advertising.
AGILITATION SAS was registered in France in 2016 (SIREN 821 947 009), with the Axeptio brand dated from 2017 and an establishment in Montpellier.
A mobile SDK extends the same consent record to iOS App Tracking Transparency and Android permissions, useful for a team running both a site and an app from one vendor. What is missing from the public pages is a data-residency statement: nothing on axept.io says which country actually hosts the consent records, only that the company itself is French.
What Axeptio does well
- Free cookie scanner (Shake) before you commit to anything
- IAB TCF v2.3 certified with Google CMP Gold status
- Published pricing from €90/year for a small site
- Mobile SDK covers iOS ATT and Android permissions too
Where Axeptio falls short
- No published data-residency statement for consent records
- Pricing shown mainly through a currency selector rather than one fixed EUR list
- Smaller company than the enterprise names in this category
Standout feature. The free Shake scanner: Axeptio is one of the few vendors here that lets you see what your own site is tracking before paying for anything.
Berlin, Germany
Founded 2019
Open-source client-side version free forever; paid Startup €19/month billed annually (€25 billed monthly); Company €79/month annually (€99 monthly); Group €239/month annually (€299 monthly)
7-day free trial, no card required
Best for: Developers who want an open-source consent widget they can inspect
Klaro is the one CMP in this category you can read the source code of before you trust it: the client-side widget is BSD-3-Clause licensed on GitHub, maintained by KIProtect GmbH in Berlin, and free to run indefinitely with no server dependency. For a technical team that wants to verify exactly what a consent tool does rather than take a vendor's word for it, that is a different kind of guarantee than any certification in this list.
KIProtect GmbH was founded in Berlin in 2019 (HRB 208395B) by Dr Andreas Dewes, and sells hosted tiers on top of the same open-source core for teams that want scanning and server-side consent records without running their own: Startup at €19 a month billed annually (€25 billed monthly), up to Group at €239 a month for large agencies, all with a 7-day free trial.
The trade-off is scale: this is a small, developer-oriented vendor next to Usercentrics or Didomi, with no IAB TCF registration and no published data-residency statement for the hosted tiers.
What Klaro does well
- Client-side core is open source (BSD-3-Clause) on GitHub
- Free forever for a self-hosted, self-configured site
- German company, hosted tiers add scanning and server-side records
- 7-day free trial on paid tiers, no card required
Where Klaro falls short
- Self-hosted use needs basic JavaScript knowledge to configure
- No IAB TCF registration
- Small vendor; hosted-tier data residency is not published
Standout feature. The only CMP in this directory whose consent-blocking code you can actually read before you install it, under a BSD licence.
Vilnius, Lithuania
Free: 2 domains, 10 pages scanned, 10,000 monthly pageviews; Lite €6/month + €3/extra domain; Standard €7/month + €3.50/extra domain; Plus €9/month + €4.50/extra domain; annual subscription; 7-day money-back guarantee on paid plans
Free tier (2 domains); 7-day money-back guarantee on paid plans
Best for: Agencies running many small sites on a strict, published budget
CookieScript, operated by Objectis Ltd in Vilnius, undercuts most of this category on price and is upfront about every euro: a free plan for two domains, then Lite at €6 a month, Standard at €7 and Plus at €9, each adding €3 to €4.50 per extra domain rather than forcing a new subscription.
Automatic monthly scans, script blocking and a 42-language banner are standard from the Standard tier up, and the free tier alone covers 10,000 pageviews a month, enough for most personal or small business sites to never pay anything.
Objectis Ltd is registered in Lithuania (company number 304037472, Vilnius), and CookieScript states integration with IAB Europe's Transparency & Consent Framework on its own pages, though it does not carry the formal IAB TCF registered-CMP status that Didomi, Axeptio and Cookie Control hold.
No founding year or data-residency statement is published, and support is not aimed at the scale a Didomi or Cookie Information customer needs — this is a tool for someone managing a long list of small domains on a fixed budget, not a publisher's compliance function.
What CookieScript does well
- Free tier for two domains, 10,000 pageviews a month
- Published per-domain pricing at every paid tier
- 42 languages and automatic monthly rescans
- 7-day money-back guarantee on paid plans
Where CookieScript falls short
- No formal IAB TCF registered-CMP status, only stated framework integration
- No founding year or data-residency statement published
- Smaller support operation than the enterprise entries in this list
Standout feature. Per-domain pricing published down to the euro: CookieScript is the clearest entry here for anyone budgeting consent management across many small sites.
Hamburg, Germany
Founded 2018
€49/year for 1 website, €79/year for 3, €109/year for 5, €179/year for 10, €229/year for 25, €499/year for 99 websites; prices exclude VAT; no seasonal discounts
No free trial; 30-day money-back guarantee
Best for: WordPress sites that want a second, license-based option to Complianz
Borlabs Cookie is a WordPress-only plugin from Borlabs GmbH in Hamburg, and its entire pitch is that nothing leaves your server: the consent records, the banner configuration and the more than 370 pre-built service packages all run on your own WordPress install, with no data transmitted to Borlabs itself.
Pricing is per number of websites rather than per pageview — €49 a year for one site, rising to €499 for 99 — with no seasonal discounts and a 30-day money-back guarantee instead of a trial.
The company states it has been established since 2018 and supports Google Consent Mode v2, the IAB TCF 2.4 framework and Microsoft's UET consent signal, so the blocking itself is current.
It sits in the same niche as Complianz, already in this category, and does the same job in a narrower way: deep WordPress integration, none of Complianz's document-generation features, and a flat annual licence instead of Complianz's free-plus-paid model. A team already on WordPress with Complianz has little reason to also evaluate Borlabs; one starting from nothing should compare both before choosing.
What Borlabs Cookie does well
- Self-hosted consent data; nothing sent to Borlabs itself
- Per-site licensing from €49/year, no pageview limits
- Google Consent Mode v2, IAB TCF 2.4 and Microsoft UET support
- 370+ pre-configured service packages
Where Borlabs Cookie falls short
- WordPress only, like Complianz already in this category
- No free trial, only a 30-day money-back guarantee
- No document generation (privacy policy, cookie policy) unlike Complianz or iubenda
Standout feature. Licensed per website rather than per pageview or session, with a stated promise that no visitor data reaches Borlabs' own servers.
Edinburgh, Scotland, United Kingdom
Premium SM £75+VAT/year (700 URLs/scan); Premium MD £185+VAT/year (4,000 URLs, most popular); Premium LG £415+VAT/year (8,000 URLs); Enterprise on request; legacy Cookie Control v9: Community free, PRO £45+VAT/year, Multi-site £249+VAT/year
Best for: UK organisations that want ISO-certified consent with a paper trail
Cookie Control is sold by Civic Computing Limited, a Scottish company in Edinburgh trading since 2001, and it carries more stated third-party certification than anything else in this category: ISO 27001, 27017, 27018, 9001, 14001 and 20000-1, IAB Europe registration and Google Certified CMP Partner status together.
The current Premium tier auto-blocks cookies and trackers, scans up to 8,000 URLs depending on plan, and publishes every price: £75 a year for the smallest tier, up to £415 for the largest, plus VAT.
Civic Computing Limited is registered in Scotland (company number SC221925, incorporated 2001), which places it under the UK's adequacy decision rather than inside the EEA — the same position as SuiteCRM elsewhere in this directory, and a live rather than permanent arrangement.
Civic's own privacy policy states that data is hosted "within the UK/the European Economic Area", without naming which. The older Cookie Control v9 remains on sale in parallel at lower prices (a free Community edition, then £45 and £249 a year), which makes the current price list slightly more confusing to read than the rest of this category.
What Cookie Control does well
- Six stated ISO certifications plus IAB Europe registration
- Auto-blocking with published per-tier pricing
- Hosting stated as UK/EEA
- Long-running company, trading since 2001
Where Cookie Control falls short
- United Kingdom, outside the EEA and dependent on an adequacy decision
- Two parallel product lines (Premium and legacy v9) complicate the price comparison
- Exact hosting country not named, only "UK/the EEA"
Standout feature. The most third-party-certified consent platform in this directory, though the jurisdiction sits outside the EEA on an adequacy decision.
