European Consent Management

#1 iubenda

Milan, Italy Founded 2011 Published plans per site per year Free tier

Best for: Small and mid-sized sites that need the policies as well as the banner

iubenda s.r.l. in Milan built the product that most of the web actually needs: a cookie banner that blocks scripts, together with a generated privacy policy and cookie policy that stay current as the law and your third-party services change. Pricing is published per site per year and there is a free tier, which in a category where enterprise vendors quote everything is the reason it reaches the audience it does.

The bundle is the point. A small company without a lawyer needs the policy text as much as the consent dialogue, and buying those separately costs more than the subscription. Two things to know: the wider legal-document features are generated from templates and are a starting point rather than counsel, and iubenda operates under the direction of team.blue NV, the Belgian hosting group, with consentmanager AB as a subsidiary. Still entirely European, and stated here rather than left to be discovered.

Standout feature. The policies come with it: for a company without a lawyer, the document generator is worth more than the banner it is attached to.

#2 Piwik PRO

Wroclaw, Poland Founded 2013 Free core plan / paid plans on request Free plan

Best for: Organisations that want consent and analytics from one European vendor

Piwik PRO SA in Wroclaw is unusual here because consent management is one module of an analytics suite rather than the product itself. For an organisation replacing Google Analytics anyway, that combination is efficient: the consent manager governs the analytics, the tag manager and the customer data platform beside it, all from one Polish company and with the option of private cloud or on-premises deployment.

That framing is also the limit. As a standalone CMP for a site running a mixed advertising stack, it is not aimed at you, and Didomi or consentmanager will fit better. There is a free core plan, but the paid tiers are quoted rather than published. Worth noting from the privacy policy: the group includes a German GmbH and a US LLC used for recruitment, with the Polish SA as the controlling entity you contract with.

Standout feature. Consent that governs the analytics it ships with: one vendor for the question and for what happens after the answer.

#3 Didomi

Paris, France Founded 2017 Quoted per organisation Demo on request

Best for: Publishers and enterprises with complex advertising and granular purposes

Didomi SAS in Paris is the enterprise end of this category and the closest European equivalent to what OneTrust and Sourcepoint sell. It is a registered IAB TCF vendor, which matters if you run programmatic advertising, and it handles the parts that get hard at scale: many purposes, many vendors, multiple brands and domains, consent synchronised across web, app and connected TV.

It is not the product for a small site, and the pricing model reflects that — quoted per organisation, with implementation support assumed. What you get for it is the audit trail and granularity that a publisher facing a data protection authority actually needs. One detail worth noting from their own legal notice: the site is hosted with Amazon Web Services, which does not affect where Didomi is established but is the sort of thing readers of this directory tend to want stated.

Standout feature. Built for the publisher facing a regulator: granularity and an audit trail that hold up when someone asks for proof.

#4 Complianz

Groningen, Netherlands Founded 2018 Free plugin / paid licences per site per year Free version

Best for: WordPress sites that want blocking that actually works, for very little money

Complianz B.V. in Groningen made the decision the rest of this category avoided: it does one platform properly rather than every platform adequately. As a WordPress plugin it can integrate at a depth a generic script cannot, detecting the services a site actually uses, blocking them before consent, and generating the cookie policy from what it found rather than from what you remembered to declare.

For the very large share of the web that runs on WordPress, that is the strongest option here and it costs a fraction of the alternatives, with a free version that covers a simple site. Outside WordPress it is not applicable at all, which is the trade. It is a small Dutch company, and a plugin is only as current as its updates — worth weighing for something that sits between your visitors and your analytics.

Standout feature. It scans your site and blocks what it finds: the cookie policy describes what is actually there rather than what you declared.

#5 consentmanager

Vasteras, Sweden Founded 2015 Published plans by monthly page views Free tier

Best for: Sites that want TCF-grade consent on published, traffic-based pricing

consentmanager AB, registered in Vasteras, sells a serious consent platform on pricing published by monthly page views rather than quoted per organisation. It is an IAB TCF registered CMP with A/B testing on banner variants, which is a genuinely useful feature nobody else here emphasises: consent rates differ substantially by wording and layout, and most companies never measure it.

The group relationship belongs in any comparison. consentmanager AB is a subsidiary of iubenda s.r.l., which itself sits under team.blue NV, so this and the entry at the top of this list are siblings rather than independent competitors. They are priced and sold separately and the products differ, but if you are shortlisting both as a way of comparing two vendors, you are not. The entity you contract with is Swedish; the group is Italian and Belgian.

Standout feature. It measures the banner: A/B testing consent wording is the only honest way to find out what your acceptance rate could be.

#6 CookieFirst

Netherlands Founded 2019 Published plans per domain per month Free trial

Best for: Agencies and companies managing consent across a number of domains

Digital Data Solutions B.V. sells CookieFirst as a straightforward, well-priced consent platform: automatic cookie scanning, a configurable banner in a long list of languages, script blocking and consent logging, priced per domain per month and published on the site. For an agency managing consent across many client sites, per-domain pricing that you can read without a call is the practical advantage.

It sits between Complianz at the low end and Didomi at the high end, and does not pretend otherwise. The multi-language coverage is genuinely broad, which matters for a business operating across several European markets. Its own site does not publish a registered address or KvK number, which for a directory that checks these things is worth stating: what is confirmed is a Dutch B.V. rather than a registered address we have read.

Standout feature. Priced per domain and published: the only entry here built for someone running consent on fifty sites at once.

#7 Cookie Information

Copenhagen, Denmark Founded 2013 Quoted per organisation Free trial

Best for: Nordic and northern European enterprises that need documented consent at scale

Cookie Information in Copenhagen has been doing this since 2013, which in this category means it was building for the ePrivacy Directive before GDPR made everyone else care. It is an IAB TCF registered CMP aimed at larger organisations, with the audit trail, multi-domain management and reporting that a company with a compliance function actually has to produce.

The pitch is documentation rather than features: what was shown, what was chosen, when, and for how long it is retained. That is the right emphasis for an enterprise, and it is also why the pricing is quoted per organisation with nothing published. Strongest in the Nordics and northern Europe, and for a small site it is more product and more process than the problem warrants.

Standout feature. Proof rather than a banner: built around producing the consent record a regulator asks for, which is the part that gets tested.