The best cookie consent software in 2027

A GDPR cookie banner has three jobs: ask for the visitor's agreement, block trackers until they have chosen, then keep proof of their answer. Consent management platforms (CMPs) automate this work, each in its own way: blocking, signals sent to Google, languages, billing. Here are the 10 tools we selected, their limitations, their published prices and the questions to ask before choosing.

The 10 best cookie consent software in 2027

1. Axeptio: a no-code banner, styled in the brand's colors, for the web and mobile apps.
2. Didomi: consent and preferences for international companies, on the web, mobile and connected TV.
3. OneTrust: the CMP within a wider suite covering privacy, third-party management and AI governance.
4. Usercentrics (Cookiebot): two ranges from the same vendor, Cookiebot Core for freelancers and young companies, Usercentrics Advanced for large organizations.
5. iubenda: banner, privacy policy, terms and conditions and accessibility widget in a single account.
6. CookieYes: a banner installed with one line of code, with a free plan for blogs and personal sites.
7. Termly: CMP and legal document generators, with European data stored in the EU.
8. tarteaucitron.io: a French CMP with an open source core, and a Pro license valid on an unlimited number of sites.
9. Sirdata: the ABconsent CMP, within a data offering for advertisers and publishers.
10. CookieHub: Google-certified CMP, 62 languages and a free tier under 1,000 sessions per month.

Why does the choice of a CMP weigh so heavily in 2027?

The rules of the game were set by the CNIL, France's data protection authority, in its guidelines and recommendation on cookies and other trackers, whose final version was adopted on September 17, 2020. Continuing to browse no longer counts as agreement. Refusing must take as little effort as accepting, and withdrawing consent must remain possible at any time. The organization that sets trackers must be able to prove, at any time, that it obtained valid consent. Finally, the CNIL recommends displaying a "reject all" button next to the "accept all" button.

According to the CNIL, these rules apply to every web player as soon as the user is located in France. In its review published on May 16, 2023, the CNIL states that it issued 94 formal notices following a campaign of 125 online inspections; it also imposed 8 penalties on cookies from 2020 to 2022, for a total of €421 million. The breaches cited: missing information, cookies set before any agreement, faulty refusal mechanism, refusal made harder than acceptance.

The trend continues. On September 3, 2025, the CNIL announced two fines, €325 million for Google and €150 million for SHEIN, presented as the continuation of the action plan launched in 2019. In the decision against SHEIN, advertising trackers were set as soon as visitors arrived on the site, before any interaction with the banner, and clicking "Reject all" did not stop new trackers from arriving.

Refusals also weigh on your figures: according to the latest wave of IFOP polls presented by the CNIL, the overall cookie refusal rate reached 39% in June 2022. To limit the loss of measurement, several vendors in this ranking pass the visitor's choice on to Google tags through Google Consent Mode v2, which adapts how these tags behave according to the consent given.

How did we rank these CMPs?

In October 2026, for each CMP, we read the home page, the feature overview and the price list published by the vendor. No software was bought for a paid test, and no partnership plays any part in the order chosen. Four criteria were used, in this order:

1. Blocking before the choice and proof of consent. Does the software block non-essential trackers before the visitor answers, and does it keep an exportable consent log? Both points are among the breaches the CNIL has penalized.

2. Signals sent to measurement and advertising tools. Support for Google Consent Mode v2, Microsoft's equivalent mode for its advertising tags (UET), and the IAB's TCF, the framework that passes the visitor's choices on to advertising vendors.

3. Published price and billing unit. A price displayed in euros, and a clear unit: page views, sessions, visitors, subpages or an unlimited license.

4. Scope. A banner alone, or a suite that also handles privacy policies, data access requests and compliance on other channels (mobile app, connected TV).

The 10 best cookie consent software: the reviews

1. Axeptio

Axeptio turns the banner into a communication asset: video, motion design, visuals and tone can be set so that the consent window reflects the brand's world, without writing code. The axeptio.eu address redirects to axept.io. The vendor splits its product into two platforms, Axeptio for Brands and Axeptio for Publishers, and covers consent on the web, in mobile apps and for terms of sale (the Terms widget).

Axeptio also offers a cookie scanner (Shake), A/B tests and plugins for Shopify, WordPress and PrestaShop. The site cites the GDPR, Quebec's Law 25, Canada's PIPEDA, California's CCPA and the GPC opt-out signal. The widget is available in 37 languages, right-to-left reading included.

Best for: brands that want a banner in their own image, and agencies, for which Axeptio reserves a multi-domain offer with 8 plugins for the main site management tools.

Strengths: extensive banner customization (video, fonts, positioning); Google Consent Mode v2 and consent log from the smallest plan; native development kits for iOS and Android.

Limitations: entry plans cover a single domain, with subdomains appearing only from the Large plan. The Extra Small plan lists neither the TCF nor the cookie scanner. The price of the mobile app kits is only given on request.

Pricing: Extra Small at €90 per year (also shown as €7 per month, paid annually); Small at €29 per month billed monthly or €313 per year billed annually, Medium at €69 or €745, Large at €129 or €1,393; 10% discount for annual billing; VAT treatment not stated (price checked on October 10, 2026).

2. Didomi

Didomi targets international companies that collect their users' consent and preferences and want to make more use of first-party data. Its consent platform rolls out centralized, customized banners across several markets and channels, from the GDPR to California's CCPA. A preference platform also collects customer choices on the web, mobile, email and at the point of sale, then sends them to the CRM or ad platforms.

The plans page also details a consent module for connected TVs (Android, iOS, Amazon Fire) and a scanning module that identifies each tracker, script and vendor, with audit-ready reports.

Best for: groups present in several countries that need to manage consent on the site, the app and connected TV from a single tool.

Strengths: unlimited number of domains in the consent offer; consent sync across domains and devices; programmable scans that reproduce several visitor consent behaviors.

Limitations: no price figure is published, every offer goes through a sales contact.

Pricing: on quote; the consent offer is billed by number of monthly unique visitors (MUV).

3. OneTrust

At OneTrust, cookie management is one building block of a suite that also covers privacy automation, third-party management, technology risk and AI governance. Its CMP collects consent and creates banners on websites, mobile apps and connected TV devices from a single platform, with an up-to-date inventory of cookies, development kits and tracking technologies.

The solutions page lists the IAB's TCF 2.2 among the supported frameworks, along with the GDPR.

Best for: companies that want to handle consent, vendor management and AI governance in the same tool.

Strengths: a single deployment for web, mobile and connected TV; banner customization in the brand's colors; centralized publication of data protection policies.

Limitations: prices are requested through a form. Centralized policy publication requires a minimum volume. The site puts AI governance first, and the CMP is only one of the six solution families on offer.

Pricing: not published; the CMP is billed by average number of daily visitors, cumulated across all channels and properties.

4. Usercentrics (Cookiebot)

Usercentrics also publishes Cookiebot, which its site calls "Cookiebot CMP by Usercentrics"; the two therefore share a single review. Usercentrics offers an automated, fully customizable web CMP, designed for SMEs and growing companies, also available for mobile apps and connected TV, along with a privacy policy generator.

Cookiebot is split into two ranges: Cookiebot Core, for freelancers and young companies, and Usercentrics Advanced, for multi-brand, multi-region organizations. Its patented scanner analyzes the site every month, and non-essential cookies stay blocked until consent. The solution configures Consent Mode for Google, Microsoft and Amazon, and supports more than 47 languages with automatic translation.

Best for: freelancers and young companies that want a solution ready in a few minutes (Cookiebot Core), and multi-brand groups (Usercentrics Advanced).

Strengths: free Cookiebot plan up to 50 subpages on one domain; 14-day trial with no credit card; Google-certified CMP and Gold Tier partner for Consent Mode.

Limitations: the privacy policy generator is advertised in English, Dutch, German and Italian, without French. Moving from Cookiebot Core to Usercentrics Advanced cannot be done directly from the interface. At Usercentrics, the subscription automatically moves up a tier when the session cap is exceeded.

Pricing: Usercentrics web CMP from €7 per month (Essential, up to 1,500 sessions) to €50 per month (Business, up to 50,000 sessions), excl. VAT; Cookiebot Premium from €7 per month, excl. VAT (prices checked on October 10, 2026).

5. iubenda

iubenda combines four tools: a banner that blocks cookies until consent, records each choice and syncs with Google Consent Mode, a privacy and cookie policy generator with clauses drafted by lawyers and available in 27 languages, a terms and conditions generator and an accessibility widget.

The Advanced Solutions offer adds a consent database synced with the CRM, management of access requests and the record of processing activities required by Article 30 of the GDPR.

Best for: sites that want to handle banner, privacy policy and terms and conditions with a single provider.

Strengths: Google-certified partner CMP validated by the IAB for TCF 2.3; automatic site scans with an alert in case of a compliance issue; free plan and 14-day trial.

Limitations: prices are per site, and each block of 1,000 page views beyond the cap is billed €0.05. The Essentials plan limits the policy to one language and 20 third-party services, and the mobile app kit is reserved for the Ultimate plan.

Pricing: from €4.99 per site per month (Essentials, up to 25,000 page views, billed annually) to €79.99 (Ultimate); €5.99 per month billed monthly. Prices excl. VAT, price checked on October 10, 2026.

6. CookieYes

The CookieYes site describes a Google-certified CMP, designed to automate consent management: you choose a banner template, customize it, then paste the code on your site. Automatic blocking holds back third-party scripts, such as Google Analytics or the Facebook pixel, until consent.

The banner is translated automatically into more than 30 languages based on the browser language and offers a "Revisit consent" button to withdraw agreement. The consent log keeps the anonymized IP address, country, date, time and status of the choice.

Best for: small sites and agencies that want a banner that is simple to install; agencies have a partner program with discounts of up to 50%.

Strengths: free plan with no credit card; integration with Google Tag Manager, Consent Mode V2 and IAB TCF v2.3; support for the browser's Do Not Track signal.

Limitations: only one free plan is allowed per account, and each additional domain needs a paid plan. At the end of the 14-day trial, your card is charged automatically if you do not cancel.

Pricing: free plan (5,000 page views per month); with the euro selected in the currency selector of the French pricing page, Basic at €9 per month per domain (100,000 page views) or €90 per year, Pro at €23 or €230, Ultimate at €50 or €500, excluding taxes (price checked on October 10, 2026).

7. Termly

Termly presents itself as an all-in-one compliance solution: consent management platform, cookie scanner, banner generator and a series of document generators (privacy policy, terms and conditions, legal notice, return and shipping policies, end user license agreement, accessibility statement). A personal data access request form can also be embedded on the site.

Termly is a Google-certified CMP partner with Gold status, supports the IAB's TCF 2.3 and stores European users' data in the EU or EEA.

Best for: sites and apps that want to generate their legal documents in the same place as their banner.

Strengths: free plan with cookie policy, banner and automatic blocker; embeddable preference center; consent sharing across subdomains.

Limitations: the free plan is limited to a basic policy, 10,000 banner views per month and a quarterly cookie scan. Google Consent Mode v2 and TCF 2.3 appear in the Pro+ plan's list, not in Starter's.

Pricing: when we checked, Termly's French pricing page listed its amounts in dollars: Starter at $10 per site per month billed annually, $14 monthly; Pro+ at $15 or $20; free plan.

8. tarteaucitron.io

tarteaucitron.io describes itself as a "French CMP for managing GDPR consent". Its core, tarteaucitron.js, has been open source since 2013 and is published on GitHub; it remains free to use, with no time limit, if you declare the site's services yourself. The Pro license adds an automatic mode: a single JavaScript tag is enough to detect, block and subject all services to consent, even those loaded by Google Tag Manager.

The online console sets the colors, texts and more than 50 banner options, in 36 languages. tarteaucitron automatically sends Google Consent Mode v2 signals for GA4 and Google Ads, Bing's consent mode for Clarity and Piano Analytics' consent mode.

Best for: agencies, freelancers and developers, who can install the Pro license on their clients' sites without paying per domain.

Strengths: a single license with no limit on sites, visitors or consents; more than 220 services supported; 7-day trial with no credit card and no automatic charge at the end.

Limitations: the free version is configured by hand, with no statistics or automatic updates, and the documentation and GitHub as the only support. The site does not mention the IAB's TCF: the advertised signals concern Google, Bing and Piano.

Pricing: Pro license at €25 excl. VAT for one month, €190 excl. VAT for one year, €490 excl. VAT for three years or €690 excl. VAT for life (price checked on October 10, 2026).

9. Sirdata

Sirdata offers a suite of multi-lever data solutions in which the ABconsent CMP is one product, alongside cookieless targeting, audience targeting and server-side Google Tag Manager. ABconsent is a fully customizable CMP for publishers and advertisers, certified for Google Consent Mode V2 and the IAB's TCF V2.2.

The CMP covers an unlimited number of domains, with 100% European hosting, consent statistics and purpose management by recipient. Sirdata also offers to finance the CMP through data collection, under eligibility conditions it sets. The Partner plan, aimed at agencies and freelancers, includes the ABconsent CMP free for their own site and free compliance audits for their clients.

Best for: publishers and advertisers that want the CMP, server-side tagging and ad targeting from a single provider.

Strengths: CMP certified for the IAB's TCF V2.2; unlimited domains from the Smart plan; 14-day trial with no payment method.

Limitations: the banner is offered in 16 languages. On the Smart plan, the GDPR and ePrivacy audit and the conditioning of video players (Video Wall) are paid options.

Pricing: ABconsent Smart from €25 per month, billed on usage based on page views (up to 10 million per month); 10% discount with an annual commitment; VAT treatment not stated (price checked on October 10, 2026).

10. CookieHub

CookieHub scans the site's cookies, collects consent and records proof of each choice. Each record includes the timestamp, the categories accepted, the consent ID and the applicable data protection framework. Non-essential scripts stay blocked until the visitor agrees, and a cookie declaration page is generated and kept up to date automatically.

The platform is Google-certified and supports Google Consent Mode v2, Microsoft UET consent mode, the IAB's TCF 2.4 and the GPC signal, the opt-out signal some browsers send and that CookieHub applies automatically when the law requires it. Banners display in 62 languages, follow WCAG accessibility rules and adapt to the visitor's country.

Best for: businesses of every size that want a published price, and agencies, which get an automatic 30% discount on each paid domain.

Strengths: billing per session, since a visitor can view several pages within one session; integrations with WordPress, Shopify, Wix, Squarespace, HubSpot, Magento and Google Tag Manager; 14-day trial with no credit card.

Limitations: on the free tier, the banner stops displaying as soon as the session cap is exceeded, until you move to a paid plan. Paid plans change tier automatically after two consecutive billing periods above their limit.

Pricing: Starter shown at €6 per month (up to 5,000 sessions), Basic at €10 and Business at €30, excluding taxes, billed monthly (annual billing is available); free tier under 1,000 sessions per month (price checked on October 10, 2026).

Comparison table of cookie consent software

Prices checked on October 10, 2026 on the vendors' sites. "Excl. VAT" means the page specifies a price excluding taxes.

Software	Who it is for	Key features	Billed by	Published entry price
Axeptio	Brands, publishers, agencies	Custom no-code banner, mobile app, A/B tests	Page views, per domain	€90 per year (Extra Small), VAT treatment not stated
Didomi	International companies	Consent, preferences, connected TV, tracker scanning	Monthly unique visitors	On quote
OneTrust	Companies that want a compliance suite	Web, mobile and connected TV CMP, governance	Average daily visitors	On quote
Usercentrics (Cookiebot)	From freelancers to multi-brand groups	Monthly scanner, automatic blocking, Google, Microsoft and Amazon Consent Mode	Sessions (Usercentrics), subpages (Cookiebot)	€7 per month, excl. VAT
iubenda	Sites that also want their legal documents	Banner, policies, terms and conditions, accessibility	Page views, per site	€4.99 per month billed annually, excl. VAT
CookieYes	Small sites, agencies	Scanner, automatic blocking, consent log	Page views, per domain	€9 per month per domain, excl. VAT
Termly	Sites and apps	CMP, document generators, access request form	Per site, banner views	Prices in dollars ($10 per month billed annually)
tarteaucitron.io	Agencies, freelancers, developers	Automatic mode, console, statistics	License with no site limit	€190 per year, excl. VAT
Sirdata	Publishers and advertisers	ABconsent CMP, TCF, server-side GTM	Page views	€25 per month (Smart), VAT treatment not stated
CookieHub	Businesses of every size, agencies	TCF 2.4, 62 languages, proof of consent	Sessions	€6 per month, excl. VAT

Other consent tools to know

Software	What it does
Commanders Act	Marketing data platform (PlatformX): collection, attribution, consent and activation.
consentmanager	Consent and compliance management platform for enterprise and publisher teams, with built-in A/B testing.
CookieFirst	CMP with periodic cookie scans and a cookie policy generator in more than 44 languages.
Secure Privacy	Combines cookie consent management and privacy governance, with a 30-day free trial.
Complianz	WordPress plugin and Shopify app for consent and privacy management.
CookieScript	Cookie scanning and privacy control, with a 14-day free trial and no credit card.
Osano	Privacy platform: cookie consent, data access requests, data mapping.
Ketch	Privacy software for businesses: consent, access requests, data mapping.
Dastra	AI governance and privacy platform: record of processing activities, data subject rights and cookie consent widget.
Cookie Information	Platform that blocks cookies before consent, scans the site automatically and keeps audit-ready proof.

What should you check before you commit?

1. Actual blocking before the choice. During the free trial, look at which cookies are set before any click on the banner. In the SHEIN decision, the CNIL found advertising trackers set as soon as the visitor arrived: this is the first point to check, whether the tool is free or not.

2. Refusal on the same level as acceptance. Check that the banner template on offer shows a reject button as visible as the accept button, and that refusing really stops new trackers from being set.

3. Proof and how long it is kept. The consent log must be exportable. Retention periods vary: at CookieHub, consent records are kept from one month to 12 months depending on the plan, and Cookiebot's pricing page advertises consent logging for up to 12 months.

4. The signals your tools need. If you use Google Analytics or Google Ads, require Google Consent Mode v2 in the plan you buy. If you sell advertising space, check which TCF version is supported. If your audience measurement is handled by a provider, have them check the chain between banner and tags; our ranking of data and analytics agencies can help you choose one.

5. The billing unit. Vendors count differently: page views (Axeptio, iubenda, CookieYes), sessions (Usercentrics, CookieHub), site subpages (Cookiebot), monthly unique visitors (Didomi) or average daily visitors (OneTrust). tarteaucitron.io sells a license with no limit on traffic or sites. Also read what happens if you go over.

Where does this ranking stop?

A CMP provides settings; whether your banner complies depends on how they are filled in. We installed none of these tools on a real site, and did not check their banners against the CNIL's rules: the reviews describe what each vendor publishes on its site. The SHEIN case shows that a banner can display "Reject all" without that refusal stopping the trackers. If an agency installs the banner, ask who configures it; our ranking of web design agencies can help you choose one.

For a few vendors, the detailed feature overview was missing from our reading: we then described the tool based on its home page and pricing. Check prices and plans on the vendor's site before you sign. Your traffic and your tools matter more than the rank. This ranking will be reviewed regularly, taking into account changes to the CNIL's rules on trackers.

Your banner is in place: how do you get found by people looking for your offer?

A good CMP preserves part of your measurement, but none of these tools is meant to place your pages on Google or get your brand cited by AIs like ChatGPT when a buyer asks them a question.

That is the work Sorank automates. The software writes articles designed for AI assistants, earns high-authority backlinks and fixes technical errors, with the aim of ranking your site on Google and in AI assistants (ChatGPT, Perplexity, Claude, Gemini, Grok). You then follow the citations obtained from your dashboard, and our guide to measuring AI citations in Google Analytics shows how to connect them to your visits.

If you want to see what Sorank would do on your site, book a call.

Conclusion

Three questions guide the choice of cookie consent software: on how many sites and channels you need to collect consent, which signals your measurement and advertising tools expect, and how your traffic will be counted on the bill. According to the CNIL, its rules apply as soon as the user is located in France, and the penalty imposed on SHEIN is a reminder that a "Reject all" button must actually stop trackers from being set.

For an agency or developer managing many client sites, tarteaucitron.io lets you cover all of them with a single Pro license. For a brand that wants a banner in its own image without writing code, Axeptio puts customization (video, motion design, fonts) at the center of its offer. For an international group collecting consent on the web, mobile and connected TV, Didomi brings these channels together in one platform, priced on quote.