The best consent management platform (CMP) depends on your traffic and how much of your privacy program you want in one tool. Small sites can start on free plans from CookieYes, iubenda or Captain Compliance, while larger companies that also need data mapping and data subject requests often look at MineOS or Securiti. Whichever you pick, confirm it supports Google Consent Mode v2, honors Global Privacy Control signals and, if you run ads in Europe, is a Google-certified CMP integrated with the IAB TCF.
This guide is for site owners, marketers and privacy leads choosing the tool that runs their cookie banner and stores consent records. It covers options for everyone from a single low-traffic site to an enterprise with both web and mobile app consent to manage.
Price matters, but the bigger questions are whether a platform blocks tags until a visitor chooses, keeps a consent log you can export, passes those choices to Google tags and treats a Global Privacy Control signal as an opt-out for California visitors. If you serve personalized Google ads in the EEA, UK or Switzerland, Google certification belongs on that list too.
Below you will find five picks with their prices, free plan limits and standards support, followed by what CMPs cost, how to choose one, how the rules differ by region and the red flags to watch for.
Company reviews
- Starting price
- $499
- Free plan
- Yes
Why we picked it. Captain Compliance pairs its consent tool with implementation support, a dedicated support contact on paid plans and a scanner that checks your site for Global Privacy Control handling and dark patterns. Its law coverage leans into US risks such as CIPA wiretapping claims.
More details, pros and cons
Laws covered: CCPA and CPRA, CIPA, ECPA, US state laws, GDPR, UK GDPR, LGPD, Quebec Law 25 and more, per the company
Enterprise: Quote only; adds multiple domains, DSAR automation and on-premise options
Pros
- Free plan for personal sites
- Hands-on implementation support on paid plans
- Strong focus on US state laws and CIPA
- Free website privacy scan
Cons
- Paid plan price is steep for a small business
- Billing period and Consent Mode support not stated on the pricing page
- Compliance Shield program is not insurance, per the company
Skip it if: You run a small site with modest traffic and only need a banner that meets Google's requirements.
More about Captain Compliance
Captain Compliance provides structured privacy governance, strong automation and customizable consent tools. Best for organizations needing ongoing regulatory alignment and scalable compliance workflows.
Best for small businesses that also need privacy policy and terms generators: Iubenda
- Starting price
- $5.99
- Free plan
- Yes
- Google Consent Mode v2
- Yes, on all plans including free
Why we picked it. iubenda bundles its cookie banner with policy generators and geo-based consent settings, so a small site can handle its banner and legal pages with one vendor. The company says it serves more than 150,000 businesses.
More details, pros and cons
Higher tiers: Advanced $24.99 (50,000 pageviews) and Ultimate $99.99 (150,000 pageviews), per site per month billed yearly
Pros
- Free plan and a low entry price
- Consent Mode v2 on every plan, free included
- TCF 2.2 support and Google CMP Partner status
- Covers GDPR, US state laws, LGPD and Swiss FADP
Cons
- Overage charge of about $0.06 (€0.05) per 1,000 pageviews past your quota
- Per-site pricing adds up if you run many domains
Skip it if: You need DSAR automation and data mapping in the same platform as your banner.
More about Iubenda
Automated privacy policies and Google-certified consent management designed for plug-and-play compliance.
Best for teams that want consent tied to data mapping and DSR automation: MineOS
!Changed: MineOS
MineOS no longer offers its consumer app
MineOS sold its consumer privacy app to McAfee in November 2025 and now sells only to businesses. If you want help removing your personal data, our review below explains what changed and what to use instead.
Checked October 13, 2026.
- Google Consent Mode v2
- Yes
Why we picked it. MineOS feeds consent records into its data mapping, data subject request and audit workflows, so consent is part of a wider privacy program rather than a standalone banner. That makes it a better fit for an in-house privacy team than for a single small site.
More details, pros and cons
Pros
- One system for consent, DSRs and data mapping
- Consent Mode v2 and GPC support
- AI governance and vendor risk modules
Cons
- No public pricing
- More platform than a small site needs
Skip it if: You only need a cookie banner for one site.
More about MineOS
MineOS excels in data mapping, privacy request automation and ease of use, supported by strong user feedback. Best for teams seeking simple deployments with powerful insights.
Show all 5 picks2 more, ranked 4 to 5
Best for large enterprises with web and mobile app consent needs: Securiti
- Google Consent Mode v2
- Google-certified CMP
Why we picked it. Securiti handles consent for websites and mobile apps from inside a broader data security and privacy platform, and its CMP is Google-certified for the EEA and UK. It fits companies that already run an enterprise privacy program and want consent managed in the same place.
More details, pros and cons
Pros
- Google-certified CMP
- Consent for websites and mobile apps
- Part of a wider privacy and AI governance suite
Cons
- No public pricing
- Longer setup, given the enterprise focus
- Ownership change after the Veeam acquisition
Skip it if: You are a small business that wants to sign up and launch a banner the same day.
More about Securiti
Securiti offers advanced AI governance, data discovery and privacy-vault capabilities for highly regulated industries. Best for enterprises with complex data and AI environments.
Best for transparent pricing and a quick self-serve setup: CookieYes
- Starting price
- $10
- Free plan
- Yes, 5,000 pageviews per month
- Google Consent Mode v2
- Yes
Why we picked it. CookieYes lists every tier and pageview cap on its pricing page, so you can work out your cost before you sign up, and paying yearly gets you two months free. It also passes consent to both Google and Microsoft ad tags.
More details, pros and cons
Higher tiers: Pro $25 (300,000 pageviews) and Ultimate $55 (unlimited), per domain per month
Trial: 14-day free trial on paid plans; your card is charged afterward unless you cancel
Pros
- Clear public pricing
- Free plan for low-traffic sites
- IAB TCF v2.3 and Consent Mode v2
- Microsoft UET Consent Mode support
Cons
- Only one free plan per account
- Overage of $0.30 per 1,000 extra pageviews
- Geo-targeting starts on the Pro plan
Skip it if: You want consent, data subject requests and data mapping handled by one vendor.
More about CookieYes
CookieYes is a lightweight CMP offering automated cookie scanning, banner customization and a helpful free plan. Best for sites needing quick and simple cookie compliance.
What a consent management platform does
A CMP is the tool behind the cookie banner. It scans your site for cookies and trackers, shows visitors a choice, blocks tags until they consent, stores a record of each choice and passes that choice to tools like Google Analytics and ad platforms.
A banner alone is not enough. What counts is whether tags are actually blocked before consent, whether consent records are kept and whether opt-out signals like Global Privacy Control are honored.
How much a CMP costs
Most self-serve CMPs price per domain and by monthly pageviews, as listed October 2026:
- Free: CookieYes (5,000 pageviews), iubenda and Captain Compliance Personal (2,500 views).
- Small business: iubenda Essentials at $5.99 per site per month billed yearly; CookieYes Basic at $10 per domain per month.
- Growing sites: iubenda Advanced at $24.99; CookieYes Pro at $25 per domain per month billed monthly.
- Enterprise: MineOS and Securiti quote on request. Captain Compliance Professional is listed at $499, and its pricing page does not say whether that is monthly or yearly.
Watch overage fees. iubenda charges about $0.06 (€0.05) and CookieYes charges $0.30 for every 1,000 pageviews over your quota.
How to choose a CMP
- Check Google requirements. If you serve personalized Google ads in the EEA, UK or Switzerland, you need a Google-certified CMP integrated with the IAB TCF.
- Confirm Consent Mode v2. It passes consent choices to Google tags.
- Confirm Global Privacy Control. California treats GPC as a valid opt-out request.
- Count domains and traffic. Per-domain, per-pageview pricing changes the math fast.
- Decide on scope. If you also need DSARs, data mapping or records of processing, a platform like MineOS or Securiti may replace several tools.
How the rules vary by region and state
- EEA and UK: Google has required a certified CMP integrated with the TCF for personalized ads since January 16, 2024. Switzerland followed on July 31, 2024.
- California: The Attorney General says GPC must be honored as a request to stop the sale or sharing of personal information, and businesses must wait at least 12 months before asking you to opt back in.
- Other US states: Several states have their own privacy laws. Look for geo-targeting so visitors see the right banner for where they are.
Red flags when comparing CMPs
- The banner loads, but analytics or ad tags fire before the visitor chooses.
- No consent log, or no way to export consent records.
- No GPC handling for California visitors.
- Vague pricing that hides per-pageview overage fees.
- Claims that a tool makes you fully compliant. A CMP is one part of compliance, not a legal guarantee.
Terms to know
- CMP
- Consent management platform, the software that collects, stores and passes on visitor consent choices.
- IAB TCF
- The Transparency and Consent Framework, an ad industry standard for sharing consent signals.
- Google Consent Mode v2
- A Google feature that adjusts how Google tags behave based on each visitor's consent.
- Global Privacy Control (GPC)
- A browser signal that asks websites not to sell or share personal information.
- DSAR
- Data subject access request, a person's request to see or delete the data a company holds about them.
- Pageview
- A single load or reload of a page that carries the CMP code, and the unit most CMPs use for pricing.
