Zum Inhalt springen
EU VETTED

Cookiebot

Cookie-Einwilligung · Dänemark
Gegründet 2012 · cookiebot.com

Danish cookie consent (est. 2012, operated by Usercentrics A/S); ISO 27001 + ISO 27701 + SOC 2 Type 2; merged with Usercentrics in September 2021; CMP runs on Microsoft Azure Ireland.

Cookiebot bietet EU-Hosting in Irland, doch ein US-Mutterkonzern oder Unterauftragsverarbeiter hinterlässt ein materielles CLOUD-Act-Risiko. Gelistet unter Cookie-Einwilligung.

Bewertungsnotizen

Cookiebot is operated by Usercentrics A/S (Havnegade 39, Copenhagen DK, CVR DK34624607 — the renamed Cybot A/S, following the September 2021 Usercentrics/Cybot merger), ISO 27001 + ISO 27701 certified and SOC 2 Type 2 attested since August 2025. It runs no infrastructure of its own: Annex 2 of the publicly readable DPA puts the consent databases in Microsoft Azure, Ireland (Microsoft Ireland Operations Ltd, hot fail-over to Amsterdam) and names Akamai Technologies, Inc. (Cambridge MA, US) as the CDN that serves the consent script, holding a database in the US; the EU CDN alternative (BunnyWay, SI) applies only to customers who actively select it. Two US-owned processors therefore sit in the path of every consent event, so cloud_act_exposure stays material. The previously recorded Vista Equity Partners acquisition of the group could not be substantiated on re-verification — see verification_notes.

Befund

CLOUD Act
Eigentümer
Unterauftragsverarbeiter
— nicht offengelegt

Geprüfte Signale

Jurisdiktion
  • EU-/Angemessenheits-Hosting: Ja
  • EU-/Angemessenheits-Betreiber: Ja
  • Keine US-CLOUD-Act-Exposition: Nein
Transparenz
  • Öffentlicher AVV: Ja
  • Unterauftragsverarbeiter offengelegt: Ja
  • Open-Source-Clients: Nein
  • Zertifizierung durch Dritte: Ja
Springen zu

Über Cookiebot

Cookiebot (operated by Usercentrics A/S, Havnegade 39, Copenhagen, CVR DK34624607, the renamed Cybot A/S, founded 2012) is one of the largest consent management platforms in Europe: 2.4M websites, 8.8B monthly consents, 600K+ customers, Google-certified Gold-tier CMP partner, ISO 27001 + ISO 27701 certified and SOC 2 Type 2 attested since August 2025. Cybot and Usercentrics merged in September 2021. A Vista Equity Partners acquisition of the group was recorded on this listing in May 2026 and could not be substantiated on re-verification: Usercentrics' own about-us page describes the company as backed by venture investors (Full In Partners, ALSTIN, Cavalry Ventures) against total funding of €27.2M, and neither imprint nor the Handelsregister record (AG München HRB 241272) names a private-equity parent. This listing therefore asserts no acquirer and records ownership as EU-Sitz, US-finanziert, a flag that still needs a paid-database check of the cap table. The procurement-grade caveat is infrastructure rather than ownership: Cookiebot runs no Danish infrastructure of its own, its DPA states the group does not operate its own server resources, and Annex 2 puts the consent databases on Microsoft Azure in Ireland with hot fail-over to Amsterdam. The consent script every visitor loads is served by Akamai Technologies, Inc. (Cambridge, MA), whose Annex 2 entry records a database in the US, and the EU CDN alternative (BunnyWay, Slovenia) applies only to customers who actively select it. For a CMP the script path is the whole product, which is why exposure is recorded as Erheblich.

Unterauftragsverarbeiter-Karte · nicht offengelegt

Anbieter veröffentlicht keine Liste der Unterauftragsverarbeiter. Schrems-II-Konformität und CLOUD-Act-Risiko lassen sich ohne sie nicht unabhängig prüfen.

Rahmenwerke & Zertifizierungen

ISO/IEC 27001
Aktiv
ISO/IEC 27701
Aktiv
SOC 2
Aktiv
Hinweis · US-Rahmenwerk

Funktionsmatrix

Tabelle 1Funktionen von Cookiebot

White-Label Ja
IAB TCF v2 Ja
Google Consent Mode Ja
Automatischer Cookie-Scan Ja
Geo-Targeting Ja
Consent-Protokollierung Ja
Mehrsprachig Ja
Gratis-Tarif Ja

Integration & Zugriff

REST API Ja
SSO (SAML / OIDC) Ja

Compliance & Governance

Audit log Ja
Self-host / on-prem option Nein

Preise & Tarife

ab 7 €/Monat
Freemium
Preisseite ansehen

Öffentliche Dokumente

  • Auftragsverarbeitungsvertrag (AVV)
    www.cookiebot.com/en…
    Öffnen
  • Liste der Unterauftragsverarbeiter
    www.cookiebot.com/en…
    Öffnen
  • Nutzungsbedingungen
    www.cookiebot.com/en…
    Öffnen

Alternativen in dieser Kategorie

  • ConsentManager
    Deutschland · 23 €/Mt.
    EU-souverän
    Öffentl. AVV: Ja Subprozessoren: Ja Open Source: Nein
  • Didomi
    Frankreich
    EU-gehostet
    Öffentl. AVV: Nein Subprozessoren: Ja Open Source: Nein
  • Iubenda
    Italien · 5.99 €/Mt.
    EU-ansässig
    Öffentl. AVV: Ja Subprozessoren: Nein Open Source: Nein
Alle cookie-einwilligung-Alternativen ansehen