Zum Inhalt springen
CLOUD-Act-Risiko ausgewiesen
EU VETTED

Usercentrics

VERIFIZIERT
Cookie-Einwilligung · Deutschland
Gegründet 2017 · usercentrics.com ↗

Munich-based CMP (founded 2017); 2.4M sites / 8.8B monthly consents; merged with Cookiebot in September 2021; ISO 27001 + SOC 2, runs on Google Cloud (Frankfurt and Belgium).

Kurzfassung

Usercentrics aus der Kategorie Cookie-Einwilligung bietet EU-Hosting mit Deutschland als Hosting-Standort, doch ein US-Mutterkonzern oder Unterauftragsverarbeiter hinterlässt ein materielles CLOUD-Act-Risiko.

Bewertungsnotizen

Usercentrics GmbH (Sendlinger Str. 7, Munich DE, AG München HRB 241272, founded 2017) is ISO/IEC 27001:2022 certified and SOC 2 Type 2 attested since August 2025, and consolidated the DACH cookie-consent market by merging with Cybot/Cookiebot in September 2021. The published DPA is explicit that the CMP runs on Google Cloud — Google Cloud EMEA Ltd (Dublin) is sub-processor #1, APIs and databases sit primarily Frankfurt and Belgium, and static assets ride Google's global CDN cache — with BunnyWay d.o.o. (Slovenia) and Hetzner Online GmbH (Germany) as the other two named sub-processors. Core consent data therefore rests with a US-owned hyperscaler under SCCs, which is what keeps cloud_act_exposure at material; the CDN in the widget path itself is EU-operated, unlike sibling product Cookiebot. The previously recorded Vista Equity Partners acquisition could not be substantiated on re-verification — see verification_notes.

CLOUD ACT
Eigentümer
Unterauftr.
nicht offengelegt
Geprüfte Signale
Jurisdiktion
  • EU-/Angemessenheits-Hosting
  • EU-/Angemessenheits-Betreiber
  • Keine US-CLOUD-Act-Exposition
Transparenz
  • Öffentlicher AVV
  • Unterauftragsverarbeiter offengelegt
  • Open-Source-Clients
  • Zertifizierung durch Dritte
Springen zu
Überblick

Über Usercentrics

Usercentrics GmbH (Sendlinger Str. 7, Munich, Germany; AG München HRB 241272; founded 2017) consolidated the DACH cookie-consent market when it merged with Cookiebot / Cybot in September 2021. Together the group serves 2.4M websites and 600K+ customers. The product line includes Usercentrics Web CMP (entry tier from 7 € per month, billed monthly and excluding VAT) and Usercentrics App CMP for mobile. ISO/IEC 27001:2022 certified and SOC 2 Type 2 attested since August 2025. A Vista Equity Partners acquisition was recorded on this listing in May 2026 and could not be substantiated on re-verification: the company's own about-us page describes it as backed by venture investors (Full In Partners, ALSTIN, Cavalry Ventures) against €27.2M of total funding, Wikipedia lists the rounds and no acquirer, and the legal notice names no parent. This listing therefore asserts no acquirer and records ownership as EU-Sitz, US-finanziert, a flag that itself needs a paid-database check. The infrastructure point stands on its own: the published DPA is explicit that the CMP runs on Google Cloud, with Google Cloud EMEA Ltd (Dublin) as the first-named sub-processor and APIs and databases sitting primarily in Frankfurt and Belgium, so core consent data rests with a US-owned hyperscaler under SCCs even though the CDN in the widget path is EU-operated.

Unterauftragsverarbeiter

Unterauftragsverarbeiter-Karte · nicht offengelegt

Anbieter veröffentlicht keine Liste der Unterauftragsverarbeiter. Schrems-II-Konformität und CLOUD-Act-Risiko lassen sich ohne sie nicht unabhängig prüfen.
Zertifizierungen

Rahmenwerke & Zertifizierungen

ISO/IEC 27001
AKTIV
SOC 2
AKTIV
Hinweis · US-Rahmenwerk
Funktionen

Funktionsmatrix

White-Label Ja
IAB TCF v2 Ja
Google Consent Mode Ja
Automatischer Cookie-Scan Ja
Geo-Targeting Ja
Consent-Protokollierung Ja
Mehrsprachig Ja
Gratis-Tarif Ja
INTEGRATION & ZUGRIFF
REST API Yes
SSO (SAML / OIDC) Yes
COMPLIANCE & GOVERNANCE
Audit log Yes
Self-host / on-prem option No
Preise

Preise & Tarife

FREEMIUM
ab 7 €/Monat
Preisseite ansehen ↗
Öffentliche Dokumente

Öffentliche Dokumente

  • Auftragsverarbeitungsvertrag (AVV)
    usercentrics.com/wp-content…
    Öffnen ↗
  • Liste der Unterauftragsverarbeiter
    trust.usercentrics.com/subprocessors…
    Öffnen ↗
Alternativen

Alternativen in dieser Kategorie

ConsentManager
Deutschland · Gegründet 2017
EU-SOUVERäN

EU-hosted CMP on Plusserver (DE) and UpCloud (FI) with no US processor in its published chain; IAB TCF v2.3 ID 31, 100K+ websites, from €23/mo; now a subsidiary of iubenda.

Öffentl. AVV Subprozessoren Open Source
FROM
23 €/Mt.
CLOUD ACT
NONE
Cookiebot
Dänemark · Gegründet 2012
EU-GEHOSTET

Danish cookie consent (est. 2012, operated by Usercentrics A/S); ISO 27001 + ISO 27701 + SOC 2 Type 2; merged with Usercentrics in September 2021; CMP runs on Microsoft Azure Ireland.

Öffentl. AVV Subprozessoren Open Source
FROM
7 €/Mt.
CLOUD ACT
MATERIAL
Didomi
Frankreich · Gegründet 2017
EU-GEHOSTET

Paris-based enterprise CMP (founded 2017); ISO 27001, Google-certified CMP; clients include Volvo, Michelin, Yahoo.

Öffentl. AVV Subprozessoren Open Source
FROM
CLOUD ACT
MATERIAL