EU-hosted CMP on Plusserver (DE) and UpCloud (FI) with no US processor in its published chain; IAB TCF v2.3 ID 31, 100K+ websites, from €23/mo; now a subsidiary of iubenda.
- FROM
- 23 €/mois
- CLOUD ACT
- NONE
Synthèse de la propriété et de l’exposition au CLOUD Act.
Munich-based CMP (founded 2017); 2.4M sites / 8.8B monthly consents; merged with Cookiebot in September 2021; ISO 27001 + SOC 2, runs on Google Cloud (Frankfurt and Belgium).
Usercentrics, dans la catégorie Consentement cookies, propose un hébergement européen, en Allemagne, mais une maison mère ou un sous-traitant américain laisse une exposition matérielle au CLOUD Act.
Usercentrics GmbH (Sendlinger Str. 7, Munich DE, AG München HRB 241272, founded 2017) is ISO/IEC 27001:2022 certified and SOC 2 Type 2 attested since August 2025, and consolidated the DACH cookie-consent market by merging with Cybot/Cookiebot in September 2021. The published DPA is explicit that the CMP runs on Google Cloud — Google Cloud EMEA Ltd (Dublin) is sub-processor #1, APIs and databases sit primarily Frankfurt and Belgium, and static assets ride Google's global CDN cache — with BunnyWay d.o.o. (Slovenia) and Hetzner Online GmbH (Germany) as the other two named sub-processors. Core consent data therefore rests with a US-owned hyperscaler under SCCs, which is what keeps cloud_act_exposure at material; the CDN in the widget path itself is EU-operated, unlike sibling product Cookiebot. The previously recorded Vista Equity Partners acquisition could not be substantiated on re-verification — see verification_notes.
Le degré d'exposition des données clients aux autorités américaines au titre du CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
Où se situe le contrôle ultime de la société exploitante.
Usercentrics GmbH (Sendlinger Str. 7, Munich, Germany; AG München HRB 241272; founded 2017) consolidated the DACH cookie-consent market when it merged with Cookiebot / Cybot in September 2021. Together the group serves 2.4M websites and 600K+ customers. The product line includes Usercentrics Web CMP (entry tier from 7 € per month, billed monthly and excluding VAT) and Usercentrics App CMP for mobile. ISO/IEC 27001:2022 certified and SOC 2 Type 2 attested since August 2025. A Vista Equity Partners acquisition was recorded on this listing in May 2026 and could not be substantiated on re-verification: the company's own about-us page describes it as backed by venture investors (Full In Partners, ALSTIN, Cavalry Ventures) against €27.2M of total funding, Wikipedia lists the rounds and no acquirer, and the legal notice names no parent. This listing therefore asserts no acquirer and records ownership as Siège UE, financement US, a flag that itself needs a paid-database check. The infrastructure point stands on its own: the published DPA is explicit that the CMP runs on Google Cloud, with Google Cloud EMEA Ltd (Dublin) as the first-named sub-processor and APIs and databases sitting primarily in Frankfurt and Belgium, so core consent data rests with a US-owned hyperscaler under SCCs even though the CDN in the widget path is EU-operated.
EU-hosted CMP on Plusserver (DE) and UpCloud (FI) with no US processor in its published chain; IAB TCF v2.3 ID 31, 100K+ websites, from €23/mo; now a subsidiary of iubenda.
Danish cookie consent (est. 2012, operated by Usercentrics A/S); ISO 27001 + ISO 27701 + SOC 2 Type 2; merged with Usercentrics in September 2021; CMP runs on Microsoft Azure Ireland.
Paris-based enterprise CMP (founded 2017); ISO 27001, Google-certified CMP; clients include Volvo, Michelin, Yahoo.