Skip to content
Independently verified · Quarterly re-audit
EU VETTED

Usercentrics

VERIFIED
Cookie consent · Germany
Founded 2017 · usercentrics.com ↗

Munich-based CMP (founded 2017); 2.4M sites / 8.8B monthly consents; now Vista Equity Partners-owned alongside Cookiebot.

In short

Usercentrics, in the Cookie consent category, offers EU hosting with Germany as its hosting location, but a US parent or sub-processor leaves material CLOUD Act exposure.

Assessment notes

Usercentrics GmbH (Munich DE, founded 2017) is ISO 27001 certified, German-operated, 2.4M websites / 8.8B monthly consents, but was acquired by Vista Equity Partners (US private equity) in 2024 alongside its Cookiebot subsidiary, flipping ownership_signal to eu_hq_us_funded with material CLOUD Act exposure via US PE control; the company now consolidates the DACH cookie-consent market under US PE.

CLOUD ACT
OWNERSHIP
SUB-PROCS
— not disclosed
Verified signals
Jurisdiction
  • EU / adequacy hosting
  • EU / adequacy operator
  • No US CLOUD Act exposure
Transparency
  • Public DPA
  • Sub-processors disclosed
  • Open-source clients
  • Third-party certification
JUMP TO
OVERVIEW

About Usercentrics

Usercentrics GmbH (Munich, Germany, founded 2017) consolidated the DACH cookie-consent market when it acquired Cookiebot / Cybot in 2022. Together the group serves 2.4M websites and 600K+ customers. The product line includes Usercentrics Web CMP (entry tier ~€10/mo) and Usercentrics App CMP for mobile. ISO 27001 certified. The 2024 acquisition by Vista Equity Partners (US private equity giant, $100B AUM, Austin TX) means the entire DACH cookie-consent market consolidation is now US-PE-owned at the ultimate-parent level, a structural fact procurement buyers should be aware of when this is positioned as a "European alternative to OneTrust".

SUB-PROCESSORS

Sub-processor map · not disclosed

Vendor does not publish a sub-processors list. Schrems II compliance and CLOUD Act exposure cannot be independently verified without it.
CERTIFICATIONS

Frameworks & certifications

ISO/IEC 27001
ACTIVE
FEATURES

Capability matrix

White-label Yes
IAB TCF v2 Yes
Google Consent Mode Yes
Auto cookie scan Yes
Geo-targeting Yes
Consent logging Yes
Multilingual Yes
Free tier Yes
INTEGRATION & ACCESS
REST API Yes
SSO (SAML / OIDC) Yes
COMPLIANCE & GOVERNANCE
Audit log Yes
Self-host / on-prem option No
PRICING

Pricing & tiers

FREEMIUM
from €10/mo
View pricing page ↗
PUBLIC DOCUMENTS

Public documents

  • Data Processing Addendum (DPA)
    usercentrics.com/wp-content…
    Open ↗
  • Sub-processors list
    trust.usercentrics.com/subprocessors…
    Open ↗
ALTERNATIVES

Alternatives in this category

ConsentManager
Germany · Founded 2017
EU-SOVEREIGN

German-owned CMP with own EU data centres (not hyperscaler); ISO 27001, IAB TCF v2 ID 31, 100K+ websites, from €23/mo.

Public DPA Sub-processors Open source
FROM
€23/mo
CLOUD ACT
NONE
View profile →
Cookiebot
Denmark · Founded 2012
EU-HOSTED

Danish cookie consent (Cybot A/S, est. 2012); ISO 27001 + ISO 27701; acquired by Usercentrics 2022 (now Vista Equity-owned).

Public DPA Sub-processors Open source
FROM
€11/mo
CLOUD ACT
MATERIAL
View profile →
Didomi
France · Founded 2017
EU-BASED

Paris-based enterprise CMP (founded 2017); ISO 27001, Google-certified CMP; clients include Volvo, Michelin, Yahoo.

Public DPA Sub-processors Open source
FROM
€19/mo
CLOUD ACT
MINOR
View profile →
See all cookie consent alternatives →