hello@datascale.de+49 89 921 35 623tracked cookie-free · /openDEEN

Search services, integrations and blog posts.

DatascaleIntegrationsConsent & CMP

Category

Consent Management Platforms Compared

Four CMPs we run in production, editorially scored on legal certainty, price, and ease of use.

4 integrationseditorially ratedas of July 2026
Borlabs Cookie

Borlabs GmbH

Self-hosted

The WordPress consent standard from Germany. Runs entirely on your own server, flat yearly license instead of traffic pricing, but no option outside WordPress.

4.6
Details →
Cookiebot

Usercentrics

EU region

The plug-and-play CMP for SMBs from the Usercentrics group. Automatic scanning and quick setup, but the auto-scan needs manual verification and the comfort ends at multi-domain.

4.4
Details →
Usercentrics

Usercentrics GmbH

Managed

Established German consent management platform. TCF-certified, proven in practice, broad integrations, but priced at the premium end.

4.1
Details →
OneTrust

OneTrust

Managed

Enterprise privacy suite from the US. CMP, cookie scanning and privacy ops in one platform, built for corporate setups with many jurisdictions and priced accordingly.

3.4
Details →

Back to the catalog →

Head-to-head

Consent & CMP side by side.

Score, rating axes and facts for every rated tool in this category, next to each other. Drop columns and add them back.

4 of 4 tools · Consent & CMP

CriterionBorlabs CookieSelf-hostedCookiebotEU regionUsercentricsManagedOneTrustManaged
Overall score4.64.44.13.4
Legal certainty4.0

German legal practice, content blockers, and Consent Mode v2 built in.

4.0

Auto-scan plus Consent Mode v2; the result deserves a manual check.

4.5

TCF 2.2, geo rules per jurisdiction, and a consent chain you can document.

4.5

CMP plus DSAR and assessments, privacy ops in one suite.

EU data sovereignty5.0

Runs entirely on your own server, German vendor. No consent record leaves your own infrastructure.

5.0

EU vendor with EU hosting. Cybot is based in Denmark and has belonged to the German Usercentrics group since 2021.

5.0

German vendor, German hosting, German contractual basis.

3.5

US vendor with documented EU environments on Azure, including a German one (Frankfurt, backup in Berlin). Consent states live centrally in the OneTrust cloud; there is no on-premise. Isolating traffic logs with IP addresses to a region is a separately requested option, not a default.

Value for money5.0

Fixed yearly licence instead of traffic pricing, runs on your own server.

4.0

Fair for single-domain setups; multi-domain quickly becomes Usercentrics territory.

3.0

Enterprise licensing by traffic. For a single domain Cookiebot is often cheaper, and it has belonged to the same group since 2021.

2.5

Firmly enterprise-priced, plus real implementation effort.

Ease of use4.5

Quick to set up as a WordPress plugin.

4.5

Plug and play, live in hours rather than weeks.

4.0

Central control across many domains, usable without admin training.

3.0

Powerful, but heavyweight to set up and administer. The banner script can be served from your own CDN and thus fully decoupled from OneTrust; the price is a manual script update on every change.

Pricing modelYearly license per siteFree tier; subscription by domain sizeSubscription by sessionsEnterprise license by modules
VendorBorlabs GmbH · GermanyUsercentrics · DenmarkUsercentrics GmbH · GermanyOneTrust · USA
Operating modelSelf-hostedEU-RegionManaged · EUManaged
Last reviewedJul 2026Jul 2026Jun 2026Jul 2026
When it fitsWhen the site runs on WordPress and a lean, affordable consent setup is enough.When one domain with a standard stack needs a solid banner fast.When you steer enterprise consent centrally across many domains, languages, and jurisdictions.When many jurisdictions, domains and privacy workflows need central control.
When it does notWhen several platforms, apps or jurisdictions need central management.When multi-domain, geo rules or TCF requirements demand central control.When an SMB setup is enough. Then Cookiebot, same vendor, is the plug-and-play tier.When one website needs a lean consent setup on a mid-market budget.

Every value comes from our individual reviews, scored against the review methodology. Prices without warranty, no paid placement.

The CMP decides which data your tracking is allowed to see in the first place. We score the platforms on what counts in projects: legal certainty, pricing structure, and how cleanly Consent Mode V2 and GTM connect.

When this category matters

In every setup with consent-gated tags, so practically always. The tool question turns acute with TCF duties from Google Ads usage, with legal risk from outdated banners, and when consent rates drop without explanation.

Decision criteria

  • Legal certainty: TCF certification, documentation, court-proof logging.
  • Signal integration: how reliably do consent states reach GTM and Consent Mode V2?
  • Pricing model by sessions, domains, or modules, priced against your scale.
  • Platform fit: WordPress sites have different needs than enterprise multisites.

Common stack combinations

How these consent tools pair with the analytics and tagging stack lives in the GDPR tools overview.

Related services

Asked often

Do I need a CMP at all?

As soon as marketing tags run on consent, yes. A home-built consent layer rarely survives the documentation requirements.

What does CMP operation realistically cost?

The licence is the smaller line. Broken signal mappings that silently cost conversions are the expensive part; that is exactly where a consent audit starts.

Tool decision

Which tool fits your situation.

The Stack Calculator gives you a first direction; the Audit Sprint decides with numbers from your own traffic.

GDPR Stack Calculator Request an Audit Sprint