Zum Inhalt springen
Unabhängig verifiziert · Quartalsweises Re-Audit
EU VETTED

Cookiebot

VERIFIZIERT
Cookie-Einwilligung · Denmark
Founded 2012 · cookiebot.com ↗

Danish cookie consent (Cybot A/S, est. 2012); ISO 27001 + ISO 27701; acquired by Usercentrics 2022 (now Vista Equity-owned).

Warum diese Bewertung?

Cookiebot by Cybot A/S (Copenhagen DK, founded 2012) is ISO 27001 + ISO 27701 certified with own Danish infrastructure, 600K+ customers, 2.4M sites; acquired by Usercentrics in 2022 — and Usercentrics in turn was acquired by Vista Equity Partners (US private equity) in 2024 — flipping the ownership chain to eu_hq_us_funded with material CLOUD Act exposure via the US-PE ultimate parent.

SCORE
3.0/5
CLOUD ACT
OWNERSHIP
SUB-PROCS
not disclosed
JUMP TO
OVERVIEW

About Cookiebot

**Cookiebot** (operated by **Cybot A/S**, Copenhagen, founded 2012) is one of the largest consent management platforms in Europe — 2.4M websites, 8.8B monthly consents, 600K+ customers, Google-certified Gold-tier CMP partner, **ISO 27001 + ISO 27701** certified, own Danish infrastructure. The procurement-grade caveat is the ownership chain: **Cybot was acquired by Usercentrics in 2022** for ~€100M+; **Usercentrics was then acquired by Vista Equity Partners** (US private equity) in 2024. So Cookiebot today is German-owned at the operating-group level but US-PE-controlled at the ultimate-beneficial-ownership level. For procurement teams evaluating DACH cookie-consent vendors this is a critical fact rarely surfaced in marketing material.
SUB-PROCESSORS

Unterauftragsverarbeiter-Karte · not disclosed

Vendor does not publish a sub-processors list. Schrems II compliance and CLOUD Act exposure cannot be independently verified without it.
CERTIFICATIONS

Rahmenwerke & Zertifizierungen

ISO/IEC 27001
ACTIVE
ISO27701
ACTIVE
FEATURES

Funktionsmatrix

INTEGRATION & ACCESS
REST API Yes
SSO (SAML / OIDC) Yes
COMPLIANCE & GOVERNANCE
Audit log Yes
Self-host / on-prem option No
PRICING

Preise & Tarife

FREEMIUM
ab €11/Monat
Preisseite ansehen ↗
PUBLIC DOCUMENTS

Öffentliche Dokumente

Vendor does not publish a sub-processors list. Schrems II compliance and CLOUD Act exposure cannot be independently verified without it.
  • Data Processing Addendum (DPA)
    www.cookiebot.com/en…
    Open ↗
  • Sub-processors list
    — missing
    missing
  • Terms of Service
    www.cookiebot.com/en…
    Open ↗
ALTERNATIVES

Alternativen in dieser Kategorie