# Commanders Act Consent Management — Consent Management (CMP)

Commanders Act Consent Management by Commanders Act SAS holds a panel rating of 3/5 from 6 AI judges (category median 3/5), as of 2026-11-03. Provenance: provenance unknown; sovereignty: not determined.

- Vendor: Commanders Act SAS (https://www.commandersact.com)
- Category: [Consent Management (CMP)](https://whats-best.ai/software/consent-management.md)
- Provenance (editorial classification): provenance unknown
- Canonical page: https://whats-best.ai/software/consent-management/commanders-act-consent-management
- Alternatives: https://whats-best.ai/software/consent-management/commanders-act-consent-management/alternatives ([markdown](https://whats-best.ai/software/consent-management/commanders-act-consent-management/alternatives.md))
- Data as of: 2026-11-04 · evaluated 2026-11-03 · oldest source captured 2026-11-03

**AI-generated.** Every score, rationale and verdict here is written by a panel of AI judges from public evidence — an analysis, not a hands-on test. Every fact quotes the vendor page it was read from. No score can be bought. How scores are made: https://whats-best.ai/methodology

## At a glance

- Vendor: Commanders Act SAS
- Headquarters: Not stated on the vendor’s pages as of 3 Nov 2026
- Data hosting: Default not stated; pages mention the EU [S3]
- Free plan: Not stated on the vendor’s pages as of 3 Nov 2026

## The panel's verdict

Commanders Act's consent management platform is strongest at scanning and classification, where scores cluster at 8-9: a scanner running continuously on real user traffic, capturing first- and third-party cookies plus local and session storage, auto-categorising each cookie with its responsible vendor, and alerting on undeclared cookies in real time. Prior blocking scores 6-8 — the publisher marketing lead scored 8 on live detection of cookies set before consent, while the WordPress webmaster scored 6, finding no public information on placeholders for embedded videos and maps. Consent records, at 4-5, and sovereignty, at 4-6, are the soft spots: timestamped logs and archiving across all devices are described, but we found no public information on log retention, export or the banner version behind each record, and beyond a Paris contracting entity (FJORD TECHNOLOGIES SAS) with data centres in the European Union as stated on the vendor's pages, the data processing agreement, subprocessors and banner-script hosting are undocumented. No criterion spans more than two points and no meaningful disagreements were computed; pricing transparency, at 0-2, reflects pages with no published prices.

**Speaks for it:**
- Scanning and classification scores cluster at 8-9 on a scanner that watches real user traffic continuously, covering first- and third-party cookies plus local and session storage
- Undeclared and pre-consent cookies trigger real-time alerts via Slack, email or webhook, with the exposure window narrowed to 'a few minutes'
- Automatic categorisation with description and responsible vendor feeds a continuous, exportable audit trail and updates the cookie notice dynamically
- IAB TCF 2.2 is supported under Vendor ID 416, with Google certification for Consent Mode v2 activated from the Settings tab
- Geo-targeted local banner templates cover GDPR, CPRA, VCDPA, CTDPA, CPA, Loi 25 and DMA, including an accessibility template conforming to RGAA and WCAG 2.0 AA

**Held against it:**
- Consent records scores sit at 4-5, with no public information on log retention, export or the banner version behind each record
- Sovereignty scores span 4-6, with no public information on a data processing agreement, a subprocessor list or where the banner script is served from
- Pricing transparency scores 0-2, and the captured pages carry no price figures, tiers or free-tier limits
- The consent-rate programme is pitched at 'targeting cookie-abstentionists' and a 'Cookie Keeper' saving 'up to 20% of cookies', which the in-house lawyer would want reviewed before a German rollout
- We found no public information on placeholders for embedded videos and maps, on automatic versus manual blocking modes, or on CMS plugins and a configuration API

**Best for:**
- You run many third-party tags across web and apps and want continuous real-traffic scanning that catches conditional tags and undeclared cookies on their first appearance
- You need IAB TCF 2.2 and Google-certified Consent Mode v2, with geo-targeted banner templates covering GDPR through CPRA, VCDPA, CTDPA, CPA, Loi 25 and DMA
- You want a European contracting base — the French entity FJORD TECHNOLOGIES SAS in Paris, data centres in the European Union as stated on the vendor's pages, and the CNIL named as supervisory authority
- Your blocking already runs through a tag manager, since control here is tag-chain based via piggybacking detection and Cookie Origin tracing

**Avoid if:**
- You must answer a supervisory authority with documented retention, export or the banner version behind each consent record — the pages describe timestamped logs and cross-device archiving, and we found no public information on the rest
- You operate under a strict consent regime, such as a German rollout, and want nothing pitched at winning back refusers — the consent-rate programme is sold on 'targeting cookie-abstentionists' and a 'Cookie Keeper' saving 'up to 20% of cookies', which the in-house lawyer would want reviewed first
- You need a published price, tier limits or a free tier before shortlisting — the captured pages carry no price figures

## Scores by judge and criterion

Scores out of 5, each judge scoring independently against the published rubric (v1). "n/r" = not rated: the vendor publishes no price, or the judge found no public information on that criterion.

| Criterion | The Data Protection Officer | The Agency Developer | The Publisher Marketing Lead | The In-House Lawyer | The WordPress Webmaster | The Skeptic |
| --- | --- | --- | --- | --- | --- | --- |
| Banner & choice architecture | 3/5 | 3/5 | 3/5 | 3/5 | 3/5 | 2.5/5 |
| Prior blocking & script control | 3.5/5 | 3.5/5 | 4/5 | 3.5/5 | 3/5 | 3.5/5 |
| Scanning & cookie classification | 4.5/5 | 4.5/5 | 4.5/5 | 4/5 | 4/5 | 4.5/5 |
| Consent records & proof | 2.5/5 | 2/5 | 2.5/5 | 2.5/5 | 2/5 | 2/5 |
| Frameworks, signals & platforms | 3/5 | 3/5 | 3.5/5 | 3/5 | 3/5 | 3/5 |
| European sovereignty | 3/5 | 2.5/5 | 2.5/5 | 2.5/5 | 2.5/5 | 2/5 |
| Pricing transparency | n/r | n/r | n/r | n/r | n/r | n/r |
| **Weighted verdict** | **3/5** | **3.5/5** | **3.5/5** | **3/5** | **3/5** | **3/5** |

### The judges

- **The Data Protection Officer** (v1.0): External DPO for a dozen mid-sized companies, two of which received a letter from a state supervisory authority about their cookie banner last year. Wants reject on the first layer, nothing loaded before the click, a consent log that shows which banner version each visitor saw, a cookie list that matches the site, and a DPA and subprocessor list that keep visitor data in the EU.
- **The Agency Developer** (v1.0): Lead developer at a web agency that maintains forty client sites on WordPress, TYPO3 and Shopify. Wants one account for every client, blocking that works without rewriting each theme, content blockers for YouTube and Maps, a Tag Manager template, a scanner that flags the tracker a client added on Friday, and a JavaScript API documented well enough that forms and plugins can ask for consent.
- **The Publisher Marketing Lead** (v1.0): Runs marketing for an ad-funded news site and an online shop in the same group, where every point of consent rate shows up in ad revenue and in Google Ads conversions. Wants a registered IAB TCF CMP, Google Consent Mode v2 in advanced mode, banner tests within what the law allows, consent shared between the site and the app, and a dashboard that shows where visitors drop off.
- **The In-House Lawyer** (v1.0): In-house counsel at a retailer with shops in Germany, France and Austria, who has read the court decisions on missing reject buttons and the regulators' banner guidance. Wants § 25 TDDDG and the GDPR mapped to concrete settings, equal-weight choices as the default, consent that can be withdrawn as easily as it was given, and records that would hold up if a competitor or a consumer group sued.
- **The WordPress Webmaster** (v1.0): Looks after the WordPress site of a mid-sized engineering company on top of the actual job, with Google Analytics, a YouTube channel, a Maps embed and a contact form with reCAPTCHA. Wants a plugin that finds these by itself, blocks them until the visitor agrees, survives the next plugin update and caching, and costs a known amount per site per year without a call to sales.
- **The Skeptic** (v1.0): Has opened the browser's network tab on sites with a "certified" banner and watched the ad pixels fire before anything was clicked. Reads "consent rate optimisation" as a hint that reject will be grey and small, "auto-blocking" as a claim until the test steps are published, and "EU hosting" next to a US script CDN — and asks what leaving would cost: the consent logs, and every visitor asked again.

## European sovereignty — proven facts

Built only from facts on the vendor's own pages; a dimension we could not prove is left open, never scored as zero. Headline: not determined.

| Dimension | Finding | Points | Source |
|---|---|---|---|
| Legal entity | Not determined | — | — |
| Hosting location | Not determined | — | — |
| Hosting options | Not determined | — | — |
| Open source | Not determined | — | — |
| Data processing agreement | Not determined | — | — |
| Transfer impact assessment | Not determined | — | — |

## Key facts

Each fact is the vendor's own statement, cited to the source page it was read from ([S*n*] → Sources).

**Compliance**
- Cloudflare cookie: __cf_bm · security · Cloudflare · 30 [S2]
- GDPR context: Regulations evolve beyond GDPR; platform positions as agile privacy management [S3]
- Google certified cmp: yes [S7]
- Iab tcf 2 2: yes · yes [S4]
- Iab tcf vendor id: IAB Europe TCF · 416 [S2]
- Laws supported: GDPR · CPRA · VCDPA · CTDPA · CPA · Loi 25 · DMA [S4]
- Local storage consent: CNIL · yes [S5]
- Ssl encryption: yes [S2]
- Supervisory authority: CNIL [S2]

**Data**
- Adloop retention on delete: name and email processed, new contact info collected via third-party providers [S2]
- Retention prospecting: from last incoming contact · 3 [S2]
- User rights: opt-out of marketing · access · electronic copy · rectification · erasure or restriction · withdraw consent [S2]

**Hosting**
- Data centers: European Union [S6]
- Data centers: European Union [S4]
- Data centers: European Union [S2]
- Data centers: European Union · yes [S8]
- Data residency: European Union [S2]
- EU data centers: European Union [S7]
- Region: European Union [S3]

**Integrations**
- Adloop google: Google Ads · Google Analytics · Google Drive · Google Data Studio · BigQuery · Campaign Manager [S2]
- Mcp server: MCP Server for analyzing marketing data with Claude or ChatGPT [S6]

**Legal**
- Entity: FJORD TECHNOLOGIES SAS · France · France [S2]
- Policy last updated: May 2025 [S2]

**Product**
- Accessibility template: RGAA · WCAG 2.0 level AA [S3]
- Accessibility template rgaa wcag: RGAA · WCAG 2.0 AA [S4]
- Adloop acquisition: 2023 · Adloop [S2]
- Adloop cookie: visit frequency and source measurement for Data Controller [S2]
- Adloop data warehouse: marketing data warehouse with Google data import/export [S2]
- Advice date: As of 6 March strongly recommended to activate Consent Mode V2 [S7]
- Analytics conversion modelling: Models behaviour and conversions for users who refused cookies [S7]
- Browser extension: browser extension reads cookie metadata for cookie scanner · no [S2]
- Cmp consent archiving: Commanders Act CMP archives consent choices and subsequent activation across all devices and environments [S8]
- Cmp consent choice options: Consent choices supported include accept all, accept some or reject all; offline consent data is sent to the CMP or deleted when reconnected [S8]
- Company products: PlatformX Server-Side Tracking · Adloop Media Optimisation · PlatformX Real Time CDP [S7]
- Conditional tag detection: yes [S6]
- Consent logs: consent logs available and timestamped [S6]
- Consent mode cmp integration: Works with Commanders Act TCF-compatible CMP [S7]
- Consent mode v2 function: Informs Google of user consent; tags adjust behaviour on refusal [S7]
- Consent rate optimisation: advanced A/B testing · cross-device user authentication · targeting cookie-abstentionists [S3]
- Consent rate optimization: advanced A/B tests · cross-device identification · targeted re-consent for non-responders · yes [S4]
- Cookie AI categorization: description · category · responsible_vendor · yes · database enriched by two market repositories [S5]
- Cookie keeper: Cookie Keeper feature saves up to 20% of cookies [S3]
- Cookie keeper retention: Cookie Keeper preserves up to 20% of otherwise lost cookies [S4]
- Cookie notice dynamic updates: yes [S5]
- Cookie origin tracing: Cookie Origin traces a detected cookie back to the responsible script; teams can also block the cookie and update the record [S5]
- Cookie scanner: Cookie scanner continuously monitors cookies and feeds dynamic cookie notice [S3]
- Cookie scanner: Cookie Scanner uses real user traffic detection rather than crawl robots to identify conditional tags [S6]
- Cookie scanner: Continuous cookie scanner generating legally compliant descriptions [S4]
- Cookie scanner: yes [S2]
- Cookie scanner alert speed: on first cookie appearance · continuous 24/7 [S5]
- Cookie scanner alerts: undeclared cookie detected · Slack · email · webhook · yes [S5]
- Cookie scanner audit trail: yes · yes [S5]
- Cookie scanner cost model: yes · no [S5]
- Cookie scanner detection scope: yes · yes · yes · yes [S5]
- Cookie scanner detection source: Analyzes real traffic from actual users (opt-in and opt-out) via a JavaScript script deployed through the consent platform, a container, or a GTM tag; does not simulate visits [S5]
- Cookie scanner exposure window: a few minutes [S5]
- Cookie scanner maintenance: no [S5]
- Cookie scanner monitoring: continuous on every real session [S6]
- Cookie scanner pre consent detection: yes · yes · yes [S5]
- Cookie scanner realtime: Real Time Cookie Scanner detects, analyzes and monitors cookies in real time for GDPR/CNIL compliance [S6]
- Customer count: 500+ [S1]
- Faq consent behavior: Granted consent = normal tags; refused = limited collection with anonymised signals [S7]
- Geo segmentation templates: Geographic segmentation and localized consent banner templates [S4]
- Geo targeting: Geo Targeting and Local Templates deliver region-specific consent banners [S3]
- Iab tcf 22: yes · yes · yes [S3]
- Mobile app support: Server-side tagging applies to all devices including mobile apps [S3]
- Monitoring privacy violations: Monitoring algorithms notify on deviations or rule violations [S4]
- Multi compliance laws: DRGPD · CPRA · VCDPA · CTDPA · CPA · Loi 25 · DMA [S3]
- Piggybacking detection: Piggybacking detection: control and block entire tag chains [S4]
- Piggybacking monitoring: Piggybacking monitoring checks tag dependencies and blocks them if needed [S3]
- Pii detection: PII detection checks collected variable values and alerts on possible PII [S3]
- Pii detection: PII detection: alerts when personal data is captured in plaintext [S4]
- Platform name: AI-Ready Data Platform (PlatformX) [S1]
- Platform products: PlatformX Server-Side Tracking · Adloop Media Optimisation · PlatformX Real Time CDP · Enterprise Tag Manager [S6]
- Products list: PlatformX Server-Side Tracking · Adloop Media Optimisation · PlatformX Real Time CDP [S8]
- Settings tab activation: Activated via Settings tab of Commanders Act space [S7]
- Support docs: yes [S7]
- Tag manager name: Commanders Act offers an Enterprise Tag Manager product with a Consent Management module [S8]
- Timestamped logs: yes [S6]

**Support**
- Best practices: Commanders Act team shares best practices to increase consent rates [S4]
- Expert team: Expert team helps increase consent rates [S3]

## Questions

### Is Commanders Act Consent Management European?

Not determined: the vendor’s pages as captured do not say where Commanders Act Consent Management is based.

### Where does Commanders Act Consent Management store data?

The default storage location for customer data is not stated on the vendor’s pages as of 3 Nov 2026. The vendor’s pages mention the EU as hosting location, per [the vendor’s page captured 3 Nov 2026](https://whats-best.ai/evidence/16906).

### Does Commanders Act Consent Management have a free plan?

Not stated on the vendor’s pages as of 3 Nov 2026.

### What are the best alternatives to Commanders Act Consent Management?

As of 3 Nov 2026, the panel rates [Usercentrics CMP (3.5/5)](https://whats-best.ai/software/consent-management/usercentrics), [Didomi (3.5/5)](https://whats-best.ai/software/consent-management/didomi) and [CCM19 (3.5/5)](https://whats-best.ai/software/consent-management/ccm19) highest among the other 19 Consent Management (CMP) products evaluated. Ratings that look equal are rounded to half stars; the order uses the unrounded rating, then the name. The highest-rated European alternative is [Usercentrics CMP](https://whats-best.ai/software/consent-management/usercentrics) (EU-Made). Ratings are the AI panel’s opinion, formed from public evidence: [how scores are made](https://whats-best.ai/methodology#ordering). The full list, with European products first: [Commanders Act Consent Management alternatives](https://whats-best.ai/software/consent-management/commanders-act-consent-management/alternatives).

## What this page leaves out

- We found no public information on pricing on the pages we read (commandersact.com, commandersact.com/privacy, commandersact.com/enterprise-tag-manager/consent-management-platform-trust-commander, commandersact.com/de/enterprise-tag-manager/cmp-trust-commander, commandersact.com/the-quantum-lounge/enterprise-tag-manager/consent-management/cookie-scanner-real-time-monitoring, commandersact.com/the-quantum-lounge/enterprise-tag-manager/consent-management/gdpr-cookie-audit-dpo-guide and 2 more). If the vendor publishes it somewhere else, send us the page.
- 14 product facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 1 hosting fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material.
- 1 integrations fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material.
- 1 subprocessors fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material.
- 2 sovereignty dimensions could not be confirmed on the vendor’s own pages and are shown as unknown.

## Sources

- [S1] Vendor page: https://www.commandersact.com (checked 2026-11-03)
- [S2] Privacy policy — found from the homepage: https://www.commandersact.com/privacy/ (checked 2026-11-03)
- [S3] Prior blocking & script control — found from sitemap: https://www.commandersact.com/enterprise-tag-manager/consent-management-platform-trust-commander/ (checked 2026-11-03)
- [S4] Prior blocking & script control — found from sitemap: https://www.commandersact.com/de/enterprise-tag-manager/cmp-trust-commander/ (checked 2026-11-03)
- [S5] Scanning & cookie classification — found from sitemap: https://www.commandersact.com/the-quantum-lounge/enterprise-tag-manager/consent-management/cookie-scanner-real-time-monitoring/ (checked 2026-11-03)
- [S6] Consent records & proof — found from sitemap: https://www.commandersact.com/the-quantum-lounge/enterprise-tag-manager/consent-management/gdpr-cookie-audit-dpo-guide/ (checked 2026-11-03)
- [S7] Frameworks, signals & platforms — found from sitemap: https://www.commandersact.com/enterprise-tag-manager/1st-party-data-collection/google-consent-mode-v2/ (checked 2026-11-03)
- [S8] Frameworks, signals & platforms — found from sitemap: https://www.commandersact.com/the-quantum-lounge/enterprise-tag-manager/consent-management/consent-app-mobile/ (checked 2026-11-03)

---

Cite as: whats-best.ai, "Commanders Act Consent Management — Consent Management (CMP)", AI panel analysis, as of 2026-11-04. https://whats-best.ai/software/consent-management/commanders-act-consent-management

Corrections: https://whats-best.ai/correct/1377?target=page