# Complianz — Consent Management (CMP)

Complianz by Complianz B.V. holds a panel rating of 3/5 from 6 AI judges (category median 3/5), as of 2026-10-30. Provenance: EU-Made; sovereignty: not determined.

- Vendor: Complianz B.V. (https://complianz.io/)
- Category: [Consent Management (CMP)](https://whats-best.ai/software/consent-management.md)
- Provenance (editorial classification): EU-Made
- Canonical page: https://whats-best.ai/software/consent-management/complianz
- Alternatives: https://whats-best.ai/software/consent-management/complianz/alternatives ([markdown](https://whats-best.ai/software/consent-management/complianz/alternatives.md))
- Data as of: 2026-11-04 · evaluated 2026-10-30 · oldest source captured 2026-10-29

**AI-generated.** Every score, rationale and verdict here is written by a panel of AI judges from public evidence — an analysis, not a hands-on test. Every fact quotes the vendor page it was read from. No score can be bought. How scores are made: https://whats-best.ai/methodology

## At a glance

- Vendor: Complianz B.V.
- Headquarters: Not stated on the vendor’s pages as of 1 Nov 2026
- Data hosting: Not stated on the vendor’s pages as of 1 Nov 2026
- Free plan: Not stated on the vendor’s pages as of 1 Nov 2026

## The panel's verdict

Complianz — Complianz B.V. of Groningen, part of iubenda — is a standalone WordPress consent plugin with a premium Shopify app; the bench's weighted totals run 6.2–6.7. It is strongest on banner and choice and on prior blocking, both 7–8: first-layer accept-and-reject rules mapped to named authorities, consent per category and per service in 47+ locales, and blocking published in detail — 27 script and 14 iframe patterns, placeholders, and a deep manual-tagging mode. Sovereignty sits at 7–8: the plugin runs on the customer's own webserver, does not call home, and the vendor states it receives no visitor data or IP addresses — its stated reason no data processing agreement is required. Weakest is consent records at 4–5, where judges split evenly over the gaps: no stated retention period, no documented export of the log, a documentation statement that a history of consent is not necessary, and a proof PDF the captured pages describe differently. Scanning and classification and standards and platforms hold a flat 6; pricing transparency gets 5–6, with different starting figures — $59 and €59 — on the captured pages.

**Speaks for it:**
- Prior blocking is documented in detail — 27 script and 14 iframe patterns updated regularly, placeholders, and a manual-tagging mode with its limits spelled out
- First-layer accept-and-reject requirements are mapped country by country to named authorities for Germany, the UK, France, Greece, the Netherlands, Belgium and Denmark
- The WordPress plugin runs standalone on your own webserver, does not call home, and the vendor states it receives no visitor data or IP addresses
- Google CMP certification is stated, Google Consent Mode v2 and TCF 2.0+ ship in the premium plugin, and Google and Matomo Tag Manager are supported
- Three tiers publish prices by site count — Personal 1 website $59, Professional 5 websites $179, Agency 25 websites $399 — next to a free WordPress plugin and a 30-day money-back guarantee

**Held against it:**
- Records of Consent sit behind the premium plugin, the documentation states a history of consent is not necessary, and we found no public information on a retention period or export of the log
- The proof-of-consent PDF is a general snapshot of current settings per region rather than tied to a specific visitor, and the captured pages describe it differently
- The scanner is in beta with possible false positives, and we found no public information on scheduled rescans, alerts on new or changed trackers, or local-storage and pixel scanning
- With Consent Mode enabled, the documentation states Google is no longer blocked before consent but only notified of consent state updates, and whitelisted domains always load even before consent
- The captured pages give different starting figures, $59 and €59, we found no public price for the Shopify app beyond its free trial, and VAT treatment is not stated

**Best for:**
- You run WordPress and want the banner, consent records and snapshots kept on your own server rather than a vendor cloud
- You operate across several EU jurisdictions and need first-layer accept-and-reject mapped per country to national guidance
- Your ad stack relies on Google Ads, Analytics or Tag Manager and needs Google CMP certification with Consent Mode v2 and TCF 2.0+
- You manage a portfolio of client sites and want tiers by website count with a multisite plugin and bulk pricing above 25 websites

**Avoid if:**
- You need audit-grade proof tied to individual visitors — the documentation keeps only the latest consent choices and the proof PDF is a snapshot per region
- You must guarantee Google scripts never load before consent — with Consent Mode on, Google is only notified of consent state updates, and whitelisted domains always load even before consent
- Your platform is neither WordPress nor Shopify — those are the documented platforms
- You need the full cost in advance for Shopify or for more than 25 websites — ask the vendor: the public pages we read do not show it

## Scores by judge and criterion

Scores out of 5, each judge scoring independently against the published rubric (v1). "n/r" = not rated: the vendor publishes no price, or the judge found no public information on that criterion.

| Criterion | The Data Protection Officer | The Agency Developer | The Publisher Marketing Lead | The In-House Lawyer | The WordPress Webmaster | The Skeptic |
| --- | --- | --- | --- | --- | --- | --- |
| Banner & choice architecture | 3.5/5 | 4/5 | 3.5/5 | 3.5/5 | 4/5 | 4/5 |
| Prior blocking & script control | 3.5/5 | 4/5 | 3.5/5 | 3.5/5 | 4/5 | 4/5 |
| Scanning & cookie classification | 3/5 | 3/5 | 3/5 | 3/5 | 3/5 | 3/5 |
| Consent records & proof | 2/5 | 2.5/5 | 2.5/5 | 2.5/5 | 2/5 | 2/5 |
| Frameworks, signals & platforms | 3/5 | 3/5 | 3/5 | 3/5 | 3/5 | 3/5 |
| European sovereignty | 4/5 | 4/5 | 3.5/5 | 4/5 | 3.5/5 | 3.5/5 |
| Pricing transparency | 2.5/5 | 3/5 | 2.5/5 | 2.5/5 | 3/5 | 3/5 |
| **Weighted verdict** | **3/5** | **3.5/5** | **3/5** | **3/5** | **3.5/5** | **3.5/5** |

### The judges

- **The Data Protection Officer** (v1.0): External DPO for a dozen mid-sized companies, two of which received a letter from a state supervisory authority about their cookie banner last year. Wants reject on the first layer, nothing loaded before the click, a consent log that shows which banner version each visitor saw, a cookie list that matches the site, and a DPA and subprocessor list that keep visitor data in the EU.
- **The Agency Developer** (v1.0): Lead developer at a web agency that maintains forty client sites on WordPress, TYPO3 and Shopify. Wants one account for every client, blocking that works without rewriting each theme, content blockers for YouTube and Maps, a Tag Manager template, a scanner that flags the tracker a client added on Friday, and a JavaScript API documented well enough that forms and plugins can ask for consent.
- **The Publisher Marketing Lead** (v1.0): Runs marketing for an ad-funded news site and an online shop in the same group, where every point of consent rate shows up in ad revenue and in Google Ads conversions. Wants a registered IAB TCF CMP, Google Consent Mode v2 in advanced mode, banner tests within what the law allows, consent shared between the site and the app, and a dashboard that shows where visitors drop off.
- **The In-House Lawyer** (v1.0): In-house counsel at a retailer with shops in Germany, France and Austria, who has read the court decisions on missing reject buttons and the regulators' banner guidance. Wants § 25 TDDDG and the GDPR mapped to concrete settings, equal-weight choices as the default, consent that can be withdrawn as easily as it was given, and records that would hold up if a competitor or a consumer group sued.
- **The WordPress Webmaster** (v1.0): Looks after the WordPress site of a mid-sized engineering company on top of the actual job, with Google Analytics, a YouTube channel, a Maps embed and a contact form with reCAPTCHA. Wants a plugin that finds these by itself, blocks them until the visitor agrees, survives the next plugin update and caching, and costs a known amount per site per year without a call to sales.
- **The Skeptic** (v1.0): Has opened the browser's network tab on sites with a "certified" banner and watched the ad pixels fire before anything was clicked. Reads "consent rate optimisation" as a hint that reject will be grey and small, "auto-blocking" as a claim until the test steps are published, and "EU hosting" next to a US script CDN — and asks what leaving would cost: the consent logs, and every visitor asked again.

## European sovereignty — proven facts

Built only from facts on the vendor's own pages; a dimension we could not prove is left open, never scored as zero. Headline: not determined.

| Dimension | Finding | Points | Source |
|---|---|---|---|
| Legal entity | Not determined | — | — |
| Hosting location | Not determined | — | — |
| Hosting options | Not determined | — | — |
| Open source | Not determined | — | — |
| Data processing agreement | Not determined | — | — |
| Transfer impact assessment | Not determined | — | — |

## Key facts

Each fact is the vendor's own statement, cited to the source page it was read from ([S*n*] → Sources).

**Compliance**
- Consent storage: consent records collected with anonymized IP stored in database [S7]
- Google cmp: yes [S7]
- Google cmp certification: yes [S5]
- Google cmp certification: Google CMP Certification received [S15]
- Google cmp certification: yes [S14]
- Google cmp certification: yes · Google CMP [S11]
- Google cmp certification: Complianz holds Google CMP Certification for publishers using Google advertising products [S4]
- Google cmp certification: yes [S12]
- Google cmp certified: yes [S8]
- Google cmp certified: yes [S3]
- Legal entity: 717814475 · Complianz BV · Kalmarweg 14-5 9723 JG, Groningen (NL) [S17]
- Scope: EEA · Switzerland · 2024-09-12 [S7]
- Security measures: appropriate security measures against unauthorized access, disclosure, modification, destruction [S7]

**Data**
- Hosting convesio: Italy · Convesio · no [S7]
- Payment processing: credit card · bank transfer · yes [S7]
- Retention: retention as long as required by purpose, longer under legal obligation or consent [S7]
- Rights: withdraw_consent · object · access · rectification · restriction · erasure · portability · complaint [S7]
- Rights response time: yes · one month [S7]
- Types collected: email address · first name · last name · payment info · billing address · various types of Data · website · Trackers · Usage Data [S7]
- User rights summary: yes · yes · yes [S7]
- Vendor data sharing: no · no [S8]

**Hosting**
- Legal entity: 717814475 · Complianz BV · Kalmarweg 14-5 9723 JG, Groningen (NL) [S14]
- Ownership: Complianz is part of iubenda [S4]

**Integrations**
- Ad inserter: Ad Inserter integration documented in a separate article [S4]
- Agencies program: Agencies and Affiliates programs available [S1]
- Github issues: https://github.com/complianz/complianz-gdpr/ [S10]
- Gtag tcf script: Manual integration for Google Advertising Products uses window['gtag_enable_tcf_support'] = true [S4]
- Gtm ga default: Google Tag Manager and Google Analytics configured in Complianz work with TCF by default [S4]
- Klaviyo whitelisting example: Klaviyo whitelisting documented; common domain static.klaviyo.com [S14]
- Wp advanced ads: WP Advanced Ads TCF integration works out-of-the-box via a checkbox [S4]

**Legal**
- Address: Kalmarweg 14-5, 9723 JG, Groningen (NL) [S1]
- Coc: 717814475 [S7]
- Company details: 717814475 · Complianz BV · Kalmarweg 14-5 9723 JG, Groningen (NL) [S2]
- Company details: 717814475 · Kalmarweg 14-5 9723 JG, Groningen (NL) · Complianz BV [S3]
- Company details: 717814475 · Complianz BV · Kalmarweg 14-5 9723 JG, Groningen (NL) [S9]
- Company details: 717814475 · Complianz BV · Kalmarweg 14-5 9723 JG, Groningen (NL) [S15]
- Company details: Complianz BV · Kalmarweg 14-5 9723 JG, Groningen (NL) · 717814475 [S11]
- Company details: Complianz BV · Kalmarweg 14-5 9723 JG, Groningen · NL · 717814475 [S4]
- Company details: 717814475 · Complianz BV · Kalmarweg 14-5 9723 JG, Groningen (NL) [S12]
- DPA not required: no [S8]
- Entity: 717814475 · Complianz BV [S1]
- Entity: 717814475 · iubenda · Netherlands · Complianz BV [S5]
- Entity: 717814475 · Complianz BV · Kalmarweg 14-5 9723 JG, Groningen (NL) [S6]
- Entity: 717814475 · Complianz BV · Kalmarweg 14-5 9723 JG, Groningen (NL) [S8]
- Iubenda ownership: iubenda [S14]
- Iubenda part: iubenda [S3]
- Owner: Kalmarweg 14-5, 9723JG Groningen · Netherlands · Complianz B.V. [S7]
- Ownership: Complianz is part of iubenda [S1]
- Ownership: iubenda [S6]
- Ownership: iubenda [S8]
- Ownership: iubenda [S9]
- Ownership: Complianz is part of iubenda [S7]
- Ownership: iubenda [S11]
- Ownership: iubenda [S12]
- Ownership iubenda: iubenda [S15]
- Part of iubenda: yes [S2]
- Part of iubenda: iubenda [S17]
- Processing place: processed at Owner's operating offices and locations of involved parties [S7]

**Pricing**
- Agency: Agency · 399 · 25 · USD [S6]
- Bulk available: yes [S6]
- Guarantee: 30-day money back guarantee [S1]
- Money back guarantee: 30 [S6]
- No lifetime licenses: no [S6]
- Personal: Personal · 59 · 1 · USD [S6]
- Professional: Professional · 179 · 5 · USD [S6]
- Refund terms: 30 [S6]
- Shopify free trial: yes [S14]
- Shopify free trial: Premium Shopify App has a free trial [S4]
- Shopify free trial: Premium Shopify App offered with a free trial [S12]
- Shopify trial: Free trial for Premium Shopify App [S1]
- Suite starting price: 59 · starting price for Professional Privacy Suite for WordPress [S2]
- Support updates period: 1 year [S6]

**Product**
- Ab testing: yes [S2]
- Accessibility fixes released: 6 · 7.5.0 · 7.6.0 [S10]
- Agency multisite: yes [S6]
- All features consent: yes · yes · yes [S2]
- Amp support: yes · yes [S2]
- Anonymized ip: yes [S3]
- Architecture: no · no · yes [S8]
- Auto generated cookie policies multilingual: yes · yes [S14]
- Automatic no action: no [S12]
- Belgium denmark requirements: Denmark: no single accept option without purpose differentiation; Belgium: separate consent per cookie type at first layer [S9]
- Block class attribute: Scripts are prior-blocked by adding the class _cmplc_cs_activate to the script tag [S12]
- Blocked iframes: youtube.com · youtube-nocookie.com · player.vimeo.com · facebook.com/plugins · www.google.com/maps/embed · dailymotion.com/embed/video/ · 14 [S11]
- Blocked scripts: google.com/recaptcha · fonts.googleapis.com · connect.facebook.net · platform.linkedin.com · www.youtube.com/iframe_api · www.google-analytics.com/analytics.js · new google.maps. · static.hotjar.com · disqus.com · adsbygoogle · googletagma… [S11]
- Blocking: iFrames · Plugins · Javascript · yes [S2]
- Blocklist consent behavior: yes [S14]
- Blocklist purposes: Functional · Preferences · Analytics · Marketing [S14]
- Blocklist updates: yes [S11]
- Bot auto consent: yes [S2]
- Bulk delete limit: 30 [S3]
- Burst statistics: Burst Statistics: anonymized data stored locally, not shared [S7]
- Consent categories: 1 · Necessary · 2 · Functionality · 3 · Experience · 4 · Measurement · 5 · Marketing [S12]
- Consent history not stored: no [S3]
- Consent mode beta support: Google Ads · Floodlight · Google Analytics · Google Tag Manager · yes · 5.5 [S5]
- Consent mode how it works: Google scripts unblocked; Google notified of consent state updates by Complianz [S5]
- Consent signal to shopify: Banner interactions send a consent signal to Shopify [S12]
- Consent statistics: yes [S2]
- Consent storage: Complianz stores consent state in a first-party cookie [S11]
- Cookie banner guidelines: Documentation article on cookie banner requirements per (sub)region across EU authorities [S9]
- Cookie blocking method: iframes src removed and javascript changed to text/plain until consent; scripts enabled on accept [S11]
- Cookie details not editable: no [S14]
- Cookie shredder: yes [S2]
- Cookiedatabase sync: yes [S2]
- Create proof of consent: Creates a general PDF snapshot of current consent settings per enabled region, not tied to a specific user [S3]
- Custom blocklist: yes · yes [S11]
- Custom service manual preblock: no · yes [S14]
- Custom services not in database: no [S14]
- Data request processing: yes [S2]
- Data requests: Privacy Suite for WordPress includes Records of Consent, Data Requests, Statistics and more [S3]
- Database table: cmplz_statistics [S3]
- Default no choice: 'No choice' and 'No warning' both default to functional cookies only [S3]
- Dependency management: Script dependencies handled via data-cmplc-cs-wait-for attribute [S12]
- Developer customization: yes [S2]
- Eaa compliance deadline: June 2025 [S10]
- Enable location: Enabled in wizard under Statistics - Configuration [S5]
- Enable steps: Enabled via Complianz Wizard > General > Security & Consent [S3]
- Exceptions no choice: No choice exception recorded when user does not interact with banner; defaults to functional cookies only [S3]
- Exceptions no warning: No warning exception for unsupported regions or respected Do Not Track / Global Privacy Controls [S3]
- Exclusive implementation: Analytics must not be implemented elsewhere when Consent Mode is enabled [S5]
- Explicit consent settings: Tags can be configured with explicit consent categories via Advanced Settings > Consent Settings (BETA) [S5]
- Facebook feed blocking: yes [S11]
- Free wordpress plugin: Both free and premium WordPress plugins available [S3]
- Functional cookie definition: no third-party data exchange and no user tracking [S11]
- Geo ip redirect: yes [S2]
- Germany UK france greece requirements: Germany, UK, France and Greece authorities require accept and reject options on the first level of the cookie banner [S9]
- Google analytics handling: yes · yes [S11]
- Google cmp certification: yes [S9]
- Google cmp certification: yes [S10]
- Google cmp certified: yes [S2]
- Google consent mode v2: yes [S2]
- Gtm builtin API: GTM uses built-in API, available for all tags [S5]
- Hybrid solution possible: Hybrid configuration possible; Complianz events still fire alongside Consent Mode [S5]
- Iframe image blocking: img and iframe tags can be prior-blocked using the same manual tagging method [S12]
- Inline class attribute: Inline scripts use the class _cmplc_cs_activate-inline [S12]
- Inline class usage rule: _cmplc_cs_activate-inline only for scripts using document.write and/or document.writeln [S12]
- Integrations count: 250+ [S2]
- Js module blocking: JavaScript modules can be blocked via data-cmplc-type or suppressedtype attributes [S12]
- Legal documents: Privacy Statements · Privacy Statements for Children · Cookie Policies · Opt-out Preferences · Processing Agreements · Data Leak Inventory · Terms & Conditions · Disclaimer · Imprint [S2]

**Subprocessors**
- Paypal: PayPal Inc. · payments [S7]
- Processor list on request: updated processor list available on request [S7]
- Stripe: Stripe Payments Europe, Limited · European Union · payments [S7]
- Vero: Vero Holdings Australia Pty Ltd · United States · user database management / marketing automation [S7]

**Support**
- Docs: Documentation, Support and F.A.Q available [S1]
- Free tier: Free WordPress Plugin offered alongside Premium [S1]
- Mailing list: yes [S9]
- Presales: Pre-sale questions channel [S1]
- Priority support: yes [S2]

77 more facts on the canonical page: https://whats-best.ai/software/consent-management/complianz

## Questions

### Is Complianz European?

Yes. whats-best.ai classifies Complianz as EU-Made.

### Where does Complianz store data?

Not stated on the vendor’s pages as of 1 Nov 2026.

### Does Complianz have a free plan?

Not stated on the vendor’s pages as of 1 Nov 2026.

### What are the best alternatives to Complianz?

As of 3 Nov 2026, the panel rates [Usercentrics CMP (3.5/5)](https://whats-best.ai/software/consent-management/usercentrics), [Didomi (3.5/5)](https://whats-best.ai/software/consent-management/didomi) and [CCM19 (3.5/5)](https://whats-best.ai/software/consent-management/ccm19) highest among the other 19 Consent Management (CMP) products evaluated. Ratings that look equal are rounded to half stars; the order uses the unrounded rating, then the name. The highest-rated European alternative is [Usercentrics CMP](https://whats-best.ai/software/consent-management/usercentrics) (EU-Made). Ratings are the AI panel’s opinion, formed from public evidence: [how scores are made](https://whats-best.ai/methodology#ordering). The full list, with European products first: [Complianz alternatives](https://whats-best.ai/software/consent-management/complianz/alternatives).

## What this page leaves out

- 9 product facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 7 subprocessors facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 2 legal facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 2 pricing facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 1 compliance fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material.
- 2 sovereignty dimensions could not be confirmed on the vendor’s own pages and are shown as unknown.
- 6 of the readings below were written against an earlier fact sheet — a fact has been corrected, added or pulled since. Until the panel next runs on this product you are reading the older judgement.

## Sources

- [S1] Vendor homepage: https://complianz.io/ (checked 2026-10-29)
- [S2] Features page: https://complianz.io/features/ (checked 2026-10-29)
- [S3] Documentation (records of consent): https://complianz.io/help/wordpress/configuration/records-of-consent/ (checked 2026-10-29)
- [S4] Documentation (IAB TCF): https://complianz.io/help/wordpress/configuration/implementing-tcf-on-your-website/ (checked 2026-10-29)
- [S5] Documentation (Google Consent Mode): https://complianz.io/help/wordpress/configuration/consent-mode/ (checked 2026-10-29)
- [S6] Pricing page: https://complianz.io/pricing/ (checked 2026-10-29)
- [S7] Privacy policy: https://complianz.io/legal/privacy-statement/ (checked 2026-10-29)
- [S8] Data processing agreement (dpa): https://complianz.io/help/wordpress/configuration/do-i-need-a-processing-agreement-with-complianz/ (checked 2026-10-29)
- [S9] Banner & choice architecture — found from sitemap: https://complianz.io/help/wordpress/customization/guidelines-for-cookie-banners-per-sub-region/ (checked 2026-10-29)
- [S10] Banner & choice architecture — found from sitemap: https://complianz.io/help/wordpress/configuration/accessibility/ (checked 2026-10-29)
- [S11] Prior blocking & script control — found from sitemap: https://complianz.io/help/wordpress/faq/blocking-cookies-from-third-party-services-how-complianz-blocks-cookies/ (checked 2026-10-29)
- [S12] Prior blocking & script control — found from sitemap: https://complianz.io/help/shopify/setup-and-configuration/prior-blocking-of-cookies-a-complete-guide-to-manual-tagging-with-complianz-app-for-shopify/ (checked 2026-10-29)
- [S13] Scanning & cookie classification — found from sitemap: https://complianz.io/help/wordpress/faq/about-the-website-scan/ (checked 2026-10-29)
- [S14] Scanning & cookie classification — found from sitemap: https://complianz.io/help/shopify/setup-and-configuration/complianz-for-shopify-all-about-the-site-scanner/ (checked 2026-10-29)
- [S15] Consent records & proof — found from sitemap: https://complianz.io/help/privacy-and-regulations/legal-requirements/data-retention/ (checked 2026-10-29)
- [S16] Frameworks, signals & platforms — found from sitemap: https://complianz.io/help/wordpress/configuration/new-iab-tcf-requirements-and-google-cmp-certification/ (checked 2026-10-29)
- [S17] Frameworks, signals & platforms — found from sitemap: https://complianz.io/help/wordpress/configuration/tcf-for-wordpress/ (checked 2026-10-29)
- [S18] Imprint — found from the homepage: https://complianz.io/legal/impressum/ (checked 2026-11-01)

---

Cite as: whats-best.ai, "Complianz — Consent Management (CMP)", AI panel analysis, as of 2026-11-04. https://whats-best.ai/software/consent-management/complianz

Corrections: https://whats-best.ai/correct/1161?target=page