# Termly — Consent Management (CMP)

Termly by Termly Inc. holds a panel rating of 2.5/5 from 6 AI judges (category median 3/5), as of 2026-10-30. Provenance: Rest of world; sovereignty: not determined.

- Vendor: Termly Inc. (https://termly.io/)
- Category: [Consent Management (CMP)](https://whats-best.ai/software/consent-management.md)
- Provenance (editorial classification): Rest of world
- Canonical page: https://whats-best.ai/software/consent-management/termly
- Alternatives: https://whats-best.ai/software/consent-management/termly/alternatives ([markdown](https://whats-best.ai/software/consent-management/termly/alternatives.md))
- Data as of: 2026-11-04 · evaluated 2026-10-30 · oldest source captured 2026-10-29

**AI-generated.** Every score, rationale and verdict here is written by a panel of AI judges from public evidence — an analysis, not a hands-on test. Every fact quotes the vendor page it was read from. No score can be bought. How scores are made: https://whats-best.ai/methodology

## At a glance

- Vendor: Termly Inc.
- Headquarters: Not stated on the vendor’s pages as of 1 Nov 2026
- Data hosting: Default not stated; pages mention United States [S6]
- Free plan: Yes, per the vendor’s own page [S5]
- Starting price: “Starter For essential protection € 9,5 Per website/month Billed Annually” (vendor’s words) [S5]

## The panel's verdict

Termly is a consent management platform from Termly Inc., a Delaware company. Its highest scores came in standards and platforms and banner and choice: TCF 2.3 with one-click activation, Google Consent Mode v2 in basic and advanced modes, Gold-status Google CMP certification, a GTM gallery template, and a banner with accept, reject, a reopenable preference centre, thirteen auto-detected languages and regional rules. Its lowest were consent records and sovereignty: we found no public information on record contents, retention or the banner version shown, exports need Pro+ or Agency, the terms state United States hosting with a largely US subprocessor list, and the captured pages give different figures for where European users' data sits. Prior blocking scored 4-5, the Auto Blocker is documented on all plans, but we found no published way to verify nothing fires before consent. Pricing scored 5-6, Starter at € 9,5 and Pro+ at € 13,5 per website/month billed annually public and the Agency price not. The flagged split list flagged none; weighted totals ranged 4.7-5.5.

**Speaks for it:**
- IAB TCF 2.3 with one-click activation, plus per-vendor and per-purpose choices for European visitors on Pro+.
- Google Consent Mode v2 in basic and advanced modes, held by a Google certified CMP partner at Gold status, with a Termly template in the GTM gallery.
- Accept, reject and a reopenable preference centre with thirteen auto-detected languages, documented on all plans.
- The Auto Blocker holds third-party cookies and scripts until consent on all plans.
- Single-site costs are public: a free account without a credit card, Starter at € 9,5 and Pro+ at € 13,5 per website/month billed annually.

**Held against it:**
- Consent-record and preference-change exports are limited to the Pro+ and Agency plans.
- We found no public information on what a consent record contains, retention periods, or a tie to the banner version shown.
- The terms state United States hosting for a Delaware entity, and the subprocessor list is dominated by US providers including AWS, Cloudflare, Stripe, Intercom, Zendesk and Microsoft.
- We found no published way to verify that nothing fires before consent.
- The Agency plan price and bulk licence amounts sit behind a 'Calculate Now' calculator, with overage beyond 50,000 monthly banner views unpriced.

**Best for:**
- You run a WordPress or Shopify site and want Google Consent Mode v2 with a GTM gallery template from a Gold-status Google certified CMP partner.
- You advertise to European visitors and can take Pro+, which carries TCF 2.3 with per-vendor and per-purpose consent choices.
- You want predictable single-site pricing, with a free account that needs no credit card and Starter at € 9,5 per website/month billed annually.
- You manage multiple websites from one dashboard and want consent preferences to carry across subdomains.

**Avoid if:**
- You need an EU contracting entity or EU representative — the published terms name Termly Inc. of Dover, Delaware under Delaware law.
- You must budget a multi-site or agency rollout in advance — the Agency price and bulk licence amounts sit behind a calculator.
- You need consent-record exports on the Free or Starter plan — the pages place them on Pro+ and Agency.

## Scores by judge and criterion

Scores out of 5, each judge scoring independently against the published rubric (v1). "n/r" = not rated: the vendor publishes no price, or the judge found no public information on that criterion.

| Criterion | The Data Protection Officer | The Agency Developer | The Publisher Marketing Lead | The In-House Lawyer | The WordPress Webmaster | The Skeptic |
| --- | --- | --- | --- | --- | --- | --- |
| Banner & choice architecture | 3/5 | 3/5 | 3/5 | 3/5 | 3/5 | 3/5 |
| Prior blocking & script control | 2/5 | 2/5 | 2/5 | 2.5/5 | 2/5 | 2/5 |
| Scanning & cookie classification | 2.5/5 | 3/5 | 2.5/5 | 2.5/5 | 3/5 | 2.5/5 |
| Consent records & proof | 2/5 | 2/5 | 2/5 | 2/5 | 2/5 | 2/5 |
| Frameworks, signals & platforms | 3/5 | 3/5 | 3.5/5 | 3/5 | 3/5 | 3/5 |
| European sovereignty | 2/5 | 2/5 | 2/5 | 2/5 | 1.5/5 | 2/5 |
| Pricing transparency | 3/5 | 2.5/5 | 3/5 | 2.5/5 | 2.5/5 | 2.5/5 |
| **Weighted verdict** | **2.5/5** | **2.5/5** | **3/5** | **2.5/5** | **2.5/5** | **2.5/5** |

### The judges

- **The Data Protection Officer** (v1.0): External DPO for a dozen mid-sized companies, two of which received a letter from a state supervisory authority about their cookie banner last year. Wants reject on the first layer, nothing loaded before the click, a consent log that shows which banner version each visitor saw, a cookie list that matches the site, and a DPA and subprocessor list that keep visitor data in the EU.
- **The Agency Developer** (v1.0): Lead developer at a web agency that maintains forty client sites on WordPress, TYPO3 and Shopify. Wants one account for every client, blocking that works without rewriting each theme, content blockers for YouTube and Maps, a Tag Manager template, a scanner that flags the tracker a client added on Friday, and a JavaScript API documented well enough that forms and plugins can ask for consent.
- **The Publisher Marketing Lead** (v1.0): Runs marketing for an ad-funded news site and an online shop in the same group, where every point of consent rate shows up in ad revenue and in Google Ads conversions. Wants a registered IAB TCF CMP, Google Consent Mode v2 in advanced mode, banner tests within what the law allows, consent shared between the site and the app, and a dashboard that shows where visitors drop off.
- **The In-House Lawyer** (v1.0): In-house counsel at a retailer with shops in Germany, France and Austria, who has read the court decisions on missing reject buttons and the regulators' banner guidance. Wants § 25 TDDDG and the GDPR mapped to concrete settings, equal-weight choices as the default, consent that can be withdrawn as easily as it was given, and records that would hold up if a competitor or a consumer group sued.
- **The WordPress Webmaster** (v1.0): Looks after the WordPress site of a mid-sized engineering company on top of the actual job, with Google Analytics, a YouTube channel, a Maps embed and a contact form with reCAPTCHA. Wants a plugin that finds these by itself, blocks them until the visitor agrees, survives the next plugin update and caching, and costs a known amount per site per year without a call to sales.
- **The Skeptic** (v1.0): Has opened the browser's network tab on sites with a "certified" banner and watched the ad pixels fire before anything was clicked. Reads "consent rate optimisation" as a hint that reject will be grey and small, "auto-blocking" as a claim until the test steps are published, and "EU hosting" next to a US script CDN — and asks what leaving would cost: the consent logs, and every visitor asked again.

## European sovereignty — proven facts

Built only from facts on the vendor's own pages; a dimension we could not prove is left open, never scored as zero. Headline: not determined.

| Dimension | Finding | Points | Source |
|---|---|---|---|
| Legal entity | Not determined | — | — |
| Hosting location | Not determined | — | — |
| Hosting options | Not determined | — | — |
| Open source | Not determined | — | — |
| Data processing agreement | Not determined | — | — |
| Transfer impact assessment | Not determined | — | — |

## Key facts

Each fact is the vendor's own statement, cited to the source page it was read from ([S*n*] → Sources).

**Compliance**
- Data privacy framework: yes · yes · yes [S7]
- Dnt: no [S7]
- Dpf dispute resolution: yes · BBB National Programs [S7]
- EU frameworks: GDPR · ePrivacy Directive [S15]
- Ftc oversight: FTC [S7]
- Global coverage: PIPEDA · Quebec Law 25 · POPIA [S15]
- Gpc: yes [S7]
- International transfer countries: United States · Argentina · Australia · Colombia · Denmark · India · Philippines · Singapore · Taiwan · Tunisia · United Arab Emirates · United Kingdom [S7]
- Standard contractual clauses: yes [S7]
- UK complaint SLA: 30 [S7]
- US state laws: CCPA · VCDPA · UCPA [S15]

**Data**
- Backup: yes · yes [S6]
- Minors: 18 · no [S7]
- Retention: yes [S7]
- Third party collection: no [S7]

**Hosting**
- EU data storage: yes [S1]
- EU data storage: yes [S3]
- EU data storage: EU/EEA [S4]
- EU data storage: yes [S15]
- Region: United States [S6]
- Server location: United States [S7]

**Integrations**
- Google analytics: Google Ads · yes [S7]
- Iab tcf google consent mode: 2.3 · yes [S3]
- Review platforms: G2 [S7]
- Social login: Facebook · X [S7]

**Legal**
- Address: 8 The Grn Ste B, Dover, DE 19901 [S6]
- Arbitration outside US: Kent County, DE courts [S6]
- Dispute time limit: 12 [S6]
- Entity: Termly Inc. · corporation · Delaware [S6]
- Entity: Termly · Termly Inc. [S7]
- Governing law: Delaware [S6]
- Last updated: 2025-07-01 [S6]
- Liability cap: lesser of fees paid in prior 6 months or US$100 [S6]
- Updated: 2026-08-20 [S7]
- Warranty disclaimer: none, as-is/as-available [S6]

**Pricing**
- Annual discount: 25 [S5]
- Auto renew: yes [S6]
- Bulk license savings: yes [S5]
- Cancellation: account login or contact · end of Subscription Period [S6]
- Currencies: USD · EUR · GBP [S6]
- Downgrade timing: end of current Subscription Period [S6]
- Free price: 0 [S5]
- Free tier: yes · yes · no [S6]
- Paid plans: subscription [S6]
- Payment methods: Visa · Mastercard · American Express · Discover · other Stripe supported card brands · Stripe [S6]
- Plan restrictions: Features, scan frequency, and usage limits vary by plan; custom banner styles on Pro+ and Agency [S2]
- Promo code: FALL2026 · 20 [S5]
- Proplus price: 13.5 [S5]
- Refund policy: generally not offered [S6]
- Sales tax: no · yes [S6]
- Starter price: 9.5 [S5]
- Tcf v22 plan requirement: Termly Dashboard · Pro+ [S16]
- Upgrade proration: yes [S6]

**Product**
- AI usage: no · no [S7]
- Article author: Masha Komnenic · 2026-01-22 · CIPP/E · CIPM · CIPT · FIP [S16]
- Auto blocker: yes [S3]
- Auto blocking: automatic blocking of third-party cookies and scripts until consent [S14]
- Auto policy updates: yes [S1]
- Auto updates: automatic policy updates when cookie regulations change [S14]
- Automatic cookie blocking: yes [S9]
- Automatic vendor scanner: automatic vendor scanner against TCF Global Vendor List [S16]
- Banner customization: yes [S3]
- Banner customization: colors · fonts · position · language [S15]
- Banner display styles: Banner · Modal · Tooltip [S9]
- Banner methods: cookie consent banner generator · cookie consent banner plugin · built-in tool on website-building platform [S10]
- Banner positions: Top · Bottom [S9]
- Banner tcf config: Pro+ · yes [S16]
- Built by legal experts: Solution built by engineers guided by Head of Global Privacy [S15]
- Businesses helped: 2 million+ [S2]
- Cmp tcf v22 support: 2.2 · IAB TCF · yes [S16]
- Cmp tcf v23 support: 2.3 · IAB TCF · yes [S16]
- Components: cloud software · Consent Platform · policy/document generators [S6]
- Consent banner: All plans · yes [S2]
- Consent banner link: policy link added to automatically generated consent banner [S14]
- Consent examples: Other cookie consent examples include clickwrap and pop-ups [S10]
- Consent logs download: yes [S3]
- Consent manager: bundled cookie consent manager with banner, blocking, preference center [S14]
- Consent manager part: yes · yes [S9]
- Consent mode dashboard activation: Google Consent Mode v2 activated with a click from the Termly dashboard [S15]
- Consent mode metrics: Consent mode allows gathering anonymized high-level metrics while complying [S12]
- Consent mode modeling: Conversion modeling recovers lost conversions without cookies [S15]
- Consent mode services: Google Analytics · Google Ads · Floodlight · Conversion Linker [S15]
- Consent mode setup steps: Enable Google Consent Mode in consent banner settings; configure consent defaults in Termly's embed code [S15]
- Consent preference sync: yes [S12]
- Consent records exports: Pro+ & Agency · yes [S2]
- Cookie blocking definition: Cookie blocking is when a cookie script is blocked from running on a given user’s browser, at the browser or website level, either automatically until users consent to non-essential cookies or per users’ cookie settings. [S11]
- Cookie categories: 6 · Essential · Performance and Functionality · Analytics and Customization · Advertising · Social Networking · Unclassified [S3]
- Cookie categories: Essential · Performance and Functionality · Analytics and Customization · Advertising · Social Networking · Unclassified [S9]
- Cookie categories: 6 · Essential · Performance and Functionality · Analytics and Customization · Advertising · Social Networking · Unclassified [S14]
- Cookie declaration generation: yes [S3]
- Cookie policy embed options: HTML · Code snippet · URL [S3]
- Cookie policy generator: All plans · yes [S2]
- Cookie policy generator: yes [S9]
- Cookie scanner: yes [S9]
- Cookie scanner: site scanner finds and categorizes cookies on every page [S14]
- Cookie scanning: All plans · yes [S2]
- Countries served: 150 [S2]
- Customer count: 2000000 [S9]
- Customization options: colors · fonts · position · user location · language [S9]
- Dmca agent: legal@termly.io · North Bethesda, MD [S6]
- Dsar: yes [S1]
- Dsar do not sell: embeddable DSAR form and Do Not Sell link [S14]
- Dsar form: yes · yes [S3]
- Dsar form: yes · yes [S9]
- Embed options: HTML · Code snippet · URL [S14]
- EU consent data storage: yes [S2]
- EU data storage: yes [S9]
- EU regulation coverage: GDPR · ePrivacy Directive [S4]
- Free disclaimer generator: yes [S1]
- Free tier: yes [S9]

**Subprocessors**
- Accuranker: Accuranker · legal@accuranker.com · Denmark · Search Engine Optimization [S8]
- Affiliates scope: Sub-processors process Customer Data on behalf of Termly, Inc. or its Affiliates [S8]
- Ahrefs: Ahrefs · privacy@ahrefs.com · Singapore · Search Engine Optimization [S8]
- Amazon web services: Amazon Web Services · USA, Washington · Hosting [S8]
- Appcues: Appcues · USA, Massachusetts · Improve products & services [S8]
- Atlassian: Atlassian Corporation · Australia · Improve products & services [S8]
- Baremetrics: BareMetrics · USA, California · Business metrics and reporting [S8]
- Bigquery: BigQuery · USA, California · Combines data to create summary of user actions [S8]
- Cloudflare: Cloudflare, Inc. · USA, California · Proxy server, authentication [S8]
- Cybercomply: CyberComply · United Kingdom · DSAR Management [S8]
- Datadog: Datadog · USA, New York · Application performance, metrics aggregation, displaying data and alerting [S8]
- Due diligence: Termly performs due diligence on sub-processors' data protection practices before engagement [S8]
- Fellow: Fellow · USA, California · Work Management [S8]
- G2: G2.com · USA, Illinois · Customer review collection and review status verification (in-app review prompts) [S8]
- Google llc: Google LLC · USA, Wisconsin · Analytics and advertising · Communications · Single Sign-On authentication [S8]
- Heap: Heap · USA, California · Analyze user behavior [S8]
- Hubspot: Hubspot · USA, New Hampshire · Customer Relationship Management [S8]
- Impact tech: Impact Tech · USA, California · Referral network management [S8]
- Intercom: Intercom · USA, California · Provide Customer Service [S8]
- Looker studio: Looker Studio (formerly Google Data Studio) · USA, California · Combines data to create summary of user actions [S8]
- Microsoft 365 exchange online: Microsoft 365 Exchange Online · USA · Email hosting and mail services [S8]
- Microsoft ads: Microsoft Ads · USA, Washington · Search Engine advertising [S8]
- Microsoft clarity: Microsoft Clarity · USA, Washington · Search Engine Optimization [S8]
- Microsoft entra: Microsoft Entra · USA · SSO and identity provider [S8]
- Microsoft sharepoint onedrive: Microsoft SharePoint/OneDrive · USA · File storage and collaboration [S8]
- Microsoft teams: Microsoft Teams · USA · Team communication and video conferencing [S8]
- Mixpanel: Mixpanel · USA, California · Analyze user behavior · Netherlands [S8]
- Retool: Retool · USA, California · Dashboards to improve Customer Service [S8]
- Semrush: Semrush · USA, Massachusetts · Search Engine Optimization [S8]
- Sendgrid: SendGrid, Inc. · USA, California · Marketing and product communications [S8]
- Sentry: Sentry · USA, Wisconsin · Error monitoring [S8]
- Slack: Slack · USA, California · Communications [S8]
- Stripe: Stripe · USA, California · Payments and refunds processing [S8]
- Trello: Trello · USA, New York · Work Management [S8]
- Userflow: Userflow · USA · Product onboarding and user guidance [S8]
- Wpengine: WPEngine · USA, Texas · Website hosting [S8]
- Zapier: Zapier · USA, California · Improve products & services [S8]
- Zendesk: Zendesk · USA · Customer support platform [S8]
- Zoom: Zoom · USA, California · Communications [S8]

**Support**
- Complaint contact: info@termly.io · (855) 234-5020 [S6]
- Customer support: yes [S2]
- Data request form: https://app.termly.io/notify/05f55d8a-a00b-45d4-8053-55f6d8637f46 [S7]
- Dedicated team: support team · support articles [S4]
- Privacy email: privacy@termly.io [S7]
- Pro response time: <24 · 48 [S15]
- Setup assistance: yes [S15]

86 more facts on the canonical page: https://whats-best.ai/software/consent-management/termly

## Questions

### Is Termly European?

No. whats-best.ai classifies Termly as Rest of world.

### Where does Termly store data?

The default storage location for customer data is not stated on the vendor’s pages as of 1 Nov 2026. The vendor’s pages mention United States as hosting location, per [the vendor’s page captured 29 Oct 2026](https://whats-best.ai/evidence/12525).

### Does Termly have a free plan?

Yes. Termly has a free plan, per [the vendor’s page captured 29 Oct 2026](https://whats-best.ai/evidence/12519).

### What are the best alternatives to Termly?

As of 3 Nov 2026, the panel rates [Usercentrics CMP (3.5/5)](https://whats-best.ai/software/consent-management/usercentrics), [Didomi (3.5/5)](https://whats-best.ai/software/consent-management/didomi) and [CCM19 (3.5/5)](https://whats-best.ai/software/consent-management/ccm19) highest among the other 19 Consent Management (CMP) products evaluated. Ratings that look equal are rounded to half stars; the order uses the unrounded rating, then the name. The highest-rated European alternative is [Usercentrics CMP](https://whats-best.ai/software/consent-management/usercentrics) (EU-Made). Ratings are the AI panel’s opinion, formed from public evidence: [how scores are made](https://whats-best.ai/methodology#ordering). The full list, with European products first: [Termly alternatives](https://whats-best.ai/software/consent-management/termly/alternatives).

## What this page leaves out

- 29 product facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 2 compliance facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 2 legal facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 2 sovereignty dimensions could not be confirmed on the vendor’s own pages and are shown as unknown.
- 6 of the readings below were written against an earlier fact sheet — a fact has been corrected, added or pulled since. Until the panel next runs on this product you are reading the older judgement.

## Sources

- [S1] Vendor homepage: https://termly.io/ (checked 2026-10-29)
- [S2] Features page (consent management platform): https://termly.io/products/consent-management-platform/ (checked 2026-10-29)
- [S3] Features page (cookie scanner): https://termly.io/products/cookie-scanner/ (checked 2026-10-29)
- [S4] Features page (IAB TCF): https://termly.io/features/iab-tcf/ (checked 2026-10-29)
- [S5] Pricing page: https://termly.io/pricing/ (checked 2026-10-29)
- [S6] Terms of service: https://termly.io/our-terms-of-use/ (checked 2026-10-29)
- [S7] Privacy policy: https://termly.io/our-privacy-policy/ (checked 2026-10-29)
- [S8] Subprocessor list: https://termly.io/our-sub-processors/ (checked 2026-10-29)
- [S9] Banner & choice architecture — found from sitemap: https://termly.io/products/cookie-banner-generator/ (checked 2026-10-29)
- [S10] Banner & choice architecture — found from sitemap: https://termly.io/faq/how-do-you-make-a-cookie-consent-banner/ (checked 2026-10-29)
- [S11] Prior blocking & script control — found from sitemap: https://termly.io/legal-dictionary/cookie-blocking/ (checked 2026-10-29)
- [S12] Prior blocking & script control — found from sitemap: https://termly.io/updates-press/gtm-consent-mode-feature/ (checked 2026-10-29)
- [S13] Scanning & cookie classification — found from sitemap: https://termly.io/our-cookie-policy/ (checked 2026-10-29)
- [S14] Scanning & cookie classification — found from sitemap: https://termly.io/products/cookie-policy-generator/ (checked 2026-10-29)
- [S15] Frameworks, signals & platforms — found from sitemap: https://termly.io/features/google-consent-mode/ (checked 2026-10-29)
- [S16] Frameworks, signals & platforms — found from sitemap: https://termly.io/updates-press/termlys-cmp-now-supports-the-iab-tcf-v2-2/ (checked 2026-10-29)
- [S17] Security / trust page — found from the homepage: https://termly.io/solutions/gdpr-compliance/ (checked 2026-11-01)

---

Cite as: whats-best.ai, "Termly — Consent Management (CMP)", AI panel analysis, as of 2026-11-04. https://whats-best.ai/software/consent-management/termly

Corrections: https://whats-best.ai/correct/1165?target=page