Consent & Preference Management
21 martech vendors in Consent & Preference Management, part of Governance, Privacy & Compliance. Each record carries the date we last verified it, so you can see how current it is before you rely on it.
Last verified:
Procurement-readiness profiles — SOC 2, ISO 27001, GDPR and DPA posture, data residency, AI-training policies — are available when you sign in.
Consent and preference management software captures, stores, and enforces a visitor's or customer's privacy choices — cookie consent, marketing opt-ins, and data-processing preferences — across a company's sites and products. Privacy and legal teams rely on it directly; it exists specifically to make the compliance claims other martech vendors describe actually enforceable in practice.
Who it is for
- Privacy and legal teams implementing consent capture ahead of a GDPR, CCPA, or similar regulatory deadline.
- IT and web teams integrating consent state consistently across a site, app, and downstream marketing tools.
- Data governance reviewers confirming that opt-out and consent-withdrawal requests actually propagate to connected systems.
What your No-Committee will ask
- IT security
- Is stored consent-preference data encrypted at rest, and is admin access to consent records protected by MFA? Encryption and MFA support are each logged as their own evidenced claim, never assumed from a general trust badge.
- Data governance
- Where is consent-record data stored, and is a Data Processing Agreement available? Data residency and DPA availability are captured straight from the vendor's privacy or legal pages, with a link to the source.
- AI governance
- If the platform uses AI to sort cookies or scripts on its own, is that disclosed, and can a person check its work? AI-feature disclosure is tracked as its own evidenced claim, apart from the core consent-capture feature.
- Legal / compliance
- Does the vendor publish a sub-processor list, and does an opt-out actually reach every connected tool downstream? Sub-processor disclosure and opt-out handling are each recorded with a source link on the claim.
- Risk / finance
- Does the platform publish an uptime SLA, and is there a status page covering past incidents? SLA terms and status-page links are captured wherever the vendor publishes them, since a tool outage here can mean consent stops being enforced.
How we verify
Every claim above comes from the vendor's own public pages — trust center, privacy policy, or security page — never from a compliance badge alone, since the claim being audited is compliance itself. Every one of those definitions — verified, self-attested, not-found — is spelled out in full on our methodology page.
Frequently asked questions
How is consent management different from a general data-privacy governance platform?
Consent management focuses narrowly on capturing and enforcing a visitor's real-time choices — cookie banners, opt-ins, preference centers. A broader data-privacy governance platform covers data mapping, subject-access requests, and policy management across the whole organization, of which consent is only one piece.
Do consent management vendors typically publish independent security certification?
Enterprise-focused consent platforms serving regulated industries commonly publish a SOC 2 report or ISO 27001 certificate, since the buyers evaluating them are often compliance teams by definition. Smaller tools more often rely on a general security page without third-party certification, which our audits mark as self-attested.
Is pricing usually based on site traffic or on a flat subscription?
Many consent platforms price by monthly visitor volume across covered domains, with tiers for the number of properties managed. Enterprise deployments needing custom consent logic or multi-brand support are more often quote-only, which we note rather than estimate.
What should I check beyond cookie-banner design before shortlisting a platform?
Confirm that an opt-out actually reaches every connected marketing tool, not just the banner, and check where consent records live. A banner that looks fine but doesn't pass the choice on to other tools is the gap a review board finds first.