The Best Consent Management Platform 2026: UniConsent vs Usercentrics vs Cookiebot vs Didomi vs OneTrust

Every consent management platform describes itself as certified, compliant, and easy to install. The marketing pages are interchangeable. What is not interchangeable is what each vendor can prove on a public registry, what its documentation covers, and what its pricing page leaves out. This comparison puts UniConsent next to Usercentrics, Cookiebot, CookieYes, Didomi, and OneTrust on exactly those terms. Every certification claim below can be checked against the linked source, and on the criteria that can be verified, UniConsent is the only platform of the six without a gap.

Start With the Registries, Not the Marketing

Three public lists settle most certification questions before you ever talk to a salesperson.

The first is the IAB Europe CMP list. A CMP only appears here after completing IAB Europe's TCF validation, and each entry carries a permanent CMP ID that the CMP embeds in every TC string it produces. UniConsent is CMP ID 68, validated for both web and app. Usercentrics is 5, Didomi 7, OneTrust 28, Cookiebot 134, and CookieYes 401. The list also records which environments a CMP is validated for, and it is worth reading closely: Cookiebot, for example, is registered for the web only, and its parent group directs app developers to a separate product.

The second is the IAB TCF Canada CMP list, a separate registration with its own validation. Of the six platforms here, only UniConsent and OneTrust currently appear on it. Didomi was on the Canadian list until December 2025 and has since been removed. If you serve Canadian traffic under TCF Canada, this short list is the deciding one, and four of the six vendors are not on it.

The third is Google's certified CMP list. Since January 2024, publishers serving ads to EEA and UK visitors through AdSense, Ad Manager, or AdMob must use a CMP on this list. All six platforms are certified for the web; UniConsent's certification covers both web and app.

Beyond the registries, vendor documentation is the most honest signal available. When a CMP supports an integration, it documents that integration, because customers cannot deploy it otherwise. When a capability appears in a sales deck but nowhere in the docs, treat it as absent.

Where the Comparison Is Decided

Consent signals for ad platforms

All six implement Google Consent Mode v2, which became unavoidable once Google tied EEA/UK ad measurement to the ad_storage, ad_user_data, and ad_personalization signals. Microsoft UET Consent Mode is the newer requirement and the less evenly supported one: Microsoft now expects UET tags to receive an explicit consent signal for EEA, UK, and Swiss traffic, and advertisers without one lose Microsoft Advertising conversion tracking there. UniConsent is certified by Microsoft for UET and Clarity consent, a step beyond the self-documented support that Usercentrics, Cookiebot, CookieYes, and Didomi offer. OneTrust publishes no UET consent mode documentation at all.

US state privacy laws

Handling the growing set of US state laws (California, Virginia, Colorado, Texas, Oregon, and more each year) at scale means supporting the IAB's Global Privacy Platform, which encodes state-specific consent sections plus the MSPA into a single string. UniConsent supports GPP including the MSPA and US state sections, as do Usercentrics, Didomi, and OneTrust. Cookiebot and CookieYes document no GPP support, which effectively limits them to cookie-banner-style opt-outs rather than signal-based compliance for programmatic advertising in the US.

Header bidding and Google Ad Manager

Prebid.js reads consent through three modules: consentManagement for TCF, consentManagementGpp for GPP, and consentManagementUsp for CCPA strings. UniConsent documents all three, and our Prebid CMP setup guide walks through the full configuration. Didomi and OneTrust publish their own Prebid docs; Usercentrics and Cookiebot rely on standard TCF behaviour without dedicated Prebid documentation; CookieYes gates TCF support behind its Pro plan. For Google Ad Manager, UniConsent also handles Additional Consent, the addtl_consent string Google uses for ad tech vendors not on the IAB Global Vendor List, so Google demand keeps bidding on inventory that a TC string alone would not cover.

Mobile apps

If you need consent inside a native app, the field halves. UniConsent ships SDKs for iOS, Android, Flutter, and React Native, with WebView consent sync so a user who consents in the app is not asked again in embedded web content. Usercentrics, Didomi, and OneTrust also ship native SDKs. Cookiebot and CookieYes do not support apps at all, which is worth settling early: teams that pick a web-only CMP and later ship an app end up running two consent vendors with two separate consent records.

Shopify, WordPress, and tag managers

UniConsent integrates with Shopify through the Customer Privacy API in a single app install, ships a WordPress plugin, and works with Google Tag Manager, GA4, and Google Ads out of the box. Usercentrics, Cookiebot, CookieYes, and OneTrust cover this ground too. Didomi's Shopify setup is a manual theme-code installation currently marked beta.

Pricing you can actually compare

The six platforms bill on five different meters, which makes list prices misleading without conversion. Usercentrics counts sessions, CookieYes counts pageviews, Cookiebot counts subpages, OneTrust quotes on daily visitors, and UniConsent counts users, with the most generous entry point of the six: the free plan covers up to 50,000 users per month. A site with 30,000 monthly visitors is comfortably inside UniConsent's free tier, roughly 90,000 pageviews on CookieYes (past its 5,000-pageview free tier and into paid overage territory), and thirty times Usercentrics' 1,000 free sessions. Cookiebot's free plan stops at one domain with 50 subpages. Didomi and OneTrust have no free plan and no published pricing at all.

Multi-site setups amplify the gap. Usercentrics, Cookiebot, and CookieYes all price per domain, so an agency running twelve client sites pays twelve subscriptions. UniConsent includes up to 20 websites in one plan from £20 per month, and the Enterprise plan removes the limit entirely and adds an SLA with 24/7 premium support plus assisted migration from any of the CMPs on this page.

Side by Side

	UniConsent	Usercentrics	Cookiebot	CookieYes	Didomi	OneTrust
TCF 2.3 CMP ID	68 (web + app)	5	134 (web only)	401	7	28
TCF Canada	Yes	No	No	No	No	Yes
Google-certified CMP	Yes, web + app	Yes	Yes	Yes	Yes	Yes
Google Consent Mode v2	Yes	Yes	Yes	Yes	Yes	Yes
Microsoft UET Consent Mode	Certified	Yes	Yes	Yes	Yes	Not documented
IAB GPP	Yes, incl. MSPA	Yes	Not documented	Not documented	Yes	Yes
Prebid.js	TCF, GPP, USP modules	Via TCF	Via TCF	Via TCF, Pro plan+	Yes	Yes
Mobile SDK	iOS, Android, Flutter, RN	iOS, Android, Flutter, RN	No	No	iOS, Android, Flutter, RN	iOS, Android, Flutter, RN
Free plan	50,000 users/mo	1,000 sessions/mo	1 domain, 50 subpages	5,000 pageviews/mo	None	None
Paid from	£20/mo, up to 20 sites	€7/mo per domain	€7/mo per domain	$10/mo per domain ($25 for TCF)	Quote only	Quote only

The Bottom Line

Each competitor covers part of the checklist. Usercentrics and Didomi are strong on mobile but missing from TCF Canada. OneTrust is on both TCF lists but undocumented for Microsoft UET and sold only by quote. Cookiebot and CookieYes are inexpensive entry points that stop at the web and stop short of GPP, and CookieYes charges extra before TCF is even available.

UniConsent is the one platform of the six that clears every row: TCF 2.3 for web and app, TCF Canada, Google certification, certified Microsoft UET support, GPP with MSPA, all three Prebid consent modules, Google Ad Manager Additional Consent, native SDKs for iOS, Android, Flutter, and React Native, and pricing published on the site rather than delivered in a sales call. You can start on the free plan with up to 50,000 users per month, verify every claim above on the registries yourself, and scale to the Enterprise plan with an SLA and assisted migration when you outgrow self-service.

The complete side-by-side, covering 18 verifiable criteria with a last-verified date and a source for each claim, is on our CMP comparison page, with detailed pages for Usercentrics, Cookiebot, Didomi, OneTrust, and CookieYes.