How Much Does a Consent Management Platform Cost? (2026 Pricing Guide)

Consent management platforms run from free to more than $10,000 a year. Where you land depends less on the sticker price and more on how each one bills: per domain, per pageview, per session, per visitor, or a custom enterprise quote. Two tools with similar headline prices can cost wildly different amounts once you plug in your real number of sites and your real traffic. Here's what the major CMPs actually charge in 2026, and how to compare them fairly.

The short answer

Most self-serve CMPs have a free tier and paid plans that start around $10 to $30 a month, climbing to $50 to $200 for higher volumes or unlocked features. The big enterprise privacy suites, OneTrust and TrustArc, don't publish prices at all and typically start around $10,000 to $15,000 a year plus implementation. The table below shows where each one begins.

What CMPs cost at a glance

Prices verified against each vendor's public pricing, or for the sales-gated tools against third-party transaction data from Vendr, in July 2026.

A few of these numbers deserve a second look, because the billing unit changes what they actually mean.

Why the billing unit matters more than the price

The headline price is only half the story. What you're charged per is the other half:

• Per domain (Cookiebot, CookieYes). Each site is a separate subscription. Cheap for one site, expensive for ten.
• Per pageview (CookieYes). One visitor who reads five pages counts as five. The meter runs faster than your visitor count.
• Per session (Usercentrics). A returning visitor starts a new session each time, so sessions pile up faster than unique visitors.
• Per visitor (ConsentStack, Osano, Ketch). Each person counts once a month. The most predictable unit, and usually the smallest number.
• Sales quote (OneTrust, TrustArc). No public number; you get a custom price after a procurement process.

The hidden costs to check

Beyond the plan price, these are the line items that surprise people:

• Gated features. Geo-targeting, branding removal, and consent logs are often reserved for higher tiers, so the plan you actually need may be two steps up from the entry price.
• Overage and suspension. Some tools charge per extra 1,000 pageviews; others suspend your banner entirely when you hit a limit, which means trackers can fire without consent at your busiest moment.
• Implementation fees. Enterprise suites add one-time setup fees, commonly $10,000 to $50,000, on top of the subscription.
• Renewal increases. Sales-gated contracts commonly rise 20 to 40 percent at renewal.

What about "one-time payment" cookie banners?

It's a common search, and the honest answer is that consent management isn't really a one-time purchase. Regulations change, tracker and cookie lists need updating, and consent records have to be stored and kept current. A genuine CMP is an ongoing service, which is why the real ones are subscriptions. A one-time-payment "cookie banner" script is usually a static banner that displays a message but doesn't maintain compliance as the rules or your trackers change. It can be worse than nothing, because it looks handled when it isn't.

The transparent end of the market

If predictable pricing is what you're after, ConsentStack sits at the flat, public end: $29 a month on Pro for two domains, $5 per additional domain, billed by unique monthly visitors, with a free tier that actually blocks scripts. Geo-detection and all 195+ regulations are on every tier, not gated behind an upgrade. No sales call, no per-pageview meter, no per-domain stacking.

That doesn't make it the right tool for everyone. If you need a full enterprise privacy program with data mapping and DSAR automation, OneTrust or TrustArc is the category. If you live entirely inside WordPress, Complianz is cheap per site. But for most sites that need website consent handled correctly at a price they can predict, the flat model is hard to beat.

Full pricing breakdowns

For a deeper look at the three most-searched, see the individual teardowns: Cookiebot pricing, CookieYes pricing, and OneTrust pricing.

Check what you're actually paying for

Whatever you're paying, it's worth confirming your banner actually blocks trackers before consent, because a banner that doesn't isn't buying you compliance at any price. Run your site through our free compliance scanner to see what fires before and after someone clicks Reject. About a minute, no email.