Is Domo's embedded analytics script subject to consent requirements?

It depends on context. Session cookies supporting authenticated dashboard access are likely strictly necessary and exempt. However, interaction analytics and usage telemetry tracking how users engage with embedded visualizations go beyond functional necessity and may require consent under GDPR and ePrivacy rules.

What does Domo track when embedded analytics load on a site?

Domo records which charts users click, filters they apply, drill-downs they perform, time spent on different data views, and session state including applied date ranges and navigation history. Usage telemetry is also collected about embedded dashboard performance and feature utilization patterns.

How does ConsentStack classify Domo for consent management?

ConsentStack classifies Domo as analytics and functional. Core session cookies for authenticated dashboard access load without consent. ConsentStack can suppress the interaction analytics and telemetry components until the visitor grants analytics consent, giving operators precise control over which parts of Domo's data collection are active.

What tracker domains does Domo use?

ConsentStack has catalogued tracker domains for Domo including domo.com. These are the network destinations Domo's scripts contact, which a consent platform blocks until a visitor agrees.

Domo - Embedded Analytics Consent Controls

Back to Vendor Library

Overview

Domo is an enterprise business intelligence and data visualization platform that consolidates data from hundreds of sources into interactive dashboards and reports. While the core platform operates as a SaaS application, Domo offers embedded analytics capabilities that allow organizations to expose interactive dashboards, charts, and reports on external portals, customer-facing applications, and partner sites.

When Domo's scripts appear on third-party sites, they're typically powering these embedded analytics experiences — bringing Domo's visualization engine outside of its native platform.

What This Script Does

Domo's embedded analytics scripts deliver interactive data visualizations on external sites:

Dashboard embedding: Renders interactive Domo dashboards within iframes or custom containers, displaying charts, graphs, tables, and KPI cards populated with real-time or scheduled data
Chart interaction tracking: Records how users interact with embedded visualizations — which charts they click, filters they apply, drill-downs they perform, and time spent viewing different data views
Authentication and access control: Manages user authentication for embedded analytics, often integrating with the host site's authentication to provide role-based data access
Session cookies: Sets cookies to maintain the user's session state, including applied filters, selected date ranges, and dashboard navigation state
Data refresh management: Handles periodic data refresh cycles, pulling updated data from Domo's backend to keep embedded visualizations current
Interaction analytics: Collects usage telemetry about embedded dashboard performance, user engagement patterns, and feature utilization to feed back into Domo's analytics

Consent & Compliance

Domo's embedded analytics scripts have layered compliance considerations:

GDPR: User interaction data and authentication information constitute personal data processing. Domo acts as a data processor for the embedded analytics data. Session cookies supporting authenticated dashboard access may qualify as strictly necessary.
ePrivacy Directive: Session cookies for authenticated dashboard access are likely strictly necessary. However, interaction analytics and usage telemetry cookies go beyond what's necessary for the requested service and may require consent.
CCPA/CPRA: Usage telemetry and interaction patterns collected through embedded dashboards constitute personal information that should be disclosed.

The compliance assessment depends on context: authenticated enterprise portals with explicit user accounts differ from public-facing embedded dashboards.

Should You Block This Without Consent?

Domo's embedded analytics serve a functional purpose — delivering data visualizations that users actively interact with. The core dashboard rendering and session management are functional requirements. However, the interaction analytics and usage telemetry components track user behavior for purposes beyond delivering the visualization. If the embedded analytics are behind authentication and serve a clear business function, the functional classification is appropriate. For public-facing embeds with analytics tracking, consent may be warranted for the telemetry components.

Conditional.

Is Domo GDPR compliant?

Domo typically loads analytics and functional trackers, which are not strictly necessary for your site to work. Under the GDPR and the ePrivacy Directive, non-essential cookies and trackers must stay blocked until a visitor gives clear opt-in consent. So Domo can be fully GDPR compliant, but only if your site holds its scripts until consent is granted and lets visitors decline just as easily. Compliance depends on how your site loads Domo, not on Domo itself.

Visit website