ICF

ICF

ICF is an information consulting and technology company serving government and enterprise sectors. Digital properties may use ICF infrastructure for web hosting, analytics measurement, and content delivery. Scripts typically operate as backend infrastructure without independent behavioral tracking.

Overview

ICF (formerly ICF International) is a global consulting and technology services company headquartered in Fairfax, Virginia. The firm provides advisory, digital transformation, technology implementation, and program management services predominantly to US federal government agencies, state and local governments, and enterprise organisations in sectors including public health, energy, transportation, and social services. ICF's digital properties host government-adjacent informational websites, public health campaign portals, research report repositories, and programme microsites built and operated on behalf of government clients.

ICF scripts appear on websites where ICF is providing web hosting, content management, or digital service delivery on behalf of a government or institutional client.

What This Script Does

ICF's script presence varies by the specific digital service being delivered. Common implementations include:

Web hosting and infrastructure delivery: Many ICF-operated websites serve content through ICF's managed hosting infrastructure. Scripts may include content delivery optimisation, uptime monitoring agents, and server-side session management. These operate as essential infrastructure components.

Government web analytics (DAP / GSA Digital Analytics Program): ICF-built US federal government websites commonly include the GSA Digital Analytics Program (DAP) tag — dap.digitalgov.gov/Universal-Federated-Analytics-Min.js. This is a federal mandate for .gov websites and collects anonymised, aggregate page view and session data. The DAP tag is configured to not collect personally identifiable information and to disable advertising features. IP addresses are anonymised before storage.

Accessibility and content management scripts: ICF deploys accessibility overlay scripts and CMS-driven component scripts on government websites for standards compliance (Section 508, WCAG 2.1 AA).

Cookies set:

  • Session management cookies for authenticated portals (e.g., JSESSIONID, __RequestVerificationToken) — Strictly necessary for authenticated application sessions. Expiry: session.
  • DAP analytics cookies — Anonymised page view tracking with no persistent user identification. Expiry: session or short-duration.
  • No advertising, retargeting, or cross-site tracking cookies in standard ICF government website deployments.

Consent & Compliance

Consent category: Essential

ICF scripts on government and institutional websites typically serve infrastructure, session management, and mandated analytics purposes. The DAP tag used on US federal government sites operates under OMB directive M-17-06, which mandates participation while prohibiting collection of personally identifiable information, advertising features, and data sharing with third parties.

Under GDPR and ePrivacy, essential infrastructure cookies and session management cookies do not require consent. If ICF deploys analytics beyond the DAP minimum, those components should be evaluated separately. Government websites operating under Section 508 and WCAG compliance requirements may deploy accessibility scripts that qualify as essential.

Under CCPA, government agencies and their service providers handling data solely for government service delivery are subject to specific exemptions.

Should You Block This Without Consent?

No. ICF scripts on government and institutional websites serve infrastructure, session management, and mandated analytics purposes that are essential to the operation of the hosted service. If a specific ICF deployment includes optional analytics or tracking beyond core infrastructure, evaluate those components separately.

Is ICF GDPR compliant?

ICF's trackers are classified as essential (strictly necessary), so they are generally exempt from prior consent under the GDPR. You should still list them in your cookie policy and privacy notice so visitors know they are there.

Visit website

Consent Categories

Also Known As

ICFICF consultingICF technologygovernment site analyticsenterprise consulting tracking

Industries

Business and Consumer ServicesComputers Electronics and TechnologyBusiness ServicesHeavy Industry and Engineering

Tracked Domains (1)

ICF's trackers are rarely seen, seen on a small share of the sites ConsentStack has scanned. Scan your own site to see which of these are firing before consent.

nsimg.netEssential

nsimg.net is an essential domain operated by ICF, used to keep the site working, including security, load balancing, and sessions. Seen on a small share of scanned sites.

Frequently Asked Questions

Related Vendors

21 Productions
21 Productions
TruOptik (acquired by TransUnion) is a connected TV audience data platform. Scripts enable audience-targeted advertising across CTV and streaming platforms by matching device identifiers to household audience segments.
Blockthrough
Blockthrough
Ad blocking revenue recovery solution. Blockthrough scripts detect ad-blocking visitors and display an alternative monetization experience — such as an acceptable ads opt-in or subscription prompt — to recover revenue lost to ad blockers.
Arkose Labs
Arkose Labs
Fraud prevention platform specializing in account protection and bot mitigation. Presents users with interactive enforcement challenges when suspicious activity is detected. The Arkose Labs script runs device and behavior analysis before surfacing challenges, targeting credential stuffing, fake account creation, and payment fraud.
F5 Networks
F5 Networks
Web security and DDoS protection solution for e-commerce and enterprise sites. F5 Networks scripts may appear as part of bot management and web application firewall (WAF) deployments, performing browser integrity checks to identify automated traffic.
ClickCertain
ClickCertain
ClickCertain is a click fraud prevention platform for pay-per-click advertisers. Scripts analyze visitor behavior and device signals to detect invalid clicks from bots and click farms, automatically blocking fraudulent traffic from draining ad budgets.
IAB Europe
IAB Europe
IAB Europe is the trade association for digital advertising in Europe. The IAB Transparency & Consent Framework (TCF) script manages vendor consent records for GDPR compliance across participating advertising technology companies.

Manage consent for ICF

ConsentStack automatically detects and manages ICF trackers so your site stays compliant with global privacy regulations.