Consent management for the public sector

A public body has to answer three questions a private one can usually skip: where does the data sit, who ultimately owns the supplier, and can everybody use the thing you put in front of them. All three have answers here.

  • European-owned infrastructure
  • Accessible on every plan
  • Evidence without profiling

From €10 a month. No credit card, no per-visitor billing.

Where public sector procurement gets stuck

The product questions are rarely the hard part. These four are.

  1. The supplier is European, the parent company is not

    A vendor can have a data centre in Frankfurt and a parent company subject to the US CLOUD Act, which means a foreign authority can compel disclosure regardless of where the servers are. The question is not where the data sits, it is who can be ordered to hand it over.

  2. The banner is not accessible

    A public body in the EU is held to an accessibility standard by law, and its consent banner is part of the site. A panel that cannot be operated with a keyboard, or whose refuse button fails contrast, puts the whole site out of conformance at the first thing a visitor sees.

  3. One organisation, forty websites

    A municipality runs the main site, a handful of campaign sites, several institutional ones and a few nobody has thought about since 2019. Per-visitor pricing makes the bill unpredictable and per-page pricing punishes exactly the archive a public body is obliged to keep.

  4. The evidence has to survive review

    A consent record that identifies citizens creates a new processing activity with its own basis to justify. The defensible answer proves that a choice was made without building a profile of who made it, and that distinction is what a legal review will look for.

What we can put in a procurement answer

  • Infrastructure owned in Europe

    Hosted in Amsterdam on infrastructure owned and operated by Scaleway, an independently French company rather than a European subsidiary of a US parent. Neither they nor we fall under the US CLOUD Act. Consent Studio itself is built and owned in the Netherlands.

    • Amsterdam
    • French-owned
    • Outside the CLOUD Act
  • An accessible banner, not an accessible upgrade

    Keyboard operation, focus order, contrast and screen reader labelling are correct on every plan. On the entry plan the accessibility controls are disabled rather than removed and the banner falls back to compliant defaults, so an inaccessible banner cannot be shipped by accident.

    • Keyboard operable
    • Screen reader labels
    • Compliant defaults
  • Evidence without profiling

    The consent record ties a choice to the version of the wording that was on screen, with a timestamp, and stops there. It does not identify the citizen, and it is exportable by your own staff rather than through a support request to us.

    • Versioned wording
    • No profile built
    • Self-service export
  • Many domains, one arrangement

    Organisations running large estates are handled through the partner and Enterprise routes rather than by multiplying a single-site price. Billing is per domain rather than per visitor, so an unexpectedly popular month does not produce an unexpected invoice.

    • No per-visitor billing
    • No page limits
    • One agreement

How an evaluation usually goes

  1. Talk to us first

    Public sector evaluations start with questions rather than a trial. We answer them directly.

  2. Run it on one site

    Pick a smaller site and put it live. The first scan is usually the most persuasive document.

  3. Take it through review

    Legal, accessibility and security review the same deployment rather than a description of one.

  4. Roll out the estate

    The remaining domains follow under one arrangement, at a price that does not move with traffic.

A price that does not move with traffic

Per domain rather than per visitor, with no page limits, so an archive nobody visits costs the same as a busy one. Organisations with a large estate should start with Enterprise.

Essential

€10/month

For a single site that has to be compliant, and stay that way.

  • Unlimited pages and displays
  • 200,000 consent actions a month
  • The full stack, not a starter tier
Try Essential for FreeNo credit card required. 7 day free trial.
  • Professional

    €36/month

    For growing teams that run on data, and the agencies serving them.

    Try Professional for Free
  • Enterprise

    From €250/month

    For a volume, or an obligation, a standard plan cannot answer.

    Explore Enterprise
  • Agencies & Resellers

    Buy at a partner rate and resell client sites at your own price.

    Discover Partner Programme
  • Public Sector

    Government, healthcare and education run on Enterprise.

    See Enterprise

Trusted by organisations that get audited


  • Philips, the Dutch electronics group, using Consent Studio for cookie consent
  • Gemeente Leiden, a Dutch municipality running Consent Studio on its public websites
  • Erasmus Universiteit Rotterdam, managing cookie consent with Consent Studio
  • America Today, a fashion retailer using Consent Studio across its webshop
  • Van Vulpen, an infrastructure contractor using Consent Studio for cookie consent
  • EuroParcs, a European holiday park operator running Consent Studio on its booking sites
  • Optica, a Dutch opticians chain using Consent Studio for consent management
  • Movisie, the Dutch social policy institute, managing cookie consent with Consent Studio
  • Jeans Centre, a Dutch fashion retailer using Consent Studio for cookie consent
  • Mondiaen, a Tilburg primary school foundation, running Consent Studio across its school websites
  • Nederlands Jeugdinstituut, the Dutch national youth institute, running Consent Studio on its websites
  • Fiterman Pharma, a pharmaceutical company using Consent Studio for cookie consent
  • Eddie Rockets, a hospitality group managing cookie consent with Consent Studio
  • Veneta, a kitchen retailer using Consent Studio for consent management
  • MS Mode, a fashion retailer running Consent Studio across its European webshops

Questions from public sector buyers

Where is the data hosted, and who owns the infrastructure?

In Amsterdam, on infrastructure owned and operated by Scaleway, a French company. Ownership matters more than location here: Scaleway is independently French rather than a European arm of a US business, so neither they nor we fall within the reach of the US CLOUD Act.

Is the consent banner accessible?

Yes, on every plan. Keyboard operation, focus order, contrast and screen reader labelling are correct by default, and on the entry plan the accessibility controls are disabled rather than removed so the banner falls back to compliant settings. A public body cannot ship an inaccessible banner by forgetting a checkbox.

We run dozens of websites. How does that work?

Through the partner or Enterprise route rather than by multiplying the single-domain price, which stops being sensible somewhere around the tenth site. Billing stays per domain rather than per visitor, which is what keeps the cost of a rarely visited archive the same as it was last year.

Can we get the consent records into our own systems?

Yes. Records are searchable and exportable by your own staff from the dashboard, and Enterprise customers can have them delivered to their own systems. Answering a citizen’s request should not depend on how quickly a supplier replies to a ticket.

Do you hold a specific certification or framework agreement?

Ask us rather than assume, because we would rather answer a procurement question precisely than list badges here. What we state on this page is what we can evidence: where the infrastructure is, who owns it, what the banner does, and what the record contains.

What does Consent Studio cost?

Ten euro a month per domain, with no limit on pages and no billing per visitor. That covers the banner, the tag manager and the weekly scan together, because all three are on every plan. Agencies and organisations running many domains have a partner rate, and organisations outside the fair use range have an Enterprise plan.

Where is our consent data stored?

In Amsterdam, on infrastructure owned and operated by Scaleway, a French company. That matters beyond the map pin: Scaleway is independently French rather than a European subsidiary of a US parent, so neither they nor we fall under the US CLOUD Act. Consent Studio itself is built and owned in the Netherlands by Vallonic.

Get Started with the Full Consent Stack

Everything you need in one bundle. Consent Studio provides you with a consent banner, scanner and client-side tag manager that guarantees no data ever gets transferred overseas.

Read the documentation

Our help center walks through every integration, plugin and template step by step, with screenshots. It is written and kept current by the people who build Consent Studio.

Which privacy policy?

We publish two, and they cover different audiences. Pick the one that describes you.