How much does privacy software cost? Typical prices by category in 2026
As of November 2026, small-business cookie consent and policy tools publish prices from $0 to about $130 a month per site, usually based on pageviews, subpages or banner views. Request tools, privacy suites and trust center platforms mostly sell by quote and publish no prices.
Privacy software prices range from free to "ask sales". The cheap end is clearly priced and easy to compare. The expensive end is not published at all. This guide collects the prices vendors show on their own pricing pages, read on 4 November 2026, and explains what makes the bill move.
Nothing here is a quote. Plans change often, taxes are extra in most cases, and a vendor's page is always the final word. We only include prices we could read on an official page, and where a page shows no price we say "not published".
#What do privacy tools cost, by category?
| Category | Published price range, as of November 2026 | Usual pricing basis | Examples read |
|---|---|---|---|
| Cookie consent platforms | Free to about $130 a month per domain on the plan tables we read | Pageviews, subpages or visitors, per domain | Cookiebot, CookieYes, Axeptio |
| Policy generators with a banner | Free to $20 per website a month on Termly; €4.99 to €79.99 a month per site on iubenda when billed yearly | Per website, with limits on policies, banner views or pageviews | Termly, iubenda |
| All-in-one workspaces | Free, then a flat price per workspace | Per workspace | Privacyboard |
| Data subject request tools | Not published on the pages we read | Quote | Transcend, OneTrust, Osano |
| Privacy management and GRC suites | Not published | Quote, metered by users, visitors or inventory | OneTrust, Securiti |
| Trust center and questionnaire platforms | Not published | Quote, by plan tier | Vanta, Drata |
The ranges describe published list prices for one website. Your real cost depends on traffic, number of sites and the features you need.
#Cookie consent platforms: published prices
As of 4 November 2026, from each vendor's pricing page:
| Vendor | Free plan | Paid plans (list price, one site) | What limits the plan |
|---|---|---|---|
| CookieYes | $0, 5,000 pageviews a month | Basic $10, Pro $25, Ultimate $55 a month per domain | Pageviews: 100,000, 300,000, unlimited. Extra pageviews $0.30 per 1,000 on Basic and Pro. Annual prices not listed |
| Cookiebot | One domain, up to 50 subpages | $10, $20, $43, $70, $120 per domain across five tiers | Subpages per domain. The page does not make clear which billing period applies to each figure |
| Axeptio | $0, up to 200 visitors a month | Extra Small $7.50 a month paid yearly, Small $29, Medium $69, Large $129 a month | Pageviews or monthly unique visitors, per the page; it does not explain how the two relate |
Cookiebot's page also shows a different multi-domain scheme in euros, so confirm the figure for your case with the vendor. Usercentrics Advanced, the enterprise tier shown on the same page, is "not published" and is billed by sessions.
#Policy generators and small-team suites: published prices
| Vendor | Free plan | Paid plans (one website) | Notable limits |
|---|---|---|---|
| Termly | $0, one basic policy, 10,000 banner views a month, one user | Starter $10 a month billed annually ($14 monthly); Pro+ $15 billed annually ($20 monthly) | Starter: 50,000 banner views, 5 users. Pro+: unlimited banner views and users. Extra websites are priced per license |
| iubenda | A free start is mentioned, limits not listed | Essentials $5.99, Advanced $24.99, Ultimate $99.99 a month per site billed yearly ($6.99, $27.99, $119.99 monthly) | Pageviews: 25,000, 50,000, 150,000. Extra pageviews €0.05 per 1,000. Register of processing and a data subject rights tool are listed on Ultimate |
Both bundle a banner with policy generation. Check which features sit in which tier: Termly lists consent logs and regional consent rules from Pro+, and iubenda lists geo-targeting from Advanced.
#Which categories do not publish prices?
On the pages we read, these vendors ask you to contact sales or request a demo:
- OneTrust lists nine packages and what each is metered by (for example average daily visitors, users, or the number of third parties), but no amounts.
- Securiti offers a custom quote based on the modules you choose.
- Transcend offers a demo and shows no plans.
- Osano shows no plan prices and mentions a free 30-day trial.
- Vanta and Drata list plan names and route you to personalised pricing or a demo.
"Not published" is not a criticism. Prices for these products depend on scope. It does mean you cannot compare them before a sales call, so budget time as well as money.
#What makes the bill go up?
- Visitors and pageviews. Several banner tools price on traffic, so a successful campaign can push you into the next tier.
- Subpages. Cookiebot states that it prices by the number of subpages per domain and does not bill traffic.
- Domains and websites. Most small-business tools price per domain or site. Three sites cost about three times as much.
- Seats. Termly's Starter plan includes five users and Pro+ is listed as unlimited. OneTrust's page lists admin users as a meter for several of its packages.
- Request volume and inventory. Suites meter by users, assets or data subject profiles rather than by request count, according to OneTrust's page.
- Number of regulations and regions. Region-specific banners, geo-targeting and multi-language support are often kept for higher tiers.
- Add-ons. Consent proof for forms, accessibility widgets and mobile SDKs are sold separately by some vendors, for example on iubenda's page.
#What does a small website really pay? Two illustrations
These are arithmetic on published list prices, not offers.
One site, up to 100,000 pageviews. CookieYes Basic is $10 a month ($120 a year at the monthly rate). Termly Starter is $10 a month billed annually ($120 a year). iubenda Essentials is $5.99 a month billed yearly, but only covers 25,000 pageviews. A free plan can be enough for a very small site, as long as it stays within its limits.
Three sites. At $10 per domain a month, three CookieYes Basic subscriptions come to $30 a month, or $360 a year. Per-site pricing multiplies with every domain you add. A flat per-workspace price changes that picture, but only compare tools with the same scope: a banner alone is not the same as a banner plus policies, vendor records and request tracking.
#What is the total cost of ownership?
The subscription is the visible part. Over a year, the costs people forget are these:
- Time to set up and to keep updated. Every separate tool has its own settings, scans and reviews.
- Re-entering the same facts. A new tool must be added to the policy, the cookie declaration, the vendor list and the register. The more places, the more chances to miss one.
- More vendors to check. Each privacy tool is itself a vendor with a data processing agreement and a data location. Our due diligence checklist applies to them too.
- Overage and tier jumps. A tier based on pageviews or subpages can change the cost without a change on your side.
- Exit cost. Getting records out of a tool, or rebuilding them elsewhere, takes time.
Several specialised tools can still be right if one of them is much stronger in its field. One workspace tends to reduce the upkeep, not the need for judgment. Neither replaces professional advice for an unusual situation.
#Where Privacyboard fits
Privacyboard is an EU-hosted workspace for small businesses and teams. Its pricing, as of November 2026, is per workspace and does not depend on visitors or vendors. The Free plan costs $0 and includes documents, the vendor list, the processing register, request tracking, the incident register, previews and one member. Pro costs $29 a month or $288 a year (about $24 a month) per workspace, and adds the published privacy center, the cookie banner on up to 5 domains, and teams. Taxes are calculated at checkout.
It is a guidance tool, not legal advice, and it does not promise compliance. It is not an enterprise GRC platform: no automated data discovery across databases, no questionnaire or audit workflows and no certification reports. The banner does not implement IAB TCF. See pricing for the current plans.
#A short budgeting checklist
- Count your websites and estimate monthly pageviews and subpages.
- Decide which jobs you need now: banner, policies, requests, vendor records.
- Compare the same scope across tools, not just the banner price.
- Ask what happens when you pass a limit.
- Check whether yearly billing changes the price, and by how much.
- Add the time you will spend to keep it current.
- Note what a free plan leaves out, such as logs, scans or exports.
Our guides to choosing privacy software and the software categories help with steps 2 and 3.
#FAQ
#How much does a cookie consent tool cost for a small website?
On the pages we read in November 2026, entry paid plans start around $10 a month per domain, and free plans exist with limits such as 5,000 pageviews or 50 subpages. Higher traffic or more pages moves you into higher tiers.
#Is there a free privacy policy generator?
Termly lists a free plan with one basic policy, and CookieYes lists its policy generators on all four plans, the free one included. Free generators usually limit the number of policies, edits or languages.
#Why do enterprise privacy tools not publish prices?
Their price depends on scope: modules, users, visitors, assets and regions. Vendors such as OneTrust and Securiti ask you to request a quote. Expect a sales process and a custom contract.
#Does pricing by pageviews or by subpages cost less?
It depends on your site. A small site with many pages and low traffic may pay less under pageview pricing, while a busy site with few pages may pay less per subpage. Compare against your real numbers.
#Is the cheapest option the cheapest in total?
Not always. A low subscription can hide extra time, overage fees and duplicated data entry across tools. Compare scope and upkeep as well as price.
#Do prices include VAT?
Often not. Several vendors state their prices exclude VAT, and Privacyboard calculates taxes at checkout. Check the note on each pricing page.
#Sources
- Regulation (EU) 2016/679 (GDPR), Articles 12 and 30, EUR-Lex
- CookieYes pricing, Cookiebot pricing, Axeptio pricing, read 4 November 2026
- Termly pricing, iubenda pricing, read 4 November 2026
- OneTrust pricing, Securiti pricing, Transcend pricing, Osano pricing, Vanta pricing, Drata pricing, read 4 November 2026
- Privacyboard plans and pricing
Privacyboard is a guidance tool, not legal advice. This article explains general rules in plain language and was accurate on the date above; laws and guidance change. For an unusual situation, ask a qualified professional. Spotted a mistake? Write to antoine@unmake.io.