iubenda vs OneTrust: Self-Serve Plans or an Enterprise Quote

The short answer: a scale-up with a few websites of up to 150,000 pageviews each, and one marketer who owns consent, can run iubenda self-serve at €4.99 to €79.99 a month per site billed yearly (iubenda pricing, checked on 26 October 2026). OneTrust sells its consent platform by quote, priced on average daily visitors summed across all channels and properties (OneTrust pricing), and earns that quote when consent has to reach apps, connected TVs and systems such as Salesforce, a CDP or a data warehouse. Choose iubenda if your job is a banner, a policy and a consent log that one person can configure and evidence this month; choose OneTrust if your job is one consent record enforced across many channels and teams.

Disclosure: I may earn a commission through some links on this site. It does not change what this page says.

Before you book the OneTrust demo:

1. Put the self-serve ceiling on paper. iubenda Ultimate costs €79.99 x 12 = €959.88 a year per site before VAT, with 150,000 monthly pageviews, hourly scans and a mobile SDK (iubenda pricing). For example, three sites on Ultimate come to 3 x €959.88 = €2,879.64. That is the figure a OneTrust quote has to beat, or justify with what iubenda lacks.
2. Count the places consent must travel. Websites, mobile apps and TV apps first; then every system that must honour a choice once it is made. OneTrust names Salesforce, Adobe Real-Time CDP, Snowflake, Databricks, Google and Meta among its integrations (Consent and Preferences). If your list stops at one website and Google tags, the second half of OneTrust's pitch is not for you yet.
3. Name the evidence you would hand over. An exportable consent log, who checks it and how often. Both products keep one; the question is who reads it.

The free step comes before any sales call: open each property in a private window, refuse everything, and list the requests that still leave. That list is the brief for either vendor, and for a site under 5,000 pageviews iubenda's free plan may already be the answer (free plan).

What the law asks of either

Both products are sold against the same paragraph: Article 5(3) of the ePrivacy Directive, as amended in 2009, permits storing information on, or reading it from, a user's device only with consent informed about the purposes, except for carrying a communication or for what a service the user explicitly requested strictly requires (consolidated text on EUR-Lex). OneTrust's own FAQ adds that legal review is required for any statement about a specific regulatory obligation or the sufficiency of a consent record (Consent and Preferences); iubenda's guide calls its automatic script blocking experimental (auto-blocking guide). Configuration and the refusal test stay with your team.

For publishers, Google requires a Google-certified platform integrated with the IAB framework to serve personalised ads through AdSense, Ad Manager or AdMob in the EEA and the UK, and in Switzerland since 31 July 2024 (Google's requirement). Its list, read on 26 October 2026, shows "Onetrust / Cookiepro" under CMP ID 28 for web, app and CTV, and iubenda under 123 for web and app; Google says certification does not check full compliance with the framework or privacy law. The same IDs appear on IAB Europe's CMP list.

Dimension by dimension

Prices, where they are published

iubenda, per site, billed yearly, excluding VAT, checked on 26 October 2026: Essentials €4.99 a month for 25,000 pageviews, Advanced €19.99 for 50,000 with terms and conditions and all languages, Ultimate €79.99 for 150,000 with the mobile SDK and consent analytics; €0.05 per extra 1,000 pageviews; agency and enterprise plans on request (iubenda pricing).

OneTrust publishes no figure; none could be read on 26 October 2026. Its pricing page lists a CMP Base package and a CMP Suite that adds notices and data subject requests, each behind a "Get Pricing" form (OneTrust pricing). CookiePro, the brand that once sold OneTrust's consent tool to smaller sites, is now part of OneTrust.com: existing customers still log in and buy inside the CookiePro app, and new customers are pointed to Consent and Preferences (CookiePro page).

Who works the AI step

The two vendors aim their AI access at different people. iubenda's connector puts 28 tools in Claude or ChatGPT for the marketer, on any plan, and asks before finalising or deleting anything (connector page). OneTrust's Developer Portal runs an MCP server for code editors such as Cursor and Windsurf, with documentation search, API access and code generation; its own example prompts include a script that pulls data subject requests by type and exports a CSV summary (OneTrust MCP server).

On OneTrust, the useful agent step is an engineer asking the editor to draft that kind of script against the consent and rights APIs. The human check: a developer reads the generated code, runs it against a test environment with credentials the agent never sees, and a privacy owner signs off the export format before it touches live data.

How the OneTrust bill is built

The quote follows a call "based on your team size and business goals", and the meter sums daily visitors across every channel and property (OneTrust pricing). Every app or TV property you add later enlarges the base the renewal is priced on, so ask in the first call how a new property changes the number.

Choose iubenda if

• Your job is consent on a handful of websites, run by one marketer, with prices you can read before you buy.
• You need the IAB framework and Consent Mode without a procurement cycle.
• You want an assistant that drafts policies and banners in plain language.

Choose OneTrust if

• Your job is one consent record enforced across web, apps, TV and downstream systems.
• You run ad tech that relies on GPP, GPC or MSPA signals alongside the IAB framework.
• A privacy team, not a marketer, will own the platform.

When the question is bigger than the banner

If the real problem is that a dozen systems use customer data and nobody owns the list of which one must honour a refusal, the stack is the problem rather than the consent tool. A one-week review like the Startup Fixer, which I sell, maps it before you sign a multi-year platform.

FAQ

Does OneTrust publish prices?

No. Its pricing page asks for a call and quotes on average daily visitors aggregated across all channels and properties (OneTrust pricing).

What happened to CookiePro?

It is now part of OneTrust.com. Existing customers keep their CookiePro environment and billing in the app; new customers are sent to OneTrust's Consent and Preferences (CookiePro page).

Can iubenda cover a mobile app?

Yes, through the mobile SDK, which the pricing page includes on Ultimate (iubenda pricing).