Cookie consent present but CMP vendor is unrecognised
A consent management platform (CMP) is the underlying system that runs a cookie banner, logs consent choices, and handles vendor agreements. This check identifies which CMP vendor a site is using, if any of the well-known ones, OneTrust, Cookiebot, CookieYes, Iubenda, can be recognised. On this site, a cookie consent banner is present, but the CMP vendor behind it isn't one this check recognises.
Why this matters
Custom or unrecognised consent banners may lack the things tier-1 CMPs provide by default: proper GDPR-compliant consent logging, audit trails, and Data Processing Agreements (DPAs) with the vendors involved. Custom banners often fail an audit when a regulator asks for proof of exactly what a specific visitor consented to and when, because that record-keeping wasn't built in from the start.
How to fix it
Your developer and privacy adviser should evaluate switching to a recognised consent management platform (CMP), such as CookieYes or Cookiebot. Check each vendor's current pricing and plans, and confirm they offer a data processing agreement (DPA), audit logs and IAB TCF (Interactive Advertising Bureau Transparency and Consent Framework) support if you need it. This is a bigger project, including migration and testing.
Turn website findings into an action plan
Create an account to start a Full Audit of your website, with supporting evidence and a prioritised action plan.
Start Full Audit