Tool profile
OneTrust: cost, fit and limits
OneTrust is a privacy, risk and governance software company, headquartered in Atlanta, whose cookie consent product detects trackers, serves banners and logs consent for large organizations with many sites and apps. Pricing is by quote.
What to know first
OneTrust sells cookie consent as one module in a larger privacy suite and lists no plan prices on its product page. The page does describe the work in detail: scanning behind logins, no-code blocking, over 250 languages and a database of over 45 million pre-categorized cookies. AI governance and EU AI Act compliance are separate products. Procurement runs through sales.
OneTrust at a glance
| Maker | OneTrust, United States |
|---|---|
| Free plan | No |
| Entry price | Quote only |
| API access | No |
| Category | Best AI Consent Management Software in 2026, rank 8 of 10 |
| Website | onetrust.com |
Who OneTrust is best for
Enterprises with many properties
Banner deployment across domains with pre-built martech integrations and cross-device consent sync for known users suits a company that runs dozens of sites.
Teams needing deep scanning
The scanner can simulate user journeys, scan behind logins and trigger hidden pages, which finds cookies that a public crawl misses.
Companies adding AI governance later
The consent page links to a separate AI governance solution and an EU AI Act page, so consent can be bought first and governance later.
OneTrust plans and pricing
| Plan | Price | What it includes |
|---|---|---|
| Cookie Consent (web) | Not shown on the product page | Cookie detection, customizable banners, blocking until consent, scheduled scans, a consent transaction database, A/B tests and 250-plus languages. |
| Mobile App Consent | Not shown on the product page | Extends the consent system to iOS and Android apps, with consent data shared with the web banner for known users. |
| OTT and CTV Consent | Not shown on the product page | Extends consent to connected TV and over-the-top devices, listed as an add-on to the web product. |
| Scalable packages | Quote only | The page offers scalable packages through a pricing page and a demo request, with no figures, tiers or limits stated. |
Checked November 2026.
What OneTrust does
- Deep site auditing
- Advanced scanning simulates a user experience, scans behind logins and triggers hidden pages, then lists cookies, tags, trackers, pixels and beacons. Results feed the cookie policy page.
- Cookie auto-categorization
- A database of over 45 million pre-categorized cookies sorts what the scan finds, which cuts manual labeling for common trackers. Anything not in the database still needs a manual label.
- Flexible blocking
- Blocking works through no-code rules, tag manager integrations or script re-writing, giving choices for sites with different tag setups. Teams choose the method that fits their tag management.
- Banner testing and geo rules
- A/B testing of banner templates, custom branding and geolocation rules allow regional banner variants. Regional variants let one site show different notices to visitors from different jurisdictions and track which design performs better.
- Consent database
- A detailed consent transaction database keeps the record of each choice, and known-user consent syncs across devices. That record is what you hand to an auditor on request.
How OneTrust handles your data
The about page says OneTrust is headquartered in Atlanta with ten offices around the world. The cookie consent page gives no certifications, hosting regions or retention periods and sends readers to a trust center we did not read. AI governance and EU AI Act pages are linked but left undescribed. Whether customer data trains AI models is unknown from these sources. Request the trust center documents and the data processing agreement.
Where OneTrust falls short in practice
- No printed price or tier. The consent page describes packages but gives no figure, so budgeting depends on a demo and a negotiated contract. Procurement may take weeks of calls.
- Breadth can exceed need. A small site that needs a banner and a scan receives the same suite positioning as a global retailer. The setup effort suits dedicated privacy staff.
- AI sits in other products. The consent page lists no AI feature itself. The AI governance and EU AI Act pages are separate, so AI features need their own scoping.
Works with
Alternatives to OneTrust
OneTrust: common questions
Does OneTrust publish cookie consent pricing?
No, not on the product page. It refers to scalable packages and gives a demo or contact route, with no figures or tier names. A fair comparison needs quotes from each vendor that state the same sessions, domains and app counts.
How many cookies does OneTrust claim to categorize?
The product page cites a database of over 45 million pre-categorized cookies used to auto-categorize scan results. This is a vendor figure with no method shown, so test it on a staging site and count how many cookies stay unclassified.
Can OneTrust scan pages behind a login?
Yes, the product page says the scanner can simulate user experience, scan behind logins and trigger hidden pages. It does not state limits or which plan includes it, so confirm the scope in your quote. Ask for a test scan first.
Where is OneTrust headquartered?
The about page states OneTrust is headquartered in Atlanta with ten offices around the world. It does not name the country. The consent page says nothing about where customer data is hosted, so ask for regions in writing. Ask for the legal entity too.
Does the OneTrust cookie banner use AI?
The consent page lists no AI function. It links to a separate AI governance solution and an EU AI Act compliance page without describing them. If you want AI in the consent workflow, ask what exists today. Get a written answer.