Consent Mode audit
Find out whether your tags respect people's choices
Having a banner doesn't mean your tags follow what people choose. We check how your consent setup behaves across the agreed sites, tags and platforms, then give you prioritised findings and options for fixing them.
Talk to us about consentWhy consent setups go wrong
Consent setups are often put in once and not checked again. Platforms get upgraded, tags get added outside the container and templates change what they send. You won't see any of that on the banner, but it can change what you collect.
A consent review is a focused scope of a Foundation Audit, and you can buy it on its own. You don't need to review everything to get a proper look at consent.
What a consent scope covers
We go through each consent state in turn and record what actually happens.
- What your CMP tells your tags, and whether the tags act on it. We work with OneTrust, Civic and Cookiebot, and with whatever else you use.
- Tag behaviour when someone accepts, refuses or later changes their mind, including tags firing outside the container.
- Consent Mode v2 configuration, and whether basic or advanced suits you.
- Cookies set before anyone has made a choice.
- Consent across multiple domains and brands, where it often doesn't carry over.
What you leave with
Evidence you can show to whoever asks, and the order we'd fix things in.
- What we tested, what we found and what we couldn't verify.
- Where behaviour differs from the requirements your privacy team set.
- What to fix first, what can wait, and a costed plan for the fixes if you'd like us to do them.
Where to start
The Free Collection & Consent check is an automated first look at collection and consent signals visible on your public site. It flags things worth investigating. You run it yourself, and it doesn't need access to your accounts.
What happens next depends on what it finds. That might be an audit to establish what's happening across your CMP and containers, a fix we can scope straight away or a wider conversation.
The fixes usually involve CMP configuration and bringing tags under consent control in GTM. Where collection itself is the problem, moving server-side may help. If we recommend it, we'll explain why.
We work to the requirements your privacy team or legal advisers set. We test whether your setup does what they asked for. We don't give legal advice.
What next?
Automated, and you run it yourself. It doesn't need access to your accounts.
Paid investigation, scoped to your problem.
Consent management, tagging and server-side GTM as ongoing work.
Talk to us about your consent setup
Tell us which sites and tags you're concerned about. We'll suggest a scope, or point you to the free check if that's the better first step.