iubenda ReviewAuto-generated, auto-updated legal compliance for every site you run — without a lawyer
By Morgan Ellis
iubenda is a privacy compliance platform that generates and automatically maintains privacy policies, cookie consent banners, and terms and conditions for websites, apps, and newsletters, staying current across GDPR, CCPA, LGPD, and 10+ global regulations without manual intervention. Essentials starts at $5.99/site/month billed annually; a free plan covers basic needs with a 14-day money-back guarantee on paid plans. For affiliate marketers promoting it: the Impact-based program pays up to 40% CPA on first purchases with a 30-day cookie, and existing iubenda users can access a parallel 30% referral channel instantly through their dashboard with no application required. Compared to simpler alternatives like GetTerms or Termly, iubenda's Advanced plan adds geo-targeting, IAB TCF 2.2 certification, and auto-updating legal documents across 10+ jurisdictions. The honest limitation: iubenda charges per site on a recurring subscription — there is no one-off purchase option, which is the most-surfaced objection from its 150,000+ customer base.
AT A GLANCE
Pricing
iubenda prices per site, not per user or per organization. All paid plans include the full core compliance stack (cookie banner, privacy policy generator, consent logging, Google Consent Mode v2, WordPress/Shopify integrations). Differentiators by plan: Essentials handles up to 25K pageviews/month, one language, 20 third-party service clauses. Advanced adds geo-targeting, all languages, unlimited custom clauses, Terms and Conditions generator, REST API, up to 50K pageviews. Ultimate adds hourly site scans, in-depth analytics, consent recovery, cookie consent paywall, mobile SDK, GDPR Article 30 record-keeping, whistleblowing management, and data subject rights management tool, up to 150K pageviews. All plans charge €0.05 per 1,000 extra pageviews beyond the plan limit rather than cutting off service. Accessibility add-on plans are separate: Lite at $7/month (10K pageviews), Standard at $60/month annual (150K pageviews). Annual saves approximately 14–16% versus monthly pricing. Enterprise and agency plans are available through direct contact.
Best for
Website owners and bloggers who need GDPR and cookie compliance without a lawyer, Web developers and agencies managing compliance across multiple client sites, Ecommerce operators who need compliant cookie consent for Google Ads and analytics tracking, Publishers and advertisers participating in IAB TCF 2.2 programmatic advertising, SaaS companies and app developers covering multi-jurisdiction regulatory requirements
▶ Ready to explore?
Try iubenda →Pros
- ✓Auto-updates privacy policies and cookie banners when regulations change — no manual intervention required
- ✓Google-certified CMP partner with Consent Mode v2 built in — preserves ad performance for publishers
- ✓Covers GDPR, CCPA, LGPD, ePrivacy, and 10+ frameworks from a single dashboard
- ✓Per-site pricing with centralized multi-site management for agencies and developers
- ✓14-day money-back guarantee and free plan available for risk-free evaluation
Cons
- ✗Subscription-only pricing — no one-time payment option despite being the most-requested feature
- ✗6–8 week payout validation on affiliate commissions, the longest delay in the directory
- ✗Per-site subscription costs compound quickly for agencies managing many client sites without a volume discount
- ✗Support response consistency flagged across Trustpilot reviews — some users report slow replies despite premium plans
- ✗Advanced features (GDPR Article 30, whistleblowing, consent analytics) locked to the $99.99/month Ultimate plan
Who Should Skip iubenda
▶ Ready to start?
Start with iubenda →▶ About This Software
iubenda is a legal-tech compliance platform founded in 2011 in Italy, now part of team.blue NV and trusted by 150,000+ clients across 100+ countries. It auto-generates privacy policies, cookie policies, consent banners, and terms and conditions from a library of 2,400+ attorney-drafted clauses, then auto-updates those documents whenever relevant laws change — covering GDPR, UK-GDPR, ePrivacy, Brazil's LGPD, CCPA/CPRA, California's CalOPPA, Switzerland's FADP, and more. Pricing is per site: Essentials at $5.99/site/month billed annually (up to 25,000 pageviews); Advanced at $24.99/site/month (50,000 pageviews, adds geo-targeting, API access, Terms and Conditions generator); Ultimate at $99.99/site/month (150,000 pageviews, adds in-depth analytics, consent recovery, whistleblowing management, GDPR Article 30 record-keeping). A free plan is available for sites under ~1,000 monthly pageviews. All plans include Google Consent Mode v2, IAB TCF 2.2 support, WordPress and Shopify integrations, and Google Tag Manager. iubenda holds Google-certified CMP partner status and ISO 27001:2017 certification — credentials that matter to publishers and advertisers whose Google Ads performance depends on consent mode compliance.
For affiliate marketers evaluating whether to use and promote iubenda: the affiliate program pays up to 40% cost per action commission on first purchases by new customers via the Impact platform, with a 30-day cookie and 6–8 week validation before payout. Existing iubenda account holders can also access a parallel 30% referral program immediately through the dashboard's 'love and rewards' section — no application required, no minimum payout, and a 10% buyer discount attached to the affiliate link that increases conversion rate. The recurring subscription model means commission is earned once per new customer; the per-site pricing means agencies and developers who build multiple client sites generate multiple separate commission events. The subscription objection — users frequently ask for a one-time payment option — is the product's main conversion friction for price-sensitive solo site owners and is addressed honestly in the FAQ section below.
▶ Key Features
Privacy Policies and Cookie Policies That Update Themselves When Laws Change
iubenda's policy generator selects from 2,400+ attorney-drafted service clauses — covering third-party services like Google Analytics, Facebook Pixel, Stripe, Mailchimp, and hundreds more — and assembles them into a complete privacy policy hosted on iubenda's servers. When a regulation changes (as GDPR enforcement interpretations regularly do), iubenda's legal team updates the relevant clauses and the change propagates to all subscriber documents automatically. Site operators do not rewrite their policy each time California adds a new privacy law; the subscription covers that maintenance. Essentials plan allows up to 20 service clauses; Advanced and Ultimate allow unlimited clauses plus custom text.
Certified Cookie Consent Banner With Google Consent Mode v2 Built In
Google mandated Consent Mode compliance for all websites targeting European users in March 2024 — without it, audience personalization and measurement features for Google Ads are disabled. iubenda's cookie consent banner is a Google-certified CMP partner with Consent Mode v2 pre-built, meaning compliant setup requires no custom code or developer time beyond the initial script embed. The banner supports IAB TCF 2.2 for programmatic advertising, geo-targeting to display jurisdiction-appropriate consent flows (Advanced plan and above), and a permanent consent log that stores proof of each user's consent decision for audit purposes.
Terms and Conditions Generator Covering 10+ Regulatory Frameworks
The Terms and Conditions generator (Advanced plan and above) produces jurisdiction-aware terms covering ecommerce return policies, SaaS subscription terms, app store requirements, and general website use. Unlike generic template generators that produce the same document regardless of jurisdiction, iubenda's terms select relevant clauses based on site type, location, and applicable laws. Covered frameworks include EU Consumer Rights Directive, UK Consumer Contracts Regulations, Australian Consumer Law, and US state contract requirements. Terms are self-updating when applicable regulations change.
One Dashboard Managing Compliance Across All Your Sites
The iubenda dashboard centralizes compliance management for all connected sites — scanning each for new third-party services, alerting when compliance issues appear, generating per-site compliance reports, and displaying consent rate analytics for Ultimate plan subscribers. For agencies and web developers managing multiple client sites, one iubenda organization account provides unified visibility with separate site configurations. Hourly site scans on Ultimate detect new tracking scripts within an hour of deployment; monthly scans on Essentials and Advanced detect changes within the billing cycle.
Whistleblowing Management and GDPR Article 30 Records for Enterprise Compliance
The Ultimate plan includes two enterprise-grade compliance tools absent from sub-$30/month alternatives. The EU Whistleblower Directive tool creates embeddable anonymous reporting forms for organizations covered by the 2023 directive (mandatory for EU organizations above 50 employees). The GDPR Article 30 tool generates and maintains the Records of Processing Activities (ROPA) — the formal data processing inventory required for GDPR compliance audits. These tools serve regulated industries (healthcare, legal, financial services) where basic cookie banner compliance is insufficient.
▶ Who Should Use This
Small business operators running a company website, ecommerce store, or newsletter have a legal obligation to display a compliant privacy policy and cookie consent banner in most jurisdictions. iubenda's Essentials plan at $5.99/site/month replaces a one-time attorney fee of $500–$2,000 for a custom policy that would require a new engagement every time a law changes. For SMB audiences, the content marketing angle is the cost comparison: what does iubenda cost over three years versus hiring a lawyer once per major regulatory update?
Web development agencies deploying iubenda across client sites benefit from centralized dashboard management, per-site billing that passes through cleanly to client invoices, and a white-label option at the Ultimate tier for removing iubenda branding from client-facing documents. The affiliate disclosure requirement applies when agencies earn commissions; the FTC guidelines mandate clear disclosure when recommending products for which compensation is received.
Publishers running advertising and affiliate marketing programs — where Google Ads, Google Analytics, and affiliate tracking scripts generate cookie consent requirements — need a CMP certified by Google to preserve their advertising revenue. iubenda's Google Consent Mode v2 integration ensures that users who decline cookie tracking are still counted in aggregated measurements, preserving the analytics data that informs content decisions. Consent rate analytics on the Ultimate plan provide the specific data publishers need to optimize banner presentation for higher opt-in rates.
Ecommerce operators face privacy compliance requirements from multiple directions: GDPR for EU visitors, CCPA/CPRA for California residents, LGPD for Brazilian customers, and payment processor requirements for consumer data handling disclosures. iubenda's Advanced plan handles all major ecommerce regulations in one place with geo-targeting that shows jurisdiction-appropriate consent flows to each visitor. The Shopify integration deploys cookie compliance with a one-click app install.
▶ Pricing
iubenda prices per site, not per user or per organization. All paid plans include the full core compliance stack (cookie banner, privacy policy generator, consent logging, Google Consent Mode v2, WordPress/Shopify integrations). Differentiators by plan: Essentials handles up to 25K pageviews/month, one language, 20 third-party service clauses. Advanced adds geo-targeting, all languages, unlimited custom clauses, Terms and Conditions generator, REST API, up to 50K pageviews. Ultimate adds hourly site scans, in-depth analytics, consent recovery, cookie consent paywall, mobile SDK, GDPR Article 30 record-keeping, whistleblowing management, and data subject rights management tool, up to 150K pageviews. All plans charge €0.05 per 1,000 extra pageviews beyond the plan limit rather than cutting off service. Accessibility add-on plans are separate: Lite at $7/month (10K pageviews), Standard at $60/month annual (150K pageviews). Annual saves approximately 14–16% versus monthly pricing. Enterprise and agency plans are available through direct contact.
Free ? $0/mo (free plan). Best for personal sites and very low-traffic projects testing the platform. Basic privacy policy, cookie banner, consent logging, Google Consent Mode v2. Limited clauses and pageviews.
Essentials ? $5.99/mo billed annually ($6.99 monthly). Best for growing small businesses and solo operators with a single site under 25K monthly pageviews. 25K pageviews, up to 20 service clauses, 1 language, monthly site scans, compliance alerts.
Advanced ? $24.99/mo billed annually ($27.99 monthly). Best for businesses serving international audiences, ecommerce operators, and teams needing custom legal text — the most popular plan. 50K pageviews, unlimited custom clauses, all languages, Terms and Conditions, geo-targeting, REST API, monthly scans.
Ultimate ? $99.99/mo billed annually ($119.99 monthly). Best for enterprises, regulated industries, publishers running programmatic advertising, and organizations with formal GDPR Article 30 obligations. 150K pageviews, hourly scans, in-depth consent analytics, consent recovery, mobile SDK, GDPR Article 30, whistleblowing, data subject rights tool, full white-label.
▶ Use Cases
A blogger running a WordPress site with Google Analytics, a contact form, and a newsletter signup installs the iubenda WordPress plugin, configures privacy policy clauses for their three third-party services, embeds the cookie consent banner, and connects Google Consent Mode — all without writing legal text or contacting an attorney. The Essentials plan at $5.99/month provides auto-updating coverage as the ePrivacy Directive and GDPR enforcement evolve. When the site later adds an affiliate marketing program, iubenda adds the affiliate disclosure clause to the policy.
A freelance web developer managing 12 client websites sets up one iubenda organization account and deploys site-specific policies for each client through the centralized dashboard. Monthly scans alert when a client's site adds a new tracking script requiring policy updates. The developer passes per-site costs through to client maintenance retainers. Each new client site creation is a new iubenda account that, if referred through the developer's affiliate link, generates a separate CPA commission event.
An ecommerce operator running Google Shopping Ads discovers that declining cookie consent rates are causing gaps in conversion attribution after Google's March 2024 Consent Mode mandate. iubenda's Advanced plan implements a Google-certified CMP with Consent Mode v2, restoring aggregated measurement for declined users and bringing the site into the programmatic advertising compliance stack. The geo-targeting feature shows GDPR-specific consent flows to EU visitors and simplified flows to US visitors where more permissive state laws apply.
▶ Make it official
Get iubenda →▶ Frequently Asked Questions
Does iubenda actually keep my privacy policy up to date automatically, or do I still need to review changes?
iubenda's legal team monitors regulatory changes across all covered jurisdictions and updates the relevant clauses in their library. Those updates propagate automatically to subscriber documents hosted on iubenda's servers — you do not need to manually review or republish. The practical limitation: iubenda updates the clauses it controls; if you have added custom text to your policy, that custom text is not auto-updated. For most websites using standard third-party services (analytics, advertising, ecommerce), the auto-update mechanism covers the vast majority of compliance exposure. Sites with unusual data processing activities (healthcare data, financial transaction data) may need periodic legal review of custom additions regardless of what iubenda's auto-updates cover.
Why is the pricing per site rather than per account? Doesn't that get expensive for agencies?
iubenda's per-site pricing reflects the compliance scope — each site has its own cookie scanning, consent logging, document hosting, and pageview quota. For agencies managing many client sites, the cost compounds: 10 sites on the Advanced plan is $249.90/month billed annually. iubenda offers agency-specific pricing for larger deployments — the agency page at iubenda.com/en/agencies covers options for managing multiple client sites under one contract with tailored pricing. Agencies that pass compliance costs through to client retainers generally treat the per-site cost as a line item in client proposals rather than an overhead expense.
Is iubenda's free plan genuinely useful or a bait-and-switch?
The free plan is genuinely usable for sites with very low traffic that need a basic privacy policy. It generates a standard privacy policy with up to a limited number of service clauses, includes the cookie consent banner, and provides basic consent logging. The practical ceiling: the free plan lacks geo-targeting (relevant for sites with international audiences), multi-language support, Terms and Conditions generation, and the higher pageview quotas that any site with meaningful traffic will need. It is appropriate for a personal blog or hobby site that needs a technically compliant policy but does not run Google Ads or serve significant EU traffic. Sites that deploy Google Analytics, run Facebook Pixel, or have European visitors are likely to need the Advanced plan to meet their actual compliance obligations.
What is the difference between the iubenda affiliate program and the referral program?
There are two distinct programs. The affiliate program is hosted on Impact (app.impact.com/campaign-promo-signup/iubenda.brand), requires an application, pays up to 40% CPA on first purchases by new customers through a 30-day cookie, and takes 6–8 weeks to pay after purchase validation. The referral program is accessible to any iubenda account holder through the 'love and rewards' dashboard section, runs on ReferralCandy, pays 30% on the referred buyer's first purchase, includes a 10% buyer discount on the referral link, requires no application, has no minimum payout threshold, and pays via PayPal through ReferralCandy. The referral program's cookie persists until the referred user manually clears their cache — giving an indefinite attribution window versus the Impact program's 30-day window. Both require affiliate disclosure under the FTC guidelines.
How does iubenda handle the CCPA requirements for US-based sites?
iubenda covers CCPA/CPRA for California residents and other US state privacy laws including Virginia's VCDPA, Colorado's CPA, and Connecticut's CTDPA. The geo-targeting feature on the Advanced plan and above serves California-specific consent flows to California residents while showing standard flows to other US visitors — avoiding the friction of asking all US users to navigate California-specific opt-out options. The 'Do Not Sell or Share My Personal Information' link required under CCPA is generated and maintained automatically. For sites without significant California traffic, the Essentials plan's CCPA clause coverage in the privacy policy document may be sufficient without the geo-targeted banner.
What is the content marketing angle for promoting iubenda to a web development audience?
The highest-converting content angle for a web development audience is the new-site-launch compliance checklist: 'Before you launch your website, here are the legal documents you need.' Privacy policy and cookie consent banner appear near the top of that list for any site collecting user data, running analytics, or deploying advertising. iubenda's one-click WordPress plugin installation and automatic configuration make it the easiest recommendation in that checklist. The affiliate disclosure requirement applies — any affiliate marketing content recommending iubenda must disclose the financial relationship per FTC guidelines and equivalent regulations in other jurisdictions.
▶ How to Promote iubenda as an Affiliate
iubenda's affiliate program pays up to 40% cost per action commission via the Impact platform, with a 30-day cookie window and 6–8 week payout validation. The commission rate is among the highest in the legal-compliance software category. A parallel 30% referral program runs through the iubenda dashboard with no application, no minimum payout, and a buyer discount attached — making it the fastest path to commission for existing iubenda users who already trust the product.
The strongest content marketing angle is the compliance obligation frame rather than the feature frame. Website owners, affiliate marketing publishers, and ecommerce operators do not choose iubenda because it has 2,400+ clauses — they choose it because they are legally required to have a privacy policy and cookie consent mechanism and iubenda makes that obligation easy to satisfy. Content that opens with the legal obligation ('Your site needs a privacy policy. Here is how to set one up in 30 minutes.') converts more reliably than content that opens with features. The affiliate disclosure in that content should be explicit under FTC guidelines — disclosed clearly, not buried at the bottom.
For promoters with agencies or developer audiences, the per-site pricing is actually the promotional hook: a developer who refers one agency client to iubenda may generate five to fifteen separate commission events as the agency deploys iubenda across client sites. A single warm referral to an agency owner is worth more per promotional effort than a single referral to a solo blogger. Comparison content targeting 'iubenda vs GetTerms' and 'iubenda vs Termly' captures high commercial-intent searchers with an established buying intent and a clear cost per action argument available to structure around the affiliate link.
Specific glossary reinforcement: iubenda's primary product is a generator for terms of service and privacy policies — the terms of service generator is available on Advanced and above. The cookie duration for the affiliate link is 30 days on Impact (or persists until cache cleared on ReferralCandy). Affiliate landing page optimization matters here: iubenda's free plan serves as a natural landing page for cold audiences — the affiliate link can point to the free signup, letting iubenda's own onboarding convert free users to paid. Any affiliate agreement signed upon joining the Impact program governs promotional restrictions. The affiliate agreement prohibits brand-bidding on 'iubenda' as a search keyword — a common term in affiliate agreements that affiliates should verify before running paid search.