Cheap consent management platforms for small business
For a small business on a single domain, the best cheap consent management platform is usually a free tier from an established vendor, and paying more buys headroom you are not yet using. What the low tiers withhold is consistent: retained consent records, per category choice, extra domains and pageviews, and sometimes the Consent Mode v2 signals.
Four things separate the free tier from the paid one
Every roundup compares banner designs and integration counts. Those are the least useful things to compare, because at this end of the market the banners are all fine. The differences that decide whether a cheap tier works for you are limits, and they are nearly always the same four.
Retained consent records. A CMP does two jobs: it asks the question and writes down the answer. Free tiers usually do the first properly and shorten or drop the second. Per category granularity. Paid tiers let a visitor accept analytics and refuse advertising; some free tiers collapse that to a single accept or reject. Domains and pageviews. Free plans are capped, and the cap is where the pricing page starts. Consent Mode v2 signals. Some free tiers write all four Google signals, some write none, and this is the difference that damages your measurement rather than your compliance position.
When a free tier is genuinely enough
Often, and more often than anyone selling a consent platform tends to say. If you run one domain, your traffic sits inside the free pageview allowance, your visitors are broadly in one regulatory region, and you load a handful of well known vendors rather than a long tail, a free plan from an established CMP will do the job. Paying more will not make you more compliant.
Compliance turns on behaviour rather than price. Nothing non essential may run before consent, refusing has to be as easy as accepting, the choice has to be recorded, and the visitor has to be able to change it later. A free tier doing those four things is compliant; a paid tier that shows a banner without blocking anything is not.
The one that is not a feature. It is evidence.
Three of those four limits are inconveniences you can buy your way out of the day you need to. The consent record is different in kind.
If a regulator, a customer or your own counsel asks you to show that a particular visitor consented to advertising cookies on a particular day, the retained record is the only thing that can answer. A screenshot of your banner shows what visitors were offered, not what any one of them chose. Your analytics show what happened afterwards, not what was agreed. On a tier that keeps no record, that question has no answer available at any price after the event.
Upgrading later fixes it going forward and does nothing for the period behind you. That is not an argument for paying from day one — plenty of small sites carry this risk knowingly. It is an argument for knowing which of the four you are giving up, because this is the only one you cannot buy retroactively.
How to test what your tier actually does
Vendor pricing pages describe features. This checks behaviour, on your own site, in about ten minutes.
Load the site in a private window with the network panel open
Watch for requests before you touch the banner. Anything non essential leaving the page means the tier is displaying a banner rather than enforcing one, which is the failure price never fixes.
Refuse everything, then look at the storage panel
Reload and check which cookies exist. A correctly enforcing tier leaves essential cookies and the consent cookie itself. Anything else surviving a full refusal is a gap between what the banner claims and what it does.
Accept one category and refuse another
If the banner offers no way to do this, you are on a tier without per category granularity, and you now know it from behaviour rather than from a pricing table.
Check whether Consent Mode v2 signals are written
On a page with a Google tag, find the consent state parameter on the outgoing request and confirm it changes between a refusal and an acceptance. If it never appears, the tier is not writing the signals and your Google reporting loses the modelled half of every declined visit.
Ask how long records are kept, and how to export one
The export answer is the real test. A tier that cannot produce a single visitor's consent record on request is not retaining one, whatever the retention period says.
Where the price actually climbs
The cheap end of this market is genuinely cheap, and the step up is rarely the problem people expect. What catches small sites out is not the price of the next tier but which cap they hit first. A second domain is the common one, and staging and marketing subdomains count. Pageview allowances are the other, and they are consumed by bots and crawlers alongside real visitors, so the cap arrives earlier than your analytics suggest. Read the pricing page for the cap you will hit rather than the features you would like.
What this looks like from where we sit
We build a consent platform, so treat this part accordingly. The reason we care about those four limits is that consent quality shows up in measurement: consent choices commonly hide around 34% of sessions from analytics, and a correctly configured consent layer typically recovers 20 to 40% of what would otherwise be lost. Figures are measured ranges across Amplio Data client implementations, not a guarantee, and recovery depends on your traffic mix, regions and how your tags are configured.
That is also why we say plainly that a free tier is often enough. A small site on one domain, in one region, on a free plan that actually blocks before consent and writes the Consent Mode signals is not leaving much on the table. The gap opens when a tier looks compliant and quietly is not, and that gap exists at every price point including ours.
Common questions
What people ask about this topic.
What is the best cheap consent management platform for a small business?
There is no single best one, and for a small single domain site an established vendor's free tier is usually enough. Several well known CMPs publish free plans, and what separates them at the low end is not banner quality but the limits: how many domains and pageviews are included, whether consent records are retained, whether visitors can accept some categories and refuse others, and whether the tier writes Google Consent Mode v2 signals. Compare those four rather than the feature grid.
Is a free cookie consent tier enough to be compliant?
It can be, and often is for a small site. Compliance turns on behaviour rather than price: nothing non essential may run before consent, refusing has to be as easy as accepting, the choice has to be recorded, and the visitor has to be able to change it later. A free tier doing those four things is compliant. A free tier that shows a banner without blocking anything is not, and neither is a paid one that does the same.
What do free CMP tiers usually leave out?
Four things, fairly consistently: retained consent records, which are often shortened or absent; per category granularity, sometimes reduced to accept or reject with nothing between; domain and pageview allowances, where the cap is what starts the pricing; and the Google Consent Mode v2 signals, which some free tiers do not write. That last one damages your measurement rather than your compliance position.
Do I need a consent log if I only have a small site?
If someone asks you to prove a particular visitor consented, the consent record is the only thing that can answer. A screenshot of the banner shows what visitors were offered, not what any individual chose. On a tier keeping no retained record that question has no answer available afterwards at any price, because the evidence was never written. Whether that risk matters is a judgement, but make it deliberately rather than discover it later.
When is it worth paying for a consent platform?
When you outgrow a cap or need one of the withheld features: a second domain or a staging site, traffic above the free pageview allowance, retained consent records, visitors across several regulatory regions needing different defaults, or Consent Mode v2 signals your free tier does not send. Until one of those is true, paying buys headroom you are not using.
Your banner, your consent,
your data — all in one place.
