Download websites that use TrustArc

A consent banner is the visible end of a legal process. Before any script loads, somebody decided which privacy regimes apply to the audience, what counts as a tracking technology on the site, and who signs off when the answer changes. TrustArc sits at that decision point as an enterprise privacy platform whose consent management module is the only part that ever reaches a browser. Founded in 1997 and sold by TrustArc on a Proprietary basis, the wider product covers assessments, data inventory, vendor risk, and compliance workflow, none of which is observable from outside.

Presence of the JavaScript module is therefore a proxy for something a page cannot otherwise tell you. An organization with counsel, a budget line for compliance tooling, and enough regulatory exposure to buy an enterprise platform instead of a free banner. Companies in that position are usually multinational, or handle regulated categories of data, or sell into markets where an enforcement action would be expensive enough to plan against. As of October 2026 we record the module on 5,436 sites, a figure that describes deployments rather than customers, since most of what the platform does never touches a public page.

Counting a Cookie compliance technology accurately is difficult, and the reason is built into how consent tooling works. Many implementations load the banner conditionally, by visitor region, by regulatory rule, or only after a check that runs first party, so a crawl arriving from one country sees a banner that a crawl from another country never receives. Tag manager injection adds a second layer, because the platform can be delivered through a container rather than a direct script tag. What gets recorded is what was served to our request, from our vantage point, at the moment we asked, and that qualification belongs on any analysis built from the file.

For a researcher or a commercial team the population is the entire point. A per-domain check tells a vendor whether one prospect already has a platform in place. The full list tells them which segments have bought and which comparable companies have not, where a competitor's footprint concentrates by country and by industry, and how banner adoption tracks the arrival of new legislation when the same list is pulled repeatedly over time. Privacy vendors building displacement lists, adtech teams checking which publishers can pass a valid consent signal, law firms and regulators measuring actual compliance behaviour rather than stated policy, and analysts studying how fast the web responds to a new statute all need the domains and the whole set at once.