> How Demandbase de-anonymizes visitors via IP to company lookups, what data it processes, and how to use it lawfully under GDPR and ePrivacy.
>
> Canonical: https://www.flowconsent.com/en/services/analytics/demandbase

Analytics

# Demandbase

Analytics

Demandbase is a B2B account based marketing platform. It de-anonymizes website visitors by resolving their IP address to company firmographic data, then tags and tracks accounts to target advertising and sales outreach. Because it processes IP addresses and behaviour and may set non essential cookies, it raises GDPR and ePrivacy obligations including consent for cookies.

[Block Demandbase until consent](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=analytics) · [Scan my site](https://www.flowconsent.com/en/scan)

At a glance

- Category

  [Analytics](https://www.flowconsent.com/en/services/analytics)

- Consent

  Analytics

- Prior consent

  Required

- Documented cookies

  2

- Third-party domains

  3

- Servers

  United States based vendor with global cloud infrastructure. Processing primarily occurs in the United States.

Overview

## What does Demandbase do?

## **What Demandbase is**

Demandbase is a business to business account based marketing platform. Its distinctive feature is de-anonymization, it resolves a visitor IP address to the company or organisation behind the visit using firmographic data, then tags and tracks those accounts to power targeted advertising, sales intelligence and personalized web experiences. The focus is on identifying organisations and the people acting on their behalf rather than anonymous traffic measurement.

## **Data and cookies collected**

Demandbase collects the visitor IP address, which it matches against firmographic databases to infer the company, industry, size and location. It also records on site behaviour such as pages viewed and content downloaded, and it may set cookies and tags to recognise returning visitors and accounts. IP addresses and behavioural data linked to identifiable accounts and individuals are personal data under the GDPR, even in a business context.

## **GDPR and ePrivacy implications**

Any non essential cookies or tags that Demandbase sets require consent under Article 5(3) of the ePrivacy Directive. The firmographic processing of IP and behaviour needs a lawful basis under the GDPR. In a B2B setting many organisations rely on legitimate interest under Article 6(1)(f), but this requires a documented balancing test, transparency and an easy way to object. De-anonymization is intrusive, so the assessment must take the visitor expectations into account.

## **Consent and data transfers**

Where consent is the basis, for example for non essential cookies, it must be freely given, specific and informed, and the tags should load only after acceptance. Demandbase is a United States vendor, so IP addresses and behavioural data are transferred to the United States. These transfers require Standard Contractual Clauses or reliance on the EU US Data Privacy Framework, supported by a transfer risk assessment.

## **Practical compliance steps**

Gate any non essential Demandbase cookies behind a consent management platform, complete and document a legitimate interest balancing test for the firmographic processing, and update your privacy notice to explain IP de-anonymization. Sign a data processing agreement, verify the United States transfer safeguards, offer a right to object, and consider a Data Protection Impact Assessment given the intrusive nature of the tracking.

Compliance

## Demandbase and the GDPR

Demandbase is classified as “Analytics”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.

- Legal basis

  For non essential cookies, consent under Article 5(3) ePrivacy Directive and Article 6(1)(a) GDPR. For B2B firmographic processing of IP and account data, legitimate interest under Article 6(1)(f) GDPR may apply subject to a balancing test.

- Risk level

  high

- Applicable regulations

  GDPR, ePrivacy Directive (Cookie Law), national ePrivacy implementations

### Impact assessment (DPIA)

Demandbase processes IP addresses and behaviour to identify the company behind a visit and to track accounts at scale. A Data Protection Impact Assessment is recommended because IP de-anonymization, profiling and combining with third party firmographic data can be intrusive. Assess the balancing test for legitimate interest, transfers to the United States and the rights of individuals.

### Sample text for your banner

> We use Demandbase to recognise the organisation visiting our site and to tailor B2B marketing. This may involve cookies and processing of your IP address. Do you consent to marketing analytics powered by Demandbase?

Cookies and trackers

## What Demandbase sets and contacts

- Tracking method

  JavaScript tag and IP based de-anonymization. Demandbase resolves visitor IP addresses to company (firmographic) data, tags and tracks accounts and visitor behaviour, and may set cookies to support account based marketing.

- Server location

  United States based vendor with global cloud infrastructure. Processing primarily occurs in the United States.

- Data transferred outside the EU

  Demandbase is a United States vendor and personal data such as IP addresses and behaviour is transferred to the United States. Transfers rely on Standard Contractual Clauses and, where applicable, the EU US Data Privacy Framework.

### Cookies set (2)

| Name          | Type        | Duration                  | Purpose                                                                                                                                     |
| ------------- | ----------- | ------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------- |
| \_db\_visitor | HTTP cookie | Persistent (up to 1 year) | Stores a visitor identifier used to recognise returning visitors and associate them with an identified account for account based marketing. |
| \_db\_session | HTTP cookie | Session                   | Maintains session state during a visit for account tagging and behavioural tracking.                                                        |

### Third-party domains contacted (3)

- `demandbase.com`
- `company-target.com`
- `api.company-target.com`

Questions

## Frequently asked questions about Demandbase

Can't find your question? Write to us, we answer fast.

[Write to us](https://www.flowconsent.com/en/demo)

### What cookies does Demandbase set?

Demandbase may set cookies and tags through its JavaScript tag to recognise returning visitors and link them to identified accounts. It also relies on IP based detection, so even without a cookie it processes the visitor IP address to determine the company behind the visit.

### Is consent required to use Demandbase?

Consent is required for any non essential cookies under Article 5(3) ePrivacy. For the firmographic processing of IP and behaviour, some organisations rely on legitimate interest, but if non essential cookies are used you must obtain consent before they load.

### What is the legal basis for Demandbase?

For non essential cookies the basis is consent under Article 5(3) ePrivacy and Article 6(1)(a) GDPR. For B2B firmographic processing of IP and account data, legitimate interest under Article 6(1)(f) may apply, subject to a documented balancing test and a right to object.

### Does Demandbase transfer data to the United States?

Yes. Demandbase is a United States vendor, so IP addresses and behavioural data are transferred to the United States. Such transfers require Standard Contractual Clauses or reliance on the EU US Data Privacy Framework, supported by a transfer risk assessment.

### Do I need a DPIA for Demandbase?

A Data Protection Impact Assessment is recommended because IP de-anonymization, profiling and combining visits with third party firmographic data can be intrusive and large scale. Assess the balancing test, transfers and the impact on individuals to decide whether a DPIA is mandatory.

### How do I implement Demandbase compliantly?

Gate any non essential cookies behind a consent management platform, document a legitimate interest balancing test for the firmographic processing, update your privacy notice to explain IP de-anonymization, sign a data processing agreement, verify United States transfer safeguards and offer a right to object.

### What are the alternatives to Demandbase?

Alternatives include other account based marketing and visitor identification platforms, and first party approaches that rely on directly provided business contact data. Any IP de-anonymization tool raises similar consent, legitimate interest and transfer questions.

### How should I update my cookie policy for Demandbase?

List any Demandbase cookies and tags, describe their account identification purpose, state their duration, explain the IP based de-anonymization in your privacy notice, name Demandbase as a processor and disclose transfers to the United States with the safeguards used.

Same category

## More services: Analytics

[See the whole category](https://www.flowconsent.com/en/services/analytics)

### [Nemu](https://www.flowconsent.com/en/services/analytics/nemu)

[Nemu is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. Nemu offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, Nemu empowers organizations to optimize strategy and maximize return on investment.](https://www.flowconsent.com/en/services/analytics/nemu)

[Analytics](https://www.flowconsent.com/en/services/analytics/nemu)

·

### [Jirafe](https://www.flowconsent.com/en/services/analytics/jirafe)

[Jirafe is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Jirafe supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Jirafe enables informed decisions that improve experience and drive results.](https://www.flowconsent.com/en/services/analytics/jirafe)

[Analytics](https://www.flowconsent.com/en/services/analytics/jirafe)

·

### [API Spreadsheets](https://www.flowconsent.com/en/services/analytics/api-spreadsheets)

[API Spreadsheets is an integration and connectivity platform that enables businesses to connect web applications, APIs, and services seamlessly. It provides pre-built connectors, webhook management, and data synchronization. API Spreadsheets supports real-time data flow between marketing, sales, and operational tools, eliminating data silos and manual processes. With visual workflow builders and robust API management, API Spreadsheets helps create unified digital ecosystems that drive efficiency.](https://www.flowconsent.com/en/services/analytics/api-spreadsheets)

[Analytics](https://www.flowconsent.com/en/services/analytics/api-spreadsheets)

·

### [Delacon](https://www.flowconsent.com/en/services/analytics/delacon)

[Delacon is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Delacon supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Delacon enables informed decisions that improve experience and drive results.](https://www.flowconsent.com/en/services/analytics/delacon)

[Analytics](https://www.flowconsent.com/en/services/analytics/delacon)

·

### [Webtrends](https://www.flowconsent.com/en/services/analytics/webtrends)

[Webtrends is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Webtrends supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Webtrends enables informed decisions that improve experience and drive results.](https://www.flowconsent.com/en/services/analytics/webtrends)

[Analytics](https://www.flowconsent.com/en/services/analytics/webtrends)

·

### [Stackify](https://www.flowconsent.com/en/services/analytics/stackify)

[Stackify is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Stackify integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Stackify helps organizations maintain robust websites that meet user expectations and technical requirements.](https://www.flowconsent.com/en/services/analytics/stackify)

[Analytics](https://www.flowconsent.com/en/services/analytics/stackify)

## Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.

[Create my banner](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=general) · [Scan my site](https://www.flowconsent.com/en/scan)