Sirdata
Sirdata is a French consent management platform and data marketplace registered as a CMP by the IAB Europe that helps publishers, agencies and brands collect consent compliant with the IAB TCF v2.2 and enrich it with contextual audience segments hosted in France.
What does Sirdata do?
Sirdata is a French data company headquartered in Paris that operates two complementary products: an IAB Europe registered consent management platform (Sirdata CMP) and a contextual audience data marketplace fed by hundreds of European publishers. Together they let media groups stay in control of their first party consent while monetising contextual segments that do not rely on cross site identifiers.
What Sirdata does
The Sirdata CMP loads a small JavaScript from sddan.com, renders the banner, collects the granular decision and exposes the IAB TCF v2.2 signal plus the Sirdata Open audience signal. When the publisher activates the data marketplace, Sirdata enriches the page context with contextual segments (interest, intent, weather, sports event) and exposes them to authorised buyers via header bidding integrations and SSP partnerships.
Data and cookies collected
Sirdata sets strictly necessary first party cookies (cmp, euconsent-v2) that store the consent identifier and the TCF v2.2 consent string. Server side, Sirdata stores the consent record (truncated IP, hashed identifier, timestamp, TCF string) and, when the audience modules are enabled, contextual segments derived from the page content (no PII). The audience marketplace works without cross site identifiers.
GDPR and ePrivacy implications
The Sirdata CMP cookies fall under the strictly necessary exemption of Article 5(3) ePrivacy because they record the visitor decision explicitly requested. Consent for the CMP itself is therefore not required. Sirdata is registered as an IAB TCF v2.2 CMP and follows the CNIL deliberation 2020-091 on cookies, including the equally prominent reject button requirement. The data marketplace requires consent for the relevant TCF purposes.
Data transfers
All Sirdata systems are hosted on OVHcloud infrastructure in France (Roubaix and Gravelines). No personal data is transferred to the United States by Sirdata itself. Downstream vendors that consume the IAB TCF v2.2 signal may operate outside the EU; the controller must therefore audit them separately as for any TCF CMP.
Practical compliance steps
Sign the Sirdata DPA, follow the CNIL 2020-091 requirements (equal Accept and Reject buttons, refusal as easy as acceptance), audit the IAB Global Vendor List exposed by Sirdata, sync the CMP with Google Consent Mode v2, and document Sirdata in the cookie register with its CMP and data marketplace roles separated.
Sirdata and the GDPR
- Legal basis
- Legitimate interest under Article 6(1)(f) GDPR. The first party CMP cookies are strictly necessary to record granular consent and propagate it through the IAB TCF v2.2, so they are exempted by Article 5(3) ePrivacy.
- Risk level
- medium
- Applicable regulations
- GDPR, ePrivacy Directive, LIL (France, recommandations CNIL 2020), IAB Europe TCF v2.2, IAB Global Privacy Platform, UK GDPR
Impact assessment (DPIA)
A DPIA is recommended when Sirdata is combined with its data marketplace because the controller then shares audience segments with downstream buyers. The DPIA must analyse the joint controllership scope, the legitimate interest balance for the audience modules, the IAB TCF v2.2 signal propagation and the deduplication of CNIL recommendations 2020 with the EDPB Guidelines 8/2020.
Sample text for your banner
This site uses Sirdata to record your cookie preferences and to expose the IAB TCF v2.2 consent signal. The Sirdata cookies are strictly necessary and store your decision for up to 12 months. If you accept the audience and personalisation purposes, Sirdata may also enrich the corresponding non identifying segments hosted in France; you can withdraw consent at any time via the Cookie settings link.
What Sirdata sets and contacts
- Tracking method
- JavaScript CMP loaded from sddan.com (Sirdata Domain Aware Network) that displays a configurable banner, records granular consent, exposes the IAB TCF v2.2 signal and feeds the Sirdata data marketplace when the publisher activates the audience targeting modules.
- Server location
- France (OVHcloud Roubaix and Gravelines). Sirdata SAS is headquartered in Paris.
VeraSafe
VeraSafe is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. VeraSafe integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, VeraSafe helps organizations maintain robust websites that meet user expectations and technical requirements.
Cookie Script
Cookie Script is a consent management platform (CMP) that helps websites comply with GDPR, CCPA, and global privacy regulations. It provides customizable cookie consent banners, preference centers, and automated compliance scanning. Cookie Script manages user consent across tracking technologies, generates compliance reports, and integrates with tag management systems. With geo-targeted policies and TCF 2.0 support, Cookie Script ensures worldwide privacy compliance.
Visible Privacy
Visible Privacy is a consent management platform (CMP) that helps websites comply with GDPR, CCPA, and global privacy regulations. It provides customizable cookie consent banners, preference centers, and automated compliance scanning. Visible Privacy manages user consent across tracking technologies, generates compliance reports, and integrates with tag management systems. With geo-targeted policies and TCF 2.0 support, Visible Privacy ensures worldwide privacy compliance.
OneTrust
OneTrust is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. OneTrust supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, OneTrust ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.
Privado
Privado is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Privado integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Privado helps organizations maintain robust websites that meet user expectations and technical requirements.
CookieBAR
CookieBAR is a consent management platform (CMP) that helps websites comply with GDPR, CCPA, and global privacy regulations. It provides customizable cookie consent banners, preference centers, and automated compliance scanning. CookieBAR manages user consent across tracking technologies, generates compliance reports, and integrates with tag management systems. With geo-targeted policies and TCF 2.0 support, CookieBAR ensures worldwide privacy compliance.
Make your site compliant today.
Free up to 25,000 sessions a month. No credit card, no commitment.