SimpleCMP

Spec sheet

What it does

SimpleCMP is an open-source consent-management platform for static websites and CMS installations.Read 15 Oct 2026 · simplecmp.eu

Purpose

SimpleCMP is an open-source consent management platform that detects cookies and external connections during development and flags unclassified trackers in production.Read 12 Oct 2026 · simplecmp.eu

Free plan

YesRead 22 Sep 2026 · simplecmp.eu

Integrations

Documented deployment modes include npm, self-hosted IIFE, TYPO3, headless SPA usage and manual WordPress theme integration.Read 15 Oct 2026 · simplecmp.eu

Security

The CMS Bridge uses HMAC nonce authentication, deduplicates detections by identifier, and can be configured with a sampling rate.Read 12 Oct 2026 · simplecmp.eu

Support

WapplerSystems offers help with SimpleCMP integration, theming, audits and custom setups.Read 12 Oct 2026 · simplecmp.eu

Maker

SimpleCMP is maintained by WapplerSystems, a TYPO3 agency operating since 2009.Read 15 Oct 2026 · github.com

Accessibility

The banner documents WCAG 2.2 AA and BFSG-oriented features including focus trapping, keyboard focus and 44-pixel targets.Read 15 Oct 2026 · simplecmp.eu

API and webhook

Webhook Schema v2 is documented in the repository and a Node.js receiver example is provided.Read 15 Oct 2026 · simplecmp.eu

Architecture

The product is divided into Engine, Recorder, Service DB Client and CMS Bridge components.Read 15 Oct 2026 · simplecmp.eu

Audit

The browser audit mode checks the rendered banner for issues including weak decline controls, missing accessible names and undersized targets.Read 12 Oct 2026 · simplecmp.eu

Audit mode

Appending `?simplecmp_audit=1` runs browser compliance checks for button prominence, marketing nudges, accessible names and target sizes.Read 15 Oct 2026 · simplecmp.eu

Automatic blocking

YesRead 22 Sep 2026 · simplecmp.eu

CI checking

The recorder exposes `assertNoUnknown()` so builds can fail when uncatalogued trackers are detected.Read 15 Oct 2026 · simplecmp.eu

CMS Bridge

CMS Bridge reports unknown detections through a webhook with HMAC nonce authentication, deduplication TTL and configurable sampling.Read 15 Oct 2026 · simplecmp.eu

Consent engine

The engine manages per-service consent state, events, localStorage and cookie storage, language detection and click-to-enable behavior without DOM assumptions.Read 15 Oct 2026 · simplecmp.eu

Consent records

YesRead 22 Sep 2026 · simplecmp.eu

Consent signals

SimpleCMP can honor Global Privacy Control and DNT signals, with configurable GPC behavior.Read 15 Oct 2026 · simplecmp.eu

Developer maturity

The GitHub README labels the implementation pre-1.0 and says APIs, file structures and features may change before 1.0.Read 15 Oct 2026 · github.com

Developer stack

The core repository describes a TypeScript and Lit Web Components implementation and requires Node.js 20 or newer with pnpm for development.Read 15 Oct 2026 · github.com

Development status

The documentation says the implementation is pre-1.0 and remains subject to change.Read 12 Oct 2026 · simplecmp.eu

Documentation depth

The documentation links to complete API reference material and architectural decision records in GitHub.Read 15 Oct 2026 · simplecmp.eu

Embed consent

Blocked YouTube, Vimeo and Maps embeds can receive inline click-to-enable notices with per-service consent.Read 15 Oct 2026 · simplecmp.eu

Geographic targeting

YesRead 22 Sep 2026 · simplecmp.eu

Headless mode

A smaller `simplecmp/engine` entry point lets Vue, React or Svelte applications use the state machine without the Lit interface.Read 15 Oct 2026 · simplecmp.eu

IAB TCF support

NoRead 22 Sep 2026 · simplecmp.eu

Independent package listing

Packagist lists `simplecmp/t3-simplecmp` as a TYPO3 integration providing banner, recorder, service database and CMS bridge functionality.Read 15 Oct 2026 · packagist.org

Independent repository status

GitHub lists the core repository as public, with 185 commits, two issues, zero pull requests and one star when opened.Read 15 Oct 2026 · github.com

Installation

SimpleCMP can be installed as an npm package or as a self-hosted IIFE script for static sites; the documentation says it is not served via public CDNs for privacy reasons.Read 12 Oct 2026 · simplecmp.eu

Language support

The product ships 26 language packs with automatic detection from the document language.Read 15 Oct 2026 · simplecmp.eu

Licence

The project uses the permissive BSD-3-Clause licence and preserves the original Klaro! BSD notice.Read 15 Oct 2026 · github.com

License and cost

The homepage identifies SimpleCMP as BSD-3-Clause open source and lists its cost as 0 €.Read 12 Oct 2026 · simplecmp.eu

Limit: enterprise scope

The product focuses on consent management and does not attempt to replace broader OneTrust capabilities such as DPIA, RoPA, GRC or vendor-risk workflows.Read 15 Oct 2026 · simplecmp.eu

Limit: IAB TCF

TCF 2.2/IAB support is not currently available and is described as being on the roadmap.Read 15 Oct 2026 · simplecmp.eu

Limit: support model

Support is provided by the maintaining agency rather than through a contractual 24/7 enterprise SLA.Read 15 Oct 2026 · simplecmp.eu

Maker headquarters

WapplerSystems gives its address as Bendstraße 50-52, 52066 Aachen, Germany.Read 15 Oct 2026 · wappler.systems

Pre-consent blocking

Scripts and iframes marked with `data-name` and `data-src` are withheld until consent is granted.Read 15 Oct 2026 · simplecmp.eu

Production alerts

The CMS Bridge can send batched unknown-tracker detections to a webhook using HMAC and nonce authentication.Read 12 Oct 2026 · simplecmp.eu

Record mode

Its recorder monitors cookies, inserted scripts and other tags, and outgoing network connections, then can export a service configuration.Read 12 Oct 2026 · simplecmp.eu

Regional consent

The Region Engine switches between opt-in and opt-out regimes based on visitor region, including GDPR and California CCPA/CPRA handling.Read 12 Oct 2026 · simplecmp.eu

Regional regimes

The region engine supports EU opt-in and California opt-out regimes and can show a Do Not Sell trigger without a Geo-IP API.Read 15 Oct 2026 · simplecmp.eu

Self-hosting

The project is designed to run on the customer’s server and domain, with consent logs kept in the customer’s stack.Read 15 Oct 2026 · simplecmp.eu

Service database

The shared HTTP/JSON service database provides classifications, purpose tags, standard texts in 26 languages and privacy-policy links, with stale-while-revalidate caching and local fallback.Read 15 Oct 2026 · simplecmp.eu

Shared service database

The open HTTP/JSON service registry classifies known identifiers and supports a local fallback when network requests fail.Read 12 Oct 2026 · simplecmp.eu

Theme adapters

Built-in theme adapters target Bootstrap 5, Tailwind 4, Bulma and Pico.Read 15 Oct 2026 · simplecmp.eu

Tracker recorder

Recorder mode observes cookies, script/iframe/image/link insertions and outgoing connections, then exports a production service configuration.Read 15 Oct 2026 · simplecmp.eu

TYPO3 extension

The TYPO3 integration targets TYPO3 v14 and includes backend detection triage, audit snapshots, draft/publish approval and GDPR export.Read 15 Oct 2026 · simplecmp.eu

TYPO3 package status

The TYPO3 extension is currently installed from a GitHub VCS repository, with Packagist publication planned for the first stable release.Read 15 Oct 2026 · simplecmp.eu

TYPO3 system requirement

The TYPO3 extension requires PHP 8.3 or newer.Read 15 Oct 2026 · simplecmp.eu

WordPress status

The documentation says an official WordPress plugin is not yet ready and recommends manual theme integration.Read 15 Oct 2026 · simplecmp.eu

Plans and prices

Every SimpleCMP plan and price →

Where Specifiction places it

• Cookie Consent Management Platforms#22 of 1238.7
• Consent Management#11 of 218.2