OneTrust
OneTrust is a consent management platform. It supplies the banner that asks a visitor what they will allow, stores the answer, and passes that answer to the rest of the page's scripts. It is classified here as consent management rather than tracking. Readers usually meet the name in a cookie banner's footer or in a request log, and the reason it turns up so often is straightforward: it was detected on 773 of the snapshot's 5,294 sites, 14.6% of them, which is second of the 88 companies in this index by number of sites.
Second of 88 companies by reach
Only one company in this index was detected on more sites than OneTrust. That places a consent tool near the very top of a list otherwise made of analytics, advertising and content delivery. It also means the sample behind every figure on this page is large: 773 sites, spread from cloudflare.com and netflix.com through spotify.com, zoom.us, discord.gg, bit.ly, unity3d.com and epicgames.com.
OneTrust sites are lighter than most sites in this index
The median site where OneTrust was detected contacted 6 companies, which ranks 69th of the 88 companies here when they are ordered from the highest median company count down. It carried 1 tracker (50th of 88) and issued 39 requests (54th of 88). In other words, a page carrying OneTrust tends to sit toward the lighter end of this index rather than the heavier one. That is a correlation about which kinds of organisation buy a consent platform, not a claim that the platform reduced anything.
Early contact on 740 of the 773 sites
740 sites, 95.7% of them, had at least one company reach the browser while the banner was still unanswered, a share that ranks 26th of the 88 companies here. The crawl records how many companies arrived inside that window per site, not which ones, so this is a fact about the sites OneTrust was present on and not about OneTrust's own requests. The median site contacted 5 companies inside the window and added none after it closed, the median count afterwards being 0.
Seven sites where the domain appeared and no banner was classified
766 of the 773 sites showed a banner the crawl was able to name, and on 764 of those the tool registered as OneTrust; an IAB TCF consent tool was seen alongside on 2. A handful of sites are therefore in the set because OneTrust's domain was contacted while no banner was classified on the page measured. A homepage that defers its banner, a regional variant that does not show one, or a page state the crawl did not reach will all produce that.
What sits alongside it
Google was present on 442 of the 773 sites, 57.2% of them. Google Tag Manager followed on 122 (15.8%), adobedtm.com on 101 (13.1%), jsDelivr on 87 (11.3%) and Amazon CloudFront on 86 (11.1%). Sentry appeared on 69 and Cloudflare Analytics on 71. This is the profile of large corporate sites with a tag manager, a CDN and an error tracker, which is the same population that buys consent software.
The timing spread across its example sites
First contact on the median OneTrust site landed at 685 ms, 39th of 88 on a list running from the slowest median down to the quickest. Individual sites vary far more than that. discord.gg made first contact at 325 ms with all 7 of its companies inside the consent window; cloudflare.net at 343 ms with 2 of 4 inside it; epicgames.com at 2,087 ms with none of its 6 inside it. The earliest first contact on any OneTrust site here was 66 ms.
| Site | Companies | Before consent | First contact |
|---|---|---|---|
| cloudflare.com | 2 | 2 | 1242 ms |
| fastly.net | 7 | 3 | 670 ms |
| netflix.com | 6 | 6 | 1003 ms |
| cloudflare.net | 4 | 2 | 343 ms |
| spotify.com | 6 | 6 | 550 ms |
| zoom.us | 5 | 5 | 440 ms |
| workers.dev | 2 | 2 | 1063 ms |
| discord.gg | 7 | 7 | 325 ms |
| bit.ly | 7 | 5 | 920 ms |
| unity3d.com | 7 | 6 | 992 ms |
| intuit.com | 9 | 9 | 795 ms |
| epicgames.com | 6 | 0 | 2087 ms |
| Tool | Sites |
|---|---|
| OneTrust | 764 |
| IAB TCF consent tool | 2 |
Seen on the same pages
Companies most often contacted by the same sites. Co-presence only — the crawl records what arrived, not who called whom.
- GoogleTogether on 442 of these sites
- Google Tag ManagerTogether on 122 of these sites
- adobedtm.comTogether on 101 of these sites
- jsDelivrTogether on 87 of these sites
- Amazon CloudFrontTogether on 86 of these sites
- Cloudflare AnalyticsTogether on 71 of these sites
- SentryTogether on 69 of these sites
- CloudflareTogether on 67 of these sites
Questions
How many sites in this index carry OneTrust?
773 of the snapshot's 5,294 measured sites, which is 14.6% of them and second of the 88 companies in this index by site count.
Is OneTrust counted as tracking here?
No. It is classified as consent management. It appears in this index because it is a third party a page contacts, which is a separate question from what the contact is for.
Did companies reach the browser before the OneTrust banner could be answered?
On 740 of the 773 sites, at least one did. The crawl counts how many companies arrived inside that window on each site but does not record which ones, so this is a measurement about those sites rather than an attribution to any particular vendor, including OneTrust itself.
Why do 773 sites carry the OneTrust domain but only 766 register a consent tool?
Because presence of the domain and classification of a banner are two separate observations. A page can contact OneTrust while the crawl sees no banner it can name on the specific page it measured.
Are OneTrust sites lighter than average?
By median company count, yes: 6 companies puts them 69th of 88 in this index, toward the lighter end. That reflects the kind of site that deploys a consent platform, and nothing in this data shows the platform caused it.