Sourcepoint

Sourcepoint is a consent-management platform (CMP) and privacy-compliance company. A CMP is the software that handles the consent layer of a website or app — the banners and preference screens that ask visitors whether they agree to cookies, tracking, and data processing, and then record and enforce those choices across the site's advertising and analytics. Sourcepoint provides this consent management along with related privacy tooling, including features that monitor which third-party vendors and tags are actually firing on a site so gaps between stated policy and real behavior can be found. Its customer base has been strongest among publishers and media companies, whose advertising-funded business models make consent and vendor management especially consequential. In short, Sourcepoint sits between a site's visitors and its data practices, capturing consent and helping the site honor it.

Sourcepoint was founded in 2015, originally focused on the tension between publishers and ad blockers, and it grew into a broader privacy and consent business as regulations like the European Union's General Data Protection Regulation made consent management a requirement rather than an option. It supports consent across multiple regulations and regions and across channels including web, mobile, and connected environments. As with any vendor description, this is factual rather than an endorsement, and it is not legal advice — a CMP is a tool for implementing consent, but an organization's actual legal obligations depend on its jurisdiction, its data, and counsel. Naming what Sourcepoint does and whom it serves is more useful than any marketing claim about it, and its status has recently changed through acquisition.

Sourcepoint operates in a competitive consent-management field alongside platforms such as OneTrust, Didomi, and others, and the differences are mostly about breadth and focus. OneTrust is known as a broad privacy-management suite spanning consent, data mapping, vendor risk, and wider governance, positioned heavily at the large-enterprise end with an expansive feature set. Sourcepoint, by contrast, built its reputation more specifically around consent management and the publisher and media use case, with strengths in handling advertising consent and monitoring the vendors and tags that actually load on a page. So a rough distinction is that OneTrust spans the whole privacy-governance landscape for large organizations, while Sourcepoint concentrated on consent and the publisher-advertising context. This is positioning, not a ranking — the right CMP depends on an organization's size, industry, and needs.

A meaningful recent development is ownership, and it should be stated plainly. In 2025 Sourcepoint was acquired by Didomi, a French consent-management company, consolidating two CMP businesses under one roof and expanding the combined company's publisher and media footprint. That kind of consolidation is common in the privacy-technology market and matters for anyone evaluating Sourcepoint, because a product's roadmap, integrations, and support can change after an acquisition. Treat specific claims about Sourcepoint's current features or pricing as things to verify directly, since acquired products are often repositioned or merged over time. The core function — capturing and managing user consent and monitoring vendors — remains the reason the platform exists, but its corporate context is now Didomi's rather than an independent Sourcepoint's.

A CMP such as Sourcepoint is only as good as the practices around it, and the biggest mistake is treating the tool as the whole of compliance. Installing a consent banner does not by itself make an organization compliant with any privacy law; the banner has to reflect an accurate inventory of what data the site collects and shares, the consent choices have to be genuinely honored downstream by the advertising and analytics that depend on them, and the setup has to be maintained as vendors and tags change. This is where Sourcepoint's vendor-monitoring features are meant to help, surfacing tags that fire without consent so the gap between policy and reality can be closed. But the tool supports compliance work rather than replacing it, and none of this is legal advice.

Used well, a CMP is configured to match the organization's real data practices and the regulations that apply, tested to confirm that declining consent actually stops the corresponding tracking, and reviewed regularly because websites and their third-party vendors change constantly. Used poorly, it becomes a banner that placates visitors while trackers fire regardless of their choices — which is worse than nothing, because it creates a false appearance of consent. The disciplined approach is to treat Sourcepoint, or any CMP, as the mechanism that implements a consent strategy set with proper legal guidance, to verify that consent is honored end to end, and to keep the configuration current. The platform captures and enforces consent; the responsibility for getting the underlying practices and obligations right stays with the organization and its counsel.

Sourcepoint combines source and point, and the company began in 2015 addressing publisher and ad-blocker tensions before becoming a consent-management platform; it was acquired by Didomi in 2025.

Etymology: source.

Search interest for this term over the last five years:

View interest-over-time on Google Trends →

Areas of marketing where sourcepoint is a core concern: