Mandatly Inc

What Mandatly Inc does

Mandatly Inc is a private, US-based SaaS company headquartered in Irving, Texas, founded in 2019, that provides an all-in-one privacy compliance management platform targeting organizations ranging from startups to global enterprises. Its platform is organized into six interconnected modules: Cookie Consent (automated scanning, customizable banners, consent logging, Google Consent Mode V2 support), DSR Automation (workflow-driven handling of Data Subject Access, Correction, Deletion, and Portability requests with API-based data discovery and identity verification), Assessment Automation (AI-powered PIA/DPIA/PTA/PbD and vendor assessments with automated risk scoring), Data Inventory and Mapping (unified data-asset view, ROPA creation, data flow visualization, classification), AI Governance (inventory and risk tracking of AI systems), and Data Redaction (AI-powered PII auto-detection for DSAR fulfillment). The technology stack supports nine-plus regulatory regimes including GDPR, CCPA, CPRA, LGPD, CDPA, UCPA, CPA, CTDPA, and PIPEDA, and integrates with 700+ platforms spanning CMS, e-commerce, tag managers, and advertising tools; Mandatly is a certified Google Consent Management Platform Partner and maintains SOC Non-CPA certification and IAPP Bronze membership.

Mandatly monetizes through tiered SaaS subscriptions (Free, Basic, Professional, Enterprise) priced on usage metrics such as pages scanned, consent records, DSR volume, data assets, and assessment counts, with annual billing on paid tiers and a 30-day free trial. The go-to-market is hybrid: self-serve freemium and trial signup for SMBs, and a sales-assisted motion for Professional and Enterprise tiers via Contact Us / Request a Demo CTAs. Distribution occurs through direct website sales globally, embedded marketplace integrations on CMS and e-commerce platforms, and content marketing, G2 reviews, newsletters, and webinars. Additional revenue is generated from professional services including implementation support, consulting, and coaching sessions, alongside paid 24/7 support. Customers disclosed publicly include GVBus (a Brazilian public transportation entity managing consent for 14.1 million monthly passengers) and a European CBD brand, with G2 testimonials spanning IT services, information security, and information systems roles across geographies.

The company has no disclosed funding history, parent company, acquisitions, or executive team information in the available data. No management team is listed on the website, no patents or trademarks have been registered, and there are no public regulatory actions or M&A activity on record. Operating geographies span North America, Europe, the EU, Brazil, and Canada with a global footprint claim. The company's main differentiation rests on its integration ecosystem, Google CMP Partner status, breadth of regulatory coverage, and AI-augmented compliance workflows positioned against larger incumbents in the privacy management software market.

Name

Mandatly Inc

Legal name

Mandatly Inc.

Website

https://mandatly.com

Company type

Private

Founded year

2019

Operating status

Operating

Headcount range

11–50 employees

Short description

Mandatly Inc is a US-based SaaS provider of an all-in-one privacy compliance platform covering cookie consent, DSR automation, data mapping, privacy assessments, AI governance, and data redaction across nine-plus global regulations, serving SMBs through global enterprises via a hybrid self-serve and sales-assisted go-to-market.

Ownership category

akta.pro rank

Product category

Privacy Compliance Software

NAICS

Software Publishers (5132)

SIC

Services-Computer Programming, Data Processing, Etc. (7370)

akta.pro primary industry

Privacy Management (Consent, DSAR, RoPA) (HDADAFAH)

akta.pro secondary industries

Consent, Preference & Privacy Management (CMP) (BPAFAFAL), Privacy Governance & Consent Management (HDADAIAI), Data Privacy, Consent & Compliance Management (HDAEADAG)

Keywords

• Privacy compliance software
• Consent management platform
• Data subject request automation
• Data inventory mapping
• Privacy impact assessment

Headquarters

HQ city

Irving

HQ country

United States

HQ region

North America

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Marketing or Sales, Infrastructure, Operations

Revenue model

1. Subscription-based SaaS Licensing: Mandatly generates revenue through tiered SaaS subscription plans (Free, Basic, Professional, Enterprise) across four product modules: Cookie Compliance, DSR Management, Data Inventory, and Intelligent Assessment. Pricing scales based on website pages scanned, consent records, DSR request volume, data assets, and assessment counts. The All-In-One Privacy Management Suite bundles all four modules at each tier. Additional revenue comes from 24/7 support and professional services including implementation support, consulting, and coaching sessions.

Pricing tiers

Go-to-market motion1 record

Distribution channels3 records

Marketing channels4 records

Core offering

Mandatly Inc sells an all-in-one SaaS-based privacy compliance management platform that automates cookie consent management, Data Subject Request (DSR) handling, data inventory and mapping, privacy impact assessments, AI governance, and data redaction. The platform supports compliance with GDPR, CCPA, CPRA, LGPD, CDPA, UCPA, CTDPA, and PIPEDA regulations, and is sold via tiered subscriptions (Free, Basic, Professional, Enterprise) to organizations of all sizes globally.

Product overview

Mandatly Inc is a privacy compliance software company offering an all-in-one privacy management platform with six interconnected modules: Cookie Consent (consent management), DSR Automation (data subject request handling), Assessment Automation (privacy impact assessments), Data Mapping (data inventory and ROPA), AI Governance (AI system tracking), and Data Redaction (PII redaction). The platform supports compliance with GDPR, CCPA, CPRA, LGPD, CDPA, UCPA, CTDPA, and PIPEDA regulations. Cookie Consent integrates with major website platforms and Google Consent Mode. DSR Automation handles the full lifecycle of consumer rights requests with API-based data discovery. Assessment Automation uses AI for risk scoring and dynamic questionnaires. All modules share data through Data Inventory for unified compliance visibility.

Differentiator

Problem solved

Functional benefit

Products and services

• Cookie Consent Consent management platform for handling cookie consent and compliance with GDPR, CCPA, LGPD, and other privacy regulations. Features automated cookie scanning and categorization, dynamic customizable consent banners, geolocation-based banner display, automated consent logging and reporting, region-specific consent experiences, and audit-ready compliance reporting. For organizations operating websites that collect user data via cookies and trackers.
• DSR Automation Automated Data Subject Access Request (DSAR/DSR) management solution for handling consumer rights requests including access, correction, deletion, and portability. Features a centralized portal, flexible workflow configuration, automated and workflow-enabled data discovery, identity verification (manual, email, third-party), secured communication, jurisdiction-specific compliance, and audit trail reporting. For organizations needing to fulfill data subject rights requests under GDPR, CCPA, LGPD, and other regulations.
• Assessment Automation AI-powered privacy assessment automation for conducting PIA/DPIA, PTA, PbD, and vendor assessments. Features dynamic questionnaires, pre-built templates, automated risk scoring, AI-assisted insights for risk mitigation, automated workflows, compliance mapping, and integration with data inventories. For privacy and compliance teams conducting privacy impact assessments.
• Data Mapping Data inventory and mapping software for centralizing data assets across applications, databases, websites, products, and file systems. Features automated discovery of personal data, ROPA creation and management, data flow visualization, data classification, and cross-system integration. For organizations needing to maintain records of processing activities under GDPR, CCPA, and other regulations.
• AI Governance AI systems inventory and governance solution for documenting AI models, identifying risks using assessment templates, automated risk scoring and prioritization, risk mitigation with heat maps, and regulatory compliance tracking for AI systems. For organizations deploying AI systems that require governance and risk tracking.
• Data Redaction AI-powered data redaction solution for GDPR and CCPA compliance that auto-detects PII data, enables selective redaction while maintaining document integrity, provides adaptable redaction settings, and offers real-time preview of redaction results for DSAR fulfillment. For organizations needing to redact personal information during data subject access request processing.

Quantifiable outcome

• Reduces compliance costs by 30%
• +2 more outcomes

Named customers1 record

Segments2 records

Ideal customer profiles2 records

Technology focussed Yes

API detail

Has API

Yes

API docs

API detail

Core technology

AI maturity

App detail

Integration17 records

AI capability7 records

Feature8 records

Partnerships

Two partnerships are on record, tiered core.

• GooglecoreTechnology or IntegrationMandatly is a certified Google CMP (Consent Management Platform) Partner. Google Consent Mode V2 is enabled by default with Advanced Mode upon Mandatly account creation. The partnership enables seamless integration with Google Ads, Floodlight, Google Analytics, and Conversion Linker — allowing advertisers to maintain measurement continuity while ensuring regulatory compliance by adjusting tag behavior based on user consent preferences.
• 700+ Integrated PlatformscoreTechnology or IntegrationMandatly's privacy compliance platform integrates with over 700 platforms and tools. Key named integrations include WordPress, Google Tag Manager, Shopify, Drupal, Magento, Squarespace, Wix, OpenCart, Weebly, Joomla, Facebook Pixel, and ImpressPages. These integrations enable automated cookie scanning, script integration, and consent management across the customer's technology stack.

Scale indicators2 records

Recent moves6 records

Expansion highlights5 records

Direct peers

• Osano: Osano provides cookie consent, DSAR, and privacy management software for SMB and mid-market. Closely comparable in target segment, pricing structure, and product breadth to Mandatly.
• Usercentrics: Usercentrics is a leading Consent Management Platform (CMP) and now owns Cookiebot. Directly competes with Mandatly's Cookie Consent and Google Consent Mode V2 integration, with strong presence in EU markets.
• TrustArc: TrustArc is a direct competitor offering privacy compliance, consent management, DSR handling, and assessment automation across GDPR, CCPA, and other regimes. Same target buyer and core use cases as Mandatly.
• Cookiebot: Cookiebot (owned by Usercentrics) is a widely deployed CMP for cookie scanning and consent banners. Closely overlaps with Mandatly's Cookie Consent module and Google CMP certification.
• Didomi: Didomi is a consent and preference management platform with DSR and data subject rights handling. Direct competitor to Mandatly in the CMP and privacy rights management space, primarily in EMEA.
• Securiti: Securiti offers a unified data privacy and security platform with consent management, DSR, data mapping, and AI governance. Directly overlaps with Mandatly's full platform, with particular alignment on AI governance and automated data redaction.
• Iubenda: Iubenda offers cookie consent management, privacy/cookie policy generation, and consent storage for websites and apps. Strong SMB and mid-market competitor with self-serve motion similar to Mandatly's PLG approach.

Broad incumbents

• OneTrust: OneTrust is the largest and most-funded privacy management platform, offering consent management, DSR automation, data inventory, GRC, and AI governance. It directly competes with Mandatly across all six product modules but targets a much broader enterprise GRC suite.
• Collibra: Collibra is a data governance and intelligence platform with data inventory, privacy, and compliance capabilities. Broader data governance scope but overlaps with Mandatly's Data Mapping and ROPA modules.

Emerging players

• Termly: Termly offers cookie consent and privacy policy solutions primarily for small businesses. Smaller scale than Mandatly but competes in the same SMB CMP segment with a similar freemium model.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks5 records

Key highlights7 records

Customer concentration

• Xx.com/mandatlyinc

Compliance3 records

Revenue estimate

Valuation estimate

Number of profiles

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Mandatly Inc