Compliance Score: see how compliant your cookie setup really is — and what to fix first

A cookie banner alone doesn't make you compliant. Europe expects tracking to wait for consent, US states expect a "Do Not Sell" option, notice-based countries like Japan or Australia expect transparency — the same setup can be fine under one law and a violation under another. With Compliance Score, Consentik grades your entire setup on a single 0–100 scale, measured against the privacy laws of all 284 regions your visitors can come from — and tells you exactly what to fix first, with a one-click Fix action for every issue.

Availability: Compliance Score is available to all merchants. You'll find it as a Compliance score item in the sidebar, plus a mini score card on your Dashboard and Settings pages.

How the score works

Privacy laws fall into three families, and Consentik evaluates your configuration against all three at once — because the law that applies follows your visitor, not your settings:

Your score is pooled across every rule profile: the same configuration can pass European standards and still fail California. Passing checks earn points; failing checks don't — and every failing check comes with a Fix button that takes you to the exact setting that resolves it.
Note: The score is computed from your Consentik settings and explains how the feature works — it is not legal advice. If you're unsure which rules apply to your business, please consult a legal professional.

Risk levels

Critical checks lock your score

Not all failures are equal. A missing cookie details table is minor; tracking that fires before consent is not. A check is marked Critical when failing it leaves your visitors with no way to refuse tracking — for example:

• Auto-block tracking before consent (Opt-in regions)
• Decline button alongside Accept (Opt-in regions)
• "Do Not Sell or Share" always reachable (US Opt-out regions)
• Honoring the GPC signal (US Opt-out regions)

While a critical check is failing, your overall score is locked — fixing other checks won't raise it until the critical issue is resolved. The score ring shows a 🔒 lock note explaining exactly what's holding your score down. This mirrors how regulators think: no amount of polish compensates for visitors who can't say no.

Biggest wins: what to fix first

The Biggest wins section ranks your open issues so you never have to guess where to start — critical issues always come first, then the changes with the largest impact. Each card names the issue, shows how many regions it affects (e.g. "Affects 53 opt-out regions"), and offers a dark Fix button that deep-links straight to the right tab and card in your settings.
For simple toggles, Fix all issues applies the safe ones in one click.

Score by rule profile

Below the hero, three cards break your score down per profile — Opt-in, Opt-out, and Notice — each with its own score, risk badge, and region list. Select a card to:

• Filter the Checks list to that profile only.
• Open the region panel, grouped by law (GDPR, CCPA, LGPD, Law 25…). Click any group to see the complete list of regions it covers, each with its law in parentheses — e.g. "Brazil (LGPD)", "Texas (TDPSA)".

The Checks list

Every check appears in one list, grouped by risk. Each row shows its status (✓ passed, ✕ failed, – not required), which profiles it applies to, and a Fix link when something needs attention. A few behaviors worth knowing:

• Contextual checks only count when they apply to you. If Google services (GA, Ads, GTM) are detected on your site, Google Consent Mode v2 and the Google privacy link become part of your score; if not, they're shown as "Not required for your setup" and don't affect anything.
• Consent records you can access checks whether your plan lets you view and export consent records — the proof a regulator would ask for. On the Free plan this check fails, with an Upgrade to fix action.
• Checks that depend on merchant content (your privacy policy link, your Data Rights page) pass as soon as the content is in place.

Your score on Dashboard and Settings

A compact score card appears on the Dashboard and at the top of Settings: the score ring, your top open issues with inline Fix → links, and a Review compliance button that opens the full page. The score refreshes instantly whenever you save a setting that affects it — with a toast like "Compliance score updated: 60 → 96" so you always see the impact of what you just changed.

The fastest way up: Smart Geo-targeting

If Smart Geo-targeting is off, one banner is evaluated against all three law families at once — and it usually can't satisfy all of them. The scope row at the top of the page shows your potential gain, e.g. "+36 points if enabled" (computed live for your specific setup).
Enable Smart Geo-targeting and each region automatically gets the banner its law requires — which means the matching checks (auto-block, Decline, Do Not Sell, GPC, re-open button, etc) pass by construction. In a typical setup this single toggle takes a locked score of 60 (High risk) to 96 (Low risk).

FAQ

1. My banner only shows in some regions. Does that raise my score? No. Privacy law follows the visitor, not your display settings — restricting where the banner appears never changes what's scored. If your banner is hidden in regions whose law requires consent controls, you'll see a suggestion row explaining the exposure instead.
2. Why doesn't my score go up when I fix things? A critical check is probably failing — it locks your score until resolved. The hero card's 🔒 note and the first Biggest-wins card tell you exactly which one.
3. One check says "Upgrade to fix". Is that a real compliance issue? Yes. GDPR requires you to be able to demonstrate consent was given. If your plan doesn't let you view or export consent records, you can't show them to a regulator — so the check fails honestly rather than being hidden.
4. What happens when privacy laws change? The region-to-law mapping is maintained by Consentik. When rules are updated, your score is recalculated automatically the next time you open the app, with a banner explaining what changed.
5. Does enabling Smart Geo-targeting change which checks apply? No — the same checks always apply across all three profiles. Smart Geo changes how your configuration is evaluated: each region is checked against its mode-specific settings, and mode-locked settings pass automatically.

Updated on: 28/08/2026