Is Your CMP Google-Certified? How to Check the Three Lists That Matter

Vendors say “certified” loosely, and the difference matters. If you serve Google ads to visitors in the EEA, the UK or Switzerland, the list that counts is the one Google keeps for publishers — we covered why in the certified CMP requirement. That is not the same list as the one that covers Consent Mode for advertisers, and neither is IAB Europe’s registration.

The three lists

• IAB Europe TCF CMP list. Registration in the Transparency and Consent Framework. Every registered CMP gets a numeric ID. The list is published as JSON; the copy we read was last updated on 24 September 2026 and holds 269 CMPs.
• Google’s certified CMPs. For publishers using AdSense, Ad Manager or AdMob. Google says these “are assessed by Google against certification criteria focused on TCF compliance”, and lists each with its IAB ID and the platforms covered. We counted about 142 IDs.
• Google’s CMP Partner Program. For advertisers using Consent Mode. A different programme with different entries.

Step 1: get the CMP’s ID from the page itself

Don’t start from the vendor’s marketing page — start from what the site actually runs. Every TCF CMP must answer a 'ping' command, and the response includes its ID (IAB’s CMP API v2 spec). Open the site, open the console, and run:

__tcfapi('ping', 2, (p) => console.log(p.cmpId, p.cmpStatus, p.gdprApplies));

We ran it on the Guardian’s European front page on 28 September 2026, without touching the banner:

{ cmpId: 112, cmpVersion: 1, cmpStatus: "loaded", gdprApplies: true, apiVersion: "2" }

If __tcfapi is not defined at all, the banner is not a TCF CMP. That is not a problem in itself, but it means the TCF-based lists below do not apply to it.

Step 2: look the ID up on each list

The IAB list is a single JSON file, so the lookup is one line:

curl -s https://cmplist.consensu.org/v2/cmp-list.json \
  | python3 -c "import sys,json; print(json.load(sys.stdin)['cmps'].get('112',{}).get('name'))"
# Guardian News and Media

Google’s publisher list is a web page with the same IDs, so search it for the number rather than the name. ID 112 appears there as “Guardian News and Media CMP (Private)”, for web and app: an in-house CMP that went through Google’s certification. Searching by ID avoids the other trap — vendors listed under a company name you would not have guessed.

What we found for seven commercial CMPs

Re-checked on 28 September 2026:

CMP                  IAB TCF ID   Google publisher list   Google Partner Program
Cookiebot            134          yes                      yes
Cookie Information   162          NO                       yes
CookieYes            401          yes                      yes
iubenda              123          yes                      yes
OneTrust             28           yes                      yes
Termly               412          yes                      yes
Usercentrics         5            yes                      yes

Cookie Information is registered with IAB (ID 162) and is in the Partner Program, but ID 162 does not appear on the publisher list — we checked by name and by number. For an advertiser using Consent Mode that may not matter. For a publisher relying on it to serve Google ads in the EEA, it is the first thing to ask the vendor about. The full, dated table for all the tools we reference, including open-source CMPs, is on our tools page.

What a listing does not tell you

All three lists certify the product, not your installation. A certified CMP configured to load tags before the visitor answers, or to leave cookies in place after a refusal, is still certified. That part you only find by testing the site itself — a refusal that does not delete anything is the common case.

A certified CMP is where compliance starts, not where it ends. Scan your site to see what loads before and after the banner with CookieInspector.