Didomi Due Diligence
Run due diligence on Didomi: check compliance and get alerts when suppliers change.
France · www.didomi.io · 14 vendors
Didomi develops a consent management platform (CMP) and data governance solutions that help businesses comply with international privacy regulations. The company enables organizations to collect, store, and activate user choices across multiple channels, aiming to balance marketing performance with user trust and reduce compliance risk.
Resilience scores
- Digital Sovereignty: 7
- Digital Resilience: 7
- Financial Resilience: 7
Technology vendors
- Have I Been Pwned — Technology — Australia
- SAS — Transport & Logistics — Sweden
- Snowflake Inc. — Technology — United States
- and 11 more
Services catalogue
2 services in catalogue across 2 categories; runs on 14 sub-vendors.
- Didomi
- Personal Data Processing
Insights
Last updated 2026-07-22 · revision 2
14 direct vendors, 202 subvendors
Direct vendors by controlling owner country (sample)
- United States: 11
- Unknown: 1
- Australia: 1
Subvendors by controlling owner country (sample)
- Unknown: 1
- Denmark: 2
- Canada: 7
Compliance
9 in-scope frameworks identified; showing 3.
CPRA — Evidence found
Evidence: https://www.didomi.io/regulations/ccpa, https://www.didomi.io/regulations/us-privacy-laws, https://www.didomi.io/regulations/gpc-compliance, https://www.didomi.io/regulations/gpp
SOC 2 (source) — No public evidence
Evidence: https://www.didomi.io/security, https://cdn.prod.website-files.com/6669c8e8dad8d17885f7aa3a/69aaf9de822f791b79d32dac_Certificate%20Didomi%20SAS%20ANAB%20ISO%2027001-22_signed.pdf
EU Digital Markets Act — Evidence found
Evidence: https://www.didomi.io/regulations/dma, https://www.didomi.io/regulations/google-consent-mode-v2, https://www.didomi.io/regulations/amazon-consent-signal, https://www.didomi.io/regulations/microsoft-consent-mode
Financials
Three-year financials
- 2024:
- 2023:
- 2022:
Financial Resilience Score: 7/10
Didomi is a well-funded mid-stage French SaaS scale-up with a strong cash position following its $40M Series B in June 2022 (led by Elephant, with Breega and Partech), on top of ~$11M raised in earlier rounds. This provides multi-year runway and a solid balance sheet for a company of its size. The recurring SaaS revenue model, with high gross margins, multi-year contracts and low churn once integrated into a customer's stack, supports revenue predictability. Reported ARR growth of ~3x year-on-year at the time of the Series B further underscores commercial momentum. However, as a privately held French SAS, Didomi does not publicly disclose audited revenue, EBIT or equity, limiting transparency. Profitability is unknown and, as a growth-stage VC-backed SaaS, the company is likely still prioritizing growth over EBIT. The CMP market is highly competitive with well-funded players (OneTrust, Usercentrics/Cookiebot, Sourcepoint, TrustArc, Osano) and increasing bundling by large platforms (Google, Adobe). Regulatory tailwinds (GDPR, CCPA, Law 25, LGPD, Google Consent Mode v2) continue to expand the addressable market, but potential simplification under the EU 'Digital Omnibus' could commoditize stand-alone consent banners. Overall resilience is above average but tempered by opacity and competitive/regulatory concentration risk.
Key strengths: $40M Series B (June 2022) led by Elephant plus ~$11M in prior rounds, providing multi-year runway, Recurring SaaS revenue model with high gross margins and low churn, Regulatory tailwinds expanding TAM (GDPR, CCPA, Law 25, LGPD, Google Consent Mode v2), 2,500+ customers across 35+ countries providing diversified customer base, Product suite expansion beyond CMP (Preference Management, Compliance Scanning, Addingwell server-side tagging, DSAR automation) increasing ACV and stickiness, Blue-chip customer base across media, banking, retail and pharma (Europcar, Chantelle, La Poste Mobile, OUIGO, Planity)
Risk factors: Intense competition from OneTrust, Usercentrics/Cookiebot, Sourcepoint, TrustArc, Osano and bundled offerings from Google/Adobe, Regulatory single-point exposure: EU 'Digital Omnibus' GDPR simplification could reduce demand for stand-alone CMPs, Profitability unknown; likely still prioritizing growth over EBIT, Market consolidation risk (Usercentrics+Cookiebot merger, OneTrust divestitures); integration execution risk with Addingwell acquisition and Sourcepoint tie-up, Limited financial transparency as a private SAS
Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.