Termly vs iubenda for Privacy Requests: Pricing and DSAR Handling Compared

Short answer: Termly is the cheaper, simpler pick for a US small business that needs a privacy policy and a cookie banner, at $10 to $15 a month per site on yearly billing. iubenda is the deeper pick for multilingual and EU-heavy sites, at $5.99 to $99.99 a month per site. On privacy requests they split in an unexpected way: Termly gives every plan, including Free, a DSAR intake form, while iubenda keeps its data subject rights tool on the $99.99 Ultimate plan only. Neither one finds a person's data in your systems, redacts it or drafts the answer.

Prices below were read from each vendor's own pricing page in September 2026, in USD, billed per website. They change without notice, so treat them as a starting point rather than a quote.

Termly vs iubenda at a glance

How much does Termly cost?

Termly costs $0 to $20 a month per website on its self-serve plans. Free covers one site, one user, one basic policy and 10,000 monthly banner views. Starter is $14 monthly or $10 billed yearly and adds five users, two policies and 50,000 banner views. Pro+ is $20 monthly or $15 yearly with unlimited users, policies and banner views.

Pro+ is also where multi-language policies, IAB TCF 2.3, custom banner styles, regional consent rules and Google Consent Mode v2 appear. Agency pricing is quoted and starts at ten websites. A single site on Pro+ with yearly billing comes to $180 a year, which is the most a one-site Termly customer pays.

How much does iubenda cost?

iubenda costs $5.99 to $99.99 a month per site on yearly billing. Essentials includes 25,000 page views, Advanced is $24.99 with 50,000, and Ultimate is $99.99 with 150,000 page views plus the data subject rights management tool. Monthly billing runs $6.99, $27.99 and $119.99. Page views above the quota are billed extra, and every plan carries a 14-day refund window.

The spread matters more than the entry price. Ultimate is roughly seventeen times Essentials, and most of the features that justify that jump are consent analytics, banner customization and policy depth. For a site that only wants the subject rights tool, the upgrade is about $1,128 a year, per site. We lay out iubenda pricing and the cheaper setups around it in more detail on a separate page.

Which is better for a US business, Termly or iubenda?

For most US businesses with one English-language site, Termly is the better value. It covers the documents and banner that a small US company typically needs at a lower top price, and its request form comes free. iubenda earns its price when you run several languages, have meaningful EU traffic, or want fine-grained control over each policy clause.

The US state laws are where the difference tends to be overstated. California, Colorado, Connecticut, Virginia and the rest all require you to accept and answer consumer requests within 45 days, and both tools will put a request form in front of consumers if you pay for the right plan. What neither tool changes is how long the answer takes to produce. Our CCPA compliance software page covers what the 45-day clock actually demands.

Does Termly or iubenda handle data subject access requests?

Both handle intake, and neither handles fulfillment. Termly's embeddable DSAR form collects the request on any plan. iubenda's Ultimate plan adds a form plus a dashboard where a manager moves each request through Received, Processing, Feedback Provided, Completed and Information Deleted. That status trail is a real improvement for record-keeping, and it is the main thing iubenda adds over Termly here.

After that, the work is identical on both. Someone has to find every system that holds the person, export what is there, remove information that identifies other people, decide whether any exemption applies, write the response and send it before the deadline. A form does not do any of that. It starts the clock.

What a request costs after the form

This is the number that should drive the decision, and it is not on either pricing page. Gartner research has put the cost of manually fulfilling one access request at roughly $1,400 to $1,524, almost all of it staff time spent searching and reviewing. We break that down in our guide to the cost to fulfill a DSAR. At that rate, a single request costs more than a year of iubenda Ultimate and more than seven years of Termly Pro+.

Speed matters as much as money. When BT Group automated its request handling, it reported cutting fulfillment from 90 days to 30 and saving about £240,000 a year. Few small companies will see numbers that large, but the direction is the same: the hours sit in the search and the review, and that is where software earns its price.

The search is also where small companies get stuck. Personal data rarely lives in one place. It sits in the CRM, the help desk, billing, email marketing, product logs, and increasingly in scanned forms and signed PDFs. If a meaningful share of what you hold is in documents rather than databases, it helps to extract the data from those scanned documents into something you can search before a request arrives.

Yearly cost for one site, with requests actually answered

The pattern is the same one we see across the privacy market, from $0 tools up to enterprise suites: the published price is almost never the price of answering requests. Termly's price buys consent and documents. iubenda's top price buys a request queue. The fulfillment work is priced separately, or left to you.

Should I choose Termly or iubenda if I get privacy requests?

Choose on the policy and banner job, not on requests. If you are a US business with one English site, Termly Starter or Pro+ is the proportionate buy, and its free DSAR form already gives you intake. If you need several languages or clause-level control, iubenda Essentials or Advanced does that without paying for Ultimate.

Then handle requests with a tool built for them. Obtainer sits behind whichever form you use. It finds where the person's data lives across your systems, compiles one reviewable manifest with a source on every item, drafts a deadline-safe response, and tracks the GDPR one-month and US state 45-day clocks with deadline tracking. Nothing goes out until a human approves the redactions. Plans start at $49 a month billed yearly and are metered on requests rather than websites. See how DSAR automation works, or compare it against Termly directly on our Termly alternative page.

Is Termly or iubenda enough for CCPA requests?

They are enough to receive CCPA requests, not to answer them. The CCPA requires at least two methods for consumers to submit requests, and a web form from either tool can be one of them. Answering still means locating, reviewing and delivering the data within 45 days, which neither tool does. A subject access request form connected to a fulfillment workflow covers both halves.

Can I switch from iubenda to Termly without losing request records?

You can, but export first. Request records in iubenda's dashboard are your evidence that each request was received and closed on time, and regulators can ask for that history. Before downgrading or cancelling Ultimate, export or copy the status history for every request, then point your privacy notice at the new form. Keeping requests in a tool you control avoids repeating this on the next switch.

Obtainer helps you comply; it is not legal advice, and you stay in control of what is disclosed.