PolicyStack
by OpenPolicy · Open-source consent and privacy policy primitives for developers
22.9 — BenchRank score out of 100
Screenshots of PolicyStack
Homepage
Overview
PolicyStack is a set of Apache-2.0 packages for privacy and consent in application code. Consent is a headless consent state machine with adapters for React, Vue, Solid, Svelte and Angular, plus a Vite plugin that flags ungated cookies at dev time; Policy turns a typed TypeScript config into a rendered privacy and cookie policy. An optional hosted Cloud adds policy versioning, audit trails and consent analytics.
- Best for
- Development teams that want consent handling and privacy policies defined as typed code in their repo.
- Pricing
- No prices are shown: Consent and Policy are Apache-2.0 open source, and the hosted Cloud is early access with no published pricing.
Strengths and trade-offs
Strengths
- Consent and Policy are Apache-2.0 and free to use
- Consent core under 4kb gzipped; Policy renders zero JS by default
- Adapters for React, Vue, Solid, Svelte and Angular
- Policy changes go through PR review, type checks and tests
Trade-offs
- Hosted Cloud control plane is early access, not generally available
- Generates documents and manages state; gives no legal advice
- Policy edits need a code change, not a dashboard legal staff can use
- No pricing published for the commercial Cloud piece
How this score is made up
Each dimension is scored out of 100 and combined into the headline score using fixed weights.
- MCP support
- 0 out of 100
- API quality
- 30 out of 100
- Documentation
- 15 out of 100
- Agent friendliness
- 61 out of 100
- Changelog
- 0 out of 100
- Marketing site structure
- 45 out of 100
- Operational trust
- 15 out of 100
Measured, but not part of the score
Useful to know, but not a mark for or against the product — so these do not affect the ranking.
- Openness
- 0 out of 100
This doesn’t look right — report a problem with PolicyStack’s score
Alternatives in Privacy & Compliance
Ranked 1
74.4 — BenchRank score out of 100c15t
c15t · Open source consent management and script loading for web apps
Best for: Development teams that want a code-controlled cookie consent banner in modern web apps
Ranked 2
62.6 — BenchRank score out of 100Probo
Probo · Open-source compliance platform with compliance officers who run the programme
Best for: Startups needing SOC 2, ISO or HIPAA certification without running a compliance programme in-house.
Ranked 3
60.4 — BenchRank score out of 100Comp AI
Comp AI · Automated SOC 2, ISO 27001, HIPAA and GDPR compliance
Best for: Startups and growing companies automating SOC 2, ISO 27001, HIPAA or GDPR evidence work
