GTM Audit Checklist: Container Health, Triggers, Tags, and Consent
A Google Tag Manager audit checklist for container exports, duplicate tags, trigger overlap, custom HTML risk, consent settings, and QA workflow.
Audience: Developers, GTM specialists, and analytics consultants.
Key takeaways
- Audit tags, triggers, variables, consent settings, and custom HTML before publishing container changes.
- Treat trigger overlap and duplicate GA4 tags as high-risk until Preview mode confirms behavior.
- Use a tracking plan so GTM tags map to agreed events and parameters.
Export the container before auditing
A GTM JSON export gives the audit engine a deterministic view of tags, triggers, variables, consent settings, and custom HTML. It does not replace runtime testing, but it catches many configuration issues quickly.
Keep exports tied to a specific workspace or version so findings can be reproduced later.
Review trigger overlap
A common source of duplicate events is two triggers firing the same GA4 event tag on one user action. Examples include click triggers plus custom event triggers, or visibility triggers layered on top of add-to-cart clicks.
Any broad trigger on high-value events should have a clear reason and a blocking trigger where needed.
Review consent settings
GTM consent settings should match the tag's data use. Analytics tags generally require analytics_storage. Ads and remarketing tags may require ad_storage, ad_user_data, and ad_personalization depending on use case and region.
Do not assume a CMP banner means tags are correctly gated. Confirm the default and update behavior.
How to use Measure Copilot for this audit
Run a URL audit first, then upload the relevant evidence files. The report separates confirmed findings from high-risk signals and missing-data gaps, so you can decide what to fix now and what needs more proof.
Run a trust auditFAQ
Can Measure Copilot edit my GTM container?
No. It audits the container export and recommends fixes. You decide what to change in GTM.
Is a GTM export enough for a complete audit?
No. It is strong configuration evidence, but runtime behavior still benefits from GTM Preview, GA4 DebugView, and event CSV data.