Alceris Analytics vs Commanders Act

Compare Alceris Analytics and Commanders Act on capabilities, jurisdiction, assurance, and fit for European buyers.

Both listed as alternatives to: Google Analytics

Logo: Alceris Analytics

Alceris Analytics

Germany· Web Analytics

Needs review

Shortlist when you need German-operated, cookieless pageview/event analytics with a free monthly allowance and one-line install. Skip when you need self-hosting, open-source core, enterprise cert packs, or deep product analytics—consider Plausible, Simple Analytics, Pirsch, or Matomo instead.

Cookieless by designEU-operated (Germany)Realtime dashboardFree tier (volume-capped)SaaS only (no self-host)
Logo: Commanders Act

Commanders Act

France· Web Analytics

Needs review

Shortlist when you need an EU-headquartered enterprise stack combining server-side tag management, consent, real-time CDP activation, and independent media attribution (Adloop). Skip when you only need lightweight privacy analytics or open-source self-hosting—consider etracker or fusedeck for narrower EU measurement/tagging scopes, or Matomo-class tools for self-host analytics.

EU-operated (FR)Server-side TMSReal-time CDPIntegrated CMPAdloop attributionSaaS only
Alceris Analytics vs Commanders Act: Snapshot
FeatureLogo: Alceris AnalyticsAlceris AnalyticsLogo: Commanders ActCommanders Act
Country of originGermanyFrance
CategoryWeb AnalyticsWeb Analytics
Open sourceNoNo
Self-hostedNoNo
HeadquartersGermanyFrance
Legal entityManuel Bauer, Innere Passauer Str. 45, 94315 Straubing, Germany (VAT DE353601960)Fjord Technologies SAS (trading name Commanders Act), SIREN 527 730 782, Paris
Governing lawGermanyNot listed
US parent / controlNo known US parentNo known US parent
CLOUD Act exposure (indicative)MediumMedium
Hosting / residencyVendor claims analytics data is stored and served only on European servers and aggregated on arrival. Named external paths: Paddle (paid billing MoR) and optional Google Search Console. No official named infrastructure/subprocessor inventory beyond those; public site IP/ASN currently associated with netcup GmbH (Germany). DNS nameservers observed on Hetzner.Vendor: EU/France data centers for platform hosting; privacy policy: site data stored in EU. Public DNS: app/platform behind Cloudflare CDN. Hosting provider certs (ISO 27001, SOC 1/2, etc.) claimed on Security product sheet. Full customer-data subprocessor list not published on marketing site.
Summary

German cookieless website analytics SaaS: aggregate pageviews, events, and UTM campaigns without cookies or IP logs, operated from Straubing with EU-oriented hosting claims.

French PlatformX MarTech suite from Fjord Technologies: enterprise server-side tag management, integrated consent, real-time CDP, and Adloop media attribution for multi-channel marketing teams.

Tags
At a glance: Alceris Analytics vs Commanders Act
At a glanceLogo: Alceris AnalyticsAlceris AnalyticsLogo: Commanders ActCommanders Act
HQStraubing, GermanyParis, France (Fjord Technologies SAS)
Legal entityManuel Bauer (sole operator)Not listed
DeploymentHosted SaaS onlyManaged SaaS (not self-hosted)
Open sourceProduct SaaS closed; WP plugin on WordPress.orgNot listed
Commercial modelFree volume-capped tier; paid via PaddleDemo / enterprise quote (no public list price)
Governing lawGermany (per terms)Not listed
SIRENNot listed527 730 782
FoundedNot listed2010 (as TagCommander / Fjord Technologies)
Core suiteNot listedTMS + CMP + CDP + Adloop
Key capabilities: Alceris Analytics vs Commanders Act
Key capabilitiesLogo: Alceris AnalyticsAlceris AnalyticsLogo: Commanders ActCommanders Act
Cookieless by designYesNot listed
EU-operated (Germany)YesYes
Realtime dashboardYesNot listed
Free tier (volume-capped)YesNot listed
SaaS only (no self-host)YesYes
Server-side TMSNot listedYes
Real-time CDPNot listedYes
Integrated CMPNot listedYes
Adloop attributionNot listedYes

Alceris Analytics

  • Cookieless aggregation without IP storage

    Per the privacy policy, Alceris does not set cookies, session IDs, or similar client storage; IPs are not logged; the full User-Agent is not stored. Only aggregated fields such as page URL, referrer, parsed browser/OS, language, and timezone-based country are retained—aimed at sites that want stats without an analytics cookie banner.

  • One-line async script, deferred events, WordPress plugin

    Install via a single async script from alceris.com with your site data-id (docs include a deferred alceris() queue so early events are not lost). WordPress operators can use the official plugin and paste the dashboard site ID. SaaS-only—there is no self-hosted server package.

  • Realtime pageviews and custom events with metadata

    Pageviews and events are processed immediately into the dashboard. Custom events are sent with alceris('event', name, { ...metadata }), useful for button clicks, form steps, or content attributes without building a full product-analytics stack.

  • UTM campaigns, outbound links, and cross-domain flows

    UTM parameters are extracted for campaign reporting; outbound link clicks are tracked automatically; cross-domain tracking follows visitors across owned domains. Scope is web traffic measurement—not session replay or heatmaps.

  • Optional Google Search Console and first-party proxy

    Connect Search Console to import query impressions, clicks, and terms (data removed on unlink). Docs also describe reverse-proxying script.js and the img.alceris.com data endpoint through your own domain so ad-blockers are less likely to drop hits—at the cost of operating that proxy yourself.

Commanders Act

  • Enterprise Tag Manager with server-side destinations and CAPIs

    Collect first-party and omnichannel events, transform/enrich without code, and deliver to 1,200+ destinations including 100+ server-side paths and major CAPIs (Google, Meta, Amazon, TikTok, Snapchat per vendor). GTM-ready server-side integration supports hybrid Google Tag Manager workflows.

  • Integrated consent and privacy governance tooling

    Native CMP/consent features (TrustCommander lineage) with Google Consent Mode support and Google CMP partner listing. Privacy monitoring, data-quality dashboards, filters before partner delivery, and cookie-related scanners help marketing ops control what leaves the property.

  • Real-time CDP: identity resolution, segments, activation

    Unify profiles across sources (including CRM enrichment), build no-code audiences with many filter criteria, push dynamic segment updates into ad and personalization destinations, and support cross-device experience consistency under consent rules.

  • Adloop media optimization and data-driven attribution

    After the 2023 Adloop acquisition, centralize campaign data via API connectors, run behaviour-based attribution as an independent measurement layer versus ad-platform KPIs, set spend/anomaly alerts, and use AI-assisted ad-level recommendations.

  • Operational QA for tagging teams

    No-code QA tooling (live event inspector, debug mode), continuous data-quality monitoring, and role/IP-restricted platform access claims reduce reliance on pure developer debugging when tags and server-side pipelines change.

Assurance & compliance: Alceris Analytics vs Commanders Act
Assurance & complianceLogo: Alceris AnalyticsAlceris AnalyticsLogo: Commanders ActCommanders Act
Independent security / no-logs audit
Not found

No public third-party audit of cookieless/no-IP claims found

Not applicable

Not a no-logs VPN/analytics product; marketing data platform processes customer event/profile data by design.

ISO 27001
Not found

No ISO 27001 claim on public site/security pages (none published)

Partial

Security sheet attributes ISO 27001 (and related) compliance to the hosting provider in France; not verified as Commanders Act's own current certificate.

SOC 2 / SOC 3
Not found

No SOC 2/3 report referenced publicly

Partial

Security sheet states hosting provider complies with SOC Type 1 and 2; not verified as vendor-owned SOC 2 report.

GDPR / EU data protection
Vendor claimed

German controller; cookieless/no-IP design claims on privacy policy (last updated 2022). Not legal advice—confirm with counsel and DPA.

Vendor claimed

French controller/processor entity; public privacy policy, named DPO, EU storage claim for site data, integrated consent tooling. Customer DPA terms not fully public on marketing pages.

US CLOUD Act exposure (indicative)
Partial

EU sole proprietor, no known US parent; vendor EU-hosting claims and DE-associated hosting for the public site. Optional Google Search Console involves Google; Paddle handles payments; infrastructure subprocessors not fully named. Indicative only—not legal advice.

Partial

EU entity / no known US parent, but Cloudflare CDN on public app/platform hostnames and incomplete public subprocessor list for customer data path. Not legal advice.

Data processing agreement (B2B)
Not found

No public DPA page or in-product DPA download found; ask vendor before production use

Unknown

Website privacy policy covers visitor/site processing; standard B2B DPA / Art. 28 package not located as a public self-serve download—request in procurement.

EU AI Act
Not applicable

Web analytics measurement product; not marketed as an AI system

Not applicable

Includes AI-assisted ad recommendations; not assessed here as a high-risk AI system product category.

Independent security / pentest programNot listed
Vendor claimed

Security product sheet claims external pentests (black/grey box) every six months and customer audit rights; no public audit PDF reviewed.

Considerations & known limitations: Alceris Analytics vs Commanders Act
Considerations & known limitationsLogo: Alceris AnalyticsAlceris AnalyticsLogo: Commanders ActCommanders Act
Solo / small-operator continuity
Medium

Imprint shows an individual operator in Straubing. Terms provide service as-is with email support on reasonable effort and reserve the right to modify or discontinue the service. Practical impact: backup exports and an exit plan matter more than with a large SaaS vendor.

Not listed
Thin public compliance packaging
Medium

No ISO/SOC claims, no independent audit, no public DPA template, and no named infrastructure subprocessor list despite terms referring to third-party hardware/storage vendors. Practical impact: slower security review for regulated buyers.

Not listed
Optional Google Search Console path
Low

Connecting Search Console pulls query metrics from Google into Alceris. Leave it disconnected if US providers are out of policy for any analytics-adjacent data.

Not listed
Billing via Paddle MoR
Low

Paid plans are contracted with Paddle, not Alceris directly. Review Paddle's terms and data role for finance/procurement.

Not listed
WordPress plugin maintenance signal
Low

WordPress.org lists the plugin as not tested with the latest major WP releases and few active installs. Prefer manual script install or re-test thoroughly on your WP version.

Not listed
Limited public subprocessor inventoryNot listed
Medium

Marketing site does not publish a clear list of subprocessors for customer event/CDP data. Cloudflare is observable on public hostnames; backend host is described generically as a French data center. Request written subprocessors, regions, and SCCs before relying on 'EU-only' narratives.

ISO/SOC claims tied to hosting providerNot listed
Medium

Security sheet language credits the data-center provider for ISO 27001 and SOC Type 1/2. Do not treat footer logos as proof of Commanders Act's own certifications without certificate IDs.

Enterprise SaaS scope and switching costNot listed
Medium

PlatformX spans TMS, CMP, CDP, and media optimization. Implementation (server-side migration, consent redesign, CAPI mapping) is non-trivial; not a drop-in free GTM replacement for all teams.

No self-host optionNot listed
Low

Fully managed SaaS only. Organizations with hard on-prem or open-source requirements need different tools.

Fit

Alceris Analytics

Best fit when

  • Small-to-medium websites that want aggregate traffic and event stats without analytics cookies
  • Teams replacing GA for basic reporting (pages, referrers, UTMs) under a German legal entity
  • Operators who value a free volume-capped tier and Paddle-billed paid upgrades
  • Sites that may reverse-proxy the script/data endpoints to reduce ad-blocker loss
  • WordPress sites willing to validate the plugin against their WP version

Poor fit when

  • Organisations that must self-host analytics or run an open-source core under their own ops
  • Buyers needing public ISO 27001/SOC 2, independent audits, or a ready DPA/subprocessor pack
  • Product teams requiring funnels, session replay, heatmaps, or multi-product analytics depth
  • Procurement processes that reject solo-operator vendors or optional US integrations (Google Search Console)

Consider instead when

  • When: You want a more established cookieless SaaS brand with stronger public compliance packaging

    Consider: Plausible Analytics or Simple Analytics

    Similar lightweight privacy analytics category; different ownership and documentation maturity

  • When: You need self-hosted or on-prem control of the analytics stack

    Consider: Matomo (self-hosted) or catalog Matomo hosting variants

    Alceris is cloud-only; proxying the script still sends data to Alceris

  • When: You need German-hosted open-source cookieless analytics with a different product surface

    Consider: Pirsch Analytics

    Peer German privacy-analytics option for side-by-side evaluation

  • When: You need full GA4-class product and marketing analytics depth

    Consider: Google Analytics (accept its data model) or a heavier EU suite

    Alceris intentionally stays narrow

Commanders Act

Best fit when

  • Marketing ops teams replacing or complementing GTM with governed server-side destinations and CAPIs
  • Enterprises that want tag management, consent, CDP segments, and activation under one French SaaS contract
  • Performance teams needing independent multi-channel attribution and campaign data hub after Adloop
  • Organizations prioritizing an EU legal entity and EU data-center marketing claims for MarTech collection tooling
  • Teams that need no-code QA, data-quality monitoring, and consent-aware partner delivery controls

Poor fit when

  • Solo sites or SMBs that only need free/client-side GTM or lightweight privacy page analytics
  • Buyers requiring open-source or fully self-hosted tag/CDP infrastructure
  • Procurement that must prove vendor-owned ISO 27001/SOC 2 from public certificate registries before RFP (provider-level claims need clarification)
  • Use cases limited to pure product analytics without marketing destination/CAPI complexity

Consider instead when

  • When: You mainly need EU web analytics with lighter tag/consent tooling, not a full CDP + media stack

    Consider: etracker

    German analytics + tag/consent oriented stack; smaller surface than PlatformX

  • When: You want Swiss cookieless analytics plus server-side tagging/activation without a French enterprise CDP suite

    Consider: fusedeck

    Narrower product; different jurisdiction (CH)

  • When: You need free client-side tagging and Google-native defaults, and can accept US hyperscaler jurisdiction

    Consider: Google Tag Manager (and Google marketing stack)

    Often retained in hybrid with Commanders Act server-side

  • When: Self-host open analytics is a hard requirement

    Consider: Matomo (self-host or EU Matomo hosting peers such as Friendly Analytics)

    Not a CDP/CAPI replacement

Open questions for due diligence

Alceris Analytics

  • Will the vendor sign a B2B DPA and provide a current named subprocessor list (hosting, backups, email)?
  • Which exact EU data-centre operators and regions process customer analytics data today?
  • Is there any independent assessment of the no-cookie / no-IP-storage claims?
  • What is the support SLA or roadmap process for a solo-operated product?
  • Is the WordPress plugin still maintained for current WordPress majors?

Commanders Act

  • Will Fjord Technologies provide a current Art. 28 DPA, subprocessor list, and data-flow diagram for PlatformX customer event data?
  • Which legal entity and cloud region process production customer data today, and are backups/DR in the same jurisdiction?
  • Does Commanders Act hold its own ISO 27001 or SOC 2 (certificate number/date), or only rely on hosting-provider attestations?
  • What is the minimum commercial package if the buyer only needs TMS + CMP versus full CDP + Adloop?
  • How are US ad-platform CAPIs and optional Google/Meta connections handled for transfer impact assessments?