Compare Analyzati and digistats Analytics on capabilities, jurisdiction, assurance, and fit for European buyers.
Both listed as alternatives to: Fathom Analytics, Google Analytics, Matomo
Spain· Web Analytics
Needs review
Shortlist when you want Spanish/EU-legal SaaS web analytics with cookie-free daily uniques, city geo, AI referral views, and a public DPA—without self-hosting. Skip when you need open source, on-prem, multi-day retention/cohorts, or certified ISO/SOC evidence; consider Plausible Analytics or Matomo instead.
Switzerland· Web Analytics
Needs review
Shortlist digistats when you want managed Swiss cookieless analytics with multi-site, events, API, and CSV on every listed tier and you accept SaaS-only operations. Skip when you need self-host/OSS, GA4-depth product analytics, or published ISO 27001/SOC 2—consider Plausible, Simple Analytics, Pirsch, or Matomo instead.
Highlighted rows differ between the two products.
| Feature | Analyzati | digistats Analytics |
|---|---|---|
| Country of origin | Spain | Switzerland |
| Category | Web Analytics | Web Analytics |
| Open source | No | No |
| Self-hosted | No | No |
| Headquarters | Spain | Switzerland |
| Legal entity | Incorporated in Barcelona, Spain (exact legal name not published on pages reviewed) | digistats Analytics Ltd., Täfernstrasse 2A, CH-5405 Dättwil AG (UID CHE-296.235.462) |
| Governing law | Spain / EU (GDPR referenced; confirm governing law clause in Terms) | Swiss law; venue Bremgarten AG (per AGB) |
| US parent / control | No known US parent | No known US parent |
| CLOUD Act exposure (indicative) | Medium | Medium |
| Hosting / residency | Visitor/app data: AWS in Paris (vendor). Marketing site: Namecheap in Amsterdam. Backups described as EU. Other subprocessors named in privacy materials: Stripe (payments), AWS (email), Freshworks (support), hCaptcha (registration). | Privacy policy: customer data processed/stored in Switzerland, not in the USA or outside the EU; pricing lists Switzerland Data Center. Hosting provider legal name not in a public subprocessor list. Payment subprocessors: Stripe, Inc. (USA) and Coinbase (crypto; German entity listed in AGB). |
| Summary | Spanish cookie-free web analytics SaaS: real-time traffic, city-level geo, AI referral sources, and event tracking without cookies, stored IPs, or fingerprints. | Swiss cookieless web analytics SaaS from digistats Analytics Ltd.: realtime traffic, city-level geo, events, and multi-site dashboards without storing cookies, IPs, or fingerprints. |
| Tags |
| At a glance | Analyzati | digistats Analytics |
|---|---|---|
| HQ / entity | Barcelona, Spain (EU entity claimed; exact registry name not on public pages reviewed) | Not listed |
| Product type | Hosted web analytics SaaS | Not listed |
| Open source | No | No |
| Self-host | No | Not listed |
| App hosting | AWS, Paris (vendor claim) | Not listed |
| Commercial model | Freemium + pageview / site-count tiers | Free low-traffic tier + pageview-based subscription |
| DPA | Public; accepted via Terms of Service | Not listed |
| HQ | Not listed | Dättwil AG, Switzerland |
| Legal entity | Not listed | digistats Analytics Ltd. (CHE-296.235.462) |
| Hosting | Not listed | Switzerland data center (host brand not named publicly) |
| Deployment | Not listed | Managed SaaS only |
| Key capabilities | Analyzati | digistats Analytics |
|---|---|---|
| Cookie-free tracking | Yes | Not listed |
| EU entity (Spain) | Yes | Not listed |
| App on AWS Paris | Yes | Not listed |
| Public DPA | Yes | Not listed |
| AI referral insights | Yes | Not listed |
| SaaS only | Yes | Not listed |
| Cookieless tracking | Not listed | Yes |
| No stored visitor IPs | Not listed | Yes |
| Swiss data center | Not listed | Yes |
| Unlimited websites | Not listed | Yes |
| API + CSV export | Not listed | Yes |
| Managed SaaS | Not listed | Yes |
Cookie-free uniques with daily rotating salt
Counts daily unique visitors by hashing IP + User-Agent + domain with a salt that is destroyed every 24 hours. No cookies, localStorage, or device-persistent IDs; raw IP and full UA are not stored. Trade-off: no multi-day retention or new-vs-returning series.
City-level geo without retained IPs
Derives continent, country, region, and city for maps and rankings from the request IP, then discards the IP. Useful for market mix reporting when you do not need ISP- or coordinate-level precision.
AI referral and channel acquisition views
Breaks down how visitors arrive—search, referring sites, and AI assistants such as ChatGPT, Perplexity, Gemini, and Claude—so content teams can see discovery outside classic SEO referrers.
Real-time dashboard, events, export, and API
Live visitor activity, page performance, device/browser/OS stats, custom events and campaigns, weekly email reports, data export, and API access on published plans. Integrations include a WordPress plugin and Google Tag Manager snippet placement.
Public B2B DPA with processor role
A published Data Processing Agreement (effective August 2022) treats Analyzati as processor and the customer as controller for visitor measurement. Acceptance is tied to product use under the Terms of Service rather than a bespoke countersignature workflow.
Cookieless script without stored IPs or fingerprints
Vendor docs describe a sub-1 kB tag that measures traffic without cookies, without retaining visitor IPs (IP used only for live geo lookup), and without fingerprinting—aimed at sites that want analytics without a consent banner for non-essential cookies.
Realtime dashboard with geo, tech, events, and channels
Live visitor and pageview views plus city-level geography, browser/OS/device signals, custom conversion events, referrer/search/social acquisition, landing pages, and continuous site reachability (online status)—enough for content and marketing ops, not a full product-analytics suite.
Ad-blocker-resistant capture (vendor claim)
Marketing materials contrast digistats with Google Analytics being stripped by major blockers and state digistats is not blocked by common ad-block extensions. Useful for traffic completeness debates; treat as first-party claim until you validate on your stack.
Multi-site SaaS with API, email reports, and CSV on every tier
Published plans include unlimited websites and events, API access, email reports, Swiss data-center storage, and CSV export—even on the free low-traffic tier—so agencies can run multiple client properties without plan-gated feature cliffs.
Swiss entity and Swiss analytics data center
Operated by digistats Analytics Ltd. (Dättwil AG); privacy policy commits to storing customer data in Switzerland. Managed hosting only—no self-hosted edition in public materials.
| Assurance & compliance | Analyzati | digistats Analytics |
|---|---|---|
| Independent security / no-logs audit | Not found No public third-party audit PDF or no-logs attestation found on official pages reviewed. | Not found Vendor claims no IP storage and no fingerprints; no public third-party audit PDF found. |
| ISO 27001 | Not found No ISO 27001 certificate claim located on homepage, privacy, or DPA pages. | Not found Not claimed on reviewed pages. Host partner ISO 14001 (environmental) is not an ISMS cert. |
| SOC 2 / SOC 3 | Not found No SOC 2/3 report claim found on public trust materials. | Not found |
| GDPR / EU data protection | Vendor claimed EU entity (Barcelona); public GDPR/PECR/CCPA compliance pages; anonymisation design documented; controller/processor roles in DPA. | Vendor claimed Swiss entity; privacy policy cites DSG and GDPR/DSGVO, cookieless design, Swiss storage. Not legal advice. |
| US CLOUD Act exposure (indicative) | Partial Spanish/EU vendor with no known US parent, but application hosting on AWS (Paris) and US-group subprocessors (Stripe, Freshworks, AWS email, hCaptcha). Residency ≠ ownership. Not legal advice. | Partial Swiss Ltd, no known US parent, analytics residency claimed in Switzerland; billing via Stripe, Inc. (US) and Coinbase. EuropeanStack assessment — not a vendor certification. Not legal advice. |
| Data processing agreement (B2B) | Vendor claimed Public DPA effective 18 Aug 2022; vendor says acceptance is automatic via product use / ToS—no separate signature required. | Partial Privacy policy describes Art. 28-style processing on behalf of customers; dedicated public DPA download not found — request signed DPA. |
| EU AI Act | Not applicable Product reports AI *referral traffic*; it is not marketed as a high-risk AI system provider. | Not applicable Web analytics product; not positioned as an AI system product. |
| Considerations & known limitations | Analyzati | digistats Analytics |
|---|---|---|
| AWS and US-group subprocessors | Medium Measurement app is on AWS Paris; account path also uses Stripe, Freshworks, AWS email, and hCaptcha. EU regions reduce some transfer friction but do not erase US-group provider diligence for many public-sector and bank questionnaires. | Not listed |
| No public ISO/SOC or independent audit | Medium Security claims rely on vendor documentation (HTTPS, hashing, firewalls, backups). Organisations with mandatory cert evidence will need vendor outreach or a different shortlist. | Not listed |
| No multi-day visitor identity | Low Daily salt rotation blocks persistent uniques. Expect gaps vs Google Analytics for returning users, frequency, and retention—by design. | Not listed |
| SaaS lock-in / no self-host | Low No self-host edition found. Exit requires export/API migration to another tool; confirm export completeness in a trial. | Medium Cannot pin collector versions, run fully air-gapped, or satisfy hard self-host mandates. Operational dependency on digistats uptime and roadmap. |
| Exact registry name not on marketing pages | Low Vendor states Barcelona incorporation but public pages reviewed did not display a full Spanish company registration string—collect CIF/NIF and full legal name during contracting. | Not listed |
| No public independent security audit | Not listed | Medium Cookieless and no-IP claims are first-party only. Security questionnaires that require audit reports will need vendor outreach or a different product. |
| US-linked payment subprocessors | Not listed | Medium AGB names Stripe, Inc. (San Francisco) for cards and Coinbase for crypto. Billing and account data may leave the pure Swiss analytics path even if telemetry stays in Switzerland. |
| Hosting provider not named publicly | Not listed | Low Switzerland data-center claim without a published host legal name or full subprocessor list complicates transfer and residual-risk assessments. |
| Registration path may be restricted | Not listed | Low At research time the login UI stated registrations were disabled and /developers redirected to login. Confirm trial and API access before scheduling migration. |
When: You need open-source analytics you can self-host and audit
Consider: Plausible Analytics (self-host option) or Matomo
Analyzati is SaaS-only with no public source release found.
When: You want a comparable cookie-free European SaaS peer for side-by-side trials
Consider: Plausible Analytics or Simple Analytics
Compare AI-referrer and geo depth, DPA wording, and hosting/subprocessor lists in each trial.
When: You need full-stack product analytics and advertising linkage
Consider: Google Analytics (incumbent) or a dedicated product analytics suite
Analyzati deliberately collects a minimal metric set and does not sell ad-tech profiles.
When: You need open-source and optional self-hosting with a large community
Consider: Plausible Analytics or Matomo
Plausible is cookieless SaaS + self-host; Matomo is the full self-host suite.
When: You want another lightweight EU cookieless SaaS without Swiss seat as a requirement
Consider: Simple Analytics or Pirsch Analytics
NL and DE peers in the same category band.
When: You need enterprise analytics, tag manager, and formal compliance packaging
Consider: Piwik PRO or Matomo Cloud
Heavier stacks with more modules and B2B assurance artifacts.
When: You are comparing global privacy-analytics brands rather than Swiss residency
Consider: Fathom Analytics
Different ownership and data-path story—verify residency independently.