Analyzati vs Friendly Analytics

Compare Analyzati and Friendly Analytics on capabilities, jurisdiction, assurance, and fit for European buyers.

Both listed as alternatives to: Fathom Analytics, Google Analytics, Matomo

Logo: Analyzati

Analyzati

Spain· Web Analytics

Needs review

Shortlist when you want Spanish/EU-legal SaaS web analytics with cookie-free daily uniques, city geo, AI referral views, and a public DPA—without self-hosting. Skip when you need open source, on-prem, multi-day retention/cohorts, or certified ISO/SOC evidence; consider Plausible Analytics or Matomo instead.

Cookie-free trackingEU entity (Spain)App on AWS ParisPublic DPAAI referral insightsSaaS only
Logo: Friendly Analytics

Friendly Analytics

Switzerland· Web Analytics

Needs review

Shortlist when you need full Matomo depth (heatmaps, funnels, ecommerce, API) with Swiss product hosting and managed privacy defaults—especially regulated CH/EU orgs leaving Google Analytics. Skip when you only want a minimal pageview counter, a free self-serve tier, or pure DIY Matomo ops—consider Plausible, etracker, or self-hosted Matomo instead.

Matomo-as-a-ServiceCookieless by defaultSwiss product hostingISO 27001 (claimed)DPA availableEU / on-prem option
Analyzati vs Friendly Analytics: Snapshot
FeatureLogo: AnalyzatiAnalyzatiLogo: Friendly AnalyticsFriendly Analytics
Country of originSpainSwitzerland
CategoryWeb AnalyticsWeb Analytics
Open sourceNoYes
Self-hostedNoYes
HeadquartersSpainSwitzerland
Legal entityIncorporated in Barcelona, Spain (exact legal name not published on pages reviewed)Friendly LLC (Friendly GmbH on DPA), Werkhofstrasse 5, 6052 Hergiswil, Switzerland
Governing lawSpain / EU (GDPR referenced; confirm governing law clause in Terms)Swiss law (per customer principal agreement / DPA framework)
US parent / controlNo known US parentNo known US parent
CLOUD Act exposure (indicative)MediumMedium
Hosting / residencyVisitor/app data: AWS in Paris (vendor). Marketing site: Namecheap in Amsterdam. Backups described as EU. Other subprocessors named in privacy materials: Stripe (payments), AWS (email), Freshworks (support), hCaptcha (registration).Analytics product: Infomaniak (CH) primary hosting; Netstream and Hosttech (CH) backups. AWS listed only for Friendly Automate email, not Analytics. Enterprise marketing also offers EU or on-premise hosting. Company ops: US SaaS including Google Workspace, HelpScout, Stripe, Notion, Calendly, Cloudflare (help docs).
Summary

Spanish cookie-free web analytics SaaS: real-time traffic, city-level geo, AI referral sources, and event tracking without cookies, stored IPs, or fingerprints.

Swiss Matomo-as-a-Service: cookieless-by-default web analytics with heatmaps, funnels, and ecommerce, product data hosted in Switzerland, plus enterprise DPA and on-prem options.

Tags
At a glance: Analyzati vs Friendly Analytics
At a glanceLogo: AnalyzatiAnalyzatiLogo: Friendly AnalyticsFriendly Analytics
HQ / entityBarcelona, Spain (EU entity claimed; exact registry name not on public pages reviewed)Not listed
Product typeHosted web analytics SaaSNot listed
Open sourceNoNot listed
Self-hostNoNot listed
App hostingAWS, Paris (vendor claim)Not listed
Commercial modelFreemium + pageview / site-count tiersHit-based SaaS; enterprise custom; no free trial
DPAPublic; accepted via Terms of ServiceNot listed
HQNot listedHergiswil, Switzerland
Legal entityNot listedFriendly LLC / Friendly GmbH
StackNot listedMatomo (unmodified + premium plugins)
Product hostsNot listedInfomaniak; backups Netstream & Hosttech (CH)
Open source baseNot listedMatomo; portable to other Matomo hosts
Key capabilities: Analyzati vs Friendly Analytics
Key capabilitiesLogo: AnalyzatiAnalyzatiLogo: Friendly AnalyticsFriendly Analytics
Cookie-free trackingYesNot listed
EU entity (Spain)YesNot listed
App on AWS ParisYesNot listed
Public DPAYesNot listed
AI referral insightsYesNot listed
SaaS onlyYesNot listed
Matomo-as-a-ServiceNot listedYes
Cookieless by defaultNot listedYes
Swiss product hostingNot listedYes
ISO 27001 (claimed)Not listedYes
DPA availableNot listedYes
EU / on-prem optionNot listedYes

Analyzati

  • Cookie-free uniques with daily rotating salt

    Counts daily unique visitors by hashing IP + User-Agent + domain with a salt that is destroyed every 24 hours. No cookies, localStorage, or device-persistent IDs; raw IP and full UA are not stored. Trade-off: no multi-day retention or new-vs-returning series.

  • City-level geo without retained IPs

    Derives continent, country, region, and city for maps and rankings from the request IP, then discards the IP. Useful for market mix reporting when you do not need ISP- or coordinate-level precision.

  • AI referral and channel acquisition views

    Breaks down how visitors arrive—search, referring sites, and AI assistants such as ChatGPT, Perplexity, Gemini, and Claude—so content teams can see discovery outside classic SEO referrers.

  • Real-time dashboard, events, export, and API

    Live visitor activity, page performance, device/browser/OS stats, custom events and campaigns, weekly email reports, data export, and API access on published plans. Integrations include a WordPress plugin and Google Tag Manager snippet placement.

  • Public B2B DPA with processor role

    A published Data Processing Agreement (effective August 2022) treats Analyzati as processor and the customer as controller for visitor measurement. Acceptance is tied to product use under the Terms of Service rather than a bespoke countersignature workflow.

Friendly Analytics

  • Matomo-as-a-Service with privacy defaults

    Runs unmodified Matomo plus selected premium plugins, preconfigured for cookieless tracking, IP truncation, and nFADP/GDPR-oriented defaults so teams avoid operating Matomo themselves while keeping exit paths to another Matomo host.

  • Heatmaps, funnels, session recording, and ecommerce

    Beyond pageviews: heatmaps, privacy-oriented session replays, conversion funnels, form analytics, A/B tests, and ecommerce reporting for UX and revenue analysis without bolting on a separate US product suite.

  • Swiss product hosting with EU or on-prem options

    Visitor analytics hosted with Infomaniak in Switzerland; backups via Netstream and Hosttech (CH). Enterprise can contract Swiss, EU, or on-premise placement—confirm region in the order form rather than assuming SaaS-only CH.

  • Ads conversion export without third-party pixels

    Advertising Conversion Export sends conversions to Google or Bing via API so campaigns can be optimized without placing those vendors' tracking codes on your site—useful when privacy policy bans extra ad tags.

  • GA import, reporting API, and Matomo portability

    Historical Google Analytics data can be imported (manual, effort-billed). Reporting API and live export links feed BI tools; data can move to another Matomo instance, limiting classic SaaS lock-in.

  • Enterprise contracts, SSO, and dedicated instances

    Enterprise tier adds custom DPA/DORA/NDA/SLA paperwork, dedicated account management, SSO, custom domain, dedicated instance, and phone/video support for banks, insurers, and public bodies.

Assurance & compliance: Analyzati vs Friendly Analytics
Assurance & complianceLogo: AnalyzatiAnalyzatiLogo: Friendly AnalyticsFriendly Analytics
Independent security / no-logs audit
Not found

No public third-party audit PDF or no-logs attestation found on official pages reviewed.

Not found

Vendor describes anonymization defaults and mentions external pen tests in ISO materials; no public independent no-logs audit report found.

ISO 27001
Not found

No ISO 27001 certificate claim located on homepage, privacy, or DPA pages.

Vendor claimed

Vendor publishes ISO/IEC 27001:2022 certification covering the company/products with a certificate PDF; not independently re-verified against the cert body registry in this draft.

SOC 2 / SOC 3
Not found

No SOC 2/3 report claim found on public trust materials.

Not found

No SOC 2/3 claim found on security/about pages reviewed.

GDPR / EU data protection
Vendor claimed

EU entity (Barcelona); public GDPR/PECR/CCPA compliance pages; anonymisation design documented; controller/processor roles in DPA.

Vendor claimed

Swiss entity; public materials assert nFADP and GDPR alignment; cookieless defaults and CH processing described in DPA.

US CLOUD Act exposure (indicative)
Partial

Spanish/EU vendor with no known US parent, but application hosting on AWS (Paris) and US-group subprocessors (Stripe, Freshworks, AWS email, hCaptcha). Residency ≠ ownership. Not legal advice.

Partial

Swiss entity, no known US parent; Analytics product hosts are Swiss (Infomaniak/Netstream/Hosttech). Medium/partial because company subprocessors include US SaaS (e.g. Google Workspace, HelpScout, Stripe, Cloudflare). AWS not used for Analytics per vendor list. Indicative only—not legal advice.

Data processing agreement (B2B)
Vendor claimed

Public DPA effective 18 Aug 2022; vendor says acceptance is automatic via product use / ToS—no separate signature required.

Vendor claimed

Public DPA text for Friendly GmbH; customers asked to contact to sign. Enterprise also references DORA/NDA/SLA packs.

EU AI Act
Not applicable

Product reports AI *referral traffic*; it is not marketed as a high-risk AI system provider.

Not applicable

Web analytics SaaS; not positioned as an AI system product.

ISO 9001Not listed
Vendor claimed

Vendor publishes ISO 9001 certification materials alongside ISO 27001.

Considerations & known limitations: Analyzati vs Friendly Analytics
Considerations & known limitationsLogo: AnalyzatiAnalyzatiLogo: Friendly AnalyticsFriendly Analytics
AWS and US-group subprocessors
Medium

Measurement app is on AWS Paris; account path also uses Stripe, Freshworks, AWS email, and hCaptcha. EU regions reduce some transfer friction but do not erase US-group provider diligence for many public-sector and bank questionnaires.

Not listed
No public ISO/SOC or independent audit
Medium

Security claims rely on vendor documentation (HTTPS, hashing, firewalls, backups). Organisations with mandatory cert evidence will need vendor outreach or a different shortlist.

Not listed
No multi-day visitor identity
Low

Daily salt rotation blocks persistent uniques. Expect gaps vs Google Analytics for returning users, frequency, and retention—by design.

Not listed
SaaS lock-in / no self-host
Low

No self-host edition found. Exit requires export/API migration to another tool; confirm export completeness in a trial.

Not listed
Exact registry name not on marketing pages
Low

Vendor states Barcelona incorporation but public pages reviewed did not display a full Spanish company registration string—collect CIF/NIF and full legal name during contracting.

Not listed
US company-operation subprocessorsNot listed
Medium

Support, email/calendar, payments, CRM/docs, and help-docs edge use US-headquartered SaaS even though Analytics visitor data hosts are Swiss. Material for DPIAs that demand zero US processors in any vendor process.

Cookie features can reintroduce consent needsNot listed
Low

Default is cookieless, but enabling cookie-based Matomo capabilities may require banners for EU visitors—configuration discipline required.

Small Swiss operator dependencyNot listed
Low

Seven-person-scale Open Startup; mitigations include Matomo portability and open financial transparency, but capacity and roadmap still depend on a small firm.

Certifications vendor-publishedNot listed
Low

ISO 27001/9001 are claimed with PDFs on the vendor site; procurement should verify certificate validity with the issuing body.

Do not conflate with Friendly AutomateNot listed
Medium

Automate uses AWS for email sending. Scope assessments to Analytics-only subprocessors unless you also buy Automate.

Fit

Analyzati

Best fit when

  • Marketing sites and content properties that need page views, referrers, device mix, and city-level geo without analytics cookies
  • Teams replacing Google Analytics primarily for privacy/consent simplification rather than advanced product analytics
  • Agencies or freelancers who want multi-site hosted analytics with a freemium entry path
  • Buyers who want a published DPA and Spanish/EU legal entity on the order form
  • Content teams tracking discovery from AI assistants alongside classic channels

Poor fit when

  • Product or growth teams that require funnels, multi-day retention, cohorts, or cross-device identity
  • Organisations that mandate open-source code or self-hosted deployment
  • Procurement that will not accept AWS (US-group) or other US SaaS subprocessors even in EU regions
  • Security questionnaires that demand public ISO 27001 / SOC 2 reports or independent no-logs audits
  • Use cases needing session replay, heatmaps, or advertising audience export

Consider instead when

  • When: You need open-source analytics you can self-host and audit

    Consider: Plausible Analytics (self-host option) or Matomo

    Analyzati is SaaS-only with no public source release found.

  • When: You want a comparable cookie-free European SaaS peer for side-by-side trials

    Consider: Plausible Analytics or Simple Analytics

    Compare AI-referrer and geo depth, DPA wording, and hosting/subprocessor lists in each trial.

  • When: You need full-stack product analytics and advertising linkage

    Consider: Google Analytics (incumbent) or a dedicated product analytics suite

    Analyzati deliberately collects a minimal metric set and does not sell ad-tech profiles.

Friendly Analytics

Best fit when

  • Teams that want Matomo's full feature set without self-hosting ops burden
  • Swiss and EU organizations prioritizing CH product residency (Infomaniak + CH backups)
  • Sites aiming for cookieless measurement under default privacy configuration
  • Marketing teams needing heatmaps, funnels, ecommerce, and ad conversion export without Google Analytics
  • Enterprises needing DPA/DORA/SLA paperwork, SSO, or dedicated instances

Poor fit when

  • Buyers who only need lightweight pageview analytics and prefer a free tier (see Plausible-class tools)
  • Teams that must self-operate every component with no SaaS operator in the path
  • Orgs that require zero US-headquartered tools anywhere in the vendor's company stack (support/billing SaaS is disclosed)
  • Use cases outside web/app analytics (Friendly Automate is a different product with different subprocessors)

Consider instead when

  • When: You want a minimal, open-source, cookieless counter with simpler SaaS UX

    Consider: Plausible Analytics

    Less Matomo plugin depth; different hosting/operator story (Estonia).

  • When: You need German enterprise analytics with long public-sector track record

    Consider: etracker

    Different stack (not Matomo); compare cookieless claims and contracts directly.

  • When: You prefer a modern EU analytics product with open-source core and lean UI

    Consider: Pirsch Analytics

    Germany-based; trade Matomo feature breadth for a different product surface.

  • When: You already run Matomo well and only need software, not a Swiss operator

    Consider: Self-hosted Matomo

    Maximum control; you own privacy config, updates, and hosting risk.

Open questions for due diligence

Analyzati

  • What is the full Spanish legal entity name and company registry identifier for the order form?
  • Is a current written subprocessor list available beyond privacy-policy mentions (including backup regions and any CDN)?
  • Can the vendor provide ISO/SOC evidence or a third-party penetration test under NDA?
  • What is the analytics data retention window per plan, and what does the API export include?
  • Which governing law and venue apply under the current Terms of Service?

Friendly Analytics

  • Will the signed DPA and order form pin hosting to Switzerland only, or allow EU/on-prem variants?
  • Which company subprocessors (HelpScout, Google Workspace, Stripe, etc.) receive which categories of customer personal data in practice?
  • Can the current ISO 27001 certificate be validated against the certification body's public register (scope, dates, sites)?
  • For enterprise: what is the RPO/RTO and whether backups remain exclusively in Switzerland?
  • If both Analytics and Automate are purchased, how are subprocessors and data paths segmented contractually?