Compare Analyzati and Insights on capabilities, jurisdiction, assurance, and fit for European buyers.
Both listed as alternatives to: Fathom Analytics, Google Analytics, Matomo
Spain· Web Analytics
Needs review
Shortlist when you want Spanish/EU-legal SaaS web analytics with cookie-free daily uniques, city geo, AI referral views, and a public DPA—without self-hosting. Skip when you need open source, on-prem, multi-day retention/cohorts, or certified ISO/SOC evidence; consider Plausible Analytics or Matomo instead.
Austria· Web Analytics
Needs review
Shortlist when you need cookie-free hosted analytics with first-class custom events for SPAs from an Austrian operator. Skip when you need self-host, public ISO/SOC packs, or infrastructure without Google Firebase—consider Plausible Analytics, Simple Analytics, or Pirsch Analytics instead (or self-hosted Matomo).
Highlighted rows differ between the two products.
| Feature | Analyzati | Insights |
|---|---|---|
| Country of origin | Spain | Austria |
| Category | Web Analytics | Web Analytics |
| Open source | No | Yes |
| Self-hosted | No | No |
| Headquarters | Spain | Austria |
| Legal entity | Incorporated in Barcelona, Spain (exact legal name not published on pages reviewed) | Unsourced Digital OG |
| Governing law | Spain / EU (GDPR referenced; confirm governing law clause in Terms) | Not listed |
| US parent / control | No known US parent | No known US parent |
| CLOUD Act exposure (indicative) | Medium | Medium |
| Hosting / residency | Visitor/app data: AWS in Paris (vendor). Marketing site: Namecheap in Amsterdam. Backups described as EU. Other subprocessors named in privacy materials: Stripe (payments), AWS (email), Freshworks (support), hCaptcha (registration). | Operator: Unsourced Digital OG (Austria). Vendor-documented infrastructure includes Google Firebase—Cloud Functions, Firebase Authentication (customer accounts), and Firebase Hosting—with temporary IP handling described for those Google services. Visitor analytics designed without cookies and without IP storage in DB/logs; still a US-group cloud path for processing/hosting/auth. |
| Summary | Spanish cookie-free web analytics SaaS: real-time traffic, city-level geo, AI referral sources, and event tracking without cookies, stored IPs, or fingerprints. | Austrian privacy-first hosted web analytics: page views and custom events without cookies or stored visitor IPs, with an MIT open-source JS client (backend uses Google Firebase). |
| Tags |
| At a glance | Analyzati | Insights |
|---|---|---|
| HQ / entity | Barcelona, Spain (EU entity claimed; exact registry name not on public pages reviewed) | Not listed |
| Product type | Hosted web analytics SaaS | Hosted privacy web analytics + custom events |
| Open source | No | Not listed |
| Self-host | No | No public self-host option |
| App hosting | AWS, Paris (vendor claim) | Not listed |
| Commercial model | Freemium + pageview / site-count tiers | Free low-volume tier; paid by monthly event/pageview volume |
| DPA | Public; accepted via Terms of Service | Not listed |
| HQ / law | Not listed | Austria (Unsourced Digital OG; Austrian governing law) |
| Client license | Not listed | MIT (insights-js); backend proprietary |
| Known infra | Not listed | Google Firebase (Functions, Auth, Hosting) per vendor docs |
| Key capabilities | Analyzati | Insights |
|---|---|---|
| Cookie-free tracking | Yes | Yes |
| EU entity (Spain) | Yes | Not listed |
| App on AWS Paris | Yes | Not listed |
| Public DPA | Yes | Not listed |
| AI referral insights | Yes | Not listed |
| SaaS only | Yes | Not listed |
| Custom events | Not listed | Yes |
| MIT client (insights-js) | Not listed | Yes |
| Austrian entity | Not listed | Yes |
| Hosted SaaS | Not listed | Yes |
| Firebase data path | Not listed | Yes |
Cookie-free uniques with daily rotating salt
Counts daily unique visitors by hashing IP + User-Agent + domain with a salt that is destroyed every 24 hours. No cookies, localStorage, or device-persistent IDs; raw IP and full UA are not stored. Trade-off: no multi-day retention or new-vs-returning series.
City-level geo without retained IPs
Derives continent, country, region, and city for maps and rankings from the request IP, then discards the IP. Useful for market mix reporting when you do not need ISP- or coordinate-level precision.
AI referral and channel acquisition views
Breaks down how visitors arrive—search, referring sites, and AI assistants such as ChatGPT, Perplexity, Gemini, and Claude—so content teams can see discovery outside classic SEO referrers.
Real-time dashboard, events, export, and API
Live visitor activity, page performance, device/browser/OS stats, custom events and campaigns, weekly email reports, data export, and API access on published plans. Integrations include a WordPress plugin and Google Tag Manager snippet placement.
Public B2B DPA with processor role
A published Data Processing Agreement (effective August 2022) treats Analyzati as processor and the customer as controller for visitor measurement. Acceptance is tied to product use under the Terms of Service rather than a bespoke countersignature workflow.
Cookie-free page views and user flows
Tracks bounce rate, referrers, visits, and user-flow style page statistics without setting analytics cookies, so sites can avoid cookie banners driven solely by analytics. Script init plus trackPages() is the usual path for SPAs.
Custom and cancelable event tracking
insights-js supports named events with string parameters, unique-per-session flags, parameter-only updates, and remove/cancel for long-lived events (e.g. subscribe then unsubscribe). Built for product and funnel metrics, not pageviews only.
MIT open-source TypeScript client
The browser/npm client (insights-js) is MIT-licensed on GitHub with TypeScript types and helpers for locale, screen type, path, referrer, and duration buckets. Supports React, Angular, Vue, UMD script, and multi-project App instances. Backend remains proprietary SaaS.
Visitor anonymization pipeline (vendor-described)
Vendor docs: IPs hashed only in RAM for fraud checks (not stored in DB or logs); user agents reduced to browser/OS; optional screen sizes rounded to 50px; Do Not Track honoured. Confirm fit with your DPO—anonymous design is not a legal certification.
Developer-oriented integration
One-minute script install or npm package; docs cover multi-project tracking, ignoreErrors/disabled flags for production environments, and hash/search options on page paths. Lightweight client positioned against heavier GA-style tags.
| Assurance & compliance | Analyzati | Insights |
|---|---|---|
| Independent security / no-logs audit | Not found No public third-party audit PDF or no-logs attestation found on official pages reviewed. | Not found Vendor describes no IP storage in DB/logs and RAM-only hashing; no public third-party audit PDF found. |
| ISO 27001 | Not found No ISO 27001 certificate claim located on homepage, privacy, or DPA pages. | Not found No public certificate on getinsights.io at research time. |
| SOC 2 / SOC 3 | Not found No SOC 2/3 report claim found on public trust materials. | Not found No public SOC report found. |
| GDPR / EU data protection | Vendor claimed EU entity (Barcelona); public GDPR/PECR/CCPA compliance pages; anonymisation design documented; controller/processor roles in DPA. | Vendor claimed Austrian entity; privacy policy and data-collection docs; cookie-free/no-stored-IP design for visitors. Firebase/Google processing still requires transfer/DPA diligence. |
| US CLOUD Act exposure (indicative) | Partial Spanish/EU vendor with no known US parent, but application hosting on AWS (Paris) and US-group subprocessors (Stripe, Freshworks, AWS email, hCaptcha). Residency ≠ ownership. Not legal advice. | Partial EU entity / no known US parent, but Google Firebase (US-group) used for Cloud Functions, Auth, and Hosting per vendor data page. Indicative medium exposure. Not legal advice. |
| Data processing agreement (B2B) | Vendor claimed Public DPA effective 18 Aug 2022; vendor says acceptance is automatic via product use / ToS—no separate signature required. | Not found No standalone public DPA page found; request from contact@getinsights.io for B2B use. |
| EU AI Act | Not applicable Product reports AI *referral traffic*; it is not marketed as a high-risk AI system provider. | Not applicable Web analytics product, not an AI system product page. |
| Considerations & known limitations | Analyzati | Insights |
|---|---|---|
| AWS and US-group subprocessors | Medium Measurement app is on AWS Paris; account path also uses Stripe, Freshworks, AWS email, and hCaptcha. EU regions reduce some transfer friction but do not erase US-group provider diligence for many public-sector and bank questionnaires. | Not listed |
| No public ISO/SOC or independent audit | Medium Security claims rely on vendor documentation (HTTPS, hashing, firewalls, backups). Organisations with mandatory cert evidence will need vendor outreach or a different shortlist. | Not listed |
| No multi-day visitor identity | Low Daily salt rotation blocks persistent uniques. Expect gaps vs Google Analytics for returning users, frequency, and retention—by design. | Not listed |
| SaaS lock-in / no self-host | Low No self-host edition found. Exit requires export/API migration to another tool; confirm export completeness in a trial. | Not listed |
| Exact registry name not on marketing pages | Low Vendor states Barcelona incorporation but public pages reviewed did not display a full Spanish company registration string—collect CIF/NIF and full legal name during contracting. | Not listed |
| Google Firebase on critical path | Not listed | High Vendor documents Firebase Cloud Functions, Auth, and Hosting. Anonymous visitor design does not remove US-group cloud dependency for hosting/auth/processing—material for sovereignty-sensitive buyers. |
| No public independent audit or certs | Not listed | Medium No ISO 27001, SOC 2, or third-party no-logs audit found on the public site. Rely on vendor claims plus your own review of the open client. |
| Client open source only; no self-host | Not listed | Medium insights-js is MIT; dashboard/backend are closed SaaS. You cannot run the full product on your infrastructure. |
| Small team / continuity | Not listed | Medium Product presented as built by two freelance developers under Unsourced Digital OG. Assess vendor longevity and support SLAs for business-critical analytics. |
| Bounce/unique metrics need SPA routing | Not listed | Low Client docs: trackPages bounce and unique views expect a client-side router and do not use cookies/localStorage; multi-page full reloads can skew metrics. |
When: You need open-source analytics you can self-host and audit
Consider: Plausible Analytics (self-host option) or Matomo
Analyzati is SaaS-only with no public source release found.
When: You want a comparable cookie-free European SaaS peer for side-by-side trials
Consider: Plausible Analytics or Simple Analytics
Compare AI-referrer and geo depth, DPA wording, and hosting/subprocessor lists in each trial.
When: You need full-stack product analytics and advertising linkage
Consider: Google Analytics (incumbent) or a dedicated product analytics suite
Analyzati deliberately collects a minimal metric set and does not sell ad-tech profiles.
When: You want simple hosted EU privacy page analytics with a strong Plausible-style product footprint
Consider: Plausible Analytics
Compare event depth: Insights markets custom events as a core differentiator vs simpler page-focused tools.
When: You want cookie-free analytics with an explicit privacy brand and different commercial packaging
Consider: Simple Analytics
Verify each vendor's hosting and subprocessor pages side by side.
When: You prefer a German peer privacy analytics product
Consider: Pirsch Analytics
Compare event features, regions, and legal docs for your DPA process.
When: You need full control of the stack or on-prem processing
Consider: Self-hosted Matomo (or similar open analytics)
Higher ops cost; no dependency on Insights SaaS or Firebase.