Compare Analyzati and Piwik PRO on capabilities, jurisdiction, assurance, and fit for European buyers.
Both listed as alternatives to: Google Analytics, Matomo
Spain· Web Analytics
Needs review
Shortlist when you want Spanish/EU-legal SaaS web analytics with cookie-free daily uniques, city geo, AI referral views, and a public DPA—without self-hosting. Skip when you need open source, on-prem, multi-day retention/cohorts, or certified ISO/SOC evidence; consider Plausible Analytics or Matomo instead.
Poland· Web Analytics
Needs review
Shortlist Piwik PRO when you need a managed European analytics controller with integrated consent, tagging, and real-time data activation—and you can accept cloud residency on Azure and/or Elastx. Skip when you require open-source self-hosting (consider Matomo or Friendly Analytics) or only need a minimal cookieless counter (Plausible, Simple Analytics).
Highlighted rows differ between the two products.
| Feature | Analyzati | Piwik PRO |
|---|---|---|
| Country of origin | Spain | Poland |
| Category | Web Analytics | Web Analytics |
| Open source | No | No |
| Self-hosted | No | No |
| Headquarters | Spain | Poland |
| Legal entity | Incorporated in Barcelona, Spain (exact legal name not published on pages reviewed) | Piwik PRO SA (Wrocław); affiliates Piwik PRO LLC (New York), Piwik PRO GmbH (Berlin) |
| Governing law | Spain / EU (GDPR referenced; confirm governing law clause in Terms) | Not listed |
| US parent / control | No known US parent | No known US parent |
| CLOUD Act exposure (indicative) | Medium | Medium |
| Hosting / residency | Visitor/app data: AWS in Paris (vendor). Marketing site: Namecheap in Amsterdam. Backups described as EU. Other subprocessors named in privacy materials: Stripe (payments), AWS (email), Freshworks (support), hCaptcha (registration). | Customer-selectable regions: Microsoft Azure public cloud (US, Netherlands, Germany, Hong Kong) and Elastx (Sweden, EU-operated). Enterprise private cloud: 60+ Azure regions plus Elastx. Business plan marketing highlights Swedish EU-operated hosting. No classic customer self-host. |
| Summary | Spanish cookie-free web analytics SaaS: real-time traffic, city-level geo, AI referral sources, and event tracking without cookies, stored IPs, or fingerprints. | Polish privacy-first analytics suite combining web and mobile analytics, tag management, consent management, and real-time data activation for regulated teams. |
| Tags |
| At a glance | Analyzati | Piwik PRO |
|---|---|---|
| HQ / entity | Barcelona, Spain (EU entity claimed; exact registry name not on public pages reviewed) | Not listed |
| Product type | Hosted web analytics SaaS | Commercial analytics suite (SaaS / private cloud) |
| Open source | No | No (closed source since split from Matomo lineage) |
| Self-host | No | No classic on-prem; public or private cloud only |
| App hosting | AWS, Paris (vendor claim) | Not listed |
| Commercial model | Freemium + pageview / site-count tiers | Business subscription + trial; Enterprise custom |
| DPA | Public; accepted via Terms of Service | Not listed |
| HQ | Not listed | Wrocław, Poland (Piwik PRO SA) |
| Hosting (public) | Not listed | Azure US/NL/DE/HK; Elastx Sweden |
| Modules | Not listed | Analytics, Tag Manager, Consent Manager, Data Activation |
| Key capabilities | Analyzati | Piwik PRO |
|---|---|---|
| Cookie-free tracking | Yes | Not listed |
| EU entity (Spain) | Yes | Not listed |
| App on AWS Paris | Yes | Not listed |
| Public DPA | Yes | Not listed |
| AI referral insights | Yes | Not listed |
| SaaS only | Yes | Not listed |
| EU HQ (Poland) | Not listed | Yes |
| Analytics + tags + consent | Not listed | Yes |
| Data activation | Not listed | Yes |
| EU hosting options | Not listed | Yes |
| ISO 27001 / SOC 2 (claimed) | Not listed | Yes |
| HIPAA BAA (Enterprise) | Not listed | Yes |
Cookie-free uniques with daily rotating salt
Counts daily unique visitors by hashing IP + User-Agent + domain with a salt that is destroyed every 24 hours. No cookies, localStorage, or device-persistent IDs; raw IP and full UA are not stored. Trade-off: no multi-day retention or new-vs-returning series.
City-level geo without retained IPs
Derives continent, country, region, and city for maps and rankings from the request IP, then discards the IP. Useful for market mix reporting when you do not need ISP- or coordinate-level precision.
AI referral and channel acquisition views
Breaks down how visitors arrive—search, referring sites, and AI assistants such as ChatGPT, Perplexity, Gemini, and Claude—so content teams can see discovery outside classic SEO referrers.
Real-time dashboard, events, export, and API
Live visitor activity, page performance, device/browser/OS stats, custom events and campaigns, weekly email reports, data export, and API access on published plans. Integrations include a WordPress plugin and Google Tag Manager snippet placement.
Public B2B DPA with processor role
A published Data Processing Agreement (effective August 2022) treats Analyzati as processor and the customer as controller for visitor measurement. Acceptance is tied to product use under the Terms of Service rather than a bespoke countersignature workflow.
ClickHouse-backed web & mobile analytics
Session-level web and app analytics with custom reports, funnels, user flows, multi-channel attribution, and calculated metrics. Vendor positions unsampled collection by default with optional sampling for extreme volumes, plus raw export via API, files, and BigQuery—aimed at teams that outgrew pre-aggregated MySQL-style tools.
Anonymous tracking when cookies are declined
Collect privacy-safe behavioral signals without identifiers when visitors refuse cookies or when you configure limited measurement modes. Marketing can still see channels and journeys; personal identifiers and full attribution wait for a valid lawful basis—useful under GDPR/ePrivacy friction.
Integrated Consent Manager and Tag Manager
Capture and store consent, drive tag firing from preferences, and handle visitor data requests in-product. Optional Cookie Information CMP and server-side tagging paths reduce the usual glue code between a separate CMP, GTM, and analytics.
Data Activation for real-time personalization
Segment audiences from live behavior and trigger on-site or outbound actions without exporting every event to a second CDP first. Suited to regulated marketers who want activation on first-party data they control.
Selectable cloud residency (Azure + Elastx)
Public cloud regions include Azure US, NL, DE, and HK plus Elastx Sweden; Enterprise private cloud spans 60+ Azure regions and Elastx. Business plan marketing highlights EU-operated Swedish hosting—pick region in procurement, not after go-live.
Regulated-industry packaging (GDPR tooling, HIPAA BAA path)
DPA available on Business signup; Enterprise adds private cloud, higher action volumes, SLAs, and HIPAA Business Associate Agreements for healthcare marketing analytics. Vendor also claims ISO 27001 and SOC 2—request current certificates in diligence.
| Assurance & compliance | Analyzati | Piwik PRO |
|---|---|---|
| Independent security / no-logs audit | Not found No public third-party audit PDF or no-logs attestation found on official pages reviewed. | Partial Vendor states regular external security audits and SOC 2/ISO programs; no public third-party no-logs-style audit PDF reviewed for this draft. Request reports under NDA. |
| ISO 27001 | Not found No ISO 27001 certificate claim located on homepage, privacy, or DPA pages. | Vendor claimed Asserted on privacy-security and platform pages; certificate not independently re-verified against a public registry for this entry. |
| SOC 2 / SOC 3 | Not found No SOC 2/3 report claim found on public trust materials. | Vendor claimed Vendor claims SOC 2 (comparison content references type II) and SOC 2-certified infrastructure; obtain current report in diligence. |
| GDPR / EU data protection | Vendor claimed EU entity (Barcelona); public GDPR/PECR/CCPA compliance pages; anonymisation design documented; controller/processor roles in DPA. | Vendor claimed EU legal entity, residency options, consent tooling, anonymization, and DPA. Compliance depends on customer configuration and purposes. |
| US CLOUD Act exposure (indicative) | Partial Spanish/EU vendor with no known US parent, but application hosting on AWS (Paris) and US-group subprocessors (Stripe, Freshworks, AWS email, hCaptcha). Residency ≠ ownership. Not legal advice. | Partial No known US parent (Polish SA). Medium exposure due to Microsoft Azure as public/private cloud subprocessor and optional US region; Elastx Sweden is EU-operated alternative. Not legal advice. |
| Data processing agreement (B2B) | Vendor claimed Public DPA effective 18 Aug 2022; vendor says acceptance is automatic via product use / ToS—no separate signature required. | Vendor claimed Business DPA linked from Business plan signup (piwik.pro/business-dpa/); Enterprise contracts expand terms. |
| EU AI Act | Not applicable Product reports AI *referral traffic*; it is not marketed as a high-risk AI system provider. | Not applicable Analytics/activation platform; not marketed as an AI system provider. Customer AI use of exported data is out of product scope. |
| HIPAA / BAA | Not listed | Vendor claimed HIPAA-oriented offering with BAA on Enterprise path per vendor; not available on all plan tiers. |
| Considerations & known limitations | Analyzati | Piwik PRO |
|---|---|---|
| AWS and US-group subprocessors | Medium Measurement app is on AWS Paris; account path also uses Stripe, Freshworks, AWS email, and hCaptcha. EU regions reduce some transfer friction but do not erase US-group provider diligence for many public-sector and bank questionnaires. | Not listed |
| No public ISO/SOC or independent audit | Medium Security claims rely on vendor documentation (HTTPS, hashing, firewalls, backups). Organisations with mandatory cert evidence will need vendor outreach or a different shortlist. | Not listed |
| No multi-day visitor identity | Low Daily salt rotation blocks persistent uniques. Expect gaps vs Google Analytics for returning users, frequency, and retention—by design. | Not listed |
| SaaS lock-in / no self-host | Low No self-host edition found. Exit requires export/API migration to another tool; confirm export completeness in a trial. | Not listed |
| Exact registry name not on marketing pages | Low Vendor states Barcelona incorporation but public pages reviewed did not display a full Spanish company registration string—collect CIF/NIF and full legal name during contracting. | Not listed |
| US-group cloud (Azure) in hosting path | Not listed | Medium Even with EU region selection, Azure introduces US-group infrastructure risk. Pin region, review SCCs/subprocessors, and escalate if policy forbids US cloud groups entirely. |
| Closed source and no classic self-host | Not listed | Medium Cannot independently audit full source or run fully air-gapped on customer iron. Private cloud still involves vendor-managed stack on Azure/Elastx. |
| Certifications not independently verified here | Not listed | Low ISO 27001, SOC 2, and HIPAA are vendor-claimed. Request certificates/reports and BAA text before treating them as assured. |
| Paid plans only after Core sunset | Not listed | Low Free Core has been discontinued; evaluation relies on trials and paid Business/Enterprise metering by actions/domains. |
| Compliance depends on configuration | Not listed | Medium Anonymous modes and CNIL exemption require correct setup and purpose limitation. Misconfiguration can recreate the same legal exposure teams left GA to avoid. |
When: You need open-source analytics you can self-host and audit
Consider: Plausible Analytics (self-host option) or Matomo
Analyzati is SaaS-only with no public source release found.
When: You want a comparable cookie-free European SaaS peer for side-by-side trials
Consider: Plausible Analytics or Simple Analytics
Compare AI-referrer and geo depth, DPA wording, and hosting/subprocessor lists in each trial.
When: You need full-stack product analytics and advertising linkage
Consider: Google Analytics (incumbent) or a dedicated product analytics suite
Analyzati deliberately collects a minimal metric set and does not sell ad-tech profiles.
When: You need open-source code and true on-premises control
Consider: Matomo (self-host) or Friendly Analytics / Matomo by Stackhero for managed Matomo
Piwik PRO is proprietary cloud/private-cloud only.
When: You want minimal, cookieless EU analytics without enterprise suite complexity
Consider: Plausible Analytics or Simple Analytics
Far smaller feature surface; no HIPAA/CDP-style activation packaging.
When: You need a German enterprise analytics vendor with long public-sector presence
Consider: etracker
Different product depth and packaging—compare consent tooling and activation needs.