Analyzati vs Simple Analytics

Compare Analyzati and Simple Analytics on capabilities, jurisdiction, assurance, and fit for European buyers.

Both listed as alternatives to: Fathom Analytics, Google Analytics, Matomo

Logo: Analyzati

Analyzati

Spain· Web Analytics

Needs review

Shortlist when you want Spanish/EU-legal SaaS web analytics with cookie-free daily uniques, city geo, AI referral views, and a public DPA—without self-hosting. Skip when you need open source, on-prem, multi-day retention/cohorts, or certified ISO/SOC evidence; consider Plausible Analytics or Matomo instead.

Cookie-free trackingEU entity (Spain)App on AWS ParisPublic DPAAI referral insightsSaaS only
Logo: Simple Analytics

Simple Analytics

Netherlands· Web Analytics

Needs review

Shortlist when you need EU-operated, cookieless web metrics without visitor IDs or stored IPs—especially as a visibility layer beside GA4. Skip when you need self-host/open-source control, session replay, or identity-rich marketing analytics; consider Plausible Analytics or Matomo/Piwik PRO instead.

Cookieless analyticsNo stored IPs / visitor IDsEU-hosted (NL focus)Dutch B.V.Works beside GA4API & BI export
Analyzati vs Simple Analytics: Snapshot
FeatureLogo: AnalyzatiAnalyzatiLogo: Simple AnalyticsSimple Analytics
Country of originSpainNetherlands
CategoryWeb AnalyticsWeb Analytics
Open sourceNoNo
Self-hostedNoNo
HeadquartersSpainNetherlands
Legal entityIncorporated in Barcelona, Spain (exact legal name not published on pages reviewed)Simple Analytics B.V., Amsterdam (KVK 88269922, VAT NL864560011B01)
Governing lawSpain / EU (GDPR referenced; confirm governing law clause in Terms)Netherlands / EU
US parent / controlNo known US parentNo known US parent
CLOUD Act exposure (indicative)MediumLow
Hosting / residencyVisitor/app data: AWS in Paris (vendor). Marketing site: Namecheap in Amsterdam. Backups described as EU. Other subprocessors named in privacy materials: Stripe (payments), AWS (email), Freshworks (support), hCaptcha (registration).Analytics data claimed processed in the Netherlands/EU. Public subprocessors (May 2026): Worldstream + Leaseweb (NL hosting), Hetzner (DE hosting), Bunny (SI CDN/DNS), Hyperping (FR uptime), Intention (NL domains). Vendor states this list covers website visitor-data subprocessors only—not payments/internal ops.
Summary

Spanish cookie-free web analytics SaaS: real-time traffic, city-level geo, AI referral sources, and event tracking without cookies, stored IPs, or fingerprints.

Dutch privacy-first web analytics SaaS: cookieless pageviews and campaigns without visitor IDs or stored IPs, EU-hosted by Simple Analytics B.V. in Amsterdam.

Tags
At a glance: Analyzati vs Simple Analytics
At a glanceLogo: AnalyzatiAnalyzatiLogo: Simple AnalyticsSimple Analytics
HQ / entityBarcelona, Spain (EU entity claimed; exact registry name not on public pages reviewed)Not listed
Product typeHosted web analytics SaaSHosted web analytics SaaS (not self-hosted)
Open sourceNoNo (proprietary)
Self-hostNoNot listed
App hostingAWS, Paris (vendor claim)Not listed
Commercial modelFreemium + pageview / site-count tiersFree hobby tier + usage-based paid + enterprise
DPAPublic; accepted via Terms of ServiceNot listed
HQNot listedAmsterdam, Netherlands
Legal entityNot listedSimple Analytics B.V. (KVK 88269922)
FoundedNot listed2018
Data focusNot listedCookieless, non-identifying aggregate metrics
Primary hostingNot listedNetherlands (EU); see subprocessors
Key capabilities: Analyzati vs Simple Analytics
Key capabilitiesLogo: AnalyzatiAnalyzatiLogo: Simple AnalyticsSimple Analytics
Cookie-free trackingYesNot listed
EU entity (Spain)YesNot listed
App on AWS ParisYesNot listed
Public DPAYesNot listed
AI referral insightsYesNot listed
SaaS onlyYesNot listed
Cookieless analyticsNot listedYes
No stored IPs / visitor IDsNot listedYes
EU-hosted (NL focus)Not listedYes
Dutch B.V.Not listedYes
Works beside GA4Not listedYes
API & BI exportNot listedYes

Analyzati

  • Cookie-free uniques with daily rotating salt

    Counts daily unique visitors by hashing IP + User-Agent + domain with a salt that is destroyed every 24 hours. No cookies, localStorage, or device-persistent IDs; raw IP and full UA are not stored. Trade-off: no multi-day retention or new-vs-returning series.

  • City-level geo without retained IPs

    Derives continent, country, region, and city for maps and rankings from the request IP, then discards the IP. Useful for market mix reporting when you do not need ISP- or coordinate-level precision.

  • AI referral and channel acquisition views

    Breaks down how visitors arrive—search, referring sites, and AI assistants such as ChatGPT, Perplexity, Gemini, and Claude—so content teams can see discovery outside classic SEO referrers.

  • Real-time dashboard, events, export, and API

    Live visitor activity, page performance, device/browser/OS stats, custom events and campaigns, weekly email reports, data export, and API access on published plans. Integrations include a WordPress plugin and Google Tag Manager snippet placement.

  • Public B2B DPA with processor role

    A published Data Processing Agreement (effective August 2022) treats Analyzati as processor and the customer as controller for visitor measurement. Acceptance is tied to product use under the Terms of Service rather than a bespoke countersignature workflow.

Simple Analytics

  • Cookieless metrics without visitor IDs or stored IPs

    Collects pageviews, referrers, UTMs, time-on-page, and scroll depth without cookies, localStorage, fingerprints, or stored IP addresses. Unique visits are inferred from referrer hostname matching, not device IDs. Built for sites that want analytics without a consent banner solely for this tool—and without building visitor profiles.

  • Country from time zone, not geo-IP

    Country-level location is derived from the visitor’s IANA time zone rather than IP lookup, so IPs can be dropped end-to-end. City/region is not available; some border and multi-country zones can mis-tag. Useful when legal teams reject IP-based geolocation even when hashed.

  • Cookieless layer beside GA4 and BI stacks

    Positioned to measure traffic lost when consent is denied in cookie-based tools. Import historical Google Analytics data; export via Stats/Export APIs and integrations toward Looker Studio, Power BI, and warehouse workflows so analysts can compare consented vs observed traffic without replacing every GA report.

  • Lightweight script, events, goals, and ad-blocker bypass

    Vendor claims a single script under 5 KB. Supports events, automated events (e.g. downloads, outbound links), goals, filters, email reports, and robot/referrer-spam controls. Ad-blocker resilience is via first-party proxy or custom subdomain CNAME—not automatic immunity for every blocklist.

  • Team access, SSO, and EU-operated SaaS

    Hosted product from Simple Analytics B.V. (Amsterdam) with role-oriented team features on higher tiers and documented SAML SSO for Okta and Microsoft Entra. No official self-host edition—operations and residency follow the vendor’s EU infrastructure and public subprocessor list.

Assurance & compliance: Analyzati vs Simple Analytics
Assurance & complianceLogo: AnalyzatiAnalyzatiLogo: Simple AnalyticsSimple Analytics
Independent security / no-logs audit
Not found

No public third-party audit PDF or no-logs attestation found on official pages reviewed.

Not found

Searched security/trust pages; no public independent audit PDF found.

ISO 27001
Not found

No ISO 27001 certificate claim located on homepage, privacy, or DPA pages.

Not found

No ISO 27001 certificate claimed on primary security pages.

SOC 2 / SOC 3
Not found

No SOC 2/3 report claim found on public trust materials.

Partial

Vendor states SOC 2 Type II is in progress / coming soon—not completed certification at research time.

GDPR / EU data protection
Vendor claimed

EU entity (Barcelona); public GDPR/PECR/CCPA compliance pages; anonymisation design documented; controller/processor roles in DPA.

Vendor claimed

Dutch EU entity; vendor claims no personal data collection (no cookies/IPs/visitor IDs) and GDPR-friendly design. Not legal advice—confirm for your processing facts.

US CLOUD Act exposure (indicative)
Partial

Spanish/EU vendor with no known US parent, but application hosting on AWS (Paris) and US-group subprocessors (Stripe, Freshworks, AWS email, hCaptcha). Residency ≠ ownership. Not legal advice.

Partial

EU entity, no known US parent, public analytics subprocessors are EU-based (Worldstream, Leaseweb, Hetzner, Bunny, Hyperping). Residual risk remains; reconcile Cloudflare mention on GDPR page vs Bunny on subprocessors. Assessment by EuropeanStack—not a vendor 'safe' claim. Not legal advice.

Data processing agreement (B2B)
Vendor claimed

Public DPA effective 18 Aug 2022; vendor says acceptance is automatic via product use / ToS—no separate signature required.

Partial

Vendor says DPA usually not required (no personal data) but will review/sign customer-provided DPAs aligned with architecture.

EU AI Act
Not applicable

Product reports AI *referral traffic*; it is not marketed as a high-risk AI system provider.

Not applicable

Web analytics product; not marketed as an AI system subject to AI Act high-risk regimes.

Considerations & known limitations: Analyzati vs Simple Analytics
Considerations & known limitationsLogo: AnalyzatiAnalyzatiLogo: Simple AnalyticsSimple Analytics
AWS and US-group subprocessors
Medium

Measurement app is on AWS Paris; account path also uses Stripe, Freshworks, AWS email, and hCaptcha. EU regions reduce some transfer friction but do not erase US-group provider diligence for many public-sector and bank questionnaires.

Not listed
No public ISO/SOC or independent audit
Medium

Security claims rely on vendor documentation (HTTPS, hashing, firewalls, backups). Organisations with mandatory cert evidence will need vendor outreach or a different shortlist.

Not listed
No multi-day visitor identity
Low

Daily salt rotation blocks persistent uniques. Expect gaps vs Google Analytics for returning users, frequency, and retention—by design.

Not listed
SaaS lock-in / no self-host
Low

No self-host edition found. Exit requires export/API migration to another tool; confirm export completeness in a trial.

Medium

No official self-host edition. Orgs with air-gap or on-prem telemetry mandates need Plausible self-host, Matomo, or similar instead.

Exact registry name not on marketing pages
Low

Vendor states Barcelona incorporation but public pages reviewed did not display a full Spanish company registration string—collect CIF/NIF and full legal name during contracting.

Not listed
SOC 2 not yet completeNot listed
Medium

SOC 2 Type II is publicly 'in progress'. Enterprise security reviews may block until a report is available or accept compensating controls (minimal data + EU hosts).

Referrer-based uniques and timezone countryNot listed
Low

Uniques are not durable visitor IDs; country is timezone-based with known mis-tag edge cases. Totals will differ from GA client-ID models—set stakeholder expectations.

CDN/DDoS vendor documentation inconsistencyNot listed
Low

Subprocessors list Bunny (EU) for CDN/DNS; GDPR page still references Cloudflare for CDN/DDoS. Ask for current edge path before asserting zero US-group infrastructure touch.

Small independent operatorNot listed
Low

Public About page describes a three-person self-funded team. Fine for many sites; large enterprises should assess continuity, support SLAs, and roadmap capacity explicitly.

Fit

Analyzati

Best fit when

  • Marketing sites and content properties that need page views, referrers, device mix, and city-level geo without analytics cookies
  • Teams replacing Google Analytics primarily for privacy/consent simplification rather than advanced product analytics
  • Agencies or freelancers who want multi-site hosted analytics with a freemium entry path
  • Buyers who want a published DPA and Spanish/EU legal entity on the order form
  • Content teams tracking discovery from AI assistants alongside classic channels

Poor fit when

  • Product or growth teams that require funnels, multi-day retention, cohorts, or cross-device identity
  • Organisations that mandate open-source code or self-hosted deployment
  • Procurement that will not accept AWS (US-group) or other US SaaS subprocessors even in EU regions
  • Security questionnaires that demand public ISO 27001 / SOC 2 reports or independent no-logs audits
  • Use cases needing session replay, heatmaps, or advertising audience export

Consider instead when

  • When: You need open-source analytics you can self-host and audit

    Consider: Plausible Analytics (self-host option) or Matomo

    Analyzati is SaaS-only with no public source release found.

  • When: You want a comparable cookie-free European SaaS peer for side-by-side trials

    Consider: Plausible Analytics or Simple Analytics

    Compare AI-referrer and geo depth, DPA wording, and hosting/subprocessor lists in each trial.

  • When: You need full-stack product analytics and advertising linkage

    Consider: Google Analytics (incumbent) or a dedicated product analytics suite

    Analyzati deliberately collects a minimal metric set and does not sell ad-tech profiles.

Simple Analytics

Best fit when

  • Teams measuring traffic lost when consent is denied in cookie-based analytics (GA4/Adobe)
  • Public-sector and regulated sites that need no cookies/IPs/visitor profiles for web stats
  • EU procurement that requires Dutch legal entity + published EU subprocessors for visitor data
  • Agencies/multi-site operators wanting a simple hosted dashboard, reports, and API/BI egress
  • Sites that want essential pageview/referrer/UTM metrics without an analytics-only consent banner

Poor fit when

  • Product analytics needing session replay, heatmaps, or person-level funnels
  • Organizations that must self-host analytics or prefer open-source governance (see Plausible/Matomo)
  • Buyers requiring city/region geolocation accuracy (country is timezone-derived)
  • Teams whose primary need is identity-rich attribution, audiences, and marketing automation inside the analytics suite

Consider instead when

  • When: You need open-source and/or official self-hosting of privacy-first analytics

    Consider: Plausible Analytics (catalog: plausible_analytics) or Matomo

    Simple Analytics is hosted SaaS only; Plausible and Matomo cover self-host paths many security policies require.

  • When: You need a deeper EU enterprise analytics platform with configurable processing and on-prem options

    Consider: Piwik PRO (catalog: piwik_pro)

    Heavier suite and procurement surface than Simple Analytics’ minimal cookieless product.

  • When: You need identity graphs, remarketing audiences, and full marketing analytics depth

    Consider: Google Analytics or Adobe Analytics

    Keep those for consented deep analysis; Simple Analytics is the opposite design tradeoff.

  • When: You want another lightweight EU cookieless tracker and are comparing peers

    Consider: Pirsch Analytics (pirsch_analytics) or Friendly Analytics (friendly_analytics)

    Compare retention, multi-site, SSO, and API maturity rather than GDPR slogans alone.

Open questions for due diligence

Analyzati

  • What is the full Spanish legal entity name and company registry identifier for the order form?
  • Is a current written subprocessor list available beyond privacy-policy mentions (including backup regions and any CDN)?
  • Can the vendor provide ISO/SOC evidence or a third-party penetration test under NDA?
  • What is the analytics data retention window per plan, and what does the API export include?
  • Which governing law and venue apply under the current Terms of Service?

Simple Analytics

  • Is Cloudflare still used for any CDN/DDoS path, or has Bunny fully replaced it for edge services?
  • When will SOC 2 Type II complete, and will the report be available under NDA?
  • What exact data-retention windows apply per plan for your expected traffic volume?
  • Will the vendor sign your standard DPA/SCC pack as-is for public-sector procurement?
  • Are any non-EU subprocessors used for account email, payments, or support that could affect broader vendor risk (visitor analytics list excludes these)?