Compare digistats Analytics and Simple Analytics on capabilities, jurisdiction, assurance, and fit for European buyers.
Both listed as alternatives to: Fathom Analytics, Google Analytics, Matomo
Switzerland· Web Analytics
Needs review
Shortlist digistats when you want managed Swiss cookieless analytics with multi-site, events, API, and CSV on every listed tier and you accept SaaS-only operations. Skip when you need self-host/OSS, GA4-depth product analytics, or published ISO 27001/SOC 2—consider Plausible, Simple Analytics, Pirsch, or Matomo instead.
Netherlands· Web Analytics
Needs review
Shortlist when you need EU-operated, cookieless web metrics without visitor IDs or stored IPs—especially as a visibility layer beside GA4. Skip when you need self-host/open-source control, session replay, or identity-rich marketing analytics; consider Plausible Analytics or Matomo/Piwik PRO instead.
Highlighted rows differ between the two products.
| Feature | digistats Analytics | Simple Analytics |
|---|---|---|
| Country of origin | Switzerland | Netherlands |
| Category | Web Analytics | Web Analytics |
| Open source | No | No |
| Self-hosted | No | No |
| Headquarters | Switzerland | Netherlands |
| Legal entity | digistats Analytics Ltd., Täfernstrasse 2A, CH-5405 Dättwil AG (UID CHE-296.235.462) | Simple Analytics B.V., Amsterdam (KVK 88269922, VAT NL864560011B01) |
| Governing law | Swiss law; venue Bremgarten AG (per AGB) | Netherlands / EU |
| US parent / control | No known US parent | No known US parent |
| CLOUD Act exposure (indicative) | Medium | Low |
| Hosting / residency | Privacy policy: customer data processed/stored in Switzerland, not in the USA or outside the EU; pricing lists Switzerland Data Center. Hosting provider legal name not in a public subprocessor list. Payment subprocessors: Stripe, Inc. (USA) and Coinbase (crypto; German entity listed in AGB). | Analytics data claimed processed in the Netherlands/EU. Public subprocessors (May 2026): Worldstream + Leaseweb (NL hosting), Hetzner (DE hosting), Bunny (SI CDN/DNS), Hyperping (FR uptime), Intention (NL domains). Vendor states this list covers website visitor-data subprocessors only—not payments/internal ops. |
| Summary | Swiss cookieless web analytics SaaS from digistats Analytics Ltd.: realtime traffic, city-level geo, events, and multi-site dashboards without storing cookies, IPs, or fingerprints. | Dutch privacy-first web analytics SaaS: cookieless pageviews and campaigns without visitor IDs or stored IPs, EU-hosted by Simple Analytics B.V. in Amsterdam. |
| Tags |
| At a glance | digistats Analytics | Simple Analytics |
|---|---|---|
| HQ | Dättwil AG, Switzerland | Amsterdam, Netherlands |
| Legal entity | digistats Analytics Ltd. (CHE-296.235.462) | Simple Analytics B.V. (KVK 88269922) |
| Hosting | Switzerland data center (host brand not named publicly) | Not listed |
| Deployment | Managed SaaS only | Not listed |
| Open source | No | No (proprietary) |
| Commercial model | Free low-traffic tier + pageview-based subscription | Free hobby tier + usage-based paid + enterprise |
| Founded | Not listed | 2018 |
| Product type | Not listed | Hosted web analytics SaaS (not self-hosted) |
| Data focus | Not listed | Cookieless, non-identifying aggregate metrics |
| Primary hosting | Not listed | Netherlands (EU); see subprocessors |
| Key capabilities | digistats Analytics | Simple Analytics |
|---|---|---|
| Cookieless tracking | Yes | Yes |
| No stored visitor IPs | Yes | Not listed |
| Swiss data center | Yes | Not listed |
| Unlimited websites | Yes | Not listed |
| API + CSV export | Yes | Not listed |
| Managed SaaS | Yes | Not listed |
| No stored IPs / visitor IDs | Not listed | Yes |
| EU-hosted (NL focus) | Not listed | Yes |
| Dutch B.V. | Not listed | Yes |
| Works beside GA4 | Not listed | Yes |
| API & BI export | Not listed | Yes |
Cookieless script without stored IPs or fingerprints
Vendor docs describe a sub-1 kB tag that measures traffic without cookies, without retaining visitor IPs (IP used only for live geo lookup), and without fingerprinting—aimed at sites that want analytics without a consent banner for non-essential cookies.
Realtime dashboard with geo, tech, events, and channels
Live visitor and pageview views plus city-level geography, browser/OS/device signals, custom conversion events, referrer/search/social acquisition, landing pages, and continuous site reachability (online status)—enough for content and marketing ops, not a full product-analytics suite.
Ad-blocker-resistant capture (vendor claim)
Marketing materials contrast digistats with Google Analytics being stripped by major blockers and state digistats is not blocked by common ad-block extensions. Useful for traffic completeness debates; treat as first-party claim until you validate on your stack.
Multi-site SaaS with API, email reports, and CSV on every tier
Published plans include unlimited websites and events, API access, email reports, Swiss data-center storage, and CSV export—even on the free low-traffic tier—so agencies can run multiple client properties without plan-gated feature cliffs.
Swiss entity and Swiss analytics data center
Operated by digistats Analytics Ltd. (Dättwil AG); privacy policy commits to storing customer data in Switzerland. Managed hosting only—no self-hosted edition in public materials.
Cookieless metrics without visitor IDs or stored IPs
Collects pageviews, referrers, UTMs, time-on-page, and scroll depth without cookies, localStorage, fingerprints, or stored IP addresses. Unique visits are inferred from referrer hostname matching, not device IDs. Built for sites that want analytics without a consent banner solely for this tool—and without building visitor profiles.
Country from time zone, not geo-IP
Country-level location is derived from the visitor’s IANA time zone rather than IP lookup, so IPs can be dropped end-to-end. City/region is not available; some border and multi-country zones can mis-tag. Useful when legal teams reject IP-based geolocation even when hashed.
Cookieless layer beside GA4 and BI stacks
Positioned to measure traffic lost when consent is denied in cookie-based tools. Import historical Google Analytics data; export via Stats/Export APIs and integrations toward Looker Studio, Power BI, and warehouse workflows so analysts can compare consented vs observed traffic without replacing every GA report.
Lightweight script, events, goals, and ad-blocker bypass
Vendor claims a single script under 5 KB. Supports events, automated events (e.g. downloads, outbound links), goals, filters, email reports, and robot/referrer-spam controls. Ad-blocker resilience is via first-party proxy or custom subdomain CNAME—not automatic immunity for every blocklist.
Team access, SSO, and EU-operated SaaS
Hosted product from Simple Analytics B.V. (Amsterdam) with role-oriented team features on higher tiers and documented SAML SSO for Okta and Microsoft Entra. No official self-host edition—operations and residency follow the vendor’s EU infrastructure and public subprocessor list.
| Assurance & compliance | digistats Analytics | Simple Analytics |
|---|---|---|
| Independent security / no-logs audit | Not found Vendor claims no IP storage and no fingerprints; no public third-party audit PDF found. | Not found Searched security/trust pages; no public independent audit PDF found. |
| ISO 27001 | Not found Not claimed on reviewed pages. Host partner ISO 14001 (environmental) is not an ISMS cert. | Not found No ISO 27001 certificate claimed on primary security pages. |
| SOC 2 / SOC 3 | Not found | Partial Vendor states SOC 2 Type II is in progress / coming soon—not completed certification at research time. |
| GDPR / EU data protection | Vendor claimed Swiss entity; privacy policy cites DSG and GDPR/DSGVO, cookieless design, Swiss storage. Not legal advice. | Vendor claimed Dutch EU entity; vendor claims no personal data collection (no cookies/IPs/visitor IDs) and GDPR-friendly design. Not legal advice—confirm for your processing facts. |
| US CLOUD Act exposure (indicative) | Partial Swiss Ltd, no known US parent, analytics residency claimed in Switzerland; billing via Stripe, Inc. (US) and Coinbase. EuropeanStack assessment — not a vendor certification. Not legal advice. | Partial EU entity, no known US parent, public analytics subprocessors are EU-based (Worldstream, Leaseweb, Hetzner, Bunny, Hyperping). Residual risk remains; reconcile Cloudflare mention on GDPR page vs Bunny on subprocessors. Assessment by EuropeanStack—not a vendor 'safe' claim. Not legal advice. |
| Data processing agreement (B2B) | Partial Privacy policy describes Art. 28-style processing on behalf of customers; dedicated public DPA download not found — request signed DPA. | Partial Vendor says DPA usually not required (no personal data) but will review/sign customer-provided DPAs aligned with architecture. |
| EU AI Act | Not applicable Web analytics product; not positioned as an AI system product. | Not applicable Web analytics product; not marketed as an AI system subject to AI Act high-risk regimes. |
| Considerations & known limitations | digistats Analytics | Simple Analytics |
|---|---|---|
| No public independent security audit | Medium Cookieless and no-IP claims are first-party only. Security questionnaires that require audit reports will need vendor outreach or a different product. | Not listed |
| US-linked payment subprocessors | Medium AGB names Stripe, Inc. (San Francisco) for cards and Coinbase for crypto. Billing and account data may leave the pure Swiss analytics path even if telemetry stays in Switzerland. | Not listed |
| Hosting provider not named publicly | Low Switzerland data-center claim without a published host legal name or full subprocessor list complicates transfer and residual-risk assessments. | Not listed |
| No self-host or open-source path | Medium Cannot pin collector versions, run fully air-gapped, or satisfy hard self-host mandates. Operational dependency on digistats uptime and roadmap. | Medium No official self-host edition. Orgs with air-gap or on-prem telemetry mandates need Plausible self-host, Matomo, or similar instead. |
| Registration path may be restricted | Low At research time the login UI stated registrations were disabled and /developers redirected to login. Confirm trial and API access before scheduling migration. | Not listed |
| SOC 2 not yet complete | Not listed | Medium SOC 2 Type II is publicly 'in progress'. Enterprise security reviews may block until a report is available or accept compensating controls (minimal data + EU hosts). |
| Referrer-based uniques and timezone country | Not listed | Low Uniques are not durable visitor IDs; country is timezone-based with known mis-tag edge cases. Totals will differ from GA client-ID models—set stakeholder expectations. |
| CDN/DDoS vendor documentation inconsistency | Not listed | Low Subprocessors list Bunny (EU) for CDN/DNS; GDPR page still references Cloudflare for CDN/DDoS. Ask for current edge path before asserting zero US-group infrastructure touch. |
| Small independent operator | Not listed | Low Public About page describes a three-person self-funded team. Fine for many sites; large enterprises should assess continuity, support SLAs, and roadmap capacity explicitly. |
When: You need open-source and optional self-hosting with a large community
Consider: Plausible Analytics or Matomo
Plausible is cookieless SaaS + self-host; Matomo is the full self-host suite.
When: You want another lightweight EU cookieless SaaS without Swiss seat as a requirement
Consider: Simple Analytics or Pirsch Analytics
NL and DE peers in the same category band.
When: You need enterprise analytics, tag manager, and formal compliance packaging
Consider: Piwik PRO or Matomo Cloud
Heavier stacks with more modules and B2B assurance artifacts.
When: You are comparing global privacy-analytics brands rather than Swiss residency
Consider: Fathom Analytics
Different ownership and data-path story—verify residency independently.
When: You need open-source and/or official self-hosting of privacy-first analytics
Consider: Plausible Analytics (catalog: plausible_analytics) or Matomo
Simple Analytics is hosted SaaS only; Plausible and Matomo cover self-host paths many security policies require.
When: You need a deeper EU enterprise analytics platform with configurable processing and on-prem options
Consider: Piwik PRO (catalog: piwik_pro)
Heavier suite and procurement surface than Simple Analytics’ minimal cookieless product.
When: You need identity graphs, remarketing audiences, and full marketing analytics depth
Consider: Google Analytics or Adobe Analytics
Keep those for consented deep analysis; Simple Analytics is the opposite design tradeoff.
When: You want another lightweight EU cookieless tracker and are comparing peers
Consider: Pirsch Analytics (pirsch_analytics) or Friendly Analytics (friendly_analytics)
Compare retention, multi-site, SSO, and API maturity rather than GDPR slogans alone.