Friendly Analytics vs Vantevo Analytics

Compare Friendly Analytics and Vantevo Analytics on capabilities, jurisdiction, assurance, and fit for European buyers.

Both listed as alternatives to: Fathom Analytics, Google Analytics, Matomo

Logo: Friendly Analytics

Friendly Analytics

Switzerland· Web Analytics

Needs review

Shortlist when you need full Matomo depth (heatmaps, funnels, ecommerce, API) with Swiss product hosting and managed privacy defaults—especially regulated CH/EU orgs leaving Google Analytics. Skip when you only want a minimal pageview counter, a free self-serve tier, or pure DIY Matomo ops—consider Plausible, etracker, or self-hosted Matomo instead.

Matomo-as-a-ServiceCookieless by defaultSwiss product hostingISO 27001 (claimed)DPA availableEU / on-prem option
Logo: Vantevo Analytics

Vantevo Analytics

Italy· Web Analytics

Needs review

Shortlist Vantevo when you want Italian-operated, cookie-less site analytics with a flat dashboard, goals/events, optional GA historical import, and beta ecommerce funnel events under a public DPA. Skip when you need multi-day returning-visitor identity, self-hosting/open source, or enterprise-grade public certifications—consider Plausible/Simple Analytics/Pirsch for lighter peers, or Piwik PRO for self-host/compliance-heavy programs.

Cookie-less trackingSingle-dashboard metricsEcommerce events (beta)GA history importPublic DPAItalian operator
Friendly Analytics vs Vantevo Analytics: Snapshot
FeatureLogo: Friendly AnalyticsFriendly AnalyticsLogo: Vantevo AnalyticsVantevo Analytics
Country of originSwitzerlandItaly
CategoryWeb AnalyticsWeb Analytics
Open sourceYesNo
Self-hostedYesNo
HeadquartersSwitzerlandItaly
Legal entityFriendly LLC (Friendly GmbH on DPA), Werkhofstrasse 5, 6052 Hergiswil, SwitzerlandNetforce Srl, Via Po' 136/A, 43124 Parma PR, Italy
Governing lawSwiss law (per customer principal agreement / DPA framework)Italian law (controller established in Italy; Terms governed by place of establishment)
US parent / controlNo known US parentNo known US parent
CLOUD Act exposure (indicative)MediumMedium
Hosting / residencyAnalytics product: Infomaniak (CH) primary hosting; Netstream and Hosttech (CH) backups. AWS listed only for Friendly Automate email, not Analytics. Enterprise marketing also offers EU or on-premise hosting. Company ops: US SaaS including Google Workspace, HelpScout, Stripe, Notion, Calendly, Cloudflare (help docs).Vendor claims EU servers and EU backups. Public DPA names OVH Datacenter Roubaix and an AWS datacenter for storage/processing. Additional third parties: Stripe (payments), Crisp (support chat), optional Google Analytics and Search Console APIs when customers connect them.
Summary

Swiss Matomo-as-a-Service: cookieless-by-default web analytics with heatmaps, funnels, and ecommerce, product data hosted in Switzerland, plus enterprise DPA and on-prem options.

Italian cookie-less web analytics from Netforce Srl (Parma): single-dashboard traffic, events, goals, and ecommerce funnels with EU processing claims and a public DPA.

Tags
At a glance: Friendly Analytics vs Vantevo Analytics
At a glanceLogo: Friendly AnalyticsFriendly AnalyticsLogo: Vantevo AnalyticsVantevo Analytics
HQHergiswil, SwitzerlandParma, Italy (Netforce Srl)
Legal entityFriendly LLC / Friendly GmbHNot listed
StackMatomo (unmodified + premium plugins)Not listed
Product hostsInfomaniak; backups Netstream & Hosttech (CH)Not listed
Commercial modelHit-based SaaS; enterprise custom; no free trialView-based subscription after free trial
Open source baseMatomo; portable to other Matomo hostsNot listed
Product typeNot listedCookie-less web analytics SaaS
Self-host / OSSNot listedNo (SaaS only; not open source)
Hosting (public DPA)Not listedOVH Roubaix + AWS datacenter; EU processing claims
Notable limitNot listedNo multi-day returning visitors; max 50 sites/account (Terms)
Key capabilities: Friendly Analytics vs Vantevo Analytics
Key capabilitiesLogo: Friendly AnalyticsFriendly AnalyticsLogo: Vantevo AnalyticsVantevo Analytics
Matomo-as-a-ServiceYesNot listed
Cookieless by defaultYesNot listed
Swiss product hostingYesNot listed
ISO 27001 (claimed)YesNot listed
DPA availableYesNot listed
EU / on-prem optionYesNot listed
Cookie-less trackingNot listedYes
Single-dashboard metricsNot listedYes
Ecommerce events (beta)Not listedYes
GA history importNot listedYes
Public DPANot listedYes
Italian operatorNot listedYes

Friendly Analytics

  • Matomo-as-a-Service with privacy defaults

    Runs unmodified Matomo plus selected premium plugins, preconfigured for cookieless tracking, IP truncation, and nFADP/GDPR-oriented defaults so teams avoid operating Matomo themselves while keeping exit paths to another Matomo host.

  • Heatmaps, funnels, session recording, and ecommerce

    Beyond pageviews: heatmaps, privacy-oriented session replays, conversion funnels, form analytics, A/B tests, and ecommerce reporting for UX and revenue analysis without bolting on a separate US product suite.

  • Swiss product hosting with EU or on-prem options

    Visitor analytics hosted with Infomaniak in Switzerland; backups via Netstream and Hosttech (CH). Enterprise can contract Swiss, EU, or on-premise placement—confirm region in the order form rather than assuming SaaS-only CH.

  • Ads conversion export without third-party pixels

    Advertising Conversion Export sends conversions to Google or Bing via API so campaigns can be optimized without placing those vendors' tracking codes on your site—useful when privacy policy bans extra ad tags.

  • GA import, reporting API, and Matomo portability

    Historical Google Analytics data can be imported (manual, effort-billed). Reporting API and live export links feed BI tools; data can move to another Matomo instance, limiting classic SaaS lock-in.

  • Enterprise contracts, SSO, and dedicated instances

    Enterprise tier adds custom DPA/DORA/NDA/SLA paperwork, dedicated account management, SSO, custom domain, dedicated instance, and phone/video support for banks, insurers, and public bodies.

Vantevo Analytics

  • Daily-rotating hash visitor counting (no analytics cookies)

    Visitor uniqueness for a day is derived from HASH(salt + domain + IP + User-Agent) with a salt that rotates every 24 hours; IP and User-Agent are not retained after hashing, per the DPA and docs. No cookies, localStorage, or browser cache for the analytics session—and therefore no multi-day new/returning visitor split. Fits privacy-led sites that prioritize aggregate trends over identity graphs.

  • Single-page traffic dashboard

    Unique visitors, sessions, page views, bounce rate, duration, entry/exit pages, geography, devices, languages, referrals, and UTM campaigns appear on one overview without multi-level custom report builders. Aimed at agencies and SMEs that want operational metrics without a full-time analytics specialist.

  • Custom events, goals, and automatic link/download tracking

    Track button clicks, scrolls, form submits, custom event names with metadata, and conversion goals; outbound links and file downloads can be auto-captured with HTML attributes to exclude specific URLs. Useful for content and lead-gen sites measuring meaningful actions without cookie tags.

  • Ecommerce funnel events (beta script)

    Optional vantevo-ecommerce.js records wishlist, view item, cart add/remove, checkout stages, payment type, coupons, variants/categories, and purchase—docs mark the ecommerce section as still in beta. Best for shops that need privacy-oriented funnel visibility and can accept beta maturity.

  • Universal Analytics import and multi-platform install paths

    Connect Google Analytics to import page statistics from January 2018 onward into the same calendar view (with documented metric gaps and API limits). Ship via head script, WordPress plugin, React/Vue/npm packages, Shopify/Wix theme paste, hybrid apps, or server-side event APIs—plus optional Search Console connection for keyword/impression views.

Assurance & compliance: Friendly Analytics vs Vantevo Analytics
Assurance & complianceLogo: Friendly AnalyticsFriendly AnalyticsLogo: Vantevo AnalyticsVantevo Analytics
Independent security / no-logs audit
Not found

Vendor describes anonymization defaults and mentions external pen tests in ISO materials; no public independent no-logs audit report found.

Not found

No public third-party audit PDF or no-logs attestation found on security/docs pages searched.

ISO 27001
Vendor claimed

Vendor publishes ISO/IEC 27001:2022 certification covering the company/products with a certificate PDF; not independently re-verified against the cert body registry in this draft.

Not found

No ISO 27001 certificate or registry evidence found on the public site.

SOC 2 / SOC 3
Not found

No SOC 2/3 claim found on security/about pages reviewed.

Not found

No SOC 2/3 report referenced on public trust/legal pages.

GDPR / EU data protection
Vendor claimed

Swiss entity; public materials assert nFADP and GDPR alignment; cookieless defaults and CH processing described in DPA.

Vendor claimed

Italian controller (Netforce Srl); cookie-less visitor model and EU hosting asserted on docs/GDPR pages; public DPA available. Vendor “100% GDPR compliant” wording is a claim, not independent legal certification.

US CLOUD Act exposure (indicative)
Partial

Swiss entity, no known US parent; Analytics product hosts are Swiss (Infomaniak/Netstream/Hosttech). Medium/partial because company subprocessors include US SaaS (e.g. Google Workspace, HelpScout, Stripe, Cloudflare). AWS not used for Analytics per vendor list. Indicative only—not legal advice.

Partial

EU entity / no known US parent, but DPA lists AWS alongside OVH Roubaix; Stripe and optional Google APIs are US-group services. Not a clean EU-only infrastructure story. Not legal advice.

Data processing agreement (B2B)
Vendor claimed

Public DPA text for Friendly GmbH; customers asked to contact to sign. Enterprise also references DORA/NDA/SLA packs.

Vendor claimed

Public DPA at vantevo.io/dpa; Terms state DPA forms part of the main agreement (customer controller, Netforce processor).

EU AI Act
Not applicable

Web analytics SaaS; not positioned as an AI system product.

Not applicable

Web analytics SaaS; not marketed as an AI system product.

ISO 9001
Vendor claimed

Vendor publishes ISO 9001 certification materials alongside ISO 27001.

Not listed
Considerations & known limitations: Friendly Analytics vs Vantevo Analytics
Considerations & known limitationsLogo: Friendly AnalyticsFriendly AnalyticsLogo: Vantevo AnalyticsVantevo Analytics
US company-operation subprocessors
Medium

Support, email/calendar, payments, CRM/docs, and help-docs edge use US-headquartered SaaS even though Analytics visitor data hosts are Swiss. Material for DPIAs that demand zero US processors in any vendor process.

Not listed
Cookie features can reintroduce consent needs
Low

Default is cookieless, but enabling cookie-based Matomo capabilities may require banners for EU visitors—configuration discipline required.

Not listed
Small Swiss operator dependency
Low

Seven-person-scale Open Startup; mitigations include Matomo portability and open financial transparency, but capacity and roadmap still depend on a small firm.

Not listed
Certifications vendor-published
Low

ISO 27001/9001 are claimed with PDFs on the vendor site; procurement should verify certificate validity with the issuing body.

Not listed
Do not conflate with Friendly Automate
Medium

Automate uses AWS for email sending. Scope assessments to Analytics-only subprocessors unless you also buy Automate.

Not listed
AWS (and other US-group services) in data pathNot listed
Medium

Despite Italian HQ and EU hosting marketing, the DPA explicitly stores data at OVH Roubaix and an AWS datacenter. Stripe payments and optional Google integrations add further US-group processors. Organizations with strict “no US cloud” policies need written clarification of regions, SCCs, and residual access risk.

No public ISO/SOC or independent auditNot listed
Medium

Shortlisting relies on vendor security measures described in the DPA (encryption, backups, breach notification windows) without published certs or third-party audit reports. Security questionnaires and NDA evidence may be required for regulated buyers.

No multi-day visitor identity by designNot listed
Low

Daily salt rotation and cookie-less design prevent classic returning-visitor and cross-device analysis. This is a privacy feature for many buyers and a hard product limit for others.

Ecommerce module still betaNot listed
Medium

Official ecommerce docs mark the section as beta/incomplete for final publication. Do not assume GA ecommerce parity or long-term event stability without a pilot.

View overage and website caps in TermsNot listed
Low

Recording can pause after plan-specific overage tolerances; Terms also set a 50-website maximum per account. Align marketing “unlimited domains” language with contract terms before large agency rollouts.

SaaS-only dependencyNot listed
Low

No public self-host option. Continuity depends on Netforce operations, OVH/AWS, and export/delete workflows (JSON/CSV return or delete timelines in DPA/Terms).

Fit

Friendly Analytics

Best fit when

  • Teams that want Matomo's full feature set without self-hosting ops burden
  • Swiss and EU organizations prioritizing CH product residency (Infomaniak + CH backups)
  • Sites aiming for cookieless measurement under default privacy configuration
  • Marketing teams needing heatmaps, funnels, ecommerce, and ad conversion export without Google Analytics
  • Enterprises needing DPA/DORA/SLA paperwork, SSO, or dedicated instances

Poor fit when

  • Buyers who only need lightweight pageview analytics and prefer a free tier (see Plausible-class tools)
  • Teams that must self-operate every component with no SaaS operator in the path
  • Orgs that require zero US-headquartered tools anywhere in the vendor's company stack (support/billing SaaS is disclosed)
  • Use cases outside web/app analytics (Friendly Automate is a different product with different subprocessors)

Consider instead when

  • When: You want a minimal, open-source, cookieless counter with simpler SaaS UX

    Consider: Plausible Analytics

    Less Matomo plugin depth; different hosting/operator story (Estonia).

  • When: You need German enterprise analytics with long public-sector track record

    Consider: etracker

    Different stack (not Matomo); compare cookieless claims and contracts directly.

  • When: You prefer a modern EU analytics product with open-source core and lean UI

    Consider: Pirsch Analytics

    Germany-based; trade Matomo feature breadth for a different product surface.

  • When: You already run Matomo well and only need software, not a Swiss operator

    Consider: Self-hosted Matomo

    Maximum control; you own privacy config, updates, and hosting risk.

Vantevo Analytics

Best fit when

  • EU/Italian teams replacing Google Analytics for marketing-site KPIs without analytics cookies
  • Agencies needing a simple multi-site dashboard clients can read without GA training
  • Shops that want privacy-oriented funnel events (cart → checkout → purchase) and accept beta maturity
  • Migrations that need to pull Universal Analytics page history into a privacy-first tool
  • Stacks using WordPress, Shopify, React/Next, Vue/Nuxt, or server-side event APIs

Poor fit when

  • Requirements for multi-day returning visitors, cross-device identity, or ad-platform audience sync
  • Mandatory self-hosting, open-source code audit, or on-prem only deployments
  • Procurement that requires public ISO 27001/SOC 2 evidence and independent security audits before shortlist
  • Heavy product analytics / cohort experimentation beyond site and ecommerce funnel events
  • Accounts that need more than the Terms’ 50-website cap without vendor exception

Consider instead when

  • When: You want a well-known lightweight EU privacy analytics tool with strong community presence

    Consider: Plausible Analytics or Simple Analytics

    Compare ecommerce depth, GA import, and commercial packaging side by side.

  • When: You need self-host or enterprise compliance packaging

    Consider: Piwik PRO (or Matomo self-host outside this catalog’s EU-SaaS peers)

    Vantevo is SaaS-only with no public self-host edition found.

  • When: You need full product analytics and long-horizon cohorts

    Consider: Mixpanel or similar product analytics suites

    Different category: identity-rich product instrumentation vs privacy-first site metrics.

  • When: You specifically want German-market privacy analytics peers

    Consider: Pirsch Analytics or etracker (catalog peers)

    Validate feature parity on ecommerce and import paths.

Open questions for due diligence

Friendly Analytics

  • Will the signed DPA and order form pin hosting to Switzerland only, or allow EU/on-prem variants?
  • Which company subprocessors (HelpScout, Google Workspace, Stripe, etc.) receive which categories of customer personal data in practice?
  • Can the current ISO 27001 certificate be validated against the certification body's public register (scope, dates, sites)?
  • For enterprise: what is the RPO/RTO and whether backups remain exclusively in Switzerland?
  • If both Analytics and Automate are purchased, how are subprocessors and data paths segmented contractually?

Vantevo Analytics

  • Which exact AWS region(s) and services are in production, and are standard contractual clauses / transfer impact assessments available on request?
  • Is a current subprocessor list (beyond DPA/privacy mentions of OVH, AWS, Stripe, Crisp, Google) available under NDA?
  • Are ISO 27001, SOC 2, or independent penetration-test summaries available for enterprise procurement?
  • What is the production roadmap and support SLA for ecommerce events leaving beta?
  • How should multi-brand agencies interpret “unlimited domains” marketing versus the Terms’ 50-website cap—exceptions available?