Compare Simple Analytics and Vantevo Analytics on capabilities, jurisdiction, assurance, and fit for European buyers.
Both listed as alternatives to: Fathom Analytics, Google Analytics, Matomo
Netherlands· Web Analytics
Needs review
Shortlist when you need EU-operated, cookieless web metrics without visitor IDs or stored IPs—especially as a visibility layer beside GA4. Skip when you need self-host/open-source control, session replay, or identity-rich marketing analytics; consider Plausible Analytics or Matomo/Piwik PRO instead.
Italy· Web Analytics
Needs review
Shortlist Vantevo when you want Italian-operated, cookie-less site analytics with a flat dashboard, goals/events, optional GA historical import, and beta ecommerce funnel events under a public DPA. Skip when you need multi-day returning-visitor identity, self-hosting/open source, or enterprise-grade public certifications—consider Plausible/Simple Analytics/Pirsch for lighter peers, or Piwik PRO for self-host/compliance-heavy programs.
Highlighted rows differ between the two products.
| Feature | Simple Analytics | Vantevo Analytics |
|---|---|---|
| Country of origin | Netherlands | Italy |
| Category | Web Analytics | Web Analytics |
| Open source | No | No |
| Self-hosted | No | No |
| Headquarters | Netherlands | Italy |
| Legal entity | Simple Analytics B.V., Amsterdam (KVK 88269922, VAT NL864560011B01) | Netforce Srl, Via Po' 136/A, 43124 Parma PR, Italy |
| Governing law | Netherlands / EU | Italian law (controller established in Italy; Terms governed by place of establishment) |
| US parent / control | No known US parent | No known US parent |
| CLOUD Act exposure (indicative) | Low | Medium |
| Hosting / residency | Analytics data claimed processed in the Netherlands/EU. Public subprocessors (May 2026): Worldstream + Leaseweb (NL hosting), Hetzner (DE hosting), Bunny (SI CDN/DNS), Hyperping (FR uptime), Intention (NL domains). Vendor states this list covers website visitor-data subprocessors only—not payments/internal ops. | Vendor claims EU servers and EU backups. Public DPA names OVH Datacenter Roubaix and an AWS datacenter for storage/processing. Additional third parties: Stripe (payments), Crisp (support chat), optional Google Analytics and Search Console APIs when customers connect them. |
| Summary | Dutch privacy-first web analytics SaaS: cookieless pageviews and campaigns without visitor IDs or stored IPs, EU-hosted by Simple Analytics B.V. in Amsterdam. | Italian cookie-less web analytics from Netforce Srl (Parma): single-dashboard traffic, events, goals, and ecommerce funnels with EU processing claims and a public DPA. |
| Tags |
| At a glance | Simple Analytics | Vantevo Analytics |
|---|---|---|
| HQ | Amsterdam, Netherlands | Parma, Italy (Netforce Srl) |
| Legal entity | Simple Analytics B.V. (KVK 88269922) | Not listed |
| Founded | 2018 | Not listed |
| Product type | Hosted web analytics SaaS (not self-hosted) | Cookie-less web analytics SaaS |
| Open source | No (proprietary) | Not listed |
| Data focus | Cookieless, non-identifying aggregate metrics | Not listed |
| Primary hosting | Netherlands (EU); see subprocessors | Not listed |
| Commercial model | Free hobby tier + usage-based paid + enterprise | View-based subscription after free trial |
| Self-host / OSS | Not listed | No (SaaS only; not open source) |
| Hosting (public DPA) | Not listed | OVH Roubaix + AWS datacenter; EU processing claims |
| Notable limit | Not listed | No multi-day returning visitors; max 50 sites/account (Terms) |
| Key capabilities | Simple Analytics | Vantevo Analytics |
|---|---|---|
| Cookieless analytics | Yes | Not listed |
| No stored IPs / visitor IDs | Yes | Not listed |
| EU-hosted (NL focus) | Yes | Not listed |
| Dutch B.V. | Yes | Not listed |
| Works beside GA4 | Yes | Not listed |
| API & BI export | Yes | Not listed |
| Cookie-less tracking | Not listed | Yes |
| Single-dashboard metrics | Not listed | Yes |
| Ecommerce events (beta) | Not listed | Yes |
| GA history import | Not listed | Yes |
| Public DPA | Not listed | Yes |
| Italian operator | Not listed | Yes |
Cookieless metrics without visitor IDs or stored IPs
Collects pageviews, referrers, UTMs, time-on-page, and scroll depth without cookies, localStorage, fingerprints, or stored IP addresses. Unique visits are inferred from referrer hostname matching, not device IDs. Built for sites that want analytics without a consent banner solely for this tool—and without building visitor profiles.
Country from time zone, not geo-IP
Country-level location is derived from the visitor’s IANA time zone rather than IP lookup, so IPs can be dropped end-to-end. City/region is not available; some border and multi-country zones can mis-tag. Useful when legal teams reject IP-based geolocation even when hashed.
Cookieless layer beside GA4 and BI stacks
Positioned to measure traffic lost when consent is denied in cookie-based tools. Import historical Google Analytics data; export via Stats/Export APIs and integrations toward Looker Studio, Power BI, and warehouse workflows so analysts can compare consented vs observed traffic without replacing every GA report.
Lightweight script, events, goals, and ad-blocker bypass
Vendor claims a single script under 5 KB. Supports events, automated events (e.g. downloads, outbound links), goals, filters, email reports, and robot/referrer-spam controls. Ad-blocker resilience is via first-party proxy or custom subdomain CNAME—not automatic immunity for every blocklist.
Team access, SSO, and EU-operated SaaS
Hosted product from Simple Analytics B.V. (Amsterdam) with role-oriented team features on higher tiers and documented SAML SSO for Okta and Microsoft Entra. No official self-host edition—operations and residency follow the vendor’s EU infrastructure and public subprocessor list.
Daily-rotating hash visitor counting (no analytics cookies)
Visitor uniqueness for a day is derived from HASH(salt + domain + IP + User-Agent) with a salt that rotates every 24 hours; IP and User-Agent are not retained after hashing, per the DPA and docs. No cookies, localStorage, or browser cache for the analytics session—and therefore no multi-day new/returning visitor split. Fits privacy-led sites that prioritize aggregate trends over identity graphs.
Single-page traffic dashboard
Unique visitors, sessions, page views, bounce rate, duration, entry/exit pages, geography, devices, languages, referrals, and UTM campaigns appear on one overview without multi-level custom report builders. Aimed at agencies and SMEs that want operational metrics without a full-time analytics specialist.
Custom events, goals, and automatic link/download tracking
Track button clicks, scrolls, form submits, custom event names with metadata, and conversion goals; outbound links and file downloads can be auto-captured with HTML attributes to exclude specific URLs. Useful for content and lead-gen sites measuring meaningful actions without cookie tags.
Ecommerce funnel events (beta script)
Optional vantevo-ecommerce.js records wishlist, view item, cart add/remove, checkout stages, payment type, coupons, variants/categories, and purchase—docs mark the ecommerce section as still in beta. Best for shops that need privacy-oriented funnel visibility and can accept beta maturity.
Universal Analytics import and multi-platform install paths
Connect Google Analytics to import page statistics from January 2018 onward into the same calendar view (with documented metric gaps and API limits). Ship via head script, WordPress plugin, React/Vue/npm packages, Shopify/Wix theme paste, hybrid apps, or server-side event APIs—plus optional Search Console connection for keyword/impression views.
| Assurance & compliance | Simple Analytics | Vantevo Analytics |
|---|---|---|
| Independent security / no-logs audit | Not found Searched security/trust pages; no public independent audit PDF found. | Not found No public third-party audit PDF or no-logs attestation found on security/docs pages searched. |
| ISO 27001 | Not found No ISO 27001 certificate claimed on primary security pages. | Not found No ISO 27001 certificate or registry evidence found on the public site. |
| SOC 2 / SOC 3 | Partial Vendor states SOC 2 Type II is in progress / coming soon—not completed certification at research time. | Not found No SOC 2/3 report referenced on public trust/legal pages. |
| GDPR / EU data protection | Vendor claimed Dutch EU entity; vendor claims no personal data collection (no cookies/IPs/visitor IDs) and GDPR-friendly design. Not legal advice—confirm for your processing facts. | Vendor claimed Italian controller (Netforce Srl); cookie-less visitor model and EU hosting asserted on docs/GDPR pages; public DPA available. Vendor “100% GDPR compliant” wording is a claim, not independent legal certification. |
| US CLOUD Act exposure (indicative) | Partial EU entity, no known US parent, public analytics subprocessors are EU-based (Worldstream, Leaseweb, Hetzner, Bunny, Hyperping). Residual risk remains; reconcile Cloudflare mention on GDPR page vs Bunny on subprocessors. Assessment by EuropeanStack—not a vendor 'safe' claim. Not legal advice. | Partial EU entity / no known US parent, but DPA lists AWS alongside OVH Roubaix; Stripe and optional Google APIs are US-group services. Not a clean EU-only infrastructure story. Not legal advice. |
| Data processing agreement (B2B) | Partial Vendor says DPA usually not required (no personal data) but will review/sign customer-provided DPAs aligned with architecture. | Vendor claimed Public DPA at vantevo.io/dpa; Terms state DPA forms part of the main agreement (customer controller, Netforce processor). |
| EU AI Act | Not applicable Web analytics product; not marketed as an AI system subject to AI Act high-risk regimes. | Not applicable Web analytics SaaS; not marketed as an AI system product. |
| Considerations & known limitations | Simple Analytics | Vantevo Analytics |
|---|---|---|
| Hosted SaaS only—no self-host | Medium No official self-host edition. Orgs with air-gap or on-prem telemetry mandates need Plausible self-host, Matomo, or similar instead. | Low No public self-host option. Continuity depends on Netforce operations, OVH/AWS, and export/delete workflows (JSON/CSV return or delete timelines in DPA/Terms). |
| SOC 2 not yet complete | Medium SOC 2 Type II is publicly 'in progress'. Enterprise security reviews may block until a report is available or accept compensating controls (minimal data + EU hosts). | Not listed |
| Referrer-based uniques and timezone country | Low Uniques are not durable visitor IDs; country is timezone-based with known mis-tag edge cases. Totals will differ from GA client-ID models—set stakeholder expectations. | Not listed |
| CDN/DDoS vendor documentation inconsistency | Low Subprocessors list Bunny (EU) for CDN/DNS; GDPR page still references Cloudflare for CDN/DDoS. Ask for current edge path before asserting zero US-group infrastructure touch. | Not listed |
| Small independent operator | Low Public About page describes a three-person self-funded team. Fine for many sites; large enterprises should assess continuity, support SLAs, and roadmap capacity explicitly. | Not listed |
| AWS (and other US-group services) in data path | Not listed | Medium Despite Italian HQ and EU hosting marketing, the DPA explicitly stores data at OVH Roubaix and an AWS datacenter. Stripe payments and optional Google integrations add further US-group processors. Organizations with strict “no US cloud” policies need written clarification of regions, SCCs, and residual access risk. |
| No public ISO/SOC or independent audit | Not listed | Medium Shortlisting relies on vendor security measures described in the DPA (encryption, backups, breach notification windows) without published certs or third-party audit reports. Security questionnaires and NDA evidence may be required for regulated buyers. |
| No multi-day visitor identity by design | Not listed | Low Daily salt rotation and cookie-less design prevent classic returning-visitor and cross-device analysis. This is a privacy feature for many buyers and a hard product limit for others. |
| Ecommerce module still beta | Not listed | Medium Official ecommerce docs mark the section as beta/incomplete for final publication. Do not assume GA ecommerce parity or long-term event stability without a pilot. |
| View overage and website caps in Terms | Not listed | Low Recording can pause after plan-specific overage tolerances; Terms also set a 50-website maximum per account. Align marketing “unlimited domains” language with contract terms before large agency rollouts. |
When: You need open-source and/or official self-hosting of privacy-first analytics
Consider: Plausible Analytics (catalog: plausible_analytics) or Matomo
Simple Analytics is hosted SaaS only; Plausible and Matomo cover self-host paths many security policies require.
When: You need a deeper EU enterprise analytics platform with configurable processing and on-prem options
Consider: Piwik PRO (catalog: piwik_pro)
Heavier suite and procurement surface than Simple Analytics’ minimal cookieless product.
When: You need identity graphs, remarketing audiences, and full marketing analytics depth
Consider: Google Analytics or Adobe Analytics
Keep those for consented deep analysis; Simple Analytics is the opposite design tradeoff.
When: You want another lightweight EU cookieless tracker and are comparing peers
Consider: Pirsch Analytics (pirsch_analytics) or Friendly Analytics (friendly_analytics)
Compare retention, multi-site, SSO, and API maturity rather than GDPR slogans alone.
When: You want a well-known lightweight EU privacy analytics tool with strong community presence
Consider: Plausible Analytics or Simple Analytics
Compare ecommerce depth, GA import, and commercial packaging side by side.
When: You need self-host or enterprise compliance packaging
Consider: Piwik PRO (or Matomo self-host outside this catalog’s EU-SaaS peers)
Vantevo is SaaS-only with no public self-host edition found.
When: You need full product analytics and long-horizon cohorts
Consider: Mixpanel or similar product analytics suites
Different category: identity-rich product instrumentation vs privacy-first site metrics.
When: You specifically want German-market privacy analytics peers
Consider: Pirsch Analytics or etracker (catalog peers)
Validate feature parity on ecommerce and import paths.