← Back to Directory
Logo: Matomo by Stackhero

Matomo by Stackhero

French PaaS-managed Matomo on dedicated bare-metal instances: unlimited sites until capacity, one-click updates, EU or US region choice, with hourly billing and an automatic DPA.

Open source
analyticsmatomoprivacyopen-sourcesaasfrancegdprmanaged-hostingiso-27001
Visit WebsiteAsk an EU migration specialistFeedback & corrections

Matomo by Stackhero is a managed Matomo service from the French PaaS Stackhero in Paris. You get a production Matomo instance on dedicated, customer-isolated infrastructure, while Stackhero runs the servers, backups, and one-click Matomo updates.

It exists for teams that want the open-source Google Analytics alternative without SSH or shared multi-tenant analytics. Each service runs as containers on a dedicated virtual machine on bare-metal hardware under Stackhero's own Linux distribution.

The concrete differentiator is that dedicated-instance Matomo with unlimited sites until capacity, EU or US region choice, hourly billing, and an automatic DPA.

Managed MatomoDedicated instanceFrench PaaS operatorISO 27001 (claimed)Automatic DPAEU or US region

Shortlist when you want full Matomo on a dedicated French-operated bare-metal instance with one-click updates and hourly billing—especially if you prefer unlimited site/seat product framing over hit-metered multi-tenant SaaS. Skip when you need EU-only with no US region option, root/SSH access, or a minimal cookieless counter—consider self-hosted Matomo, Friendly Analytics, or Plausible instead.

Key capabilities

Each customer gets an isolated VM on Stackhero’s own bare-metal cloud (Stackhero DC OS), not shared multi-tenant Matomo. Local disks and included Redis are positioned for high IOPS and heavy traffic—fit teams that outgrow noisy-neighbor shared analytics clouds.

Stackhero does not meter websites, team seats, segments, or goals as product SKUs; you scale by instance size (published up to 16 vCPUs / 64 GB RAM). Retention is limited by disk, not a fixed product TTL—plan storage for long history.

Stackhero delivers Matomo updates for dashboard application; firewall IP rules are customer-configurable. SSH is intentionally unavailable on the managed service—good for reduced surface area, poor fit if you need custom OS packages.

Point matomo.yourdomain.com with TLS 1.3/ECDSA, ship visitor location via bundled GeoIP2, and send unlimited Matomo reports/alerts through a per-instance email path—reduces glue work after first deploy.

24-hour atomic image backups (plus event-driven backups on upgrades) are validated, then encrypted (OpenPGP ECDH/Curve25519) and retained up to three months. Vendor FAQ states backups are stored in the EU even when regions differ—confirm dual-region implications for US instances.

Spin services up/down with hourly charging and a single monthly invoice; free trial without payment method. Choose European (France) or USA placement at create time—region is a first-class control for residency, not a hidden default.

At a glance

HQ
Paris, France (1 rue de Stockholm, 75008)
Legal entity
Stackhero — RCS Paris 512 366 378
Stack
Open-source Matomo on dedicated Stackhero VM
Hosting regions
EU (France) or USA; backups in EU (vendor FAQ)
Commercial model
Hourly instance billing; free trial; no standard commitment
Certifications
ISO 27001:2022 claimed (BAB #254338)

Best fit when

  • Teams that want Matomo’s full analytics/admin surface without running OS or Matomo upgrades themselves
  • Buyers who prefer a dedicated VM and capacity-based limits over multi-tenant hit metering
  • Orgs consolidating Matomo with other Stackhero-managed open-source services under one French operator
  • Projects that need hourly elasticity and the ability to stop billing with one click
  • Controllers who will configure Matomo privacy features themselves and want a signed/automatic DPA plus ISO 27001 claims

Poor fit when

  • Requirements that forbid any US hosting option or dual-region backup stories—platform publicly offers USA regions
  • Teams that need SSH, custom kernels, or non-Matomo system agents on the host
  • Buyers seeking only a lightweight cookieless pageview product (Plausible-class tools are simpler)
  • Organizations that must self-host inside their own cloud account with no third-party PaaS operator
  • Use cases needing a named public subprocessor register beyond Stackhero’s high-level privacy/GDPR pages

Consider instead when

  • When: You want Swiss Matomo-as-a-Service with cookieless defaults and CH product hosts

    Consider: Friendly Analytics

    Different operator, residency story, and privacy defaults; still Matomo-based.

  • When: You need enterprise analytics packaging beyond plain managed Matomo

    Consider: Piwik PRO

    Compare modules, contracts, and hosting regions independently.

  • When: You only need a minimal open-source-friendly counter with simple SaaS UX

    Consider: Plausible Analytics

    Far less Matomo depth; different product surface.

  • When: You require full root control and in-house residency guarantees

    Consider: Self-hosted Matomo on your own EU IaaS

    Maximum control; you own updates, backups, and hardening.

Jurisdiction & ownership

Legal entity
Stackhero (RCS Paris 512 366 378, VAT FR92512366378), 1 rue de Stockholm, 75008 Paris, France
Governing law
French law; courts at registered head office (per Terms of service)
US parent / control
No known US parent
CLOUD Act exposure (indicative)
Medium
Hosting / residency
Primary compute: Stackhero bare-metal cloud, customer-chosen region EU (France) or USA. Backups: stored in the EU per Matomo FAQ; encrypted atomic images retained up to ~3 months. Not built on AWS/GCP/Azure as the stated compute substrate. Payment processor (unnamed) handles card data; privacy policy mentions third-party messaging/stats tools without a full named subprocessor table.

No known US corporate parent; About page references an unnamed parent company—ownership path not fully public. Optional US region drives medium CLOUD Act exposure even though EU placement is available and backups are EU-stated. Indicative only—not legal advice.

  • Independent security / no-logs auditNot found
  • ISO 27001Vendor claimed
  • SOC 2 / SOC 3Not found
  • GDPR / EU data protectionVendor claimed
  • +3

Considerations & known limitations

  • MediumOptional US hosting region

    Platform offers USA placement alongside France/EU. Mis-selected region or unclear contract language can put visitor analytics outside the EU. Procurements that require EU-only must pin region at create time and in the order form.

  • MediumEU backups when primary is US

    FAQ states backups are stored in the EU. If an instance runs in the USA, confirm whether visitor data is dual-homed (US primary + EU backup) and how that affects DPIA and transfer tools.

  • LowNo SSH / managed-only host

    Cannot install arbitrary system software or agents; support hours stated as CET office hours for basic platform support—not full Matomo application consulting.

  • MediumLimited named subprocessor list

    Privacy policy mentions third-party tools and a payment processor without a detailed public subprocessor register. Request the annex in diligence if procurement requires named processors.

  • LowISO certificate vendor-published

    ISO 27001:2022 is claimed with a public PDF and BAB certificate number; validate scope, sites, and validity dates with the certification body before treating it as verified.

  • LowMatomo privacy configuration is yours

    Hosting in the EU does not auto-configure consent, IP anonymization, or cookieless modes. Controllers remain responsible for Matomo GDPR tooling and site policy.

Open questions for due diligence

  • Will the order form and DPA annex permanently pin the Matomo instance to the EU (France) region with no US failover?
  • For US-region instances, what exact data is copied to EU backup vaults and under which transfer mechanism?
  • Who is the unnamed parent company referenced on the About page, and is there any US ownership or PE?
  • Can ISO 27001 certificate 254338 be validated on the British Assessment Bureau (or successor) public register for current scope/dates?
  • Which payment, support, and website analytics providers process Stackhero account data (named subprocessor list)?
Request vendor DPA / enterprise contact
Ask an EU migration specialist
Visit WebsiteCompare similar toolsView alternativesFeedback & corrections

Frequently Asked Questions

It is managed open-source Matomo with full admin UI access. Stackhero does not replace Matomo with a proprietary tracker; it hosts and maintains the Matomo stack on dedicated infrastructure. Marketplace plugins, privacy settings (IP anonymization, consent, cookieless modes), and tracking configuration remain under your control as controller—verify which premium plugins you must license separately from Matomo’s marketplace.

You choose the region when you create the service: Stackhero documents European Union (France) and USA options. GDPR materials state service data is hosted in Europe only when the service is started in a European region. FAQ text adds that backups are stored in the EU. For EU-only primary placement, create the instance in Europe and lock that choice in procurement docs; do not assume every Stackhero product is EU-only by default.

Self-hosted Matomo gives you root and full stack freedom but you own upgrades, backups, and hardening. Stackhero removes SSH, applies one-click updates, and runs atomic backups/SLA-oriented ops on dedicated VMs. Matomo Cloud is the vendor’s official multi-tenant SaaS with its own commercial metering and residency story. Stackhero competes as a French PaaS-style dedicated host—compare residency, instance isolation, and support hours before choosing.

Paid managed instances sized by resources (storage, concurrent connections, recommended page-view guidance), billed hourly with a detailed monthly invoice, no long-term commitment on standard self-serve terms, free trial without a payment card at signup, and optional custom/high-availability configurations via sales. Check Stackhero’s Matomo pricing page for current figures—do not hard-code rates into policy docs.

Yes on vendor pages: a DPA applies automatically with the Terms of service and is downloadable as a PDF; Stackhero is processor, you are controller for Matomo visitor data. ISO/IEC 27001:2022 is claimed with certificate number 254338 from the British Assessment Bureau (PDF on the certifications page). Re-validate certificate scope and dates with the issuer during procurement. SOC 2 was not found on the public pages reviewed for this draft.

No. Stackhero’s FAQ states SSH is not available because the service is fully managed; for special installation needs you must contact support. Use Matomo’s admin UI, plugins, and Stackhero’s firewall controls. If you require OS-level control, self-host Matomo or run it on your own IaaS instead.