Business Intelligence & Dashboards
Holistics
Rest of world Report an error0–5 in half steps. 5 means the rubric's top anchor is met on the evidence.
by Holistics Software Pte Ltd · www.holistics.io
Report an error on this page Is this your product? →
Link to this page
Add ?theme=dark to the image address for dark backgrounds.
The badge shows the category and the month of the latest evaluation, and EU-Made where
that is the product’s provenance. It never shows a score.
Holistics at a glance
- Vendor
- Holistics Software Pte Ltd
- Headquarters
- Not stated on the vendor’s pages as of 1 Nov 2026
- Data hosting
- Not stated on the vendor’s pages as of 1 Nov 2026
- Free plan
- Not stated on the vendor’s pages as of 1 Nov 2026
- Starting price
- “Entry Basic features. $800 /month” (vendor’s words) source, captured 1 Nov 2026
- Panel verdict
- The AI panel rates Holistics 3/5, the mean of 6 judges. Holistics, from Holistics Software Pte Ltd of Singapore, is a cloud-based BI product whose centre of gravity is a code-based semantic layer: metrics defined once in AML, versioned in Git, reviewed by pull request and synced with dbt. how scores are made
- As of
- Vendor pages captured 1 Nov 2026; evaluated by the panel 1 Nov 2026. all sources
Read this page as one judge. Each weighs the same scores by what they care about.
The panel's verdict
Holistics, from Holistics Software Pte Ltd of Singapore, is a cloud-based BI product whose centre of gravity is a code-based semantic layer: metrics defined once in AML, versioned in Git, reviewed by pull request and synced with dbt. Its strongest criteria are self-service and modelling at 7-8 and sharing and embedding at 7-8 — scheduled delivery to email and Slack, password-protected links for external viewers, and iframe/SDK embedding with single sign-on, row-level security and resale rights. Sovereignty is weakest at 4-5: a Frankfurt region is selectable and raw data stays in your own database, but the contracting entity is a Singapore company and the privacy policy says personal information may additionally be stored in Singapore or the United States. Data connectivity is where the judges genuinely split, 4-7: the SQL warehouse list is deep — Snowflake, BigQuery, PostgreSQL, SQL Server among them — but with no public information on ERP, CRM or generic REST connectors, a 7 or a 4 depends on whether a warehouse already exists.
Speaks for it
- Self-service and modelling scored 7-8, with metrics defined once in a code-based semantic layer, Git version control, pull-request review and dbt integration.
- Sharing and embedding scored 7-8, from scheduled email and Slack delivery to password-protected external links and iframe/SDK embedding with single sign-on and row-level security.
- Governance and portability sits at the bench's tightest range, 7 to 7, with definitions held as plain-text code in the customer's own Git repository.
- Entry and Standard tiers are published at $800/month with 100 reports and the first 10 users and $1000/month with unlimited reports, with additional users at $12.5/month.
- A Frankfurt, Germany region is one of three selectable processing locations, and raw data stays in the customer's own database with only query results cached.
Held against it
- Sovereignty scored 4-5: the contracting entity is Holistics Software Pte Ltd of Singapore and the privacy policy says personal information may additionally be stored in Singapore or the United States.
- We found no public information on connectors for ERP, CRM or accounting systems or on a generic REST connector, and spreadsheets load only through a SQL database.
- Single sign-on sits in an unpriced custom plan, password enforcement on all shareable links in an unpriced Security Compliance Suite, and embedded analytics pricing is on request.
- The product is documented as fully cloud-based, and we found no public information on a self-hosted or on-premise edition.
- Forecasting is stated as not yet available, and we found no public information on anomaly detection.
Best for
- You already run a SQL warehouse or database and want metrics defined once, in code, with Git review before production.
- You are embedding analytics inside your own product and need single sign-on, row-level security, white-label styling and resale rights.
- You share dashboards with external viewers who should not need accounts, behind per-link passwords and per-link data restrictions.
Avoid if
- Your data lives in business applications such as a CRM, ERP or accounting system and no SQL warehouse exists yet.
- You need an EU-only chain: the contracting entity is a Singapore company and the privacy policy says personal information may additionally be stored in Singapore or the United States.
- You require self-hosted or on-premise deployment; the captured pages document a fully cloud-based product.
- You need forecasts built in; forecasting is stated as not yet available.
The scores
| Criterion | Panel median |
|---|---|
| Data sources, connectors & refresh | 3 of 5 |
| Dashboards, charts & interactivity | 3.5 of 5 |
| Self-service analysis & shared metrics | 4 of 5 |
| Sharing, scheduled reports & embedding | 4 of 5 |
| Access control, administration & portability | 3.5 of 5 |
| European sovereignty | 2 of 5 |
| Pricing transparency | 3 of 5 |
Data sources, connectors & refresh
panel disagrees
Show reasoningHide reasoning
How this is scored
Which data the product can reach and how it stays current: native connectors to databases and warehouses (PostgreSQL, MySQL, SQL Server, BigQuery, Snowflake), to business applications (accounting, ERP, CRM, shop, help desk, ad platforms) and to files and spreadsheets (Excel, CSV, Google Sheets), live queries versus imported extracts, scheduled and incremental refresh with its minimum interval, joining data from several sources, light data preparation, access to databases behind a firewall (gateway, SSH tunnel, IP allow-list), and a generic REST or custom connector for what is not listed.
0 — Not a reporting product, or data can only be typed or pasted in by hand.
3 — Spreadsheet and file uploads plus a handful of named connectors; refresh schedules, live queries and blending sources are basic or not described.
5 — A published connector list covering the common databases, warehouses, spreadsheets and several named business applications, scheduled refresh with its interval stated, live queries or extracts at the customer's choice, data from two sources combined in one report, and a documented way to reach a database behind a firewall.
8 — Hundreds of maintained connectors or a full SQL layer over every major warehouse, incremental refresh and caching explained, a built-in data preparation or modelling step, a gateway or agent for on-premise sources, a generic REST or custom connector SDK, and connector limits (rows, API calls, history) stated per plan.
10 — Connectivity an organisation can standardise on: every source reachable live or by extract with the trade-offs documented, refresh down to minutes with lineage from report back to source, source changes detected and reported, and connector behaviour, quotas and failure handling published.
The Finance Controller
A published list of a dozen-plus SQL databases and warehouses, Google Sheets/CSV/Excel imported into the SQL database, live queries against my own databases with a controllable cache, and a documented reverse SSH tunnel plus IP whitelist for databases behind a firewall. We found no public information on native connectors to accounting, ERP or CRM systems or on a generic REST connector, so DATEV would stay a manual export. 6 14 15 9 13 2
The Managing Director
The connector list names more than a dozen SQL databases and warehouses — Snowflake, BigQuery, PostgreSQL, SQL Server and so on — queried live against our own database, with a documented reverse SSH tunnel and IP allow-list for sources behind a firewall, plus spreadsheet import that must first land in a SQL database. We found no public information on ready-made connectors to business applications such as a CRM, accounting, help desk or project management tools, nor on a generic REST connector, so my afternoon setup would depend on a warehouse existing first. Caching (minimum ten minutes, switch-off per report) and persistence modes are documented, though several databases are named as not supporting the persistence features. 6 15 9 13 14
The Data Analyst
Every warehouse I care about is on the published list — PostgreSQL, MySQL, SQL Server, BigQuery, Snowflake, Redshift among eleven-plus SQL databases — and queries run live against my database with caching explained down to a ten-minute minimum plus documented persistence modes including incremental. A reverse SSH tunnel or IP whitelist covers our firewalled Postgres, and CSV, Excel and Google Sheets load through the data import feature into a SQL database. We found no public information on connectors to business applications such as ad platforms or CRMs, on a generic REST connector, or on connector limits stated per plan. 6 9 13 14 15
The IT Administrator
Fourteen-plus SQL databases and warehouses are named — PostgreSQL, SQL Server, BigQuery, Snowflake, Databricks among them — reachable either by whitelisting Holistics' IP addresses or, for a database behind our firewall, a reverse SSH tunnel, which is how I would let it near the ERP. What keeps it down: no named connectors for business applications such as ERP or CRM, spreadsheets only load through a SQL database we supply, and we found no public information on a generic REST or custom connector. 6 9 13 14 15
The SaaS Product Lead
A published list of some fifteen SQL databases and warehouses (Snowflake, BigQuery, Postgres, MySQL, SQL Server, Databricks among them) plus CSV, Excel and Google Sheets imported through a SQL database, with IP allow-listing and a reverse SSH tunnel documented for databases behind a firewall and queries running live against the customer's own database. Incremental and upsert persistence modes are explained for the databases that support them, and the transformation layer works as data preparation. We found no public information on connectors to business applications such as ERP or CRM, on a generic REST connector, or on connector limits per plan. 6 14 15 9 12
The Skeptic
The documented list is databases and warehouses: a dozen-plus SQL sources with Oracle, Qubole and Druid named by the vendor as not supported, and spreadsheets reachable only by loading them through your own SQL database; we found no public information on business-application connectors for CRM, ERP or ad platforms or on a generic REST connector. What is documented is documented well — reverse SSH tunnel and IP whitelist for firewalled databases, real-time push-down queries against your warehouse with a cache whose ten-minute minimum expiry is stated, and named persistence modes with their unsupported databases listed. Refresh intervals are described only for Slack delivery schedules, and we found no public information on per-plan connector quotas. 6 9 13 14 15
Dashboards, charts & interactivity
Show reasoningHide reasoning
How this is scored
What can be built and how readers use it: the range of chart types, tables and pivot tables, maps, KPI tiles with targets and comparisons, dashboard layout, filters and date controls that apply across a dashboard, drill-down and drill-through, cross-filtering by clicking a chart, templates for common sources, mobile and TV display, theming to the company's design, number formatting and localisation (decimal comma, currencies, German date formats), and accessibility of the result.
0 — No charts or dashboards; the product only stores or moves data.
3 — Standard bar, line and pie charts and a table on a dashboard; filters, drill-down and mobile display are basic or not described.
5 — A broad chart library with pivot tables, maps and KPI tiles with comparison to a previous period or target, dashboard-wide filters and date ranges, drill-down, templates for common sources, a mobile view, and number and date formats localised.
8 — Cross-filtering and drill-through between dashboards, custom visuals or a chart SDK, conditional formatting and annotations, dashboards themed to a brand, TV and presentation modes, pixel-exact or paginated reports for print, and accessibility of charts documented.
10 — Dashboards that a whole organisation reads daily: every interaction (filter, drill, cross-filter, parameter) available to readers without editor rights, performance on large data stated, accessibility conformance (WCAG) published, and every chart reproducible from a documented query.
The Finance Controller
Canvas dashboards with free layout, tabs, filter and date-drill controls, drill-down and drill-through, period-over-period comparison, reference lines against targets, geo maps, funnels, custom charts via Vega-Lite and cross-filtering, though the captured pages themselves describe cross-filtering as beta with limits on supported charts and timestamp fields. We found no public information on German number and date formats, accessibility, or a pixel-exact paginated layout for the advisory board printout; PDF export of reports is documented. 16 17 2 3 4 19
The Managing Director
A broad library is documented — pivot tables, geo maps, funnels, retention heatmaps and metric sheets — with dashboard-wide filters, period-over-period comparison, drill-down, drill-through and date drill, cross-filtering (flagged as beta, with a documented timestamp limitation and unsupported chart types), custom charts via Vega-Lite, brand theming and a mobile-friendly layout, which covers both my office screen and my phone. There is even an AI plain-English summary on top of the dashboard and click-through to the rows behind any number. We found no public information on accessibility of the charts, TV or presentation modes, or localised number and date formats. 2 16 17 4 19
The Data Analyst
The chart library goes well past bar-line-pie: geo maps, retention heatmaps, conversion funnels, metric sheets, pivot tables and custom charts via Vega-Lite, arranged on free-form canvas or raw HTML layouts with dashboard-wide filter, period-comparison and date-drill controls. Cross-filtering is documented in detail — which visualizations participate, per-block opt-out and its beta limitations — alongside drill-down, drill-through, trend and reference lines, and mobile-responsive layouts with custom reusable themes. We found no public information on TV or presentation modes, on chart accessibility, or on localised number and date formats for German readers. 2 3 16 17 19
The IT Administrator
The library is broad — pivot tables, geo maps, metric sheets, funnels, heatmaps and custom charts via Vega-Lite — with dashboard-wide filters, date drill, drill-through, period comparison and cross-filtering across the main chart families, though the pages flag cross-filtering as beta with a documented timestamp limitation. Canvas layouts position blocks freely, HTML and CSS can drive the structure, and reusable themes with custom palettes and typography are documented alongside mobile-friendly display and a smart timezone setting. We found no public information on conditional formatting, comments or annotations, TV or presentation modes, paginated print output, or the accessibility of the resulting charts. 2 16 17 19
The SaaS Product Lead
Canvas, tab and HTML layouts, pivot tables, geo maps, retention heatmaps and funnels, period comparison, date drill and reference lines against targets are documented, with custom charts via Vega-Lite and reusable brand themes — which is what we need for an embedded product look. Cross-filtering is documented as beta with stated limits (timestamp handling, chart types, model relationships) and drill-through is disabled on shareable links. We found no public information on chart accessibility, TV or presentation modes, or localised number formats. 16 2 17 19 4 20
The Skeptic
Filters, drill-down, drill-through, date drill, cross-filtering, pivot tables, geo maps and custom charts via Vega-Lite are all evidenced, with canvas, tab and HTML layouts, reusable themes and a mobile-responsive claim on top. Two things temper it: cross-filtering is flagged as beta with a published list of unsupported chart types and a timestamp/timezone limitation, and drill-through is disabled in dashboards opened from shareable links. We found no public information on chart accessibility, print or pixel-exact report formats, or number-format localisation beyond automatic timezone conversion. 2 3 4 16 17 19 20
Self-service analysis & shared metrics
Show reasoningHide reasoning
How this is scored
Whether people outside the data team can answer their own questions and whether everyone gets the same answer: a visual query builder, a SQL editor for analysts, calculated fields and formulas, a semantic layer or data model where metrics such as revenue or churn are defined once and reused, metric definitions under version control (Git, dbt integration), questions in natural language with the generated query shown, forecasting and anomaly detection with the method stated, and notebooks or Python for deeper analysis.
0 — Dashboards can only be viewed; no one can ask a new question of the data.
3 — Charts are configured from a field list and simple calculated fields; shared metric definitions, SQL and a query builder are basic or not described.
5 — A visual query builder for business users and a SQL editor for analysts, calculated fields and formulas, saved questions reused across dashboards, a data model or dataset layer where joins and metrics are defined once, and natural-language questions that show the query they ran.
8 — A semantic layer with governed metrics and dimensions reused across every report, definitions in code under Git version control or synced with dbt, certified or endorsed datasets, forecasting and anomaly detection with the method stated, and Python or notebook analysis beside the dashboards.
10 — Self-service that stays consistent at scale: every metric defined once and traced to every chart that uses it, changes reviewed and tested before they reach readers, AI answers grounded in the semantic layer with their limits documented, and the model exportable in an open format.
The Finance Controller
A semantic layer in code where metrics are defined once and reused everywhere, Git version control with pull-request review before production, dbt integration, dev/staging/prod environments with rollback, drag-and-drop exploration for business users, a SQL editor for analysts, and natural-language questions answered from the governed definitions. The captured pages state plainly that forecasting is not yet available, and we found no stated anomaly-detection method. 18 1 2 3 22 19
The Managing Director
Metrics are defined once in a code-based semantic layer (AML/AQL) that compiles to SQL on the warehouse, version-controlled in Git with pull-request review, connected to dbt, with endorsed datasets, a drag-and-drop explorer for business users, a SQL editor for analysts, and natural-language questions answered from the governed definitions. For a firm with no one whose job is data, the code-first modelling — pitched as a typed programming language for analytics — is more machinery than I would ever use, but the documented level is high. Forecasting is stated as not yet available (trend lines only), and we found no public information on notebooks or Python analysis. 18 3 22 2 19
The Data Analyst
This is the closest thing to my wish list: metrics defined once in a semantic layer written in AML, versioned in Git with pull-request review before production, synced with dbt, plus a drag-and-drop builder for colleagues and a SQL editor whose access is role-gated. Natural-language questions are answered from the governed definitions, though we found no public information stating that the query generated from a question is shown to the user. Forecasting is explicitly stated as not yet available, and we found no public information on notebook or Python analysis beside the dashboards. 1 3 18 19 22
The IT Administrator
This is the product's centre of gravity: metrics defined once in a code-based semantic layer, compiled to native SQL on our warehouse, versioned in Git, reviewed by pull request and synced with dbt, with a SQL editor for analysts and drag-and-drop exploration plus natural-language questions for everyone else — the AI answers from the governed definitions and respects each user's existing permissions. Endorsement badges, a metric dependency graph and lineage from model to dashboard keep the official numbers findable. Forecasting is stated as not yet available, and we found no public information on anomaly detection or on notebook-based analysis beyond a passing mention of notebooks as a consumer. 1 3 18 19 22
The SaaS Product Lead
The semantic layer is defined in code (AML) in our own Git repository with dbt integration, composable AQL metrics, metric dependency graphs, endorsed datasets and pull-request review before production — the strongest answer I have seen to "same number everywhere". Business users get drag-and-drop exploration without SQL, natural-language questions answered from the governed definitions, and the AI respects each user's existing permissions; the Explorer role can build its own dashboards when granted permission. The captured pages state forecasting is not yet available, and we found no public information on anomaly detection or a Python or notebook environment. 18 3 1 22 19
The Skeptic
This is the strongest part of the evidence: metrics defined once in an as-code semantic layer, versioned in Git or your own repository with dbt integrated, every change passing a reviewed pull request, endorsed content ranked above stale copies in search and AI answers, and natural-language answers said to come from governed definitions while respecting each user's permissions. The definitions are stated to be plain-text code in your own Git repository rather than rows in a vendor database, so an exit leaves readable logic behind. Forecasting is stated as not supported, and we found no public information on anomaly detection methods or notebook-based analysis. 1 2 3 18 19 22
Sharing, scheduled reports & embedding
Show reasoningHide reasoning
How this is scored
How results reach the people who need them: sharing a dashboard with colleagues and with external parties, public or password-protected links, scheduled reports by email or chat (Slack, Microsoft Teams) as PDF, image or data, threshold alerts, comments and annotations, export to PDF, PowerPoint and Excel, embedding dashboards in an intranet, a website or the company's own software product, white-label options, and per-customer data separation for embedded use.
0 — Results cannot leave the editor; no sharing, export or embedding.
3 — Dashboards shared with other users of the account and exported to PDF or CSV; scheduled reports, alerts and embedding are basic or not described.
5 — Sharing with colleagues and by link, scheduled email reports with PDF or image, alerts when a metric crosses a threshold, export to PDF and Excel, and dashboards embedded in a website or intranet with an iframe or script.
8 — Reports delivered to Slack or Microsoft Teams, comments and annotations on dashboards, signed embedding with row-level filtering per viewer, an embedding SDK for a software product with white-label styling, client or guest portals, and an embedding licence model documented.
10 — Distribution as a product: multi-tenant embedded analytics with per-customer data isolation, theming and custom domains, end-user self-service inside the host application, every delivery channel automatable through an API, and usage of shared and embedded content reported to the customer.
The Finance Controller
Scheduled delivery to email and Slack with PNG/PDF attachments and failure notifications, threshold alerts, export to CSV/Excel/PDF, password-protected links with per-link data restrictions for external viewers without an account, and embedding via iFrame and a JS SDK with SSO/JWT, row-level security, white-label styling, per-customer isolation and unlimited embedded viewers. Comments and annotations on dashboards are not documented. 21 20 18 5 7 2
The Managing Director
Scheduled delivery to email and Slack is documented down to the interval (hourly, daily, weekly, monthly) with PNG or PDF attachments, customised messages and failure notices, plus threshold alerts, password-protected shareable links with per-link data restrictions for outside viewers, and exports to CSV, Excel, PDF and Google Sheets — my Monday-morning inbox summary is covered. Embedding runs via iframe and a JavaScript SDK with SSO/JWT, row-level security, white-label styling, per-client data isolation and unlimited viewers. Embedding prices are 'contact us', and we found no public information on Microsoft Teams delivery or comments on dashboards. 21 20 5 18 3 1
The Data Analyst
Scheduled delivery reaches email and Slack with PNG or PDF attachments at hourly-or-longer intervals, threshold alerts exist, and shareable links give external viewers password-protected, row-restricted dashboards without a Holistics account. Embedding is a proper product: iframe and a JavaScript SDK, SSO/JWT, row-level security, white-label styling, per-client data separation, resale rights and unlimited embedded viewers. We found no public information on Microsoft Teams delivery or comments and annotations on dashboards, and embedded pricing beyond the unlimited-viewer statement is by contact. 5 7 18 20 21
The IT Administrator
Reports go out by email and Slack on schedules from every few hours to monthly, with PNG or PDF attachments, failure notifications and alerts when a metric crosses a set value; exports cover CSV, Excel and PDF, with generated files held encrypted on AWS S3 for 24 hours, and shareable links give external viewers dashboard access without accounts, protected by per-link passwords and per-link data restrictions. Embedded analytics ship through an iframe and JavaScript SDK with single sign-on via JWT, row-level security, white-label styling and per-client data isolation by a filtered client identifier, with unlimited viewers and resale rights documented. Embedded pricing details remain a sales conversation, and we found no public information on dashboard comments or delivery to Microsoft Teams. 5 9 18 20 21
The SaaS Product Lead
This is close to what I need for our product: iframe and JavaScript SDK embedding with SSO/JWT, row-level security, white-label styling and deep UI customisation, per-client isolation via an encrypted client id filter, unlimited embedded viewers, and the contractual right to resell embedded solutions. Scheduled delivery reaches email, Slack with PNG or PDF attachments, Google Sheets and SFTP, shareable links work for external viewers without an account with per-link passwords and data restrictions, and embedded AI lets our customers ask questions inside our product. We found no public information on delivery to Microsoft Teams, comments on dashboards, or custom domains. 5 18 20 21 7
The Skeptic
Scheduled delivery to email, Slack, Google Sheets and SFTP with PNG or PDF attachments and failure notifications, threshold alerts, per-link password protection and per-link data restriction for external viewers without accounts, and embedding through an iframe and JavaScript SDK with SSO/JWT, row-level security, white-label styling and per-client filtering are all evidenced. Unlimited embedded viewers are stated, though the details sit behind a contact request, and password enforcement across all links is reserved for a separate plan. We found no public information on comments or annotations on dashboards, or delivery to Microsoft Teams. 2 3 5 18 20 21
Access control, administration & portability
Show reasoningHide reasoning
How this is scored
What a company needs before it gives the tool to everyone, and what leaving would cost: roles and folder or workspace permissions, row-level and column-level security, single sign-on (SAML, OpenID Connect) and user provisioning (SCIM), audit logs and usage analytics, content certification and lifecycle, environments for development and production, a public REST API for administration and content, export of dashboards and definitions in a reusable format, open-source code, and a self-hosted or on-premise edition the customer runs on its own servers.
0 — A single shared login with no permissions; dashboards cannot be exported or administered.
3 — Users with view and edit rights; row-level security, single sign-on, an API and export of definitions are basic or not described.
5 — Roles and folder or workspace permissions, row-level security documented, single sign-on on at least one stated plan, an audit log, a documented REST API, and dashboards and data exportable on termination.
8 — Column-level security and data permissions inherited from the source, SAML and SCIM provisioning, usage analytics for admins, development and production environments or content promotion, dashboards and definitions as code that can be versioned and moved, and a self-hosted or on-premise edition with its own documentation.
10 — Governance and an exit that can be verified: open-source code under a named licence that runs fully self-hosted with feature parity stated, every object (data model, dashboards, permissions) exportable in a documented format another instance imports, audit logs streamed to the customer's own systems, and deletion of every copy on termination documented.
The Finance Controller
Four documented roles, row- and column-level permissions, SAML single sign-on with SCIM provisioning on the custom plan, audit logs with a usage monitoring dashboard, endorsement and archiving for lifecycle, and every definition as plain-text code in my own Git repository while raw data never leaves my warehouse. There is no self-hosted or on-premise edition, the API is described as work in progress, and retained data runs to 180 days after termination unless deletion is requested earlier. 22 1 23 18 8 13 9
The Managing Director
Four user roles with documented permissions, row- and column-level security, SAML single sign-on and SCIM provisioning (documented on the custom plan), two-factor login, audit logs and a usage-monitoring dashboard, plus separate development and production environments with rollback — enough for me to hand this to forty people. Every definition lives as plain text in our own Git repository, which makes the exit story believable. The product is documented as cloud-only with no self-hosted edition, and user provisioning through the API is marked as upcoming. 22 23 9 18 19 6
The Data Analyst
Four roles with a documented permission matrix, row- and column-level permissions enforced centrally across every report, SAML SSO with Okta and Entra ID, SCIM provisioning, two-factor login, audit logs and usage monitoring cover what I need before rolling this out company-wide. The exit story is strong for my situation: every model, metric and dashboard is plain-text code in our own Git repository with development and production environments, so leaving means walking away with readable logic. We found no public information on a self-hosted or on-premise edition — the product is fully cloud-based — or on permissions inherited from the source database, and customer data is retained for 180 days after termination. 2 6 9 18 22 23
The IT Administrator
Four roles with a documented permission matrix, row- and column-level security enforced centrally so sales sees only its own region, SAML single sign-on with Okta and Entra ID, SCIM provisioning, two-factor login, audit logs and admin usage monitoring — and every definition lives as plain-text code in our own Git repository, which makes the exit story unusually clean. Two reservations: SAML single sign-on is documented as part of the custom plan rather than a priced tier, with only Google sign-on on the Standard plan, and the deployment is described as fully cloud-based with no self-hosted or on-premise edition documented on the pages I read — my usual precondition for a tool this deep in our data. 3 6 18 22 23
The SaaS Product Lead
Four roles with a detailed permission matrix, row- and column-level security, SAML SSO with Okta and Entra ID, SCIM provisioning, audit logs, an admin usage-monitoring dashboard, and dev/staging/prod environments with one-click rollback are all documented. Definitions live as plain text in our own Git repository — the vendor's words are "Leave anytime, with readable logic" — and a REST API with a downloadable OpenAPI spec covers administration and user provisioning. The product is documented as fully cloud-based, and we found no public information on a self-hosted or on-premise edition. 22 23 9 3 18 6 8
The Skeptic
Four documented roles with a permission matrix, row- and column-level security, SAML SSO with Okta and Entra ID setup guides, SCIM sync, audit logs, an admin usage dashboard, development and production environments with rollback, and dashboards and models as plain-text code in your own Git repository make a genuine exit story. Two gaps hold it back: the product is stated to be fully cloud-based with no self-hosted edition, and programmatic user provisioning through the API is marked as an upcoming feature. Data is retained for 180 days after termination, or removed earlier at the customer's request. 1 6 8 13 18 19 22 23
European sovereignty
panel opinion
Show reasoningHide reasoning
How this is scored
Who the contracting entity and the parent company are, where the connected business data is queried, cached, extracted and stored, and who the subprocessors are (hosting, query engine, AI model providers, email delivery of reports, support and payment tools). Independently sourced by the sovereignty pipeline; a BI tool reads revenue, customer and employee data from many systems, so every place a copy or cache lands counts, not only the account database. A self-hosted or open-source edition the customer runs on its own European servers counts as the customer's chain, whatever the vendor's seat.
0 — Non-EU vendor and contracting entity, hosting unstated, subprocessors unnamed, and no data processing agreement offered.
3 — A privacy policy and a data processing agreement exist, but hosting location is unstated or non-EU and the subprocessors are not listed.
5 — EU hosting available and an EU contracting entity or EU representative, but parts of the chain (query engine, extracts and caches, AI features, report emails, support, payment) run through non-EU providers without a stated safeguard.
8 — EU hosting on named infrastructure, EU contracting entity, subprocessors listed with their locations, a data processing agreement published, where extracts and caches are stored stated, and security certifications (ISO 27001, SOC 2) stated — or a self-hosted edition documented that keeps every query and cache on the customer's own servers.
10 — Sovereign end to end and evidenced: European ownership, entity, hosting and every subprocessor including AI features, or a self-hosted open-source edition with no call home, data export and deletion documented, and certifications published with their scope rather than implied.
The Finance Controller
The contracting entity is a Singapore company, but EU hosting in Frankfurt is selectable, only metadata and a query cache are held while my data stays in my own databases, and a published data processing agreement with a subprocessor list plus SOC 2 and GDPR claims exists. The privacy policy says personal information may also be stored in Singapore or the United States, AI features run through unnamed third-party providers, and no EU contracting entity or representative is shown — questions I would want in writing before connecting DATEV. 13 9 8 11 12 18 5
The Managing Director
A Frankfurt, Germany region is one of three selectable data centres, raw business data never leaves our own database (only metadata and query-result caches are held, expiring after a customer-set duration), and a published data processing agreement lists subprocessors, with SOC 2 and GDPR compliance claimed. But the contracting entity is Holistics Software Pte Ltd of Singapore, the privacy policy says personal information may additionally be stored in Singapore or the United States, AI features use third-party providers, and exported report files are stored on AWS S3 — an EU-only chain is not something the captured pages evidence. 13 9 12 11 5
The Data Analyst
The contracting entity is Holistics Software Pte Ltd of Singapore, and while I can select a Frankfurt data centre where my databases are processed, the privacy policy says personal information may additionally be stored in Singapore or the United States, and the data processing agreement allows customer data to be transferred to the data centre locations Holistics operates. Sub-processors are listed in the data processing agreement, SOC 2 and GDPR compliance pages are published, and the product stores only metadata and a query-result cache rather than raw data, with report export files on encrypted S3 storage removed after 24 hours. We found no public information on an EU contracting entity or EU representative, and the locations of the third-party AI providers are not stated in the captured pages. 9 11 12 13
The IT Administrator
A Frankfurt, Germany region is one of three selectable processing locations, a data processing agreement is published with subprocessors listed and audit rights, SOC 2, GDPR and HIPAA compliance are claimed, and no raw data is stored — the cache holds query results only, so our warehouse stays the single copy. Against that, the contracting entity is Holistics Software Pte Ltd of Singapore, the privacy policy says personal information may additionally be stored in Singapore or the United States, the DPA permits customer data to be processed in any data centre Holistics operates, third-party AI and billing providers appear without locations, exported report files sit on AWS S3 with no region stated, and customer-drafted data processing agreements are only considered for custom Enterprise plans. 5 9 11 12 13
The SaaS Product Lead
The contracting entity is Holistics Software Pte Ltd of Singapore, and we found no public information on an EU contracting entity or EU representative; the data processing agreement is governed by Singapore law unless EU data protection law applies. A Frankfurt data centre is selectable and customers choose where their databases are processed, subprocessors are listed in the data processing agreement, SOC 2 is stated, and the vendor documents that raw data stays in the customer's database with only metadata and a temporary query cache held. The same agreement also permits processing across the data centres Holistics operates globally, and the privacy policy says personal information may be stored in Singapore or the United States. 13 11 9 5 12
The Skeptic
The contracting entity is Holistics Software Pte Ltd under Singapore law, a Frankfurt data centre is selectable among three regions, and a data processing agreement with standard contractual clauses, audit rights and a published security annex exists. The same pages state that customer data may be processed on a global basis in Holistics-operated locations and that personal information may be stored in Singapore or the United States, and we found no public information on an EU contracting entity or representative, or on the identities and locations of the sub-processors the agreement refers to. SOC 2, GDPR and HIPAA compliance are claimed without published scope, report exports are stored on AWS S3 for 24 hours, and there is no self-hosted edition that would keep the chain on the customer's own servers. 5 9 11 12 13
Pricing transparency
Show reasoningHide reasoning
How this is scored
Whether a buyer can compute the real annual cost from public pages alone: price per creator or editor seat and whether viewers are free or paid, capacity or usage pricing (rows, refreshes, queries, AI credits), which features (row-level security, SSO, embedding, API, more connectors, faster refresh) sit behind a higher tier or "contact sales", the price of embedding for external users, the self-hosted edition's licence, the free tier and its limits, minimum term and setup.
0 — No public prices at all; every customer is a sales call.
3 — A starting price or a free tier exists, but how cost scales with viewers, data volume or features is unclear.
5 — Tiers are public with their seat price and main inclusions, but at least one commonly needed piece (viewer seats, row-level security, SSO, embedding, extra connectors or refresh frequency) is unpriced or "on request".
8 — Every tier priced publicly with its scaling rule (creators, viewers, capacity, rows), viewer pricing stated, add-ons and usage overage priced, embedded and self-hosted pricing stated, minimum term and VAT treatment stated.
10 — Complete price computability: annual cost derivable for a given number of creators and viewers, data volume and feature set, with every add-on, embedding, setup, support and overage fee and the cancellation and data-return terms published.
The Finance Controller
Two public tiers, Entry at $800/month with 100 reports and the first 10 users and Standard at $1000/month with unlimited reports, plus a published additional-user price of $12.5/month, $100/month per additional 100 reports, two months off yearly, and stated tax, renewal and refund terms. Single sign-on sits in an unpriced custom plan, password-enforced links in an unpriced Security Compliance Suite, and embedded analytics is contact-us, so the full annual cost for my seat mix is not computable from public pages alone. 7 23 20 5 13
The Managing Director
Entry is published at $800/month (100 reports, first 10 users) and Standard at $1,000/month (unlimited reports, first 10 users), with additional users at $12.5/month and another 100 reports at $100/month, yearly billing advertised as '2 months off', taxes excluded, and only a 14-day free trial rather than a free tier. The published per-user add-on at least makes the cost of the whole team looking visible, though the pages do not distinguish viewer from editor pricing. Single sign-on sits in an unpriced custom plan, requiring passwords on all shareable links belongs to a separately named Security Compliance Suite plan without a published price, and embedding details are 'contact us'. 7 6 5 23 20 13
The Data Analyst
The two published tiers are concrete: Entry at $800/month with 100 reports and the first 10 users, Standard at $1000/month with unlimited reports, additional users at $12.5/month and additional 100 reports at $100/month, with yearly billing taking 2 months off, taxes stated as exclusive of government-imposed sales taxes, and cancellation, renewal and refund terms published. Embedded analytics is stated to include unlimited viewers and a 14-day free trial exists. Single sign-on sits in an unpriced custom plan, the Security Compliance Suite that gates password enforcement on all shareable links is separately unpriced, and embedded details are on request — so the real annual cost for a given feature set is not computable from public pages alone. 6 7 13 20 23
The IT Administrator
Two tiers are public — Entry at $800/month with 100 reports and the first 10 users, Standard at $1000/month with unlimited reports — with additional users at $12.5/month, each additional 100 reports at $100/month, a yearly discount of two months, taxes stated as exclusive, a 14-day trial and prorated plan changes. But the pieces I need to budget sit behind a sales call: SAML single sign-on belongs to the custom plan, password enforcement on all shareable links belongs to an unpriced Security Compliance Suite, and embedded analytics promise unlimited viewers with details on contact. We found no public information on a free tier or on the price of the custom Enterprise plan. 5 6 7 20 23
The SaaS Product Lead
Entry at $800/month with 100 reports and the first 10 users, Standard at $1000/month with unlimited reports, additional users at $12.5/month and an additional 100 reports at $100/month are public, yearly billing takes 2 months off, and fees are stated as exclusive of government taxes. But embedding is priced only through "contact us", SSO sits in a Custom Plan, a separate Security Compliance Suite gates password-enforced links, and higher plans are named without prices — so I cannot put an embedding licence cost into our product price before signing. 7 5 23 20 13 6
The Skeptic
Two tiers are public with their inclusions — Entry at $800/month for 100 reports and the first 10 users, Standard at $1000/month for unlimited reports — alongside add-on prices of $12.5/month per additional user and $100/month per additional 100 reports, tax-exclusive terms, proration on plan change and credit notes on downgrade. But the pieces a governed deployment needs sit behind unpublished doors: SAML SSO is described as a Custom Plan item, enforcing passwords on all shareable links is exclusive to a Security Compliance Suite whose price is not shown, and embedded analytics pricing beyond the unlimited-viewers statement is a contact request. A 14-day free trial is public; we found no public information on a free tier or on the price of the higher plans that carry row-level access control. 5 6 7 20 23
European sovereignty — proven facts
0 of 6 dimensions provenBuilt only from facts shown on the vendor's own pages. A dimension we could not prove is left open, not scored as zero.
| Legal entity | Not determined ⚠ unverified | — | uncited Report an error |
|---|---|---|---|
| Hosting location | Not determined ⚠ unverified | — | uncited Report an error |
| Hosting options | Not determined ⚠ unverified | — | uncited Report an error |
| Open source | Not determined | — | uncited Report an error |
| Data processing agreement | Not determined ⚠ unverified | — | uncited Report an error |
| Transfer impact assessment | Not determined | — | uncited Report an error |
Questions about Holistics
Is Holistics European?
No. whats-best.ai classifies Holistics as Rest of world.
Where does Holistics store data?
Not stated on the vendor’s pages as of 1 Nov 2026.
Does Holistics have a free plan?
Not stated on the vendor’s pages as of 1 Nov 2026.
What are the best alternatives to Holistics?
As of 1 Nov 2026, the panel rates Metabase (3.5/5), Preset (Apache Superset) (3.5/5) and Luzmo (3/5) highest among the other 15 Business Intelligence & Dashboards products evaluated. Ratings that look equal are rounded to half stars; the order uses the unrounded rating, then the name. The highest-rated European alternative is Luzmo (EU-Made). Ratings are the AI panel’s opinion, formed from public evidence: how scores are made. The full list, with European products first: Holistics alternatives.
Where this could be wrong
- Evidence ages. The oldest capture behind this page is from 1 Nov 2026. Vendors change pricing and policies without notice; every fact reflects its source as of the capture date shown in the registry.
- Weak sourcing — Data processing agreement, Legal entity, Hosting location, Hosting options. Not confirmed on the vendor’s own pages as captured.
- AI can misread a source. Extraction and judgement are automated; a citation guarantees traceability, not infallibility. If something here is wrong, say so — no account needed, every report is decided within 5 business days, and accepted corrections are published.
What we left out
A claim that does not survive our checks costs us the claim, not the page. This is what was taken off this one.
- 12 product facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 6 legal facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 5 compliance facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 5 pricing facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 1 hosting fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material. Know more? Tell us
- 4 sovereignty dimensions could not be confirmed on the vendor’s own pages and are shown as unknown. Know more? Tell us
- 6 of the readings below were written against an earlier fact sheet — a fact has been corrected, added or pulled since. Until the panel next runs on this product you are reading the older judgement. Know more? Tell us
Sources (23)
The pages every claim on this page was read from — each one checked, dated, and kept verifiable.
- 1 Vendor homepage www.holistics.io Checked 1 Nov 2026 Details →
- 2 Features page www.holistics.io Checked 1 Nov 2026 Details →
- 3 Features page (self-service BI) www.holistics.io Checked 1 Nov 2026 Details →
- 4 Features page (dashboards) www.holistics.io Checked 1 Nov 2026 Details →
- 5 Features page (embedded analytics) www.holistics.io Checked 1 Nov 2026 Details →
- 6 Integrations page www.holistics.io Checked 1 Nov 2026 Details →
- 7 Pricing page www.holistics.io Checked 1 Nov 2026 Details →
- 8 API documentation docs.holistics.io Checked 1 Nov 2026 Details →
- 9 Security / trust page docs.holistics.io Checked 1 Nov 2026 Details →
- 10 GDPR page docs.holistics.io Checked 1 Nov 2026 Details →
- 11 Data processing agreement (dpa) docs.holistics.io Checked 1 Nov 2026 Details →
- 12 Privacy policy docs.holistics.io Checked 1 Nov 2026 Details →
- 13 Terms of service docs.holistics.io Checked 1 Nov 2026 Details →
- 14 Data sources, connectors & refresh — found from sitemap docs.holistics.io Checked 1 Nov 2026 Details →
- 15 Data sources, connectors & refresh — found from sitemap docs.holistics.io Checked 1 Nov 2026 Details →
- 16 Dashboards, charts & interactivity — found from sitemap www.holistics.io Checked 1 Nov 2026 Details →
- 17 Dashboards, charts & interactivity — found from sitemap docs.holistics.io Checked 1 Nov 2026 Details →
- 18 Self-service analysis & shared metrics — found from sitemap www.holistics.io Checked 1 Nov 2026 Details →
- 19 Self-service analysis & shared metrics — found from sitemap www.holistics.io Checked 1 Nov 2026 Details →
- 20 Sharing, scheduled reports & embedding — found from sitemap www.holistics.io Checked 1 Nov 2026 Details →
- 21 Sharing, scheduled reports & embedding — found from sitemap docs.holistics.io Checked 1 Nov 2026 Details →
- 22 Access control, administration & portability — found from sitemap docs.holistics.io Checked 1 Nov 2026 Details →
- 23 Access control, administration & portability — found from sitemap docs.holistics.io Checked 1 Nov 2026 Details →