# CUX — Conversion Optimization

CUX by CUX sp. z o.o. holds a panel rating of 1/5 from 6 AI judges (category median 2/5), as of 2026-11-04. Provenance: provenance unknown; sovereignty: not determined.

- Vendor: CUX sp. z o.o. (https://cux.io)
- Category: [Conversion Optimization](https://whats-best.ai/software/conversion-optimization.md)
- Provenance (editorial classification): provenance unknown
- Canonical page: https://whats-best.ai/software/conversion-optimization/cux
- Alternatives: https://whats-best.ai/software/conversion-optimization/cux/alternatives ([markdown](https://whats-best.ai/software/conversion-optimization/cux/alternatives.md))
- Data as of: 2026-11-04 · evaluated 2026-11-04 · oldest source captured 2026-11-03

**AI-generated.** Every score, rationale and verdict here is written by a panel of AI judges from public evidence — an analysis, not a hands-on test. Every fact quotes the vendor page it was read from. No score can be bought. How scores are made: https://whats-best.ai/methodology

## At a glance

- Vendor: CUX sp. z o.o.
- Headquarters: Not stated on the vendor’s pages as of 3 Nov 2026
- Data hosting: Not stated on the vendor’s pages as of 3 Nov 2026
- Free plan: Not stated on the vendor’s pages as of 3 Nov 2026

## The panel's verdict

CUX is a digital experience analytics platform, and the vendor's own knowledge base states it "is not a tool for creating A/B tests", with setup and traffic distribution assigned to a testing platform, so experimentation scope and statistical rigour both range 0 to 0 — its documented role is analysing experiments through goals, waterfalls and heatmaps. Sovereignty is its strength at 4 to 5: CUX Research Sp. z o.o. of Wrocław, EU-based data storage, and the vendor states it hosts only in ISO 27001-certified data centres in Frankfurt, Warsaw, Roubaix and Strasbourg; we found no public information on a data processing agreement or subprocessor list. Data and integrations score 3 to 4, led by the read-only dataLayer capture; performance impact is flat at 2, with no public information on script weight or Core Web Vitals impact. Consent and tracking spread 2 to 4: the privacy documentation is concrete — cookie lifetimes, random identifiers, anonymised IPs, masking in the browser — but no consent-platform integration or pre-consent behaviour is documented, and judges weighed that gap differently. Only a free trial is documented on pricing.

**Speaks for it:**
- Sovereignty scores cluster at 4 to 5, resting on a named Polish entity (CUX Research Sp. z o.o., Wrocław) with published KRS, NIP and REGON registration numbers.
- The vendor states it hosts only in ISO 27001-certified data centres in Frankfurt, Warsaw, Roubaix and Strasbourg, with EU-based data storage presented as standard.
- The privacy documentation is concrete: session and persistent cookies with their lifetimes, random localStorage and sessionStorage identifiers, anonymised IPs with the full address stated as not stored, and masking applied in the browser before sending.
- The dataLayer capture integration is documented in depth and is read-only, with limits stated (event names stored once per visit, no backfill, user data fields removed before storage).
- Enterprise clients are offered client-side script hosting and access to the tracking logic, and CSP configuration is provided during onboarding.

**Held against it:**
- Experimentation scope scores range 0 to 0 — the vendor states CUX is not a tool for creating A/B tests and that test setup and traffic distribution must be done in a testing platform of your choice.
- Statistical rigour scores range 0 to 0 — we found no public information on a statistical method, significance figures, sample-size guidance or sample ratio mismatch detection, and the A/B testing article page carries no article text.
- Performance impact is a flat 2 — we found no public information on script weight, loading behaviour or Core Web Vitals impact, and the snippet installation article body is absent.
- We found no public information on an API, webhooks or visitor-level export, so results live inside the vendor's dashboard.
- We found no public information on a consent management platform integration, a hold-until-consent mode, or behaviour before consent — the gap behind the 2-to-4 spread on consent and tracking.

**Best for:**
- You already run A/B tests in a dedicated testing platform and want a behavioural analysis layer — goals, waterfalls and heatmaps — over the resulting variants.
- Your procurement requires EU-based storage and a European contracting entity with published registration numbers and named ISO 27001-certified data centres.
- You install via Google Tag Manager and want to find visits containing specific events pushed to window.dataLayer, filtering them inside the product.
- You are an enterprise buyer who wants client-side script hosting and access to the tracking logic for internal audits.

**Avoid if:**
- You need one tool that splits traffic and serves variants — the vendor's documentation assigns test setup to a testing platform of your choice or your own development framework.
- You need a statistically decided winner — significance figures, sample-size guidance or sample ratio mismatch detection — to defend to finance.
- You must budget a tracking script's performance cost before installing it on conversion-critical pages.
- You need to reconcile results against your own order data in a warehouse — the documented integrations are inbound, and we found no public information on export.

## Scores by judge and criterion

Scores out of 5, each judge scoring independently against the published rubric (v2). "n/r" = not rated: the vendor publishes no price, or the judge found no public information on that criterion.

| Criterion | The Growth Lead | The E-Commerce Manager | The Product Engineer | The CRO Consultant | The Data Protection Officer | The Skeptic |
| --- | --- | --- | --- | --- | --- | --- |
| Experiment types & delivery | 0/5 | 0/5 | 0/5 | 0/5 | 0/5 | 0/5 |
| Statistical method & guardrails | 0/5 | 0/5 | 0/5 | 0/5 | 0/5 | 0/5 |
| Consent & visitor tracking | 1.5/5 | 1/5 | 2/5 | 1.5/5 | 1/5 | 2/5 |
| Snippet performance & flicker | 1/5 | 1/5 | 1/5 | 1/5 | 1/5 | 1/5 |
| Analytics, data export & integrations | 2/5 | 1.5/5 | 2/5 | 1.5/5 | 1.5/5 | 2/5 |
| European sovereignty | 2/5 | 2/5 | 2.5/5 | 2.5/5 | 2/5 | 2.5/5 |
| Pricing transparency | n/r | n/r | n/r | n/r | n/r | n/r |
| **Weighted verdict** | **1/5** | **1/5** | **1/5** | **1/5** | **1.5/5** | **1/5** |

### The judges

- **The Growth Lead** (v1.0): Runs the testing programme for a German marketing team and reports uplift to the board. Wants a visual editor the team can use without a developer, targeting that goes beyond the URL, and results she can defend when finance asks where the promised revenue went.
- **The E-Commerce Manager** (v1.0): Owns a shop where a tenth of a second of load time shows up in the conversion rate. Wants personalisation that can be tested against a control, a snippet that does not flicker the product page, and a traffic-based price that does not jump a tier every December.
- **The Product Engineer** (v1.0): Ships experiments behind feature flags and would rather not ship a third-party script at all. Wants server-side SDKs for the stack in use, edge delivery, metrics computed in the warehouse the team already trusts, and an API good enough to build internal tooling on.
- **The CRO Consultant** (v1.0): Sets up testing programmes for several clients and has to recommend a platform each can afford and defend. Reads for multi-project management, clean analytics integration, a consent setup a client's DPO will sign off, and a traffic metric she can estimate before the contract.
- **The Data Protection Officer** (v1.0): Has to answer whether the test script may run before the consent banner is answered, and usually finds the vendor has not said. Wants the storage keys listed, a documented consent-pending mode, visitor data processed in the EU, and a published subprocessor list that includes the CDN.
- **The Skeptic** (v1.0): A statistician who has watched too many "winners" regress to zero. Reads for the method by name, what stops a team from peeking, sample ratio mismatch checks and multiple-comparison corrections — and treats a "probability to beat" without documented assumptions as marketing.

## European sovereignty — proven facts

Built only from facts on the vendor's own pages; a dimension we could not prove is left open, never scored as zero. Headline: not determined.

| Dimension | Finding | Points | Source |
|---|---|---|---|
| Legal entity | Not determined | — | — |
| Hosting location | Not determined | — | — |
| Hosting options | Not determined | — | — |
| Open source | Not determined | — | — |
| Data processing agreement | Not determined | — | — |
| Transfer impact assessment | Not determined | — | — |

## Key facts

Each fact is the vendor's own statement, cited to the source page it was read from ([S*n*] → Sources).

**Compliance**
- Audit readiness: 0 · yes [S2]
- Code audit: yes [S2]
- Csp configuration provided: during onboarding · yes [S7]
- Data masking: yes [S2]
- Encryption: 256 · 1.2 [S2]
- GDPR: yes [S2]
- Incident response: yes · yes · yes [S2]
- Sast: yes · yes · yes [S2]

**Data**
- Browser info collected: producer · version · viewport · preferred_language [S5]
- Consent based collection: yes [S5]
- Cookies types: session · persistent [S5]
- Device info collected: type · os_name_version · manufacturer · screen_resolution · screen_orientation [S5]
- Disable recording: remove or block tracking snippet · yes [S5]
- Encrypted transfer: yes [S5]
- Event collection: click_coordinates · cursor_movement · xpath · event_time [S5]
- Identifier storage: localStorage · sessionStorage · yes [S5]
- Ip anonymization: yes · no [S5]
- Keyboard collection: no [S5]
- Masking: Masking sensitive data, mock-up mode, masking selected elements [S9]
- Minimal collection: yes · yes · yes [S2]
- No screen recording: no · yes [S5]
- Pii collection: no · yes [S2]
- Scope change notice: 7 [S5]
- Scope limited to snippet tabs: no [S5]

**Hosting**
- Data centers: Frankfurt · Warsaw · Roubaix · Strasbourg · yes · 24/7 · yes · yes [S2]
- EU storage: yes [S2]

**Integrations**
- Datalayer capture: dataLayer Capture [S9]
- Datalayer capture: yes [S7]
- Google analytics: Google Analytics Integration [S9]
- Google analytics: yes [S7]
- Google analytics: yes [S10]
- Google tag manager snippet: Google Tag Manager snippet installation [S9]

**Legal**
- Entity: CUX Research Sp. z o. o. [S2]
- Headquarters: Wrocław · Fabryczna 6, 53-609 Wrocław · Poland [S2]
- Headquarters: 53-609 · Wrocław · Fabryczna 6 · Poland [S10]
- Offices: Berlin, Germany · Lisboa, Portugal [S2]
- Offices: Berlin, Germany · Lisboa, Portugal [S10]
- Registration: 0000792391 · PL8943142798 · 383714872 [S2]

**Product**
- Ab article empty: The A/B Testing In CUX page currently has no article text [S3]
- Ab setup external: A/B test setup and traffic distribution must be done in a testing platform of your choice or your own development framework [S4]
- Ab testing: A/B testing analysis support via Waterfalls, Goals, Heatmaps [S10]
- Ab testing role: CUX is not a tool for creating A/B tests, but it is the perfect place to analyze your experiment [S4]
- Account roles: Team roles & access types; IP address blocking [S10]
- Alerts: yes [S7]
- Article missing: Snippet Installation article body not present on page [S8]
- Automatic form masking: yes [S5]
- Cross device tracking: send internal User ID · yes [S6]
- Datalayer capture: dataLayer Capture finds website visits containing events pushed to window.dataLayer [S10]
- Datalayer enablement path: Project Settings > Integrations > External Integrations > dataLayer Capture · yes [S10]
- Datalayer no backfill: no [S10]
- Datalayer once per visit: yes [S10]
- Datalayer privacy warning: no [S10]
- Datalayer readonly: Integration reads data layer only; does not create events or install GTM [S10]
- Datalayer requirements: Requires CUX tracking snippet and a window.dataLayer array available during page initialization [S10]
- Datalayer storage limits: user_data · yes · no [S10]
- Goal step gtm event: Goals/Waterfalls support a GTM Event step configured with dataLayer field/value pairs [S10]
- Heatmap userflow: Product includes Heatmaps and User Flow modules [S10]
- Identification method: browser cookies · no [S6]
- Identity filter: Identity filter on Visits page finds all recordings for a User ID [S6]
- Industries: Finance & Insurance · Travel & Hospitality · e-commerce [S10]
- Masking: Sensitive data masking supported (mock-up mode, selected elements) [S10]
- Masking before send: before sending to servers [S5]
- Masking configuration: yes · yes · yes [S2]
- Masking options: enterprise feature · yes · yes [S5]
- Mobile analytics: Mobile Analytics - analyze real user behavior inside your app [S4]
- Mobile analytics: yes [S6]
- Mobile analytics announcement: Mobile Analytics - analyze real user behavior inside your app [S7]
- Mobile analytics new: new · Mobile Analytics [S1]
- Mobile analytics new: Mobile Analytics announced as new [S10]
- Mobile sdks: Android · iOS · React Native · Flutter [S5]
- Mock up mode: enterprise · yes [S5]
- Partner program: yes [S6]
- Platform modules: Web Analytics · Mobile App Analytics · Behavioral Insights [S2]
- Platform modules: Web Analytics · Mobile App Analytics · Behavioral Insights · Security & Compliance [S10]
- Positioning: Digital Experience Analytics platform combining behavioral analytics with UX consultancy [S1]
- Privacy masking: yes [S6]
- Privacy masking: Mock-Up Mode · Masking Selected Elements · yes [S7]
- Quantitative and behavioral: provides quantitative data and behavioral insight into A/B variants [S4]
- Rbac: yes · yes [S2]
- Reporting: Simple Weekly Report feature exists [S10]
- Self hosting: yes · enterprise · yes [S2]
- Snippet gtm prerequisite: yes · Google Tag Manager already configured on the website [S7]
- User visit history: Full single-user visit history visible within the retention period [S6]
- Visit filter datalayer: Visits Advanced Filters include GTM Integrations > dataLayer Variables with field name and expected value (regex matching) [S10]
- Visit segments: Visit filtering, segments, shared recordings, Visit Vault [S10]
- Web features: Dashboard features include Goals, Waterfalls, experience metrics (rage click, dead click, etc.), engagement, platforms, OS, browsers [S10]

**Support**
- Free trial: yes [S6]

## Questions

### Is CUX European?

Not determined: the vendor’s pages as captured do not say where CUX is based.

### Where does CUX store data?

Not stated on the vendor’s pages as of 3 Nov 2026.

### Does CUX have a free plan?

Not stated on the vendor’s pages as of 3 Nov 2026.

### What are the best alternatives to CUX?

As of 4 Nov 2026, the panel rates [GrowthBook (3.5/5)](https://whats-best.ai/software/conversion-optimization/growthbook), [Varify.io (3/5)](https://whats-best.ai/software/conversion-optimization/varify) and [AB Tasty (3/5)](https://whats-best.ai/software/conversion-optimization/ab-tasty) highest among the other 37 Conversion Optimization products evaluated. Ratings that look equal are rounded to half stars; the order uses the unrounded rating, then the name. The highest-rated European alternative is [Varify.io](https://whats-best.ai/software/conversion-optimization/varify) (EU-Made). Ratings are the AI panel’s opinion, formed from public evidence: [how scores are made](https://whats-best.ai/methodology#ordering). The full list, with European products first: [CUX alternatives](https://whats-best.ai/software/conversion-optimization/cux/alternatives).

## What this page leaves out

- We found no public information on pricing on the pages we read (cux.io, cux.io/security, cux.io/knowledge-base/a-b-testing-in-cux, cux.io/knowledge-base/the-role-of-cux-in-a-b-testing-analysis, cux.io/knowledge-base/privacy, cux.io/knowledge-base/tracking-individual-user-activity-on-a-website and 4 more). If the vendor publishes it somewhere else, send us the page.
- 43 product facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 26 legal facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 5 compliance facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 2 hosting facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 1 integrations fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material.
- 1 support fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material.
- 3 sovereignty dimensions could not be confirmed on the vendor’s own pages and are shown as unknown.

## Sources

- [S1] Vendor page: https://cux.io (checked 2026-11-03)
- [S2] Security / trust page — found from the homepage: https://cux.io/security/ (checked 2026-11-03)
- [S3] Experiment types & delivery — found from sitemap: https://cux.io/knowledge-base/a-b-testing-in-cux/ (checked 2026-11-03)
- [S4] Experiment types & delivery — found from sitemap: https://cux.io/knowledge-base/the-role-of-cux-in-a-b-testing-analysis/ (checked 2026-11-03)
- [S5] Consent & visitor tracking — found from sitemap: https://cux.io/knowledge-base/privacy/ (checked 2026-11-03)
- [S6] Consent & visitor tracking — found from sitemap: https://cux.io/knowledge-base/tracking-individual-user-activity-on-a-website/ (checked 2026-11-03)
- [S7] Snippet performance & flicker — found from sitemap: https://cux.io/knowledge-base/integrate-snippet/ (checked 2026-11-03)
- [S8] Snippet performance & flicker — found from sitemap: https://cux.io/knowledge-base/cux-snippet-installation/ (checked 2026-11-03)
- [S9] Analytics, data export & integrations — found from sitemap: https://cux.io/knowledge-base/cux-integrations/ (checked 2026-11-03)
- [S10] Analytics, data export & integrations — found from sitemap: https://cux.io/knowledge-base/enable-data-layer-capture-integration/ (checked 2026-11-03)

---

Cite as: whats-best.ai, "CUX — Conversion Optimization", AI panel analysis, as of 2026-11-04. https://whats-best.ai/software/conversion-optimization/cux

Corrections: https://whats-best.ai/correct/1390?target=page