Lead Generation
Whoisvisiting
Provenance unknown Report an errorPanel rating · 6 judges · How to read the stars
Category median
Sovereignty: 1 of 6 dimensions proven
0–5 in half steps. 5 means the rubric's top anchor is met on the evidence.
by Whoisvisiting Ltd · www.whoisvisiting.com
Report an error on this page Is this your product? →
Link to this page
Add ?theme=dark to the image address for dark backgrounds.
The badge shows the category and the month of the latest evaluation, and EU-Made where
that is the product’s provenance. It never shows a score.
Whoisvisiting at a glance
- Vendor
- Whoisvisiting Ltd
- Headquarters
- Not stated on the vendor’s pages as of 3 Nov 2026
- Data hosting
- Outside the EU by default source, captured 3 Nov 2026
- Free plan
- Not stated on the vendor’s pages as of 3 Nov 2026
- Panel verdict
- The AI panel rates Whoisvisiting 1/5, the mean of 6 judges. Whoisvisiting, from Whoisvisiting Ltd, tracks companies visiting your website through a tracking code and reverse DNS and hands over business contact details — email, telephone and social channels — plus publicly available information on key employees with job titles. how scores are made
- As of
- Vendor pages captured 3 Nov 2026; evaluated by the panel 3 Nov 2026. all sources
Read this page as one judge. Each weighs the same scores by what they care about.
The panel's verdict
Whoisvisiting, from Whoisvisiting Ltd, tracks companies visiting your website through a tracking code and reverse DNS and hands over business contact details — email, telephone and social channels — plus publicly available information on key employees with job titles. Visitor identification is the product's core strength, scoring 4, the bench's top mark, for per-company session and journey detail, filtering, lead ranking against the buyer's ideal customer profile and real-time email alerts. Weakest are sovereignty at 0-1 and data provenance at 1-2: the vendor publishes addresses in Northampton, United Kingdom, and Sunnyvale, California, the privacy policy notes Google Analytics data stored in the United States, sources appear only as "publicly available information", and we found no public information on a GDPR legal basis or removal route for the people identified. Pricing transparency scored 3-4: £59 monthly for under 7,000 visitors each month, a 20% discount for annual payments, and a full-access 14-day trial. Data coverage and prospecting compliance scored 2, CRM sync and export 2-3; scores were never more than a point apart.
Speaks for it
- Real-time, company-level visitor identification through reverse DNS and a tracking code, with per-company session and journey detail and trigger alerts by email.
- Lead ranking against your own ideal customer profile, alongside detailed filtering, tagging, user assignment and deal status.
- Business contact details — email, telephone and social channels — plus publicly available information on key employees with job titles.
- The vendor states the tool is "not capable of identifying individuals who have visited your website".
- A full-access 14-day free trial with unlimited users, and a public £59 monthly price for under 7,000 visitors each month with a 20% discount for annual payments.
Held against it
- We found no public information on record counts, coverage by country or region, email verification or a refresh cadence beyond "manual cleaning from within the database".
- We found no public information on a GDPR legal basis for the contact data, a notice to the people identified, or an opt-out and removal route for them.
- Published addresses in Northampton, United Kingdom and Sunnyvale, California, with the privacy policy noting storage in the United Kingdom and Google Analytics data stored in the United States, and we found no public information on EU hosting, a transfer basis, a data processing agreement or a subprocessor list.
- We found no public information on a consent position or consent mode for the tracking script.
- We found no public information on export of the contacts found, a suppression or do-not-contact list, guidance on EU cold-outreach rules, or CRM integration beyond the single named HubSpot push.
Best for
- You run B2B marketing on your own website and want to know which companies visited, with contact details and real-time email alerts while interest is fresh.
- You rank and prioritise leads against your own ideal customer profile using first-party engagement such as pages visited, channel and time per page.
- You already use HubSpot, the one CRM the pages name, and want identified companies handed over to it.
- Your site is under 7,000 visitors each month and you want a published £59 monthly price, a 20% discount for annual payments and a full-access 14-day trial with unlimited users.
Avoid if
- Your procurement or data protection review stops without documented EU hosting, a transfer basis or a data processing agreement for a tool holding contact data.
- You need to vet the database itself — record counts, country coverage, verification standards — before your team commits.
- You must clear a documented consent position or consent mode for a tracking script before it fires behind your consent banner.
- Your site is above the 7,000-visitors-per-month band, the only band with a published price.
The scores
| Criterion | Panel median |
|---|---|
| Coverage, accuracy & freshness | 1 of 5 |
| Data sources & lawful basis | 0.5 of 5 |
| Visitor identification & intent signals | 2 of 5 |
| Prospecting workflow & outreach rules | 1 of 5 |
| CRM sync, enrichment & export | 1 of 5 |
| European sovereignty | 0.5 of 5 |
| Pricing transparency | 1.5 of 5 |
Coverage, accuracy & freshness
Show reasoningHide reasoning
How this is scored
How much of the target market the database actually covers — judged on DACH and EU coverage as much as North American — and what the vendor documents about verification and refresh, because accuracy claims cannot be checked from outside.
0 — Not a data product: the tool supplies no contact or company data and only manages leads the customer brings.
3 — Total record counts for the database with the data types offered (email, phone, company data) and email verification mentioned.
5 — Coverage stated by country or region with Europe or DACH included, email verification described, firmographics beyond name and domain (industry, size, revenue), and a refresh cadence or last-verified date stated.
8 — Coverage broken down by country, industry and data type (email, direct dial, mobile), verification method and refresh cadence documented, company data drawn from official registers where available, and a bounce or credit-back guarantee with stated terms.
10 — The vendor is accountable for its data: per-country coverage and accuracy methodology published, every field carrying a last-verified date visible to the user, register-sourced company data, and credit-back terms that make inaccuracy the vendor's cost rather than the buyer's.
The SDR Team Lead
The pages show email, telephone and social contact details per identified company, with job titles for key employees, and mention 'manual cleaning from within the database' as the method. We found no public information on database size, coverage by country or region including the DACH, or any verification standard and refresh cadence — and connect rate, not feature lists, is what I buy a database on. 4 6
The RevOps Manager
The tool hands over business contact details — email, telephone and social channels — plus publicly available information on key employees with job titles, and an early-access directory of similar business profiles. We found no public information on record counts, coverage by country or region including DACH and Europe, email verification, or a refresh cadence beyond 'manual cleaning from within the database', which keeps this below the level of a documented database. 4 6
The Data Protection Officer
The captured pages document the data types on offer — business email, telephone and social channels for visiting companies, plus publicly available job-title information for key employees — but give no record counts, no country or regional coverage, and no verification method beyond "manual cleaning from within the database". We found no public information on a refresh cadence, last-verified dates, register-sourced company data or a bounce guarantee, which leaves accuracy claims entirely unverifiable. 4 6
The ABM Marketer
The data types on offer are documented — business email, telephone and social channels for identified companies, plus job titles for key employees — and the method pairs reverse-IP lookups with manual cleaning of the database. We found no public information on record counts, coverage by country or region, a refresh cadence or email verification, so I cannot judge DACH or EU coverage at all. 4
The DACH Sales Director
Identification runs in real time and hands over business contact details — email, telephone, social channels — plus publicly available information on key employees with job titles, so this is a genuine data product. But the captured pages give no total record counts, no coverage by country or region — nothing at all stated for Germany, Austria or Switzerland — and the only data-quality practice documented is "manual cleaning from within the database", with no email verification, refresh cadence or last-verified dates anywhere. 4 6
The Skeptic
The captured pages list the data types supplied — business email address, telephone number and social channels for identified companies, plus "publicly available information" on key employees with job titles — and name a method of "manual cleaning from within the database", but publish no record counts, no country or industry coverage, no refresh cadence and no bounce or credit-back guarantee. This is a visitor-tracking tool that hands over contact details, not a database whose coverage a buyer can weigh. 4 6
Data sources & lawful basis
Show reasoningHide reasoning
How this is scored
Where the personal data in the database comes from and on what legal basis it is processed — as evidenced on the vendor's own pages. Covers Art. 6(1)(f) legitimate interest, the Art. 14 notice to the people in the database, and whether they can find, object to and remove their record.
0 — The vendor states that it leaves the legal basis for the personal data it sells entirely to the buyer, or that records are collected without the people in them being able to object.
3 — Sources described in general terms (public sources, partners), a GDPR legal basis named, and an opt-out or removal route for people in the database.
5 — Source categories named (registers, company websites, contributory networks, licensed partners), legitimate interest under Art. 6(1)(f) stated as the basis for EU records, a privacy notice addressed to the people in the database, and a self-service opt-out or removal process.
8 — The above plus an Art. 14 notification practice described (people informed when added), contributory or browser-extension collection disclosed as such, a legitimate-interest assessment summarised publicly, and EU records handled differently from US records where the law differs.
10 — Provenance is traceable per record: the source and collection date available for each contact, Art. 14 notices sent and documented, the balancing test published, objections honoured across the whole dataset and suppressed permanently, and no data sourced by scraping behind logins or from contributors' address books without their contacts' knowledge.
The SDR Team Lead
Sources appear only in general terms — reverse IP tracking, manual database cleaning and 'publicly available information' for key employees. We found no public information naming the GDPR legal basis for the contact data or a removal route for the people whose details get surfaced, which is the first question my DPO asks before any list goes live. 4 2
The RevOps Manager
Sources are described only in general terms as 'publicly available information' for key employees, combined with reverse IP tracking and manual database cleaning. We found no public information on a GDPR legal basis, an Article 14 notice to the people whose contact details are surfaced, or an opt-out and removal route for them. 4
The Data Protection Officer
The only source statement on the captured pages is that key-employee information is "publicly available information"; we found no public information naming a GDPR legal basis, an Article 14 notice to the people in the database, or a self-service route for them to find, object to or remove their record. The company becomes controller the moment a list is exported, and today it would inherit a completely undocumented basis. 4
The ABM Marketer
Sources are described only in general terms — "publicly available information" for key employees — with no source categories or licensed partners named. We found no public information on a GDPR legal basis, a privacy notice addressed to the people in the database, or an opt-out and removal route for them. 4 2
The DACH Sales Director
Sources appear only in general terms — "publicly available information" for key employees, with reverse IP tracking and manual database cleaning — and no legal basis for the personal data is named on any captured page. We found no public information on a notice to the people in the database, a legitimate-interest assessment, or a self-service opt-out and removal route. 2 4
The Skeptic
The only statement about where the data comes from is that employee details are "publicly available information"; no legal basis under the GDPR is named on any captured page, and I found no opt-out or removal route for the people whose business contact details the product hands out. The privacy policy was among the captured pages but yielded no statement on sources or lawful basis. 2 4
Visitor identification & intent signals
Show reasoningHide reasoning
How this is scored
Identifying companies behind website visits and surfacing buying intent — scored on what is identified (company or person), how the tracking works, and whether the vendor states that its script needs consent under §25 TDDDG and how it behaves without it.
0 — No visitor identification or intent data; the product does not look at website visits.
3 — Reverse-IP identification of the companies behind website visits through a tracking script, with visits listed per company.
5 — Company-level identification with filters and visit history per company, alerts or CRM handover of identified companies, and a stated position on consent for the script or a consent-mode option.
8 — Company-level only for EU traffic by design, cookieless operation documented, integration with common consent management platforms and the §25 TDDDG position stated, intent topics or page-level signals with the source of third-party intent data named, and alerts routed to owners.
10 — Identification that survives a DPO review: no personal data of visitors stored, the TDDDG and GDPR position published and specific, third-party intent data sourced from a named co-op or panel with its consent basis stated, and scoring on intent that the user can trace back to the underlying visits.
The SDR Team Lead
Company-level identification is the core and it is well evidenced: reverse DNS on visitor IPs, per-company journey and session detail, detailed filtering, ranking against your own ideal customer profile, and trigger alerts by email, with the vendor stating individuals are not identified. We found no public information on a stated consent position or consent mode for the tracking script, so I cannot tell my DPO how it behaves behind a consent banner. 4 6
The RevOps Manager
This is the product's core: reverse DNS on visitor IP addresses through a tracking code, company-level by the vendor's own statement that the tool 'is not capable of identifying individuals', with per-company session history, detailed filtering, visitor ranking and real-time email alerts, plus handover to HubSpot. We found no public information on a stated consent position for the script, cookieless operation, or a consent-mode option, so it stops short of the level where consent handling is documented. 4 6
The Data Protection Officer
The pages document reverse-DNS, company-level identification through a tracking code, with per-company session history, filtering, lead ranking, real-time email alerts and a HubSpot handover, alongside a claim that the tool is "not capable of identifying individuals who have visited your website". We found no public information on a stated position that the script needs consent under §25 TDDDG, a consent mode, or cookieless operation — the first question a data protection officer must clear before the script fires. 4 6
The ABM Marketer
Company-level reverse-IP identification through a tracking code is well documented, with per-company session history, channel and page-level journey detail, lead ranking against my own ideal-customer-profile definition, and real-time email alerts I can trigger on chosen criteria — the warm signal reaching me while it is still warm. We found no public information on a consent-mode option or a stated position on consent for the tracking script, and no third-party intent source beyond first-party page engagement is documented. 4 6
The DACH Sales Director
The core engine is well documented: reverse DNS on visitor IPs identifies companies through a tracking code, with per-company session and journey detail, detailed filtering, ranking against my own ideal customer profile, and real-time email alerts on chosen criteria. The pages confirm it stays company-level — "not capable of identifying individuals" — but we found no public information on a consent position for the script, cookieless operation, consent-platform integration, or how it behaves without consent, which is exactly the question a German DPO will ask. 4 6
The Skeptic
Reverse-DNS identification through a tracking script is documented in full — channel, pages visited, time per page, session detail — with detailed filtering, lead ranking against the buyer's ideal customer profile, trigger alerts and email notifications, and the vendor states the tool is "not capable of identifying individuals who have visited your website". I found no stated position on consent for the script, no consent-mode option, and nothing on §25 TDDDG. 4 6
Prospecting workflow & outreach rules
Show reasoningHide reasoning
How this is scored
Search, list building and outreach — and whether the product helps the buyer stay within UWG §7 and the GDPR once the list exists, rather than leaving the legal risk entirely with the customer.
0 — No search, list building or outreach; the product only stores leads entered or captured elsewhere.
3 — Search with filters on firmographics and job title, saved lists, and export of the contacts found.
5 — Advanced filters (technographics, hiring or funding triggers), saved searches with alerts, a suppression or do-not-contact list, and guidance on GDPR or cold-outreach rules for EU contacts.
8 — Country-aware handling (for example German contacts flagged where cold calls and emails require consent under UWG §7), phone numbers checked against national do-not-call registers where they exist, and opt-outs from outreach synced back to the database.
10 — Compliance is part of the workflow: outreach channels restricted or flagged per country and contact type by default, suppression shared across the whole account and every export, the Art. 14 notice supported at first contact, and a documented record of how each contact entered the buyer's pipeline.
The SDR Team Lead
There is a dashboard with detailed filtering, tagging and deal status, an early-access directory to explore similar business profiles, and job titles to target. We found no public information on saved lists, export of the contacts found, a suppression or do-not-contact list, or any guidance on cold-outreach rules for EU contacts — so the legal risk of the outreach sits entirely with my team. 4 6
The RevOps Manager
The dashboard supports detailed filtering, tagging, user assignment and sending leads to colleagues, and an early-access prospecting module promises to 'explore similar business profiles and build an endless pipeline of qualified prospects' from visitor contact information. We found no public information on saved lists, export of the contacts found, a suppression or do-not-contact list, or any guidance on cold-outreach rules for EU contacts such as German requirements. 4 6
The Data Protection Officer
A prospecting directory exists in early access alongside dashboard filtering, tagging and lead ranking, but the captured pages show nothing about the search itself beyond exploring "similar business profiles". We found no public information on a suppression or do-not-contact list, country-aware flags for German contacts under UWG §7, or opt-outs from outreach synced back into the database. 4 6
The ABM Marketer
Identified companies can be filtered, tagged, assigned to users and sent to colleagues with a deal status, and an early-access directory promises exploration of similar business profiles to build a prospect pipeline. We found no public information on saved searches or lists, contact export, a suppression or do-not-contact list, or guidance on GDPR and cold-outreach rules for EU contacts. 4 6
The DACH Sales Director
The dashboard offers detailed filtering, tagging, user assignment and deal status, plus a prospecting directory in early access to build a pipeline from visitor contact information. We found no public information on export of the contacts found, saved searches, a do-not-contact list, or any guidance on EU cold-outreach rules — nothing on the captured pages tells me a German contact is off-limits for calls and emails without consent. 4 6
The Skeptic
The directory that would provide search and list building is marked "early access", and what is live is the dashboard over identified visitors — detailed filtering, tagging, user assignment and deal status. I found no saved searches, no export of found contacts, no do-not-contact or suppression list, and no guidance on GDPR or cold-outreach rules for EU contacts. 4 6
CRM sync, enrichment & export
Show reasoningHide reasoning
How this is scored
Getting the data into the systems where sales works — CRM sync, enrichment of existing records, API — and what happens to exported data, and to the buyer's access to it, when the subscription ends.
0 — Data can only be viewed inside the product; the vendor states no export and no integration.
3 — CSV export and a push of contacts to at least one named CRM.
5 — Native integrations with the major CRMs (Salesforce, HubSpot or similar) with field mapping or deduplication, enrichment of existing CRM records, and a documented API.
8 — Bidirectional sync with scheduled re-enrichment, update and deletion propagated when a record changes or a person objects, webhook or API access with stated limits and credit costs per call published, and data retention rights after cancellation stated plainly.
10 — The vendor treats the buyer's CRM as the system of record: objections and corrections propagated into synced records automatically, full change history per field, a versioned API with a deprecation policy, and exit terms that say exactly which data the customer may keep and for how long.
The SDR Team Lead
A HubSpot integration is documented — 'We integrate with Hubspot' — and leads can be sent to colleagues inside the tool. We found no public information on CSV export, field mapping or enrichment of existing CRM records, an API, or what happens to the data and my access when the subscription ends. 6 4
The RevOps Manager
The evidence stops at 'We integrate with Hubspot' — a push to one named CRM, with nothing on export beyond that. We found no public information on field mapping, deduplication, enrichment of existing records, re-enrichment, an API, or what the customer may keep and for how long when the subscription ends, which for anyone who owns a CRM is an unresolved cleanup risk. 6 7
The Data Protection Officer
The pages name a HubSpot integration and a LinkedIn integration to surface key employees, plus sending leads to colleagues from the dashboard. We found no public information on CSV export, field mapping, deduplication, an API, or what happens to the buyer's access to the data when the subscription ends — so the controller duties that arise at export are undocumented. 4 6
The ABM Marketer
One named CRM is confirmed — "We integrate with Hubspot" — alongside sending leads to colleagues from the dashboard. We found no public information on CSV export, an API, field mapping or deduplication, enrichment of existing CRM records, or data retention rights after cancellation. 6 4
The DACH Sales Director
One named CRM push is documented — "We integrate with Hubspot" — alongside a LinkedIn integration to surface key employees. We found no public information on CSV export, field mapping or deduplication, an API, or what happens to the buyer's data and access when the subscription ends. 4 6
The Skeptic
One named CRM integration is documented — "We integrate with Hubspot" — and beyond that the captured pages give nothing: we found no public information on export of data, field mapping or deduplication, a documented API, or what happens to the buyer's data and access when the subscription ends. 6 7
European sovereignty
panel opinion
Show reasoningHide reasoning
How this is scored
Where a database of EU residents' personal data is held, who the contracting entity and controller are, and which subprocessors see it. Independently sourced by the sovereignty pipeline; weighted heavily here, because the product itself is personal data about people who never chose the vendor.
0 — Vendor, contracting entity and processing of EU residents' contact data all shown to be outside the EU, with no transfer basis stated.
3 — A named contracting entity and a privacy policy or data processing agreement; a non-EU entity with an EU representative under Art. 27, or EU hosting offered while the hosting location of the database is not stated.
5 — EU hosting stated as standard, together with an EU contracting entity or a published subprocessor list, and a data processing agreement offered.
8 — EU contracting entity and controller, EU hosting on named infrastructure, subprocessor and data-partner list published, and any non-EU transfer named with its legal basis.
10 — Sovereign end to end and evidenced: vendor, controller, hosting, data partners and every subprocessor European, certification published, and a DPA covering both the customer's data and the database records the customer exports.
The SDR Team Lead
The captured pages show a UK vendor with addresses in Northampton and Sunnyvale, and a privacy policy referencing London and noting Google Analytics data is stored in the United States — all outside the EU — and we found no public information on a transfer basis, EU hosting, or a data processing agreement. For a product built on contact data about EU people, that is where my procurement review would stop. 2 6
The RevOps Manager
Whoisvisiting Ltd trades from Northampton in the United Kingdom, outside the EU, with a US office in Sunnyvale, and the privacy policy shows processing located outside the EU with Google Analytics data noted as stored in the United States. No transfer basis, EU hosting option, subprocessor list or data processing agreement appears on the captured pages. 2 6
The Data Protection Officer
The vendor is a United Kingdom company with a United States office, and the captured privacy policy places storage in the United Kingdom with Google Analytics data stored in the United States — none of it in the EU — and no transfer basis is stated anywhere. We found no public information on EU hosting options, a data processing agreement, a subprocessor list or a transfer impact assessment; for a product whose subject matter is people who never chose this vendor, that is the gravest gap I can score. 2 6
The ABM Marketer
The vendor publishes a United Kingdom and a United States address, and its privacy policy places activity data in the United Kingdom with Google Analytics data stored in the United States. We found no public information on the contracting entity's jurisdiction, EU hosting options, a transfer basis, a data processing agreement or a subprocessor list — a real concern for a database of EU business contacts. 6 2
The DACH Sales Director
The contracting picture is a UK company at 4 Summer House Road, Northampton with a US office in Sunnyvale, California, and the captured privacy policy places the operation outside the EU — with Google Analytics data noted as stored in the United States. We found no public information on EU hosting options, a data processing agreement, a subprocessor list, or any transfer basis for EU residents' contact data. 2 6
The Skeptic
The contracting entity is a UK company with a Northampton address plus an office in Sunnyvale, California, and the privacy policy's pages note a London address and Google Analytics data stored in the United States; we found no public information on an EU hosting option, a data processing agreement, a subprocessor list, or any transfer basis. For a product holding European business contacts, everything shown sits outside the EU, and only the named entity and the published privacy policy keep this off the floor. 2 6
Pricing transparency
Show reasoningHide reasoning
How this is scored
Whether a buyer can compute the real annual cost from public pages alone — including credits per email, phone number and mobile, credit expiry, seat pricing, visitor-identification tiers and the API — in a category where the unit of billing is often invented by the vendor.
0 — No public prices at all; every tier is a sales conversation.
3 — A public "from" price, a free tier or one priced tier, while what a credit buys or the other tiers are not stated.
5 — Prices public per tier with the billing period and the credits or contacts included per tier; extras such as mobile numbers, additional seats or API access may still be on request.
8 — Every tier priced publicly with credits per data type, credit expiry and rollover, per-seat costs, overage rates, minimum term and VAT treatment stated.
10 — Complete price computability: the annual invoice derivable for a given number of seats, exported contacts by data type, identified companies and API calls, with every credit cost and the refund rule for inaccurate data published.
The SDR Team Lead
Public and concrete: a 14-day full-access trial with unlimited users, £59 monthly for under 7,000 visitors each month with a 20% discount for annual payments, and an average of '0.30p per business identified' depending on plan. We found no public information on the other tiers, what each plan includes, seat costs or credit terms, so I cannot compute a full-year invoice from these pages alone. 4 6
The RevOps Manager
One tier is public — '£59' monthly for under 7,000 visitors with a 20% annual discount — alongside a full-access 14-day trial with unlimited users and a stated average of '0.30p per business identified', though it depends on the plan. The tiers above that visitor count, per-seat costs, credit terms and VAT treatment are not stated, so a real annual invoice cannot be computed from these pages alone. 4 6
The Data Protection Officer
The pages state a 14-day full-access free trial with unlimited users, a monthly price of £59 when it is under 7,000 visitors each month with a 20% discount for annual payments, and an average of "0.30p per business identified – depending on your plan". We found no public information on the tiers above that visitor level, credit expiry or rollover, per-seat costs, API pricing, minimum term or VAT treatment, so a real annual cost cannot be computed from public pages alone. 4 6
The ABM Marketer
What is public: a full-access 14-day trial, one priced tier at £59 monthly for under 7,000 visitors each month "with a 20% discount for annual payments", and an average of "0.30p per business identified – depending on your plan". We found no public information on the other plans, per-seat costs or what each unit buys, so a buyer cannot compute the annual invoice from public pages. 4 6
The DACH Sales Director
One priced tier is public — £59 monthly when a site is under 7,000 visitors each month, with a 20% discount for annual payments — together with an average of "0.30p per business identified – depending on your plan" and a full-access 14-day trial with unlimited users. The tiers above that visitor band, credit rules and expiry, seat costs and VAT treatment are not stated, so the annual invoice is computable only for the entry case. 4 6
The Skeptic
Public and specific on some points: a 14-day full-access trial with unlimited users, a quoted "£59" monthly price for under 7,000 visitors with "a 20% discount for annual payments", and an average of "0.30p per business identified, depending on your plan". The plans behind that "depending" are not published, and we found no per-data-type costs, seat prices, overage rates, VAT treatment or refund terms, so the annual invoice is only partly computable from the captured pages. 4 6
European sovereignty — proven facts
1 of 6 dimensions provenBuilt only from facts shown on the vendor's own pages. A dimension we could not prove is left open, not scored as zero.
| Legal entity | Not determined | — | uncited Report an error |
|---|---|---|---|
| Hosting location | Outside the EU ⚠ unverified | 0/4 pts | 2 Report an error |
| Hosting options | Not determined | — | uncited Report an error |
| Open source | Not determined | — | uncited Report an error |
| Data processing agreement | Not determined | — | uncited Report an error |
| Transfer impact assessment | Not determined | — | uncited Report an error |
Questions about Whoisvisiting
Is Whoisvisiting European?
Not determined: the vendor’s pages as captured do not say where Whoisvisiting is based.
Where does Whoisvisiting store data?
Whoisvisiting stores customer data outside the EU by default, per the vendor’s page captured 3 Nov 2026.
Does Whoisvisiting have a free plan?
Not stated on the vendor’s pages as of 3 Nov 2026.
What are the best alternatives to Whoisvisiting?
As of 3 Nov 2026, the panel rates Cognism (3/5), Dealfront (3/5) and Vainu (3/5) highest among the other 40 Lead Generation products evaluated. Ratings that look equal are rounded to half stars; the order uses the unrounded rating, then the name. The highest-rated European alternative is Cognism (UK / wider Europe). Ratings are the AI panel’s opinion, formed from public evidence: how scores are made. The full list, with European products first: Whoisvisiting alternatives.
Where this could be wrong
- Evidence ages. The oldest capture behind this page is from 3 Nov 2026. Vendors change pricing and policies without notice; every fact reflects its source as of the capture date shown in the registry.
- Weak sourcing — Hosting location. London is in the United Kingdom, which is outside the EU/EEA since Brexit, and the page separately notes Google Analytics data is stored in the United States.
- AI can misread a source. Extraction and judgement are automated; a citation guarantees traceability, not infallibility. If something here is wrong, say so — no account needed, every report is decided within 5 business days, and accepted corrections are published.
What we left out
A claim that does not survive our checks costs us the claim, not the page. This is what was taken off this one.
- 17 product facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 9 pricing facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 2 integrations facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 2 legal facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 1 compliance fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material. Know more? Tell us
- 1 hosting fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material. Know more? Tell us
- 1 support fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material. Know more? Tell us
Sources (7)
The pages every claim on this page was read from — each one checked, dated, and kept verifiable.
- 1 Vendor page www.whoisvisiting.com Checked 3 Nov 2026 Details →
- 2 Privacy policy — found from the homepage www.whoisvisiting.com Checked 3 Nov 2026 Details →
- 3 Visitor identification & intent signals — found from sitemap www.whoisvisiting.com Checked 3 Nov 2026 Details →
- 4 Visitor identification & intent signals — found from sitemap www.whoisvisiting.com Checked 3 Nov 2026 Details →
- 5 Prospecting workflow & outreach rules — found from sitemap www.whoisvisiting.com Checked 3 Nov 2026 Details →
- 6 CRM sync, enrichment & export — found from sitemap www.whoisvisiting.com Checked 3 Nov 2026 Details →
- 7 CRM sync, enrichment & export — found from sitemap www.whoisvisiting.com Checked 3 Nov 2026 Details →