whats-best.ai
Search Sign in

Web Analytics

Piano Analytics

EU origin, foreign-owned Report an error

Panel rating · 6 judges · How to read the stars

Category median

Sovereignty: not determined

0–5 in half steps. 5 means the rubric's top anchor is met on the evidence.

by Applied Technologies Internet SAS · www.piano.io

Report an error on this page Is this your product? →

Link to this page

Piano Analytics: AI-assisted analysis on whats-best.ai Piano Analytics: AI-assisted analysis on whats-best.ai (dark)

Add ?theme=dark to the image address for dark backgrounds. The badge shows the category and the month of the latest evaluation, and EU-Made where that is the product’s provenance. It never shows a score.

Piano Analytics at a glance

Vendor
Applied Technologies Internet SAS
Headquarters
Not stated on the vendor’s pages as of 29 Oct 2026
Data hosting
Not stated on the vendor’s pages as of 29 Oct 2026
Free plan
Not stated on the vendor’s pages as of 29 Oct 2026
Panel verdict
The AI panel rates Piano Analytics 3/5, the mean of 6 judges. Piano Analytics is the web analytics suite of Applied Technologies Internet SAS, a French company controlled by Piano Software Inc. how scores are made
As of
Vendor pages captured 29 Oct 2026; evaluated by the panel 30 Oct 2026. all sources

Piano Analytics alternatives, European ones first →

Read this page as one judge. Each weighs the same scores by what they care about.

The Data Protection Officer

Weighted verdict

External data protection officer for eleven mid-sized companies, three of which still ran Universal Analytics when the Austrian authority ruled on it. Reads the data policy before the feature page: which fields are stored, how a visitor is counted without a cookie, whether the IP address is cut before it is written, who the subprocessors are and where. Signs off a site without a banner only when the vendor states its reading of §25 TDDDG in writing.

Same scores as the panel view — this lens weights them the way this judge cares.

Scored by The Data Protection Officer

Panel median The Data Protection Officer This judge’s scores over the panel median. Each label opens its reasoning below.
Scores per criterion, in stars out of 5
Criterion Panel median The Data Protection Officer
Traffic, sources & campaign reports 3 of 5 3 of 5
Goals, events, funnels & e-commerce 3 of 5 3 of 5
Consent-free operation & data minimisation 2.5 of 5 3 of 5
Data access, export & self-hosting 3 of 5 3 of 5
Installation, integrations & performance 2 of 5 2 of 5
European sovereignty 3 of 5 3 of 5

Traffic, sources & campaign reports

How this is scored

What the standard reports show: page views, visits and visitors, entry and exit pages, referrers, search engines and social networks as sources, campaigns tagged with UTM parameters, countries, devices and browsers, a real-time view, date comparisons, segments and filters, custom dashboards, scheduled email reports, shared or public dashboards, and whether reports are sampled or complete.

0 — Not a web analytics product; website traffic cannot be measured with it.

3 — Page views and visitors over time with top pages and referrers; campaign parameters, segments and report sharing are basic or not described.

5 — A dashboard with pages, referrers, UTM campaigns, countries and devices, a real-time view, date comparison, filters across all reports, email reports, and dashboards shared with clients or colleagues.

8 — Custom segments and saved views, custom dashboards and report builders, channel grouping that can be configured, Search Console or ad platform data shown beside the traffic, unsampled reports stated, several sites and roll-up reporting in one account, and annotations.

10 — Reporting that a whole organisation runs on: custom dimensions and calculated metrics, anomaly alerts, multi-site and multi-brand roll-ups with roles per site, report accuracy and how visitors are counted explained in a published methodology, and every report reproducible from the raw data.

Report an error

The Data Protection Officer

The traffic-source machinery is documented in real depth: six organic source types including a generative-AI source, campaigns read in both the Piano and UTM nomenclatures with custom parameters, configurable source priority, custom sources with up to ten conditions each, CSV import of URL lists, configuration per site group, and an attribution module that compares models on top of last-touch. For the standard report suite — pages, countries, devices, a real-time view, date comparison and shared dashboards — we found no public information on the captured pages, so the score sits between the middle and upper levels. 8 14

Report an error

Goals, events, funnels & e-commerce

How this is scored

How the product measures what visitors do: goals for pages and events, custom events with properties, outbound links, downloads, form submissions and scroll depth tracked without code, funnels with drop-off, e-commerce tracking of orders, revenue and products, attribution of conversions to channels and campaigns, cohorts and retention, and conversion data passed back to ad platforms.

0 — Counts page views only; no goals, events or conversions can be defined.

3 — Goals for a page or a custom event; funnels, revenue and attribution are basic or not described.

5 — Goals and custom events with properties, outbound links and file downloads tracked, funnels with drop-off per step, revenue attached to goals or orders, and conversions broken down by source and campaign.

8 — Full e-commerce tracking (products, cart, checkout, orders, revenue) with plugins for named shop systems, several attribution models compared, cohorts and retention, user journeys or paths, forms and scroll depth tracked without code, and conversions sent back to Google Ads, Meta or other ad platforms server to server.

10 — Conversion analysis to the level of a product analytics suite: multi-touch attribution explained, funnels and cohorts on any event or property, revenue reconciled with the shop system, predictive or anomaly metrics with their method stated, and every conversion traceable to the raw event.

Report an error

The Data Protection Officer

Goal types are configurable by tagging or by processing rules, with conversion, secondary-conversion and converted-visit metrics, content properties propagated to conversion events, and a funnel engine offering visit, visitor and user scopes, per-step filters, breakdowns, segments and step-level execution times; an Explorer module compares attribution models. We found no public information on e-commerce tracking of orders, revenue and products, on outbound links, downloads, forms or scroll depth, or on conversions sent back to ad platforms, so the score rests just above the middle level. 8 10 11

Report an error

Data access, export & self-hosting

How this is scored

Whether the data stays the customer's and can leave with them: a reporting API and a raw event export, CSV export of every report, a scheduled export or sync to a data warehouse or BI tool (BigQuery, Snowflake, Looker Studio), no data sampling or limits on history, import of historical data from Google Analytics or another tool, open-source code, and a self-hosted or on-premise edition the customer runs on its own servers.

0 — No export of any kind; the data can only be viewed in the vendor's dashboard.

3 — A CSV export of reports; an API, raw data and history limits are basic or not described.

5 — A documented reporting API, CSV export of all reports, the retention period for raw data stated, and an import of historical data from Google Analytics or a stated migration path.

8 — Raw event data exportable or streamed to a named warehouse or BI tool, an API covering both reporting and data collection, no sampling stated, a self-hosted or on-premise edition with its own documentation, and the data returned or deleted on termination under stated terms.

10 — The customer owns the data end to end: open-source code under a named licence that runs fully self-hosted with feature parity stated, a complete raw export in an open format that another tool can import, and the deletion of every copy on termination documented.

Report an error

The Data Protection Officer

Raw data leaves the platform through Data Flow or Data Sharing — Data Flow requires a subscribed option — and dashboards and data queries export on a schedule by e-mail, FTP/SFTP or Amazon S3; the contract grants a thirty-day download window after termination and data is deleted at the end of the relationship. We found no public information on a general reporting API, sampling behaviour, historical import from Google Analytics, or a self-hosted edition — the service is documented as hosted SaaS. 7 8 14 15

Report an error

Installation, integrations & performance

How this is scored

What it takes to install and run: the size and loading of the tracking script, plugins and documented set-ups for named CMS and shop systems (WordPress, TYPO3, Shopify, Shopware, WooCommerce), single-page apps and mobile SDKs, a tag manager or Google Tag Manager template, server-side tracking and first-party proxying to avoid ad blockers, team roles and permissions, client and agency accounts, single sign-on, and an uptime or status page.

0 — No documented way to install the product on a website or app.

3 — A tracking snippet to paste into the site; plugins, SDKs, server-side options and roles are basic or not described.

5 — A documented snippet with its size stated, plugins or guides for several named CMS and shop systems, support for single-page apps, team members with roles, and an agency or multi-site account.

8 — A lightweight script or server-side collection documented, a first-party proxy or own tracking domain, SDKs for iOS, Android and named frameworks, a tag manager integration, granular roles per site, single sign-on (SAML), and a public status page with uptime history.

10 — Installation that scales across an organisation: server-side and client-side tracking with an equal feature set, an infrastructure-as-code or API-driven site set-up, white-label for agencies, SLA and support terms published, and the performance impact of the script measured and stated.

Report an error

The Data Protection Officer

Collection is documented as JavaScript tagging libraries and SDKs for native applications, alongside an integrations framework whose connectors push data to or import data from partner solutions across three partnership categories; a Google Tag Manager template page exists in the documentation. We found no public information on script size, plugins or guides for named CMS and shop systems, single-page-app support, team roles and permissions, single sign-on, or a public status page. 6 16 17

Report an error

European sovereignty

How this is scored

Who the contracting entity and the parent company are, where visitor data is collected, stored and processed, and who the subprocessors are (script CDN, collection endpoint, hosting, email reports, support and payment tools). Independently sourced by the sovereignty pipeline; visitor data is personal data under European rulings, so the whole chain counts, not only the database. A self-hosted or open-source edition the customer runs on its own European servers counts as the customer's chain, whatever the vendor's seat.

0 — Non-EU vendor and contracting entity, hosting unstated, subprocessors unnamed, and no data processing agreement offered.

3 — A privacy policy and a data processing agreement exist, but hosting location is unstated or non-EU and the subprocessors are not listed.

5 — EU hosting available and an EU contracting entity or EU representative, but parts of the chain (CDN, collection endpoint, email, support, payment) run through non-EU providers without a stated safeguard, or EU processing relies on a proxy in front of a non-EU service.

8 — EU hosting on named infrastructure, EU contracting entity, subprocessors listed with their locations, a data processing agreement published, and security certifications (ISO 27001, SOC 2) stated — or a self-hosted edition documented that keeps every visitor record on the customer's own servers.

10 — Sovereign end to end and evidenced: European ownership, entity, hosting and every subprocessor, or a self-hosted open-source edition with no call home, data export and deletion documented, and certifications published with their scope rather than implied.

Report an error

The Data Protection Officer

Subprocessors are listed with their locations — AWS and Snowflake carry analytics across EU, USA and Japan, Hetzner in Germany, plus Stripe, Salesforce, Zendesk and others for shared services — a data processing agreement is published, ISO/IEC 27001:2022 is stated, and transfers are covered by EDPB-approved binding corporate rules and standard clauses, with EU contracting entities including Applied Technologies Internet SAS in France. The parent is Piano Software Inc. of Philadelphia, and we found no public information confirming where visitor data is hosted by default, so the chain includes US providers under stated safeguards rather than a documented European residency. 5 6 7

Report an error

Pricing transparency not rated — the vendor publishes no price

How this is scored

Whether a buyer can compute the real annual cost from public pages alone: price per tier by monthly page views or events, what happens when traffic exceeds the tier, the number of sites and users included, which features (e-commerce, funnels, raw export, API, SSO, longer retention) cost extra, the free tier and its limits, the self-hosted edition and its support, minimum term and setup.

0 — No public prices at all; every customer is a sales call.

3 — A starting price or a free tier exists, but how cost scales with traffic, sites or features is unclear.

5 — Tiers are public with their price per traffic band and main inclusions, but at least one commonly needed piece (overage, extra sites, raw export, SSO, longer retention) is unpriced or "on request".

8 — Every tier priced publicly with its scaling rule (page views, events, sites, users), overage handling stated, add-ons priced, the self-hosted edition's cost or licence stated, minimum term and VAT treatment stated.

10 — Complete price computability: annual cost derivable for a given traffic volume, site count and feature set, with every add-on, setup, support and overage fee and the cancellation and data-return terms published.

Report an error

The Data Protection Officer

We found no price figure on the captured pages: fees are set in the order form or Schedule, payable in USD by default within thirty days, with an annual escalator of the greater of seven percent or CPI, late fees of one and a half percent per month compounded daily, taxes excluded, and fees non-cancelable and non-refundable. The Data Flow export requires a subscribed option whose cost we found no public information on, so a buyer cannot compute an annual cost from public pages. 7 14

Report an error

European sovereignty — proven facts

0 of 6 dimensions proven

Built only from facts shown on the vendor's own pages. A dimension we could not prove is left open, not scored as zero.

Hosting location Not determined ⚠ unverified — uncited Report an error
Hosting options Not determined ⚠ unverified — uncited Report an error
Open source Not determined ⚠ unverified — uncited Report an error
Data processing agreement Not determined ⚠ unverified — uncited Report an error
Transfer impact assessment Not determined — uncited Report an error

Questions about Piano Analytics

Is Piano Analytics European?

Partly. whats-best.ai classifies Piano Analytics as EU origin, foreign-owned.

Where does Piano Analytics store data?

Not stated on the vendor’s pages as of 29 Oct 2026.

Does Piano Analytics have a free plan?

Not stated on the vendor’s pages as of 29 Oct 2026.

What are the best alternatives to Piano Analytics?

As of 4 Nov 2026, the panel rates Matomo (4/5), Piwik PRO Analytics Suite (3.5/5) and Pirsch Analytics (3.5/5) highest among the other 17 Web Analytics products evaluated. Ratings that look equal are rounded to half stars; the order uses the unrounded rating, then the name. The highest-rated European alternative is Piwik PRO Analytics Suite (EU-Made). Ratings are the AI panel’s opinion, formed from public evidence: how scores are made. The full list, with European products first: Piano Analytics alternatives.

Where this could be wrong

What we left out

A claim that does not survive our checks costs us the claim, not the page. This is what was taken off this one.

Sources (17)

The pages every claim on this page was read from — each one checked, dated, and kept verifiable.

  1. 1 Vendor homepage (analytics product) www.piano.io Checked 29 Oct 2026 Details →
  2. 2 Features page (data management) www.piano.io Checked 29 Oct 2026 Details →
  3. 3 Features page (data sources) www.piano.io Checked 29 Oct 2026 Details →
  4. 4 Security / trust page (compliance) www.piano.io Checked 29 Oct 2026 Details →
  5. 5 Documentation (compliance centre) docs.piano.io Checked 29 Oct 2026 Details →
  6. 6 Privacy policy www.piano.io Checked 29 Oct 2026 Details →
  7. 7 Terms of service and data processing agreement (dpa) www.piano.io Checked 29 Oct 2026 Details →
  8. 8 Traffic, sources & campaign reports — found from sitemap docs.piano.io Checked 29 Oct 2026 Details →
  9. 9 Traffic, sources & campaign reports — found from sitemap docs.piano.io Checked 29 Oct 2026 Details →
  10. 10 Goals, events, funnels & e-commerce — found from sitemap docs.piano.io Checked 29 Oct 2026 Details →
  11. 11 Goals, events, funnels & e-commerce — found from sitemap docs.piano.io Checked 29 Oct 2026 Details →
  12. 12 Consent-free operation & data minimisation — found from sitemap docs.piano.io Checked 29 Oct 2026 Details →
  13. 13 Consent-free operation & data minimisation — found from sitemap docs.piano.io Checked 29 Oct 2026 Details →
  14. 14 Data access, export & self-hosting — found from sitemap docs.piano.io Checked 29 Oct 2026 Details →
  15. 15 Data access, export & self-hosting — found from sitemap docs.piano.io Checked 29 Oct 2026 Details →
  16. 16 Installation, integrations & performance — found from sitemap docs.piano.io Checked 29 Oct 2026 Details →
  17. 17 Installation, integrations & performance — found from sitemap docs.piano.io Checked 29 Oct 2026 Details →