Web Analytics
Piwik PRO Analytics Suite
EU-Made Report an error0–5 in half steps. 5 means the rubric's top anchor is met on the evidence.
by Piwik PRO GmbH · piwikpro.de
Compare with Matomo → Report an error on this page Is this your product? →
Link to this page
Add ?theme=dark to the image address for dark backgrounds.
The badge shows the category and the month of the latest evaluation, and EU-Made where
that is the product’s provenance. It never shows a score.
Piwik PRO Analytics Suite at a glance
- Vendor
- Piwik PRO GmbH
- Headquarters
- Not stated on the vendor’s pages as of 1 Nov 2026
- Data hosting
- Not stated on the vendor’s pages as of 1 Nov 2026
- Free plan
- Yes, per the vendor’s own page source, captured 29 Oct 2026
- Panel verdict
- The AI panel rates Piwik PRO Analytics Suite 3.5/5, the mean of 6 judges. Piwik PRO Analytics Suite is a web analytics suite from Piwik PRO GmbH, Berlin; weighted totals run 6.9 to 7.4. how scores are made
- As of
- Vendor pages captured 29 Oct 2026 to 1 Nov 2026; evaluated by the panel 30 Oct 2026. all sources
Piwik PRO Analytics Suite alternatives, European ones first →
Read this page as one judge. Each weighs the same scores by what they care about.
The panel's verdict
Piwik PRO Analytics Suite is a web analytics suite from Piwik PRO GmbH, Berlin; weighted totals run 6.9 to 7.4. Strongest are traffic reporting and consent and privacy at 7 to 8: the pages document a drag-and-drop report builder over more than 100 dimensions, metrics and filters, no sampling by default, and a consent-free position stated against named law — CNIL, TDDDG, the ePrivacy Directive — with anonymous collection when consent is refused. Weakest is pricing transparency at 6 to 7, where the panel splits: Business is published at "Ab €36 /Monat" with up to 2 million actions, 20 domains and 25 months retention, but we found no public figures for the overage fee, Enterprise pricing above "Ab €366 /Monat jährliche Abrechnung", or the on-premise edition; higher scores credit the published Business terms, lower ones the unpriced parts. Data ownership and sovereignty also run 7 to 8: export and on-premise options lift some scores, while the pages give different figures for raw data access — unlimited export on one page, API-only on the pricing page — and no subprocessor list was found.
Speaks for it
- Custom dashboards and a drag-and-drop report builder with over 100 dimensions, metrics and filters, real-time reports and no sampling by default
- Consent-free operation stated against named law (CNIL, TDDDG, ePrivacy Directive), with anonymous-only collection when consent is refused or ignored, IP anonymisation and withdrawable consent
- Raw data export via API in JSON, CSV and XML, migration from Google Analytics and Matomo, and an on-premise deployment that can remove the vendor as data processor
- Documented server-side tracking with a first-party collector and reverse proxy, a tag manager template library requiring no JavaScript, SAML and Active Directory/LDAP single sign-on, and a 99% uptime SLA
- Specialised e-commerce funnels with checkout analysis, revenue, average order value and customer lifetime value, plus multi-channel attribution and a Shopify integration
Held against it
- Overage fee amounts, Enterprise prices above the entry floor, SLA package prices and the on-premise edition's cost are not published, so full annual totals are not computable from public pages
- We found no public subprocessor list, and the group includes entities in Poland and New York
- We found no public information on cohort and retention analysis or on comparing attribution models side by side
- We found no public information on CMS plugins beyond Shopify, mobile SDKs, tracking script size or a public status page with uptime history
- The captured pages describe raw data access differently — unlimited export on one page, API-only on the pricing page
Best for
- You run a public-sector or municipal site and need analytics without a consent banner, leaning on the CNIL-cited consent-free mode and anonymous collection when consent is refused or ignored
- Your marketing team needs unsampled traffic, funnel and revenue reporting across up to 20 domains under the published Business plan at "Ab €36 /Monat"
- You need data portability or self-hosting — raw API export in JSON, CSV and XML, migration from Google Analytics or Matomo, and an on-premise deployment that removes the vendor as data processor
- You must contract a German entity with published register details, a data processing agreement, ISO 27001 and SOC 2 certifications stated, and named EU hosting on Azure Germany, the Netherlands or ElastX Sweden
Avoid if
- You need a computable annual cost from public pages alone — Enterprise is individually priced by modules, action limit, hosting option and SLA package, with an automatic 4% annual increase and an unpriced overage fee
- Your procurement requires a fully documented processing chain — the captured pages show no subprocessor list and the hosting options include US and Hong Kong regions
- Your e-commerce platform is not Shopify, the only shop system named among the vendor's integrations
- You need documented deletion or return of data at the end of a paid term — the pages document deletion only for trial accounts, after 30 days plus a seven-day grace period
The scores
| Criterion | Panel median |
|---|---|
| Traffic, sources & campaign reports | 4 of 5 |
| Goals, events, funnels & e-commerce | 3.5 of 5 |
| Consent-free operation & data minimisation | 3.5 of 5 |
| Data access, export & self-hosting | 3.5 of 5 |
| Installation, integrations & performance | 3.5 of 5 |
| European sovereignty | 3.5 of 5 |
| Pricing transparency | 3.5 of 5 |
Traffic, sources & campaign reports
Show reasoningHide reasoning
How this is scored
What the standard reports show: page views, visits and visitors, entry and exit pages, referrers, search engines and social networks as sources, campaigns tagged with UTM parameters, countries, devices and browsers, a real-time view, date comparisons, segments and filters, custom dashboards, scheduled email reports, shared or public dashboards, and whether reports are sampled or complete.
0 — Not a web analytics product; website traffic cannot be measured with it.
3 — Page views and visitors over time with top pages and referrers; campaign parameters, segments and report sharing are basic or not described.
5 — A dashboard with pages, referrers, UTM campaigns, countries and devices, a real-time view, date comparison, filters across all reports, email reports, and dashboards shared with clients or colleagues.
8 — Custom segments and saved views, custom dashboards and report builders, channel grouping that can be configured, Search Console or ad platform data shown beside the traffic, unsampled reports stated, several sites and roll-up reporting in one account, and annotations.
10 — Reporting that a whole organisation runs on: custom dimensions and calculated metrics, anomaly alerts, multi-site and multi-brand roll-ups with roles per site, report accuracy and how visitors are counted explained in a published methodology, and every report reproducible from the raw data.
The E-Commerce Marketing Lead
Audience, acquisition and behaviour reports sit beside real-time dashboards without delay, a drag-and-drop report builder with over 100 dimensions, metrics and filters, segments, and Google Search Console data enriching the reports; by default there is no data sampling and up to 20 domains run in one Business account. A URL builder generates campaign links with Piwik PRO or UTM parameters, including a converter between the two. We found no public information on scheduled email reports, date comparisons or annotations. 2 3 6 10 11
The Data Protection Officer
Custom dashboards built from over a hundred dimensions, metrics and filters, segments, a real-time view, Search Console data beside the traffic, a campaign URL builder supporting both the vendor's own and UTM parameters, and no data sampling by default put the standard reporting well beyond the basics. We found no public information on scheduled email reports, date comparisons, or roll-up reporting across the multiple domains a plan may include. 2 10 11 3 6
The Agency Developer
Customizable dashboards with a drag-and-drop report builder over more than 100 dimensions, metrics and filters, campaign tagging via a URL builder for UTM and Piwik parameters, Search Console data beside the traffic, real-time reports, and no sampling by default cover nearly everything my clients ask for. We found no public information on roll-up reporting across sites, annotations or scheduled email reports, which keeps it below the top level. 2 3 6 10 11
The Growth Analyst
Custom dashboards and a drag-and-drop builder over more than one hundred dimensions, metrics and filters, custom segments, real-time reports and a stated default of no sampling give me organisation-grade reporting; Google Search Console data sits beside the traffic, and the URL builder emits both Piwik PRO and UTM campaign parameters for paid, owned, earned and social tracking across up to twenty domains. I found no public information on roll-up reporting across sites, annotations, or a published methodology for how visitors are counted. 2 3 6 10 11
The Public-Sector Site Owner
Audience, acquisition and behaviour reports come with real-time views, a drag-and-drop report builder over one hundred dimensions, metrics and filters, custom dashboards and segments, and sharing inside the organisation; campaign URLs are built for both their own and UTM parameters, and Google Search Console and Google Ads data can sit beside the traffic. Sampling is off by default with an option to enable it, and a plan covers up to twenty domains. We found no public information on annotations, configurable channel grouping or roll-up reporting across those sites. 2 3 6 10 11
The Skeptic
Customizable dashboards with a drag-and-drop editor, segments and a report builder with over 100 dimensions, metrics and filters are described, campaigns run on UTM or pk_ parameters with a URL builder tool, Search Console data sits beside the traffic, and no sampling applies by default. We found no public information on configurable channel grouping, roll-up reporting, annotations, date comparisons or scheduled email reports. 2 3 6 10 11
Goals, events, funnels & e-commerce
Show reasoningHide reasoning
How this is scored
How the product measures what visitors do: goals for pages and events, custom events with properties, outbound links, downloads, form submissions and scroll depth tracked without code, funnels with drop-off, e-commerce tracking of orders, revenue and products, attribution of conversions to channels and campaigns, cohorts and retention, and conversion data passed back to ad platforms.
0 — Counts page views only; no goals, events or conversions can be defined.
3 — Goals for a page or a custom event; funnels, revenue and attribution are basic or not described.
5 — Goals and custom events with properties, outbound links and file downloads tracked, funnels with drop-off per step, revenue attached to goals or orders, and conversions broken down by source and campaign.
8 — Full e-commerce tracking (products, cart, checkout, orders, revenue) with plugins for named shop systems, several attribution models compared, cohorts and retention, user journeys or paths, forms and scroll depth tracked without code, and conversions sent back to Google Ads, Meta or other ad platforms server to server.
10 — Conversion analysis to the level of a product analytics suite: multi-touch attribution explained, funnels and cohorts on any event or property, revenue reconciled with the shop system, predictive or anomaly metrics with their method stated, and every conversion traceable to the raw event.
The E-Commerce Marketing Lead
Specialised e-commerce funnels with checkout analysis and shopping behaviour reports, revenue and average order value metrics, goals, custom events for clicks, scrolls, downloads and forms, funnels built on page views or custom events, multi-channel attribution, and raw data that can be distributed to advertising platforms with server-side forwarding and a Google Ads integration. Shopify is the only shop system named as an integration — we found no public information on a Shopware plugin, on cohorts and retention, or on compared attribution models. 2 3 11 13 14
The Data Protection Officer
Goals, custom events with form tracking, clicks, scrolls and downloads, funnels combining page views, events and downloads, checkout funnels with shopping-behaviour reports, revenue metrics including lifetime value and average order value, multi-channel attribution and a Shopify integration are all documented. We found no public information on cohorts and retention, and no comparison of attribution models. 13 11 2 3
The Agency Developer
Goals and funnels on page views, custom events and downloads, form tracking and goal conversion templates, plus a real e-commerce package with checkout funnels, revenue, average order value and customer lifetime value, Shopify among the named integrations, multi-channel attribution and user flow analysis. We found no public information on cohorts and retention or on comparing several attribution models side by side. 2 3 11 13 14
The Growth Analyst
Custom events with variables, clicks, scrolls, downloads and form fills tracked without code, funnels built from page views and custom events, and a real e-commerce stack — checkout funnels, shopping-behaviour reports, revenue, average order value, lifetime value, Shopify and Google Ads integration, multi-channel attribution — would let me follow a signup from first campaign click to invoice. Cohorts and retention and a comparison of attribution models are not described in the captured pages, which is what keeps conversion analysis short of a product-analytics suite. 2 3 11 13
The Public-Sector Site Owner
Goals, custom events, form tracking and virtual page views are out of the box, with clicks, scrolls, downloads and form fills captured and funnels that can mix page views, custom events and downloads — close to what I need for spotting where daycare forms are abandoned. E-commerce goes deep with checkout analyses, shopping-behaviour reports, revenue, average order value, customer lifetime value, a Shopify integration and multi-channel attribution, plus user flows and individual user journeys. We found no public information on cohort or retention analysis, a comparison of several attribution models, or conversions passed back to ad platforms server-to-server. 2 3 11 13
The Skeptic
Clicks, scrolls, downloads and form fills are tracked, funnels accept page views, custom events and downloads with specialised e-commerce checkout funnels, revenue, average order value and CLV are reported, and multi-channel attribution comes with named integrations for Shopify and Google Ads. We found no public information on cohorts and retention, revenue reconciliation with a shop system, or a stated server-to-server conversion send-back to ad platforms. 2 3 11 13
Consent-free operation & data minimisation
Show reasoningHide reasoning
How this is scored
What is collected and whether a consent banner is needed: a cookieless mode with how visitors are counted (daily hash, server-side fingerprint, no identifier), IP addresses truncated or not stored, no cross-site or cross-device profile and no use of data for the vendor's own purposes, data retention settings, opt-out and Do Not Track, a consent mode for features that do need consent, the vendor's stated reading of §25 TDDDG, the CNIL consent exemption and the authorities' rulings on Google Analytics, and guidance for the site's privacy policy. Where the data is processed is scored under sovereignty.
0 — Requires consent for every visit and sets tracking cookies with no privacy settings at all, or shares visitor data for advertising by default.
3 — IP anonymisation or a cookie setting exists and the product is described as GDPR-compliant; how visitors are identified, retention and the consent position are basic or not described.
5 — A documented cookieless or consent-free mode that states how visitors are counted, IP addresses truncated before storage, no cross-site tracking, retention configurable, an opt-out, a consent mode for the features that need one, and a data protection page explaining when a banner is required.
8 — The consent position stated against named law (§25 TDDDG, the ePrivacy Directive, the CNIL exemption or a DPA ruling), identifiers rotated or never created and the method published, personal data never stored by default, pseudonymisation and retention settings per data type, a legal opinion or external audit of the consent-free mode cited, and wording for the privacy policy supplied.
10 — Data minimisation that can be verified: the collection script and processing open to inspection, exactly which fields are stored documented, a consent-free mode recognised by a named authority or certified, accuracy with and without consent stated, and every privacy setting the customer controls listed with its effect.
The E-Commerce Marketing Lead
CNIL is named as the authority that permits use without any consent, and the tracker collects only anonymous data — including campaign effectiveness and conversion-funnel measurement — when visitors refuse or ignore the banner, with purchase data and IP addresses anonymised before passing to analytics tools and TTDSG/TDDDG named as complied with. A consent manager covers the tools that need consent, an opt-out exists, and consent can be changed or withdrawn with collection adjusting automatically. We found no public information on how visitors are counted in the anonymous mode, on retention settings per data type, or on supplied wording for the site's privacy policy. 2 4 9 12
The Data Protection Officer
The consent position is stated against named law: anonymised collection is claimed to satisfy the German TDDDG and the CNIL, whose consent-free use the vendor says the French authority permits, and when a visitor refuses or ignores the banner only anonymous data is collected, with IP addresses and purchase data anonymised before onward passing, withdrawable consent and auditably logged privacy requests. What no captured page documents is how a visitor is counted in the anonymous mode — the identifier and its rotation — retention settings per data type beyond the stated 25 months, or wording supplied for the site's own privacy policy. 12 9 4 14 6 8
The Agency Developer
The consent-free position is stated against named law — the German TDDDG, the ePrivacy Directive and the CNIL, which the vendor quotes as allowing use without any consent — with anonymous collection when consent is refused or ignored, anonymisation of IP addresses and purchase data, an opt-out and a consent mode through the Consent Manager. We found no public information on how visitors are identified in the anonymous mode or on ready-made wording for the site's privacy policy. 4 9 12 14
The Growth Analyst
The consent-free position is stated against named law — the French CNIL is cited as permitting use without any consent, collection follows the TDDDG and the ePrivacy Directive, and when a visitor refuses or ignores the banner only anonymous data is collected — with IP addresses and purchase data anonymised, six selectable tracking methods, opt-out, and privacy-request handling with a full audit history. How anonymous visitors are actually counted and any external audit of the consent-free mode are not described in the captured pages. 4 9 12 14
The Public-Sector Site Owner
For a council that will not show a cookie banner this is the strongest area: the French authority CNIL is cited as permitting use without any consent, tracking runs anonymously when consent is ignored or refused, and anonymisation of IP addresses and purchase data is positioned against TDDDG and CNIL, with six selectable tracking methods, an opt-out and 25 months' retention on the Business plan. Data subject requests for deletion, modification and transfer are handled through the product, and the full request history can be shown to a data protection authority. We found no public information on how anonymous visitors are actually counted, per-data-type retention settings, or supplied wording for our privacy policy. 4 6 9 12
The Skeptic
The vendor cites the French CNIL as allowing use without any consent, names TTDSG/TDDDG, the ePrivacy Directive and CNIL as frameworks, and documents anonymous-only collection when visitors refuse consent, IP anonymisation, an opt-out mechanism and full consent management with withdrawal. What we did not find: how visitors are actually counted in the consent-free mode, retention settings per data type, or supplied wording for the site's privacy policy. 4 9 12 14
Data access, export & self-hosting
Show reasoningHide reasoning
How this is scored
Whether the data stays the customer's and can leave with them: a reporting API and a raw event export, CSV export of every report, a scheduled export or sync to a data warehouse or BI tool (BigQuery, Snowflake, Looker Studio), no data sampling or limits on history, import of historical data from Google Analytics or another tool, open-source code, and a self-hosted or on-premise edition the customer runs on its own servers.
0 — No export of any kind; the data can only be viewed in the vendor's dashboard.
3 — A CSV export of reports; an API, raw data and history limits are basic or not described.
5 — A documented reporting API, CSV export of all reports, the retention period for raw data stated, and an import of historical data from Google Analytics or a stated migration path.
8 — Raw event data exportable or streamed to a named warehouse or BI tool, an API covering both reporting and data collection, no sampling stated, a self-hosted or on-premise edition with its own documentation, and the data returned or deleted on termination under stated terms.
10 — The customer owns the data end to end: open-source code under a named licence that runs fully self-hosted with feature parity stated, a complete raw export in an open format that another tool can import, and the deletion of every copy on termination documented.
The E-Commerce Marketing Lead
A documented API plus raw data export (API only) feeds data warehouses and BI tools, reports export as JSON, CSV or XML, sampling is off by default, a retention period of 25 months is stated for the Business plan, migration from Google Analytics and Matomo is offered, and an on-premise deployment can remove Piwik PRO entirely as data processor. We found no public information on data return or deletion at the end of a contract, on open-source code, or on streaming to a named warehouse product. 1 2 3 6 9 11
The Data Protection Officer
A raw data export — stated as available through the API only — with unlimited data volume, JSON, CSV and XML formats, BI-tool connections, no sampling by default and a migration path from Google Analytics and Matomo is documented, and an on-premise deployment is offered that removes the vendor as processor entirely. We found no public information on an open-source licence, on return or deletion of data at the end of a paid term (only trial deletion after thirty days plus a seven-day grace is stated), or on streaming to a named data warehouse. 6 2 11 9 1
The Agency Developer
API and raw data export for a data warehouse, unlimited raw data up to a hundred million events, JSON, CSV and XML formats, a migration path from Google Analytics and Matomo, no sampling by default, and an on-premise deployment that removes the vendor as processor entirely — the combination I need so a client's data can always leave with them. The captured pages describe raw data access differently (as unlimited export on one page and API-only on the pricing page), and we found no public information on data return or deletion at contract end. 1 2 6 9 11
The Growth Analyst
Raw data is exportable to a data warehouse or BI tools through a documented API and raw data export in JSON, CSV and XML with no stated cap — the vendor cites a hundred million events as an example — there is no sampling by default, an on-premise deployment removes the vendor as data processor entirely, and historical data can migrate from Google Analytics or Matomo. One captured page describes raw data access as API only, and I found no public information on a scheduled sync to a named warehouse or on data return and deletion at the end of a contract, only that trial accounts are deleted after the grace period. 1 2 6 9 11
The Public-Sector Site Owner
A reporting API and a raw data export feed a data warehouse or BI tools in JSON, CSV or XML, sampling is off by default, historical data can be migrated from Google Analytics or Matomo, and the pricing page states raw data access is via API only. An on-premise deployment inside our own security perimeter is offered, with the vendor removable as data processor entirely, alongside a no-lock-in commitment and a dedicated database per customer. We found no public information on a named warehouse or BI target, an open-source licence, or data return and deletion terms at contract end beyond trial accounts. 1 2 6 9 11
The Skeptic
Raw data export runs via an API in JSON, CSV and XML, described as unlimited up to 100 million events, with a stated migration path from Google Analytics and Matomo, an on-premise option that removes the vendor as data processor, and no sampling by default. The catches: raw access is stated as API only, retention ends with the plan (25 months on Business), and data deletion on termination is documented only for the trial account. 1 2 6 9 11
Installation, integrations & performance
Show reasoningHide reasoning
How this is scored
What it takes to install and run: the size and loading of the tracking script, plugins and documented set-ups for named CMS and shop systems (WordPress, TYPO3, Shopify, Shopware, WooCommerce), single-page apps and mobile SDKs, a tag manager or Google Tag Manager template, server-side tracking and first-party proxying to avoid ad blockers, team roles and permissions, client and agency accounts, single sign-on, and an uptime or status page.
0 — No documented way to install the product on a website or app.
3 — A tracking snippet to paste into the site; plugins, SDKs, server-side options and roles are basic or not described.
5 — A documented snippet with its size stated, plugins or guides for several named CMS and shop systems, support for single-page apps, team members with roles, and an agency or multi-site account.
8 — A lightweight script or server-side collection documented, a first-party proxy or own tracking domain, SDKs for iOS, Android and named frameworks, a tag manager integration, granular roles per site, single sign-on (SAML), and a public status page with uptime history.
10 — Installation that scales across an organisation: server-side and client-side tracking with an equal feature set, an infrastructure-as-code or API-driven site set-up, white-label for agencies, SLA and support terms published, and the performance impact of the script measured and stated.
The E-Commerce Marketing Lead
Server-side collection is documented with a first-party collector and a reverse proxy into the account, the tag manager brings an extensive template library with a debug mode, single sign-on runs via SAML and Active Directory/LDAP across multiple user groups with different permissions, and an SLA guarantees 99% uptime. As a Shopware shop I note Shopify is the only shop system named as an integration — we found no public information on plugins for Shopware, WordPress or TYPO3, on the tracking script's size, or on iOS and Android SDKs. 6 9 13 14
The Data Protection Officer
Server-side collection is documented with a first-party collector and reverse proxy through the customer's own server, alongside a tag manager with template library and debug mode, server-side Google Tag Manager templates from Stape and TAGGRS, SAML and Active Directory single sign-on with permission groups, and a 99 percent SLA uptime guarantee. We found no public information on the tracking script's size, plugins or guides for named CMS systems beyond Shopify, iOS or Android SDKs, or a public status page with uptime history. 14 13 9 6 2
The Agency Developer
Hybrid server-side tracking with a first-party collector and reverse proxy into the account is documented — exactly the setup that survives ad blockers — alongside a full tag manager with templates, user groups with different permissions, SSO with SAML and Active Directory/LDAP, and a 99 percent uptime guarantee. We found no public information on plugins for WordPress or TYPO3, mobile SDKs, the script size or a public status page with uptime history. 2 6 9 13 14
The Growth Analyst
Server-side collection is documented in depth — a hybrid first-party collector sends browser data to your own server and reverse-proxies it to the account, with templates for the server-side Google Tag Manager and hosting via Google Cloud, Stape or TAGGRS — and single sign-on through SAML or Active Directory, permission levels, a debug mode and a 99% SLA are all stated. Script size, mobile SDKs, a public status page with uptime history and CMS or shop plugins beyond Shopify are not described in the captured pages. 9 11 13 14
The Public-Sector Site Owner
Server-side tracking with a first-party collector and reverse proxy is documented in detail, with ready-made templates for the server-side Google Tag Manager and the partners Stape and TAGGRS, plus a tag manager with an extensive template library requiring no JavaScript. Single sign-on via SAML or Active Directory/LDAP, multi-level user permissions, a 99% SLA uptime guarantee and a Shopify integration are stated. We found no public information on the tracking script's size, mobile SDKs, plugins for CMSs like WordPress or TYPO3, or a public status page with uptime history. 3 6 9 13 14
The Skeptic
Server-side tracking with a first-party collector and reverse proxy to the account is documented, alongside server-side GTM templates, a tag manager template library that needs no JavaScript, a debug mode, SSO via SAML and Active Directory/LDAP with permission levels, and a 99% uptime SLA. We found no public information on plugins for named CMS or shop systems, script size, single-page-app or mobile SDK support, or a public status page with uptime history. 1 9 13 14
European sovereignty
panel opinion
Show reasoningHide reasoning
How this is scored
Who the contracting entity and the parent company are, where visitor data is collected, stored and processed, and who the subprocessors are (script CDN, collection endpoint, hosting, email reports, support and payment tools). Independently sourced by the sovereignty pipeline; visitor data is personal data under European rulings, so the whole chain counts, not only the database. A self-hosted or open-source edition the customer runs on its own European servers counts as the customer's chain, whatever the vendor's seat.
0 — Non-EU vendor and contracting entity, hosting unstated, subprocessors unnamed, and no data processing agreement offered.
3 — A privacy policy and a data processing agreement exist, but hosting location is unstated or non-EU and the subprocessors are not listed.
5 — EU hosting available and an EU contracting entity or EU representative, but parts of the chain (CDN, collection endpoint, email, support, payment) run through non-EU providers without a stated safeguard, or EU processing relies on a proxy in front of a non-EU service.
8 — EU hosting on named infrastructure, EU contracting entity, subprocessors listed with their locations, a data processing agreement published, and security certifications (ISO 27001, SOC 2) stated — or a self-hosted edition documented that keeps every visitor record on the customer's own servers.
10 — Sovereign end to end and evidenced: European ownership, entity, hosting and every subprocessor, or a self-hosted open-source edition with no call home, data export and deletion documented, and certifications published with their scope rather than implied.
The E-Commerce Marketing Lead
The contracting entity is Piwik PRO GmbH in Berlin with commercial register and VAT details, EU hosting is offered on named infrastructure (Azure in Germany and the Netherlands, ElastX in Sweden) alongside private-cloud and on-premise options that can remove the vendor as processor, a data processing agreement is offered, and ISO 27001 and SOC 2 certifications are stated. The group also includes companies in Poland and New York, and we found no public information listing subprocessors such as CDN, email or support tools with their locations. 6 7 8 9 12
The Data Protection Officer
The contracting entity is a Berlin GmbH with a German register number, EU hosting is available on named infrastructure — ElastX in Sweden, Azure in Germany and the Netherlands — with private-cloud and on-premise options that remove the vendor as processor, a data processing agreement is offered, ISO 27001 and SOC 2 are stated, and a data protection officer is reachable at a published address. We found no public information on the subprocessor chain — script CDN, collection endpoint, email reports, support and payment tools — and the group includes a New York LLC whose role the captured pages do not describe. 7 9 12 8 6
The Agency Developer
A German contracting entity in Berlin with a commercial register number, EU hosting on named infrastructure — Azure Germany and the Netherlands, ElastX Sweden, and the Business plan stated as EU cloud hosting in Sweden — an offered data processing agreement, ISO 27001 and SOC 2 certifications, and an on-premise option that keeps everything inside the customer's perimeter. We found no public information on a subprocessor list with their locations, which is the one piece missing from an otherwise European chain. 6 7 8 9 12
The Growth Analyst
The contracting entity is Piwik PRO GmbH in Berlin with full commercial register details, cloud hosting runs on named infrastructure in Germany, the Netherlands and Sweden, a data processing agreement is offered, and ISO 27001 and SOC 2 certifications are stated — though customers may also choose US or Hong Kong regions and the group includes a New York entity. No subprocessor list with locations appears in the captured pages, which is what keeps this below a fully evidenced chain. 6 7 8 9 12
The Public-Sector Site Owner
The contracting entity is Piwik PRO GmbH of Berlin with registry court and number published, a data processing agreement is offered, ISO 27001 and SOC 2 certifications are stated, and EU hosting is named: Azure Germany or the Netherlands, ElastX in Sweden for the Business plan, or an on-premise deployment that removes the vendor as processor entirely — workable for our municipal data centre. We found no public information on subprocessors and their locations, which matters because the visitor-data chain counts as a whole, and the group also includes a Polish and a New York entity. Signable for procurement, but the chain is not fully evidenced. 6 7 8 9 12
The Skeptic
The contracting entity is Piwik PRO GmbH in Berlin with register number and VAT ID, EU hosting is offered on named infrastructure (Azure Germany and the Netherlands, ElastX Sweden) alongside US and Hong Kong options, a data processing agreement is offered and ISO 27001 and SOC 2 are claimed. No subprocessor list appears anywhere — the CDN, collection endpoint, email and payment chain is unnamed — the group includes a New York LLC, and the on-premise edition is stated without its own documentation. 6 7 8 9 12
Pricing transparency
Show reasoningHide reasoning
How this is scored
Whether a buyer can compute the real annual cost from public pages alone: price per tier by monthly page views or events, what happens when traffic exceeds the tier, the number of sites and users included, which features (e-commerce, funnels, raw export, API, SSO, longer retention) cost extra, the free tier and its limits, the self-hosted edition and its support, minimum term and setup.
0 — No public prices at all; every customer is a sales call.
3 — A starting price or a free tier exists, but how cost scales with traffic, sites or features is unclear.
5 — Tiers are public with their price per traffic band and main inclusions, but at least one commonly needed piece (overage, extra sites, raw export, SSO, longer retention) is unpriced or "on request".
8 — Every tier priced publicly with its scaling rule (page views, events, sites, users), overage handling stated, add-ons priced, the self-hosted edition's cost or licence stated, minimum term and VAT treatment stated.
10 — Complete price computability: annual cost derivable for a given traffic volume, site count and feature set, with every add-on, setup, support and overage fee and the cancellation and data-return terms published.
The E-Commerce Marketing Lead
The Business plan is public at "Ab €36 /Monat" with up to 20 domains and 2 million actions monthly, the Enterprise plan at "Ab €366 /Monat jährliche Abrechnung" from 1 million actions with the price factors named, and overage handling, billing methods, the 30-day cancellation notice, the 4% annual price increase and the definition of an action are all published. The overage fee amount, individual module prices and the on-premise edition's cost are not stated, so a full annual Enterprise total is not computable from the public pages. 6 14
The Data Protection Officer
The Business plan is published in full — "Ab €36 /Monat", up to 20 domains, 2 million actions a month, 25 months retention, four modules — with the overage stated as an extra fee per plan, a disclosed 4 percent annual increase, 30-day cancellation notice, and billing methods with who bears which fees. Enterprise starts at "Ab €366 /Monat jährliche Abrechnung" with its price factors named but not priced, so the real annual cost for an Enterprise buyer, for SLA packages, extra modules or the on-premise edition cannot be computed from the captured pages. 6 14
The Agency Developer
The Business plan is public at "Ab €36 /Monat" with up to 20 domains and 2 Mio. actions per month, four modules and 25 months retention, and billing methods, a 30-day cancellation notice, a 4 percent annual increase and overage fees at the end of the billing period are all stated. The overage rate itself, the Enterprise price beyond the "Ab €366 /Monat" floor, the on-premise edition's cost and VAT treatment are not published, so I cannot compute the full annual cost for a client site from the public pages alone. 6 11
The Growth Analyst
The Business plan is published at from €36 per month with up to 2 million actions, twenty domains, four modules and 25 months retention, and billing methods, the automatic 4% annual price increase, the 30-day cancellation notice, plan-switching rules and who bears payment fees are all public. The overage fee is described but not priced per unit, everything above the Enterprise entry price of from €366 per month billed annually is individual, and I found no public price for the on-premise edition. 6 14
The Public-Sector Site Owner
The Business plan is unusually well documented: from €36 per month for up to 2 million actions and 20 domains with all four modules, 25 months' retention, a stated overage policy, an automatic 4% annual increase, auto-renewal with 30 days' notice, and payment methods with who bears the fees. Enterprise starts at €366 per month billed annually and a free entry plan exists, but Enterprise pricing is individual, depending on modules, action limit, hosting option and SLA package. We found no public information on the overage fee amount, SLA package prices, the on-premise edition's cost or VAT treatment, so a real annual total for our traffic volume is not computable from public pages alone. 6 14
The Skeptic
Business is published at "Ab €36 /Monat" with 2 million actions, 20 domains, four modules and 25 months retention, and Enterprise at "Ab €366 /Monat jährliche Abrechnung" from 1 million actions without an upper limit — but the Enterprise price depends on unquoted modules, action limit, hosting and SLA package, overages are charged "gemäß Ihrem Preisplan" with no figure, and on-premise cost and VAT treatment are absent. Cancellation terms, the automatic 4% annual increase and payment fee allocation are disclosed, which is more than most. 6 14
European sovereignty — proven facts
0 of 6 dimensions provenBuilt only from facts shown on the vendor's own pages. A dimension we could not prove is left open, not scored as zero.
| Legal entity | Not determined ⚠ unverified | — | uncited Report an error |
|---|---|---|---|
| Hosting location | Not determined ⚠ unverified | — | uncited Report an error |
| Hosting options | Not determined ⚠ unverified | — | uncited Report an error |
| Open source | Not determined | — | uncited Report an error |
| Data processing agreement | Not determined ⚠ unverified | — | uncited Report an error |
| Transfer impact assessment | Not determined | — | uncited Report an error |
Questions about Piwik PRO Analytics Suite
Is Piwik PRO Analytics Suite European?
Yes. whats-best.ai classifies Piwik PRO Analytics Suite as EU-Made.
Where does Piwik PRO Analytics Suite store data?
Not stated on the vendor’s pages as of 1 Nov 2026.
Does Piwik PRO Analytics Suite have a free plan?
Yes. Piwik PRO Analytics Suite has a free plan, per the vendor’s page captured 29 Oct 2026.
What are the best alternatives to Piwik PRO Analytics Suite?
As of 4 Nov 2026, the panel rates Matomo (4/5), Pirsch Analytics (3.5/5) and etracker Analytics (3/5) highest among the other 17 Web Analytics products evaluated. The highest-rated European alternative is Pirsch Analytics (EU-Made). Ratings are the AI panel’s opinion, formed from public evidence: how scores are made. The full list, with European products first: Piwik PRO Analytics Suite alternatives.
Where this could be wrong
- Evidence ages. The oldest capture behind this page is from 29 Oct 2026. Vendors change pricing and policies without notice; every fact reflects its source as of the capture date shown in the registry.
- Weak sourcing — Data processing agreement, Legal entity, Hosting location, Hosting options. Not confirmed on the vendor’s own pages as captured.
- AI can misread a source. Extraction and judgement are automated; a citation guarantees traceability, not infallibility. If something here is wrong, say so — no account needed, every report is decided within 5 business days, and accepted corrections are published.
What we left out
A claim that does not survive our checks costs us the claim, not the page. This is what was taken off this one.
- 3 product facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 1 support fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material. Know more? Tell us
- 4 sovereignty dimensions could not be confirmed on the vendor’s own pages and are shown as unknown. Know more? Tell us
- 6 of the readings below were written against an earlier fact sheet — a fact has been corrected, added or pulled since. Until the panel next runs on this product you are reading the older judgement. Know more? Tell us
Sources (15)
The pages every claim on this page was read from — each one checked, dated, and kept verifiable.
- 1 Vendor homepage piwikpro.de Checked 29 Oct 2026 Details →
- 2 Features page (web analytics) piwikpro.de Checked 29 Oct 2026 Details →
- 3 Features page (e-commerce analytics) piwikpro.de Checked 29 Oct 2026 Details →
- 4 Features page (consent manager) piwikpro.de Checked 29 Oct 2026 Details →
- 5 Integrations page piwikpro.de Checked 29 Oct 2026 Details →
- 6 Pricing page piwikpro.de Checked 29 Oct 2026 Details →
- 7 Legal notice piwikpro.de Checked 29 Oct 2026 Details →
- 8 Privacy policy piwikpro.de Checked 29 Oct 2026 Details →
- 9 Security / trust page piwikpro.de Checked 29 Oct 2026 Details →
- 10 Traffic, sources & campaign reports — found from sitemap piwikpro.de Checked 29 Oct 2026 Details →
- 11 Goals, events, funnels & e-commerce — found from sitemap piwikpro.de Checked 29 Oct 2026 Details →
- 12 Consent-free operation & data minimisation — found from sitemap piwikpro.de Checked 29 Oct 2026 Details →
- 13 Installation, integrations & performance — found from sitemap piwikpro.de Checked 29 Oct 2026 Details →
- 14 Installation, integrations & performance — found from sitemap piwikpro.de Checked 29 Oct 2026 Details →
- 15 Code repository (open-source licence) — found from the homepage github.com Checked 1 Nov 2026 Details →