US-incorporated autocapture analytics, acquired by Contentsquare (FR) in 2024.
DISCLOSURE Some links on this site are affiliate links. We may earn a commission at no extra cost to you. Compliance scores and editorial rankings are never influenced by affiliate relationships.
Listed for transparency. Every product on this page is benchmarked against this baseline.
US-incorporated autocapture analytics, acquired by Contentsquare (FR) in 2024.
All 3 alternatives ranked by compliance score, benchmarked against Heap.
| Product | Score | Owner | CLOUD Act | Cert. | Pricing | Action |
|---|---|---|---|---|---|---|
|
Heap
benchmark · US
|
1.0/5 | OWNERSHIP
Where ultimate control over the operating company sits.
|
CLOUD ACT EXPOSURE
How exposed customer data is to US authorities under the CLOUD Act.
|
SOC 2 no EU framework |
Freemium | your current |
|
PostHog
United Kingdom
|
VERIFIED SIGNALS
Jurisdiction
Transparency
|
OWNERSHIP
Where ultimate control over the operating company sits.
|
CLOUD ACT EXPOSURE
How exposed customer data is to US authorities under the CLOUD Act.
|
— |
Freemium
€0 / mo
|
View profile → |
|
Matomo
New Zealand
|
VERIFIED SIGNALS
Jurisdiction
Transparency
|
OWNERSHIP
Where ultimate control over the operating company sits.
|
CLOUD ACT EXPOSURE
How exposed customer data is to US authorities under the CLOUD Act.
|
ISO/IEC 27001
|
Freemium
€29 / mo
|
View profile → |
|
TelemetryDeck
Germany
|
VERIFIED SIGNALS
Jurisdiction
Transparency
|
OWNERSHIP
Where ultimate control over the operating company sits.
|
CLOUD ACT EXPOSURE
How exposed customer data is to US authorities under the CLOUD Act.
|
— |
Freemium
€9 / mo
|
View profile → |
Ranked by feature parity + compliance score. Migration friction is weighted higher than feature breadth.
London-based open-source product analytics (PostHog, 2020, Y Combinator W20), US + EU Frankfurt cloud regions, MIT-licensed self-host.
Open-source web analytics (NZ-incorporated InnoCraft) with EU-hosted Matomo Cloud on AWS and full self-hosted option.
German privacy-first mobile + web app analytics with on-device anonymisation, EN/DE DPA, and a transparent sub-processors list.
For every product we read the public DPA, sub-processors document, hosting region declaration, and corporate ownership records. Each is timestamped. Compliance score is editorial, re-verified quarterly. We never accept self-attestation.
Reviewed by the EU Vetted editorial team · Editorial guidelines