Zum Inhalt springen
Unabhängig verifiziert · Quartalsweises Re-Audit
EU VETTED

Simple Analytics

VERIFIZIERT
Web-Analyse · Netherlands
Founded 2018 · simpleanalytics.com ↗

Dutch privacy-first web analytics on Worldstream + Leaseweb (NL) and Bunny CDN (SI), zero-knowledge encryption, cookieless tracking.

Warum diese Bewertung?

Dutch B.V. founded by Adriaan van Rossum running a fully EU-incorporated infrastructure stack — Worldstream and Leaseweb in the Netherlands plus Bunny CDN in Slovenia — with zero-knowledge encryption (only Simple Analytics holds the decryption keys), no cookies, no IP collection, and no US-owned cloud anywhere on the customer-data path; score held at 4/5 only because there is no single unified public DPA or named sub-processors annex (infrastructure is disclosed in /data-security-and-ownership but a procurement-grade DPA download is missing).

SCORE
4.0/5
CLOUD ACT
OWNERSHIP
SUB-PROCS
0 none disclosed
JUMP TO
OVERVIEW

About Simple Analytics

Simple Analytics is a Dutch privacy-first web analytics product operated by Simple Analytics B.V. (registered in Bussum, Netherlands; KVK 60978856) and founded by Adriaan van Rossum in 2018. It is one of the cleanest "no-CLOUD-Act-exposure" picks in the web-analytics category: customer analytics data is stored on bare-metal infrastructure at Worldstream and Leaseweb in the Netherlands, the CDN runs through Bunny (Slovenia), and the company explicitly states that "only Simple Analytics holds the decryption keys" — meaning even the hosting providers cannot read unencrypted customer data. The reference customer list is unusually strong for a small vendor: the Bank of England, Michelin, Hyundai, and the UK Government all appear on the homepage. Compliance positioning is built on a "no personal data" principle: no cookies, no IP collection, no device fingerprinting, no persistent identifiers — which lets the product claim GDPR, UK PECR, German TTDSG, CCPA, and even HIPAA fitness without a Business Associate Agreement. The company publishes documentation of its compliance posture at docs.simpleanalytics.com (compliance, compliance-faq, data-security-and-ownership) and includes correspondence from the UK ICO confirming that no consent banner is required when analytics providers neither read nor write to user devices. Where Simple Analytics is weaker for procurement-grade buyers is in the format of its DPA and sub-processors disclosures: the dedicated /dpa, /sub-processors, and /privacy-policy paths returned 404 or 301-redirect at audit, and there is no single downloadable DPA artefact — the relevant information is split across docs pages. Pricing is freemium and EU-buyer-friendly: the free tier covers one user, five websites, 30 days of history, and unlimited pageviews; Simple is €15/month (one user, ten websites, three years of retention); Team is €40/month plus €20 per additional user; Enterprise is custom-priced with SLA and priority support. EUR/USD/GBP currency switching, bank transfer accepted on invoices €500+, plus Bitcoin/Apple Pay/Google Pay. Best fit: privacy-conscious EU companies, public-sector buyers, and indie publishers who want a no-cookie, no-CLOUD-Act analytics stack with named Dutch hosting and a credible reference list, and don't yet need a unified DPA download.
SUB-PROCESSORS

Unterauftragsverarbeiter-Karte · none disclosed

Source ↗
Vendor discloses zero sub-processors. All data processing happens in-house.
CERTIFICATIONS

Rahmenwerke & Zertifizierungen · none listed

We checked the vendor's website and standard certification body registries. No active certifications found at the time of last audit (2026-05-10).
FEATURES

Funktionsmatrix

INTEGRATION & ACCESS
REST API Yes
SSO (SAML / OIDC) No
COMPLIANCE & GOVERNANCE
Audit log No
Self-host / on-prem option No
PRICING

Preise & Tarife

FREEMIUM
ab €15/Monat
Preisseite ansehen ↗
PUBLIC DOCUMENTS

Öffentliche Dokumente

DPA accessibility is not scored for this listing. Self-hosted or local software, vendors that are not data processors, and products carrying a SecNumCloud, EUCS or BSI C5 certification are not assessed on DPA accessibility — see How we score.
  • Data Processing Addendum (DPA)
    — not assessed
    n/a
  • Sub-processors list
    docs.simpleanalytics.com/data-security-and-ownership…
    Open ↗
  • Terms of Service
    www.simpleanalytics.com/general-terms-and-conditions…
    Open ↗
ALTERNATIVES

Alternativen in dieser Kategorie