Zum Inhalt springen
EU VETTED

Matomo

Web-Analyse · Neuseeland
Gegründet 2007 · matomo.org

Open-source web analytics (NZ-incorporated InnoCraft) with EU-hosted Matomo Cloud on AWS and full self-hosted option.

Matomo bietet EU-Hosting in Deutschland, doch ein US-Mutterkonzern oder Unterauftragsverarbeiter hinterlässt ein materielles CLOUD-Act-Risiko. Gelistet unter Web-Analyse.

Bewertungsnotizen

Open-source veteran with ISO 27001:2022 and customer Cloud data 100% stored in Europe, but the controlling legal entity is InnoCraft Limited in New Zealand and Matomo Cloud runs on AWS, meaning customer data at rest sits with a US-owned hyperscaler in the EU region; NZ holds an EU adequacy decision so transfers are legally clean, but the AWS dependency is material CLOUD Act exposure for procurement-grade buyers despite the strong open-source / on-premise alternative.

Befund

CLOUD Act
Eigentümer
Unterauftragsverarbeiter
3 · 1 US

Geprüfte Signale

Jurisdiktion
  • EU-/Angemessenheits-Hosting: Ja
  • EU-/Angemessenheits-Betreiber: Nein
  • Keine US-CLOUD-Act-Exposition: Nein
Transparenz
  • Öffentlicher AVV: Ja
  • Unterauftragsverarbeiter offengelegt: Ja
  • Open-Source-Clients: Ja
  • Zertifizierung durch Dritte: Ja
CLOUD Act je nach Betrieb

Die Exposition hängt davon ab, wie Sie dieses Produkt betreiben.

Gehostetes SaaS (Standard)

Anbieterbetrieben: die unten genannten Unterauftragsverarbeiter gelten.

Selbst gehostet (Open Source)

Auf eigener EU-Infrastruktur betreiben: Sie kontrollieren Hosting und jeden Unterauftragsverarbeiter.

Springen zu

Über Matomo

Matomo (formerly Piwik, renamed in 2018) is a long-running open-source web analytics platform operated by InnoCraft Limited, a New Zealand company at 7 Waterloo Quay, Wellington (NZBN 6106769). It is one of the only Schrems-friendly Google Analytics alternatives that ships in two clearly separated forms: Matomo On-Premise (fully free and self-hostable on the customer's own infrastructure with unlimited hits, websites, and team members) and Matomo Cloud, the managed SaaS offering. The product reports more than one million tracked websites across 190+ countries, including the European Commission and the United Nations.

For EU buyers the operational story has two sides. On the positive side: the company is ISO 27001:2022 certified, the privacy policy is public, the GDPR Manager built into Matomo helps with Art. 30 records and consent capture, and Matomo Cloud commits that 100% of customer Cloud data and backups are stored in Europe rather than in the US. On the strict-CLOUD-Act side: InnoCraft is New Zealand-incorporated (NZ has an EU adequacy decision, so transfers are legally clean), and Matomo Cloud is operated on Amazon Web Services, meaning customer analytics data at rest sits with a US-owned hyperscaler even when the AWS region is European. Per our parent-jurisdiction stance (Schrems II, Microsoft Ireland v US), this counts as material CLOUD Act exposure regardless of region for the Cloud product. Buyers who self-host the on-premise edition on EU infrastructure (e.g. Hetzner) sidestep this entirely.

Pricing for Matomo Cloud Business starts at 29 €/month (50,000 hits/month, 30 sites, 30 users) with a free trial that requires no credit card, and annual billing gives two months free. Anthropic Claude and OpenAI are used to analyse aggregated, non-PII Matomo data for product features; Cognism is used for B2B marketing data enrichment on the matomo.org site. Best fit: organisations who want a long-running open-source GA alternative with a credible European-data-residency Cloud offering, or who can run the open-source build on their own EU-hosted infrastructure for a fully sovereign posture with no CLOUD Act exposure.

Unterauftragsverarbeiter-Karte · 3

Quelle
  • Amazon Web Services EMEA SARL US
    Luxemburg

    Hosting (servers, databases, logs; Frankfurt with Dublin backups) and CDN for JavaScript files

  • Oblivion Cloud Control B.V. (Xebia Group B.V.) EU
    Niederlande

    AWS solution provider: infrastructure management, IT consulting and support

  • Tideways GmbH EU
    Deutschland

    Application performance monitoring (APM)

Quelle: veröffentlichte Unterauftragsverarbeiter-Liste des Anbieters, gelesen am 26 Aug 2026.

1 von 3 Unterauftragsverarbeitern sind in US-Eigentum oder haben ihren Sitz in den USA. CLOUD-Act-Risiko anwendbar.

Rahmenwerke & Zertifizierungen

ISO/IEC 27001
Aktiv

Funktionsmatrix

Tabelle 2Funktionen von Matomo

Cookielos Ja
Self-Hosting Ja
Eigene Events Ja
Funnels Ja
Session-Replay Ja
GA-Import Ja
Statistik-API Ja

Integration & Zugriff

REST API Ja
SSO (SAML / OIDC) Ja

Compliance & Governance

Audit log Ja
Self-host / on-prem option Ja

Preise & Tarife

ab 29 €/Monat
Freemium
Preisseite ansehen

Öffentliche Dokumente

  • Auftragsverarbeitungsvertrag (AVV)
    matomo.org/matomo-cloud-dpa…
    Öffnen
  • Liste der Unterauftragsverarbeiter
    matomo.org/matomo-cloud-dpa…
    Öffnen
  • Nutzungsbedingungen
    matomo.org/terms…
    Öffnen

Alternativen in dieser Kategorie

  • GoatCounter
    Irland
    EU-souverän
    Öffentl. AVV: Nicht bewertet Subprozessoren: Ja Open Source: Ja
  • Pirsch Analytics
    Deutschland · 6 $/Mt.
    EU-souverän
    Öffentl. AVV: Ja Subprozessoren: Ja Open Source: Nein
  • Plausible Analytics
    Estland · 8 €/Mt.
    EU-souverän
    Öffentl. AVV: Ja Subprozessoren: Ja Open Source: Ja
Alle web-analyse-Alternativen ansehen