ABlyft
Partially CompliantGerman A/B testing platform from Conversion Expert GmbH in Kiel that stores no personal data by design, aggregating results with no IPs or user IDs, hosted entirely in Germany.
GDPR Compliance Data
Not independently verified| GDPR Status | Partially Compliant |
| HQ Country | Germany |
| Ownership | European-owned |
| Foreign Disclosure Exposure | None known |
| Data Hosting Location | European Union"We are German - Hosting & whole Company in Germany. Adhering to current law can be very complicated. As a purely German company, we are subject to the highest requirements worldwide" and "Hosting and Storage in Germany. All data and files are stored on highly secure servers. The data center is certified according to the highest standards" (ablyft.com/en/features/data-protection-privacy, read raw 2026-09-07). No specific hosting provider is named. |
| EU Servers Available | |
| Data Processing Agreement | Not verified |
| Sub-processor List | Not verified |
| Schrems II Risk | Low Risk |
| SCCs in Place | |
| Last Verified | 7 September 2026 |
How we reached this
German legal entity: Conversion Expert GmbH, HRB 20453, Amtsgericht Kiel, VAT DE325520659, Zeppelinring 52c, 24146 Kiel, Germany, CEO Alexander Richter, per the legal notice read raw 2026-09-07. PARTIAL rather than COMPLIANT despite a genuinely strong architectural claim: the product page states no personal data, IP addresses or user IDs are stored, only aggregated data, with an optional self-hosted snippet as a further step. That is a real reduction in GDPR surface area if accurate, but it could not be independently verified from documents (it is a marketing/product claim, not something demonstrated in a DPA or audit). Working against a higher rating: the published privacy notice at /en/privacy-notice is a generic, templated website-imprint policy covering only ablyft.com's own cookies, server logs and contact-form data under Art. 6 DSGVO, not the SaaS product's data flows, sub-processors, or international transfers -- and no Data Processing Agreement was found published, referenced, or stated as available on request anywhere on the marketing site, docs subdomain, or footer, hence dpaEvidence NOT_LOCATED and dpaAvailable false. No hosting provider is named (only "highly secure servers" and "the data center is certified"), so extraterritorialExposure is recorded as NONE on the basis that no US or third-country infrastructure provider is named or implied anywhere, rather than as a confirmed absence of any foreign processor; schremsIIRisk is LOW given the all-German, no-PII framing, with no SCC clause found or needed on the evidence available (sccInPlace false, consistent with no international transfer being described).
About ABlyft
An Optimizely Alternative Built Around Not Collecting Data At All
Most of the compliance story in A/B testing is about where visitor data lives and who can reach it. ABlyft takes a different approach: it tries not to hold data that would raise those questions in the first place.
Privacy By Design, Not Just By Policy
From the product's own data-protection page:
No personal data or 'personal identifiable information' is stored. Neither IPs, user IDs or any individual information about the user. All data is stored aggregated and gives you all the information for your decisions.
We do not store IP addresses. Also, no user ID or the like is stored. Only aggregated data is stored -- i.e. no actions of a single visitor.
Self-hosting the JavaScript snippet is also offered as "a simple and secure self-hosting flow," which keeps the loading script itself off ABlyft's CDN if a customer wants that.
What It Does
- Visual editor for building experiments without code, alongside a developer-first API
- Server-side experiments as an option, not only client-side
- Cookie consent integration, respecting a site's own consent flow, plus a DoNotTrack honour setting
- Two-factor authentication and a change log recording every experiment modification
- AI features (ABlyft Lumen) available as an opt-in layer, not required to use the core product
Pricing
A Free plan is available with no credit card required. The Paid plan is quote-based rather than published, pitched around a proof-of-concept and tailored to customer needs.
German Entity, German Hosting, Thin Paperwork Around It
Operated by Conversion Expert GmbH, HRB 20453 (Amtsgericht Kiel), VAT DE325520659, Zeppelinring 52c, 24146 Kiel, Germany, CEO Alexander Richter. The compliance page states plainly: "We are German -- Hosting & whole Company in Germany" and "Hosting and Storage in Germany. All data and files are stored on highly secure servers."
What is missing is the paperwork that usually accompanies a claim like that. The published privacy notice is a generic, templated website-imprint policy covering cookies and server logs for ablyft.com itself, not a document addressing the SaaS product's own data flows, sub-processors or international transfers. No Data Processing Agreement was found published, referenced, or offered on request anywhere on the site -- for a company selling into "legal departments" as a stated audience, that is a real gap rather than a minor one, even with the no-PII architecture reducing what a DPA would need to cover.
Where It Fits
Against Optimizely, ABlyft trades enterprise scale and ecosystem breadth for a smaller, privacy-first German alternative. See also PostHog, AB Tasty, Convert Experiences and Kameleoon in A/B Testing.
Key Features
Pros & Cons
Categories
Replaces
ABlyft GDPR & data protection: common questions
Is ABlyft GDPR compliant?
Partly. ABlyft meets some of the requirements, with caveats worth reading before you commit. ABlyft is a European company headquartered in Germany, data is hosted within the European Union.
Where does ABlyft store data?
ABlyft states: ""We are German - Hosting & whole Company in Germany. Adhering to current law can be very complicated. As a purely German company, we are subject to the highest requirements worldwide" and "Hosting and Storage in Germany. All data and files are stored on highly secure servers. The data center is certified according to the highest standards" (ablyft.com/en/features/data-protection-privacy, read raw 2026-09-07). No specific hosting provider is named.". Data is hosted within the European Union.
Does ABlyft offer a Data Processing Agreement (DPA)?
We could not locate a published DPA for ABlyft. That does not mean one is unavailable. Many vendors provide it on request or inside the account area rather than publishing it. Ask before you sign.
What a DPA has to cover →Is ABlyft a European company?
Yes. ABlyft is headquartered in Germany and, as far as we can establish, European-owned.
Related Tools
AB Tasty
French A/B testing and personalization platform with EU data hosting.
Kameleoon
French experimentation and personalization platform. Full GDPR compliance.
Convert Experiences
Dutch privacy-focused A/B testing platform with no personal data storage.
Spotted something wrong?
Martech moves fast. Vendors change hosting regions, get acquired, publish a new DPA or rewrite their pricing, and they rarely announce it. We check what we publish and date every compliance review, but some of what you see here will be out of date before we catch it.
If you work at ABlyft and something on this page is wrong, tell us and we will fix it. Readers, same invitation. Pointing us at the page that proves it gets it changed fastest.