Matomo
Partially CompliantLeading open-source web analytics. Self-host in the EU or use cloud with EU hosting.
Headquartered outside the EU/EEA, so a non-EU disclosure regime may apply alongside GDPR.
Freemiumfrom Free (self-hosted)
GDPR Compliance Data
Verified from vendor documentation| GDPR Status | Partially Compliant |
| HQ Country | New Zealand |
| Ownership | Non-European |
| Foreign Disclosure Exposure | Non-EU jurisdiction |
| Data Hosting Location | Global“Contract Europe: – Frankfurt, Germany; – backups stored in Dublin, Ireland Account and Customer Personal Data, Activity Data Processing covered by DPA (Data Processing Agreement) While EU data is pro …” |
| EU Servers Available | |
| Data Processing Agreement | View DPA |
| Sub-processor List | View sub-processors |
| Schrems II Risk | Medium Risk |
| SCCs in Place | |
| Last Verified | 5 August 2026 |
How we reached this
Self-hosted option gives full data control. Cloud version offers EU data center option.
About Matomo
The Leading Open-Source Analytics Platform
Matomo (formerly Piwik) is the most feature-rich open-source web analytics platform available. Used by over 1 million websites worldwide, including government agencies and large enterprises, Matomo provides a true alternative to Google Analytics with full data ownership.
Self-Hosted or Cloud
- Self-hosted (free). Download and install on your own servers. You own 100% of your data with zero limits on usage
- Cloud-hosted. Let Matomo manage everything for you with EU data hosting included
Enterprise-Grade Features
Matomo goes beyond basic analytics with built-in support for:
- Heatmaps & session recordings. See exactly how users interact with your pages
- A/B testing. Run experiments directly within Matomo
- Tag manager. Replace Google Tag Manager with a privacy-friendly alternative
- Custom reports & dashboards. Build reports tailored to your business needs
- Google Analytics data import. Migrate your historical data seamlessly
Data Privacy by Design
Matomo has been recommended by the French data protection authority (CNIL) as a tool that can be configured to be exempt from cookie consent requirements. With features like IP anonymization, data retention controls, and GDPR Manager. Matomo makes compliance straightforward.
Key Features
Works With
Pros & Cons
Pricing
Self-Hosted
- Unlimited websites
- Unlimited users
- Full data ownership
- Community support
Cloud Essential
Popular- Up to 50K hits/month
- EU data hosting
- Automatic updates
- Email support
Cloud Business
- Up to 100K hits/month
- Heatmaps & session recording
- A/B testing
- Roll-up reporting
Categories
Tags
Replaces
Matomo GDPR & data protection: common questions
Is Matomo GDPR compliant?
Partly. Matomo meets some of the requirements, with caveats worth reading before you commit. Matomo is based in New Zealand, outside the EU/EEA, data is hosted across multiple regions globally, and a Data Processing Agreement is published. Every claim on this page links to the vendor's own documentation.
Where does Matomo store data?
Matomo states: "Contract Europe: – Frankfurt, Germany; – backups stored in Dublin, Ireland Account and Customer Personal Data, Activity Data Processing covered by DPA (Data Processing Agreement) While EU data is pro …". Data is hosted across multiple regions globally. An EU region is available.
Does Matomo offer a Data Processing Agreement (DPA)?
Yes. Matomo publishes a DPA at https://matomo.org/matomo-cloud-dpa/subprocessors/. A DPA is required under Article 28 GDPR whenever a provider processes personal data on your behalf.
What a DPA has to cover →Is Matomo a European company?
No. Matomo is based in New Zealand, outside the EU/EEA. It may still be a sound choice (EU hosting and a signed DPA matter more than a flag) but the ownership is not European.
Which jurisdiction's laws apply to Matomo?
Matomo is based in New Zealand, outside the EU/EEA, so a non-EU disclosure regime may apply alongside GDPR. Transfers to the vendor rely on an adequacy decision or appropriate safeguards such as Standard Contractual Clauses.
Where the EU-US Data Privacy Framework stands →Who are Matomo's sub-processors?
Matomo publishes its sub-processor list at https://matomo.org/matomo-cloud-dpa/subprocessors/. Worth reading: a vendor hosting in the EU can still route data through non-EU sub-processors, which is where residency claims usually come apart.
Related Tools
Plausible Analytics
Lightweight, open-source, cookie-free web analytics. Fully GDPR compliant with EU data hosting.
Mouseflow
Heatmaps, session replay, and behavior analytics. Danish company with EU-only data processing.
Pirsch Analytics
Simple, cookie-free web analytics from Germany. Privacy-first and GDPR compliant.
Spotted something wrong?
Martech moves fast. Vendors change hosting regions, get acquired, publish a new DPA or rewrite their pricing, and they rarely announce it. We check what we publish and date every compliance review, but some of what you see here will be out of date before we catch it.
If you work at Matomo and something on this page is wrong, tell us and we will fix it. Readers, same invitation. Pointing us at the page that proves it gets it changed fastest.