Yabrix Analytics
Partially CompliantSpanish cookieless web analytics platform from CAHAMS INTERNET, S.L. in Madrid, with real-time traffic monitoring, Google Discover detection, scroll-depth and journey tracking, and a published Article 28 DPA.
GDPR Compliance Data
Not independently verified| GDPR Status | Partially Compliant |
| HQ Country | Spain |
| Ownership | European-owned |
| Foreign Disclosure Exposure | Not yet verified |
| Data Hosting Location | Unknown“No hosting provider or region is named in the legal notice, privacy policy, DPA or terms of service (all read raw at yabrix.com, 2026-09-09). The submitter's own notes claimed EU/France hosting, but that specific claim does not appear in any of the vendor's own published legal documents, so it is not treated as verified.” |
| EU Servers Available | |
| Data Processing Agreement | Not verified |
| Sub-processor List | View sub-processors |
| Schrems II Risk | Medium Risk |
| SCCs in Place | |
| Last Verified | 9 September 2026 |
How we reached this
Spanish legal entity: CAHAMS INTERNET S.L., NIF ESB85084317, Calle General Díaz Porlier, 48, 1A, 28001 Madrid, Spain, Commercial Registry of Madrid (Volume 24,243, Page 157, Section 8, Sheet M-435744), read raw (curl, not WebFetch summary) 2026-09-09 at yabrix.com/legal-notice — independently confirmed, matching what was claimed on submission. Terms governed by Spanish law, exclusive jurisdiction of the courts of Madrid. PARTIAL: Yabrix publishes a genuine Article 28 GDPR DPA at a stable URL (dpaEvidence PUBLISHED, a real positive), but Section 8 (Subprocessing) names no actual sub-processor, only generic categories ("infrastructure providers, payment processors, and communication services") with the actual list available only on request. Section 9 (International Data Transfers) and the privacy policy both cite Standard Contractual Clauses/adequacy decisions/the EU-US Data Privacy Framework generically, without naming a specific destination country or provider, hence sccInPlace true but schremsIIRisk MEDIUM rather than LOW (the safeguard is asserted, not shown against a named recipient). dataHostingLocation and extraterritorialExposure are both UNKNOWN because no hosting provider or region appears anywhere in any of the four legal documents read — this directly contradicts the submitter's own notes, which claimed 'Application and customer data are hosted in the European Union (France)'; that specific claim was checked against the vendor's own published text and not found, so it is recorded here as unverified rather than accepted on the submitter's word alone.
About Yabrix Analytics
Cookieless by Default
Yabrix Analytics's core positioning is privacy-first, cookieless-by-default web analytics: aggregated traffic and engagement data without individual visitor tracking, and persistent identifiers only where consent is actually given.
What It Covers
- Real-time traffic monitoring with Google Discover traffic detection
- Engagement and scroll-depth analysis at 10/25/50/75/100% intervals
- User journey tracking: multi-step navigation paths with drop-off identification
- Google integrations: direct Search Console and Google Analytics connections for consolidated reporting
- Team collaboration: roles, permissions and multi-site management
- Yabrix Links: URL shortening and QR-code campaign tracking bundled with the analytics subscription
A free trial is offered with no credit card required, cancellable anytime; exact pricing tiers are not published on the site.
The Spanish Entity, Independently Confirmed
Operated by CAHAMS INTERNET S.L., Tax ID (NIF) ESB85084317, registered at Calle General Díaz Porlier, 48, 1A, 28001 Madrid, Spain, Commercial Registry of Madrid (Volume 24,243, Page 157, Section 8, Sheet M-435744). Terms are governed by Spanish law, with exclusive jurisdiction in the courts of Madrid. This was submitted to the directory with exactly this entity claimed, and it checks out against the vendor's own legal notice.
Yabrix publishes a genuine, well-structured Data Processing Agreement under GDPR Article 28 at a stable URL, automatically forming part of its Terms of Service. What it does not do is name its actual sub-processors: Section 8 states subprocessors "may include infrastructure providers, payment processors, and communication services," with "an up-to-date list ... made available to the Customer upon request" rather than published. The international-transfer section similarly cites "Standard Contractual Clauses or equivalent mechanisms" without naming a specific destination or provider.
One thing worth flagging plainly: the submitter's own notes claimed "Application and customer data are hosted in the European Union (France)." That specific claim does not appear anywhere in the legal notice, privacy policy, DPA or terms actually read for this listing, so it is not treated as verified fact here, consistent with how this directory checks every submission against the vendor's own published text rather than the claim itself.
Where It Fits
For readers comparing European cookieless and privacy-first analytics platforms, see also Plausible Analytics, Fathom Analytics, Simple Analytics and the broader Web Analytics category.
Key Features
Pros & Cons
Categories
Replaces
Yabrix Analytics GDPR & data protection: common questions
Is Yabrix Analytics GDPR compliant?
Partly. Yabrix Analytics meets some of the requirements, with caveats worth reading before you commit. Yabrix Analytics is a European company headquartered in Spain.
Where does Yabrix Analytics store data?
Yabrix Analytics states: "No hosting provider or region is named in the legal notice, privacy policy, DPA or terms of service (all read raw at yabrix.com, 2026-09-09). The submitter's own notes claimed EU/France hosting, but that specific claim does not appear in any of the vendor's own published legal documents, so it is not treated as verified.". Data is hosted in a location we have not been able to verify.
Does Yabrix Analytics offer a Data Processing Agreement (DPA)?
We could not locate a published DPA for Yabrix Analytics. That does not mean one is unavailable. Many vendors provide it on request or inside the account area rather than publishing it. Ask before you sign.
What a DPA has to cover →Is Yabrix Analytics a European company?
Yes. Yabrix Analytics is headquartered in Spain and, as far as we can establish, European-owned.
Who are Yabrix Analytics's sub-processors?
Yabrix Analytics publishes its sub-processor list at https://www.yabrix.com/dpa. Worth reading: a vendor hosting in the EU can still route data through non-EU sub-processors, which is where residency claims usually come apart.
Related Tools
Plausible Analytics
Lightweight, open-source, cookie-free web analytics. Fully GDPR compliant with EU data hosting.
Matomo
Leading open-source web analytics. Self-host in the EU or use cloud with EU hosting.
Mouseflow
Heatmaps, session replay, and behavior analytics. Danish company with EU-only data processing.
Spotted something wrong?
Martech moves fast. Vendors change hosting regions, get acquired, publish a new DPA or rewrite their pricing, and they rarely announce it. We check what we publish and date every compliance review, but some of what you see here will be out of date before we catch it.
If you work at Yabrix Analytics and something on this page is wrong, tell us and we will fix it. Readers, same invitation. Pointing us at the page that proves it gets it changed fastest.