Web analytics services · Tag management systems · Session recording tools

Matomo

Open source web analytics you can self-host

New ZealandOpen source Ownership reviewed, controller unresolvedHigh non-EU dependency

Scope verdict

Ownership reviewed, controller unresolved

This service remains visible for context, but it is not counted or recommended as a European-controlled option.

How we classify services

Operational dependency warning

Relies heavily on non-European providers

Current public evidence shows 6 non-European infrastructure or email dependencies across 5 providers: Amazon Web Services, GoDaddy Mail, Help Scout, HubSpot, Microsoft. The reviewed operational path is therefore not entirely European.

Review dependencies ↓

Matomo is an open source web analytics service. You can install it on your own server, which means the visitor data of your website stays in the infrastructure you control instead of being sent to an analytics company. It also covers tag management and session recording.

The company behind Matomo is based in New Zealand, so the product itself is not European. Because it is open source and self-hosted, though, you can run it on a server in the EU and use it as a European alternative to American analytics tools. That makes it a good match for organisations with GDPR obligations and their own hosting.

Data and operations

Infrastructure and email path

Verified operational dependencies, shown separately from ownership and from the service's core data hosting.

Public website

Amazon Web Services

US-controlled cloud
Observed
A 18.238.243.119, 18.238.243.27, 18.238.243.45 · AS16509

Why this matters

This public website route ends on Amazon Web Services, whose European seller is wholly owned by Amazon.com, Inc. An EU region can provide European data residency but remains under US ultimate ownership. DNS does not reveal the AWS region, the core service's host, or use of the separately operated AWS European Sovereign Cloud.

Incoming business email

Microsoft 365

Non-European provider
Observed
MX 0 matomo-org.mail.protection.outlook.com

Why this matters

Published MX records route incoming business email through Microsoft 365. Correspondent details and message content can therefore enter this non-European provider's systems; MX does not reveal the configured storage region.

Authorised outbound email

Microsoft 365

Non-European provider
Observed
SPF spf.protection.outlook.com

Why this matters

This domain authorises Microsoft 365 to send email. If active, recipient details and message content can be processed by this non-European provider. SPF does not reveal its configured storage region.

Authorised outbound email

alwaysdata

European provider
Observed
SPF _spf.alwaysdata.com

Authorised outbound email

Help Scout

Non-European provider
Observed
SPF helpscoutemail.com

Why this matters

This domain authorises Help Scout to send email. If active, recipient details and message content can be processed by this non-European provider. SPF does not reveal its configured storage region.

Authorised outbound email

GoDaddy Mail

Non-European provider
Observed
SPF spf.em.secureserver.net

Why this matters

This domain authorises GoDaddy Mail to send email. If active, recipient details and message content can be processed by this non-European provider. SPF does not reveal its configured storage region.

Authorised outbound email

spf.discoursehosting.com

Provider control not verified
Observed
SPF spf.discoursehosting.com

Authorised outbound email

HubSpot

Non-European provider
Observed
SPF 22519270.spf08.hubspotemail.net

Why this matters

This domain authorises HubSpot to send email. If active, recipient details and message content can be processed by this non-European provider. SPF does not reveal its configured storage region.

Public DNS records identify visible providers and routes, not every backend location or private data-region setting.

Infrastructure checked:

More in Web analytics services

View all →