Plausible vs Umami vs Fathom: the UK SMB privacy-first analytics guide (2026)
On this page
Google Analytics is the default for almost every UK small business. It has also been quietly precarious since the CJEU’s Schrems II ruling in 2020, and explicitly problematic since the Austrian, French, and Italian data-protection authorities ruled it incompatible with GDPR, in its standard configuration, between 2022 and 2024.
You are probably aware. You have probably parked the worry under “things to deal with eventually”. This piece is about the three privacy-first alternatives that have matured by 2026 into the real choice, and which one I install for UK Web Marketing client sites.
The short version
- Plausible, Estonian + Germany-hosted, cookieless, simplest setup, fairest pricing for SMB scale. The default recommendation.
- Umami, open-source, self-hostable for full sovereignty, cloud tier is competitive. Best if you want to own the data outright.
- Fathom, Canadian, oldest of the three, slightly more polished dashboard, Canadian data residency (not strictly EU).
If you care about EU sovereignty specifically (you are a UK clinic, solicitors firm, school, or accountancy practice), narrow to Plausible or Umami self-hosted. Fathom is fine but Canadian residency is one step further from your data than EU.
The comparison matrix
Last updated: 3 June 2026. Pricing in vendor’s native currency. Methodology: residency verified against each vendor’s public hosting documentation. The matrix excludes Google Analytics deliberately, Schrems II + the 2022-2025 EU DPA rulings have made it the wrong default for a UK SMB taking residency seriously.
| Criterion | Plausible | Umami | Fathom |
|---|---|---|---|
| Company HQ | Estonia (Plausible Insights OÜ) | US (Umami Software Inc.) | Canada (Pacific Tracking, Vancouver) |
| Cloud hosting | Hetzner Frankfurt + Helsinki (EU) | AWS Frankfurt (cloud tier) | AWS Canada (Vancouver region) |
| Self-host option | Yes, open source (AGPL) | Yes, open source (MIT) | No |
| CLOUD Act exposure (cloud tier) | No | Yes (US parent, EU storage) | No (Canadian, but third-country to EU) |
| Cookies / cookie banner needed | No | No | No |
| Free tier (cloud) | 30-day trial only | 100k events/mo | Trial only |
| Entry price | £9/mo Growth (10k pv) | $20/mo Pro (1M events) | $15/mo Starter (100k pv) |
| 100k pageviews / month | £19/mo Business | Free tier | $34/mo Plus |
| EU public-sector adoption | Yes, German Government, EDPB itself | Limited | Limited |
| Dashboard polish | Good, simple | Good, modern | Best of the three |
| GA imports | Yes (built-in on signup) | Manual | Manual |
| Where it is better | Cheapest, EU-first, public-sector trust signals | Free self-host, white-label friendly, MIT licence | Most polished UI, mature product |
| Where it is worse | Less granular than GA, smaller community | Self-host ops cost (you own DB + upgrades) | Canadian residency (one step beyond EU), highest pricing |
| UKWM recommendation | Default for UK SMBs, ships as standard on every build | White-label dashboards on a managed retainer | Only when Canadian residency is fine and UI polish is decisive |
Honest call-outs (where competitors win):
- Fathom’s dashboard is the prettiest of the three. If UI mattered above all else, it would be the call.
- Umami’s open-source licence is MIT (more permissive than Plausible’s AGPL). For UK SMBs wanting to embed or fork, Umami is the friendlier copyright posture.
- Plausible self-hosted exists but is AGPL, embedding it in a commercial product without releasing modifications back is a copyleft problem Umami does not have.
Plausible, the default recommendation
Pricing: Free 30-day trial. Growth £9/month (up to 10k monthly pageviews). Business £19/month (up to 100k). Custom enterprise.
Data residency: European Union (Germany, Hetzner Online data centres in Frankfurt and Helsinki). Plausible the company is incorporated in Estonia. Zero data transfers outside the EU. The only US-resident infrastructure used at all is GitHub for the codebase repo (not customer data).
GDPR posture: No cookies by default, no cookie banner required. No personal data collected (IP addresses are hashed + discarded within 24 hours; no fingerprinting). The company maintains a public DPA + sub-processor list. Used by EU institutions (the German government, the European Data Protection Board itself), telling signal.
Why it is the default for UK SMBs:
- Cheapest of the three at SMB volume (most UK SMB sites get <100k pageviews/month, so Growth tier £9/mo covers it)
- EU residency without any configuration needed
- The dashboard is genuinely simple, non-technical clients can read it without training
- Open-source self-hosting option available if you ever want to step up to full sovereignty (more on this below)
- No cookie banner = better UX = higher engagement on the site
Where it falls short:
- Less granular than Google Analytics, no e-commerce reports out of the box, no path-analysis funnels (you can wire goals + custom events; they work fine, just not a 4-step funnel UI)
- Real-time view exists but is less detailed than GA
- Smaller community of “Plausible advanced setup” tutorials
Plausible → (Affiliate-disclosed when programme available; I use Plausible on my own site + recommend it to every UK Web Marketing client.)
Umami, the open-source / self-hostable option
Pricing: Open-source (self-host = free). Cloud tier: Free up to 100k events/month. Pro $20/month (1M events). Enterprise custom.
Data residency: Self-hosted = wherever you host it. I run Umami on Vercel (lhr1, London) + a small Postgres database (Supabase EU or Neon EU) for retainer clients who want a white-label analytics dashboard. Umami cloud is AWS in Frankfurt by default.
GDPR posture: No cookies by default. IP anonymisation. No personal data collection. Open-source = full code audit available if your insurer asks.
Why it is worth considering:
- Full sovereignty when self-hosted (you own the data, the dashboard, the database)
- White-label friendly, retainer clients get a dashboard at
analytics.<theirdomain>branded as theirs, not as Umami’s - Open-source = no vendor lock-in. If Umami the cloud service pivots/closes, the codebase keeps running
- Modern dashboard UI
Where it falls short:
- Self-hosting adds operational cost, you are now responsible for database backups, version upgrades, scaling. A UK Web Marketing managed retainer handles this for clients, but a solo SMB self-hosting Umami is taking on a small but real ops burden
- Smaller community than Plausible for “how do I configure X” support
- The cloud tier is fine but does not have the same brand recognition as Plausible
Umami →, recommended when you want full sovereignty + white-label, accepting the ops cost.
Fathom, the polished Canadian option
Pricing: Starter $15/month (up to 100k pageviews). Plus $34/month (250k). Pro $90/month (2M).
Data residency: Canada (specifically Vancouver, Pacific Tracking is the Canadian-incorporated entity; data is on AWS Canada). Canada has a UK adequacy ruling for data transfers, and is generally less aggressive than the US on data-access laws. But it is not EU.
GDPR posture: No cookies, no personal data, compliant DPA. Same shape as Plausible.
When to choose it:
- You prefer the slightly more polished dashboard UI
- Canadian residency is fine for your compliance posture (it usually is for UK SMBs not in regulated verticals)
- You are already a Fathom customer
Where it falls short for UK sovereignty stories:
- Canada is a step further from EU than Plausible’s German hosting is, for a clinic or solicitors firm where the data-residency conversation is part of the sales pitch, having to explain “we use a Canadian analytics provider” adds friction Plausible does not carry
- Pricing is the highest of the three at every tier, Fathom is positioned slightly more premium than its feature set justifies
Fathom, recommended only if Canadian residency is fine for your sector.
The honest recommendation for UK SMBs in 2026
By scenario:
-
General UK SMB, traffic <100k pageviews/month: Plausible Growth (£9/mo). EU-resident, simplest setup, lowest cost. This is what I install on most UK Web Marketing client sites.
-
Regulated UK SMB (clinic / solicitors / school / accountants): Plausible Business (£19/mo) or Umami self-hosted on Vercel London. Both clear the sovereignty bar; Umami is more sovereign (you own the data + the dashboard) but adds ops cost.
-
Retainer client who wants a branded analytics dashboard: Umami self-hosted with a custom subdomain (
analytics.<clientdomain>). White-labelled. Sovereignty intact. -
You are on Google Analytics today: Migrate. Plausible imports historical GA data on signup. The £9/mo cost is the rounding-error price of fixing a Schrems II liability you have been carrying since 2020.
Where analytics sits in the bigger UK SMB stack
Analytics is one of the baseline tools every UK SMB site needs. The sovereign stack has converged on:
- Analytics, this article (Plausible recommended; Umami for self-hosted)
- Hosting, Vercel London or Cloudflare Pages
- CRM, Capsule UK or Pipedrive EU (see the tier upgrade guide)
- Password manager, Bitwarden EU
- Email, Resend EU + Cloudflare Email Routing
For UK Web Marketing client sites, Plausible ships as standard on every managed build. A white-label Umami self-hosted dashboard is available on a monthly retainer for clients who want to own the data and the branding. Every build also runs Vercel Speed Insights (privacy-first by default) alongside it, so even a starter site has a sovereign view of its traffic.
If you want to wire one of these into your site cleanly, get in touch. The free audit and the paid Marketing and Automation Deep-Dive both start by mapping your current stack, and the £300 fee is credited against any build. Read the compliance posture.
Sources & methodology
- Plausible hosting, Plausible Analytics, “Data Policy”, https://plausible.io/data-policy
- Plausible used by German Government / EDPB, Plausible customer list, https://plausible.io/customers
- Umami licence + hosting, Umami GitHub repo (umami-software/umami), https://github.com/umami-software/umami
- Fathom data residency, Fathom Analytics, “Privacy”, https://usefathom.com/data
- Schrems II ruling, Case C-311/18, 16 July 2020, https://curia.europa.eu/juris/liste.jsf?num=C-311/18
- Austrian DSB ruling on Google Analytics (2022), Datenschutzbehörde, decision DSB-D155.022/0006-DSB/2022, https://noyb.eu/en/austrian-dsb-eu-us-data-transfers-google-analytics-illegal
- CNIL ruling on Google Analytics (2022), Commission nationale de l’informatique et des libertés, France, https://www.cnil.fr/en/use-google-analytics-and-data-transfers-united-states-cnil-orders-website-manageroperator-comply
- Italian Garante ruling (2022), Garante per la protezione dei dati personali, https://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/9782874
- Methodology: pricing from each vendor’s public pricing page on 1 June 2026. Real-world hosting verified by traceroute + DNS resolution from UK + EU vantage points.
Cite this article: Jordan Gilbert, “Plausible vs Umami vs Fathom: the UK SMB privacy-first analytics guide (2026)”, UK Web Marketing, 1 June 2026. https://ukwebmarketing.com/blog/plausible-vs-umami-vs-fathom-uk-smb-analytics
Frequently asked questions
What is the best privacy-first analytics for a UK small business?
Plausible is the default recommendation for UK SMBs in 2026: Estonia incorporated, hosted on Hetzner in Frankfurt and Helsinki, cookieless, with a £9/month Growth tier, and used by the German Government and the EDPB itself. Umami self-hosted is the full-sovereignty option, and Fathom has the most polished UI but Canadian residency sits one step further from the EU.
Do Plausible, Umami and Fathom need a cookie banner?
No. All three are cookieless by design and collect no personal data, so none of them require a cookie banner. That is one of the practical advantages over Google Analytics: no banner means better UX and higher engagement on the site.
Why should I move off Google Analytics?
Google Analytics has been quietly precarious since the CJEU's Schrems II ruling in 2020, and the Austrian, French and Italian data-protection authorities ruled it incompatible with GDPR in its standard configuration between 2022 and 2024. Plausible imports your historical GA data on signup, and the £9/month cost is the rounding-error price of fixing that liability.
Which analytics is best for a regulated UK practice?
For a clinic, solicitors firm, school or accountancy practice where data residency is part of the sales pitch, narrow to Plausible or Umami self-hosted. Both clear the EU sovereignty bar; Umami self-hosted on Vercel London is more sovereign because you own the data and the dashboard, but it adds an ops cost.
Is Fathom a good choice for UK businesses?
Fathom is fine, with the most polished dashboard of the three, but it is Canadian rather than EU. Canada has a UK adequacy ruling and is less aggressive than the US on data-access laws, but it is one step further from your data than Plausible's German hosting, and its pricing is the highest of the three at every tier.