Google Analytics is the default for almost every UK small business. It’s also been quietly precarious since the CJEU’s Schrems II ruling in 2020, and explicitly problematic since the Austrian, French, and Italian data-protection authorities ruled it incompatible with GDPR — in its standard configuration — between 2022 and 2024.

You’re probably aware. You’ve probably parked the worry under “things to deal with eventually”. This piece is about the three privacy-first alternatives that have matured by 2026 into the real choice — and which one I install for UK Web Marketing client sites.

The short version

Plausible — Estonian + Germany-hosted, cookieless, simplest setup, fairest pricing for SMB scale. The default recommendation.
Umami — open-source, self-hostable for full sovereignty, cloud tier is competitive. Best if you want to own the data outright.
Fathom — Canadian, oldest of the three, slightly more polished dashboard, Canadian data residency (not strictly EU).

If you care about EU sovereignty specifically (you’re a UK clinic, solicitors firm, school, accountancy practice), narrow to Plausible or Umami self-hosted. Fathom is fine but Canadian residency is one step further from your data than EU.

The comparison matrix

Last updated: 1 June 2026. Pricing in vendor’s native currency. Methodology: residency verified against each vendor’s public hosting documentation. The matrix excludes Google Analytics deliberately — Schrems II + the 2022–2024 EU DPA rulings have made it the wrong default for a UK SMB taking residency seriously.

Criterion	Plausible	Umami	Fathom
Company HQ	Estonia (Plausible Insights OÜ)	US (Umami Software Inc.)	Canada (Pacific Tracking, Vancouver)
Cloud hosting	Hetzner Frankfurt + Helsinki (EU)	AWS Frankfurt (cloud tier)	AWS Canada (Vancouver region)
Self-host option	Yes — open source (AGPL)	Yes — open source (MIT)	No
CLOUD Act exposure (cloud tier)	No	Yes (US parent, EU storage)	No (Canadian, but third-country to EU)
Cookies / cookie banner needed	No	No	No
Free tier (cloud)	30-day trial only	100k events/mo	Trial only
Entry price	£9/mo Growth (10k pv)	$20/mo Pro (1M events)	$15/mo Starter (100k pv)
100k pageviews / month	£19/mo Business	Free tier	$34/mo Plus
EU public-sector adoption	Yes — German Government, EDPB itself	Limited	Limited
Dashboard polish	Good, simple	Good, modern	Best of the three
GA imports	Yes (built-in on signup)	Manual	Manual
Where it’s better	Cheapest, EU-first, public-sector trust signals	Free self-host, white-label friendly, MIT licence	Most polished UI, mature product
Where it’s worse	Less granular than GA, smaller community	Self-host ops cost (you own DB + upgrades)	Canadian residency (one step beyond EU), highest pricing
UKWM recommendation	Default for UK SMBs at Growth Engine tier	Bespoke tier white-label dashboards	Only when Canadian residency is fine and UI polish is decisive

Honest call-outs (where competitors win):

Fathom’s dashboard is the prettiest of the three. If UI mattered above all else, it’d be the call.
Umami’s open-source licence is MIT (more permissive than Plausible’s AGPL). For UK SMBs wanting to embed or fork, Umami is the friendlier copyright posture.
Plausible self-hosted exists but is AGPL — embedding it in a commercial product without releasing modifications back is a copyleft problem Umami doesn’t have.

Plausible — the default recommendation

Pricing: Free 30-day trial. Growth £9/month (up to 10k monthly pageviews). Business £19/month (up to 100k). Custom enterprise.

Data residency: European Union (Germany — Hetzner Online data centres in Frankfurt and Helsinki). Plausible the company is incorporated in Estonia. Zero data transfers outside the EU. The only US-resident infrastructure used at all is GitHub for the codebase repo (not customer data).

GDPR posture: No cookies by default — no cookie banner required. No personal data collected (IP addresses are hashed + discarded within 24 hours; no fingerprinting). The company maintains a public DPA + sub-processor list. Used by EU institutions (the German government, the European Data Protection Board itself) — telling signal.

Why it’s the default for UK SMBs:

Cheapest of the three at SMB volume (most UK SMB sites get <100k pageviews/month, so Growth tier £9/mo covers it)
EU residency without any configuration needed
The dashboard is genuinely simple — non-technical clients can read it without training
Open-source self-hosting option available if you ever want to step up to full sovereignty (more on this below)
No cookie banner = better UX = higher engagement on the site

Where it falls short:

Less granular than Google Analytics — no e-commerce reports out of the box, no path-analysis funnels (you can wire goals + custom events; they work fine, just not a 4-step funnel UI)
Real-time view exists but is less detailed than GA
Smaller community of “Plausible advanced setup” tutorials

Plausible → (Affiliate-disclosed when programme available; I use Plausible on my own site + recommend it to every UK Web Marketing client.)

Umami — the open-source / self-hostable option

Pricing: Open-source (self-host = free). Cloud tier: Free up to 100k events/month. Pro $20/month (1M events). Enterprise custom.

Data residency: Self-hosted = wherever you host it. I run Umami on Vercel (lhr1, London) + a small Postgres database (Supabase EU or Neon EU) for Bespoke tier clients who want a white-label analytics dashboard. Umami cloud is AWS in Frankfurt by default.

GDPR posture: No cookies by default. IP anonymisation. No personal data collection. Open-source = full code audit available if your insurer asks.

Why it’s worth considering:

Full sovereignty when self-hosted (you own the data, the dashboard, the database)
White-label friendly — Bespoke clients get a dashboard at analytics.<theirdomain> branded as theirs, not as Umami’s
Open-source = no vendor lock-in. If Umami the cloud service pivots/closes, the codebase keeps running
Modern dashboard UI

Where it falls short:

Self-hosting adds operational cost — you’re now responsible for database backups, version upgrades, scaling. UK Web Marketing Bespoke handles this for clients, but a solo SMB self-hosting Umami is taking on a small but real ops burden
Smaller community than Plausible for “how do I configure X” support
The cloud tier is fine but doesn’t have the same brand recognition as Plausible

Umami → — recommended when you want full sovereignty + white-label, accepting the ops cost.

Fathom — the polished Canadian option

Pricing: Starter $15/month (up to 100k pageviews). Plus $34/month (250k). Pro $90/month (2M).

Data residency: Canada (specifically Vancouver — Pacific Tracking is the Canadian-incorporated entity; data is on AWS Canada). Canada has a UK adequacy ruling for data transfers, and is generally less aggressive than the US on data-access laws. But it’s not EU.

GDPR posture: No cookies, no personal data, compliant DPA. Same shape as Plausible.

When to choose it:

You prefer the slightly more polished dashboard UI
Canadian residency is fine for your compliance posture (it usually is for UK SMBs not in regulated verticals)
You’re already a Fathom customer

Where it falls short for UK sovereignty stories:

Canada is a step further from EU than Plausible’s German hosting is — for a clinic or solicitors firm where the data-residency conversation is part of the sales pitch, having to explain “we use a Canadian analytics provider” adds friction Plausible doesn’t carry
Pricing is the highest of the three at every tier — Fathom is positioned slightly more premium than its feature set justifies

Fathom — recommended only if Canadian residency is fine for your sector.

The honest recommendation for UK SMBs in 2026

By scenario:

General UK SMB, traffic <100k pageviews/month: Plausible Growth (£9/mo). EU-resident, simplest setup, lowest cost. This is what I install on most UK Web Marketing client sites.
Regulated UK SMB (clinic / solicitors / school / accountants): Plausible Business (£19/mo) or Umami self-hosted on Vercel London. Both clear the sovereignty bar; Umami is more sovereign (you own the data + the dashboard) but adds ops cost.
Bespoke tier client who wants a branded analytics dashboard: Umami self-hosted with a custom subdomain (analytics.<clientdomain>). White-labelled. Sovereignty intact.
You’re on Google Analytics today: Migrate. Plausible imports historical GA data on signup. The £9/mo cost is the rounding-error price of fixing a Schrems II liability you’ve been carrying since 2020.

Where analytics sits in the bigger UK SMB stack

Analytics is one of the baseline tools every UK SMB site needs. The sovereign stack has converged on:

Analytics — this article (Plausible recommended; Umami for self-hosted)
Hosting — Vercel London or Cloudflare Pages
CRM — Capsule UK or Pipedrive EU (see the tier upgrade guide)
Password manager — Bitwarden EU
Email — Resend EU + Cloudflare Email Routing

For UK Web Marketing client sites, Plausible ships as standard at Growth Engine tier (£195/mo). Bespoke (quoted) gets Umami self-hosted with white-label branding by default. Foundation (£45/mo) ships with Vercel Speed Insights (privacy-first by default) — clients can add Plausible as a bolt-on if they want full traffic analytics.

If you want to wire one of these into your site cleanly, WhatsApp me. Compare the three honest tiers · Read the compliance posture.

Sources & methodology

Plausible hosting — Plausible Analytics, “Data Policy” — https://plausible.io/data-policy
Plausible used by German Government / EDPB — Plausible customer list — https://plausible.io/customers
Umami licence + hosting — Umami GitHub repo (umami-software/umami) — https://github.com/umami-software/umami
Fathom data residency — Fathom Analytics, “Privacy” — https://usefathom.com/data
Schrems II ruling — Case C-311/18, 16 July 2020 — https://curia.europa.eu/juris/liste.jsf?num=C-311/18
Austrian DSB ruling on Google Analytics (2022) — Datenschutzbehörde, decision DSB-D155.022/0006-DSB/2022 — https://noyb.eu/en/austrian-dsb-eu-us-data-transfers-google-analytics-illegal
CNIL ruling on Google Analytics (2022) — Commission nationale de l’informatique et des libertés, France — https://www.cnil.fr/en/use-google-analytics-and-data-transfers-united-states-cnil-orders-website-manageroperator-comply
Italian Garante ruling (2022) — Garante per la protezione dei dati personali — https://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/9782874
Methodology: pricing from each vendor’s public pricing page on 1 June 2026. Real-world hosting verified by traceroute + DNS resolution from UK + EU vantage points.

Cite this article: Jordan Gilbert, “Plausible vs Umami vs Fathom: the UK SMB privacy-first analytics guide (2026)”, UK Web Marketing, 1 June 2026. https://ukwebmarketing.com/blog/plausible-vs-umami-vs-fathom-uk-smb-analytics

Plausible vs Umami vs Fathom: the UK SMB privacy-first analytics guide (2026)