Kameleoon
Kameleoon SAS · France · since 2008
French enterprise experimentation and personalization platform, web testing, feature management and AI personalization on one engine, aimed at regulated sectors (healthcare, finance, ecommerce) that care about data residency and compliance.
Best for Regulated industries that need consent modes and audit certificates from one vendor
The verdict
Kameleoon has the best consent engineering in this field and the only fully attested compliance file among the European vendors: four documented consent modes, and Delayed Mode renders experiments while writing nothing to the device and sending nothing to a server until consent arrives. The infrastructure avoids US hyperscalers entirely, OVHcloud in France and Hetzner in Germany, and ISO 27001:2022, SOC 2 Type 2 and PCI DSS are independently attested, which no other tool in the top three can say. What holds it to third is the contract and minimisation column: no downloadable DPA could be verified on the public site, the EU region is a choice rather than the default, the standard visitor cookie runs 365 days, and IP truncation is documented nowhere.
Rating by Drip Trading GmbH, the company behind Apex by Drip. How we rate and weight
Strengths
- Genuine consent-mode engineering: four documented modes, and Delayed Mode renders experiments while writing nothing to the device until consent arrives, few competitors document this depth.
- Real EU option with European infrastructure: OVHcloud and Hetzner instead of a US hyperscaler, substantive for buyers whose objection is US jurisdiction.
- Statistical breadth in the box at the entry tier: frequentist + Bayesian + sequential, CUPED, multiple-testing correction and SRM detection on the $495 plan.
- Broad, independently attested compliance: ISO 27001:2022 with published SoA, SOC 2 Type 2, PCI DSS, HIPAA BAAs.
- One engine for web, flags and personalization with synchronized frontend/backend visitor identifiers.
Weaknesses
- The Shopify app has zero reviews after four-plus years, a merchant gets no peer signal at all, and checkout testing needs Plus plus custom development.
- The important features are Enterprise-gated: feature management, personalization, mobile testing and the dedicated code editor are all excluded from the $495 Starter.
- Visual-editor friction on modern front-ends is a recurring review theme (SPAs, CSS issues, flicker, broken Chrome extension), cutting against the "no dev needed" positioning.
- Steep learning curve and enterprise-shaped cost; AI Predictive Targeting needs 7 days AND 100,000 visits before producing anything, excluding lower-traffic sites.
- Documentation hygiene gaps: expired TLS certificate on the developer docs host, 404ing methodology PDF, and vendor pages that disagree on integration count.
The facts
| Statistics | Frequentist, Bayesian AND sequential testing side by side, plus CUPED, multiple-testing correction and SRM detection, all included at the entry tier. Caution: the reported "reliability" metric is 1 − p-value, not the probability the variation wins. |
| Shopify | Shopify app carries the "Built for Shopify" badge but has 0 reviews after 4+ years (listed June 2021). Checkout testing needs Shopify Plus plus a developer-built Checkout UI extension and cart-attribute plumbing, not point-and-click. |
| Privacy & hosting | European infrastructure without US hyperscalers: subprocessors are OVHcloud (France) and Hetzner (Germany); EU and North America data regions exist (EU residency is a choice, not automatic). Four documented consent modes, Delayed Mode renders experiments while writing and transmitting nothing until consent. ISO 27001:2022, SOC 2 Type 2, PCI DSS. |
| Pricing | PBX Starter from $495/month (10 experiments, 50,000 tracked users), the only enterprise-class tool here with a public entry price. Enterprise is custom. 30-day free trial (3 experiments, no credit card). Feature management, personalization and the dedicated code editor are Enterprise-only. |
Sources
- PBX Starter $495/mo, tier contents: https://www.kameleoon.com/plans (accessed 2026-09-01)
- Three statistical approaches, CUPED, corrections: https://docs.kameleoon.com/user-manual/experiment-analytics/statistical-methods/choosing-the-right-statistical-method-for-ab-testing (accessed 2026-09-01)
- Reliability = 1 − p-value: https://docs.kameleoon.com/user-manual/experiment-analytics/statistical-methods/statistical-significance/ (accessed 2026-09-01)
- Four consent modes incl. Delayed: https://docs.kameleoon.com/developer-docs/privacy-and-compliance/consent-management (accessed 2026-09-01)
- Subprocessors OVHcloud/Hetzner, certifications: https://security.kameleoon.com/ (accessed 2026-09-01)
- EU/NA data endpoints: https://docs.kameleoon.com/developer-docs/web-experimentation/faq (accessed 2026-09-01)
- Shopify app 0 reviews since 2021: https://apps.shopify.com/kameleoon-abtesting-app/reviews (accessed 2026-09-01)
- Checkout testing = Plus + Checkout UI extension: https://docs.kameleoon.com/user-manual/integrations/cms-e-commerce/shopify/shopify-checkout-ab-testing (accessed 2026-09-01)