The following is an overview of the security of various services we use to power Fathom:

Service providers

The following is a list of the key service providers we rely on to power Fathom Analytics.

bunny.net (CDN)

Analytics collection is routed via our EU-based CDN, bunny.net, to achieve EU isolation. The CDN is distributed worldwide, and your website visitors will hit the data center closest to them.

We use SSL / TLS to ensure connections between your website visitors and our CDN are encrypted.

Bunny automatically routes EU data to Hetzner Online GmbH (for GDPR compliance via EU isolation or to Amazon Web Services (AWS) for non-EU traffic.

Hetzner Online GmbH

Hetzner Online GmbH powers our EU Isolation set-up, where we keep Personal Data (as per GDPR definition) isolated in the EU. Our Hetzner cluster is highly available, distributed across Nuremberg (Germany), Falkenstein (Germany) and Helsinki.

Hetzner employs the following security measures to protect our infrastructure:

• Video-monitored high-security perimeter fencing around the entire data center park
• Entry via electronic access control terminals with a transponder key or admission card
• Ultra-modern surveillance cameras for 24/7 monitoring of access routes, entrances, security door interlocking systems and server rooms
• Certified in accordance with DIN ISO/IEC 27001, an internationally recognized standard for information security
• More information can be found here

Fathom Analytics employs the following security measures to protect our Hetzner infrastructure:

• Access to our Hetzner infrastructure is limited to engineers based in Germany and Canada.
• Continuous Integration is self-hosted via GitLab, not GitHub, to ensure no US service, company, or individual has access to our EU Isolation infrastructure.