A/B Testing Tools for European Shops in 2026: 15 Compared on Data and GDPR

01Which A/B Testing Tool Fits a European Shop in 2026?

1. If your tests keep coming back flat, your constraint is choosing tests, and Apex by DRIP is built for it: every test idea gets a Likelihood to Win before launch. Hosting is in the EU plus UK.
2. If hosting in Germany decides it, ABlyft says “Hosting and Storage in Germany” and “We do not store any personal data.”
3. If you need certifications and a published price, Convert Experiences runs on servers in Frankfurt, lists ISO 27001 and SOC 2 Type 2, and starts at $299 a month billed annually.
4. If you want no-code tests on any shop system at a flat price, Varify.io hosts on AWS in Frankfurt and starts at €199 a month billed annually; SOC 2 is marked “SOON”.
5. If you need enterprise depth, Kameleoon (Paris) and Optimizely (EU data centers) both publish ISO 27001 and SOC 2 Type 2.
6. If data must stay in your own infrastructure, GrowthBook is open source and free to self-host.
7. If you want price, shipping and offer tests on Shopify, Intelligems, ABConvert and Elevate offer them. Read their data statements first: none names an EU hosting region.

For the full 15-tool comparison by test types, shop systems and statistics, read our deep dive on A/B testing tools for online shops. This page looks at the same tools through one lens: what a European shop needs to know about data.

02Which Tool Fits Which European Requirement?

03What Should a European Shop Check Before It Buys?

An A/B testing tool runs on every page of your shop: it assigns each visitor to a variant, remembers the assignment and records what the visitor does. Four questions cover most of a European data review.

1. Where is the data stored and processed? Some vendors name a city (Convert: Frankfurt; Varify.io: AWS in Frankfurt). Some name a country (ABlyft: Germany) or a region (Apex: the EU plus UK; Optimizely: EU data centers). Some name none.
2. Does anything leave the EU, and under which contract? Look for a data processing agreement (DPA), Standard Contractual Clauses for transfers, and a list of subprocessors. Shoplift states that data “is transferred to and processed in the United States” and covers it with a DPA that includes EEA clauses.
3. What does the script store on the device, and when does it start? Cookies, localStorage or nothing; before or after consent. ABlyft uses localStorage by default, Varify.io says “In principle, no cookies are set”, and Convert offers two consent modes.
4. Which audit backs the claims? An ISO 27001 certificate or a SOC 2 report is checked by an auditor. A “GDPR compliant” line on a homepage is the vendor's own statement.

“None found” below means we did not find the item on the vendor's public pages in October 2026, not that the vendor lacks it. Ask for it in writing.

04How Do the 15 Tools Compare on Data and Compliance?

One row per tool, in the order of the profiles below. Where a vendor says nothing, the cell says so.

VWO and AB Tasty: data location, certifications and consent were not part of our research of October 6, 2026. Ask Wingify for its DPA and hosting region.

05What Does Each Tool Offer a European Shop, in Detail?

Apex by DRIP: best for shops whose tests keep coming back flat

• Best for: shops whose tests keep coming back flat: the constraint is choosing which tests to run, not building them.
• Can test: pages and page elements, parallel tests on the same traffic with optional exclusion groups, A/A tests, redirect tests, global holdout, feature flags and staged rollouts.
• Shop systems: installs as a Shopify app (two-click install via link, server-side tracking, first-party data).
• Data location: hosting in the EU plus UK; GDPR in place; DPAs for US tools; ISO 27001 and SOC 2 in progress, with no certification yet; consent supported for most Shopify GDPR apps.
• Entry price: pricing is not published; a card-free free tier for one store exists; book a call.
• Main strength: the memory of millions of observed tests behind every idea, so selection improves before anything is built.
• Main limitation: the price is not published.

Documented capabilities. Apex by DRIP is an A/B testing platform for companies selling online that predicts which tests are likely to win before they go live, built on one of the largest A/B test databases in e-commerce. Its test memory holds 4.3 million A/B tests from 151,000 shops, collected since 2011, and every test idea gets a Likelihood to Win before launch: one percent figure per test idea, shown with how many tests back it. In a holdout check within a shop, the top third of ideas won 1.4 to 1.6 times as often (press release, September 29, 2026).

Tests are built, launched and evaluated directly in the shop: as code, in a code editor or in a visual builder (Operator), and a shop owner can build and read tests from ChatGPT or Claude through MCP. Results show heat maps per variant and, on Shopify, profit per test. Managed execution means tests built, checked, launched and read together with the DRIP team.

Apex scores each idea against 4.3 million observed A/B tests from 151,000 shops and shows how many tests back each score. The nearest published figure in this comparison is Kameleoon's Ideate, trained on more than 20,000 experiments; Varify cites 10,000 or more test patterns; no other vendor in this comparison publishes a count of tests behind its recommendations (vendor pages checked October 2026).

Limitations. The price is not published; a card-free free tier for one store exists.

Where Apex is not the right choice:

• A team that already picks winning tests well gets less from the prediction layer.
• A shop that cannot ship a test a week yet should build that habit on a lighter tool first; buying prediction before you can execute is the wrong order.
• Anyone who needs a published price list before a conversation.

Varify.io: best for flat-price testing on any shop system

• Best for: shops that want no-code tests on any shop system at a flat price per domain.
• Can test: product, collection, cart, home and landing pages; split URL, multi-page and personalisation; Shopify Plus checkout via a separate app.
• Shop systems: any shop that loads JavaScript; the vendor names Shopify, WooCommerce, Magento, Shopware and custom builds.
• Data location: AWS in Frankfurt, plus Cloudflare.
• Entry price: €199 a month billed annually (Growth, one domain); 15-day trial (checked October 2026).
• Main strength: flat price per domain, “Same price, unlimited traffic”.
• Main limitation: default statistics are one-sided frequentist tests; two-sided and Bayesian need Pro.

Documented capabilities. Varify.io claims “GDPR, CCPA, HIPAA and revDSG”, says “In principle, no cookies are set” and that it stores “no personal data other than the IP address”. It offers a Varify Consent Mode and a downloadable DPA. Results come from the shop's own analytics; an optional cookieless Varify Tracking has existed since September 2026.

Limitations. SOC 2 is marked “SOON”; ISO 27001 and a subprocessors page were not found.

Not the right choice for buyers who require SOC 2 or ISO 27001 today, and setups across several domains (one domain per plan). Compare: Apex vs Varify.

ABlyft: best for German hosting with no stored personal data

• Best for: developer teams that want hosting in Germany and no stored personal data.
• Can test: page content via visual or code variations, redirect tests, Shopify themes and page templates.
• Shop systems: any site via a JavaScript snippet; no Shopify App Store app found.
• Data location: “Hosting and Storage in Germany”; the snippet comes via the Amazon CloudFront CDN.
• Entry price: a free plan (“No Credit Card needed”, limits not published); paid plans on quote (checked October 2026).
• Main strength: German hosting, no stored personal data or IP addresses, no cookies by default.
• Main limitation: no Shopify App Store app; native price, discount and checkout tests are not documented.

Documented capabilities. ABlyft states “We do not store any personal data. Nothing.” and “We do not store IP addresses.” It uses localStorage by default, with cookies off unless switched on, works with the site's consent flow and Usercentrics, and says “your data is never used for AI training”.

Limitations. ISO 27001, SOC 2, a public DPA and a subprocessors page were not found; the security docs say “It is not a compliance statement.”

Not the right choice for buyers who need public ISO 27001 or SOC 2 evidence or public prices, and teams without developer time. Compare: Apex vs ABlyft.

Convert Experiences: best for certifications and a published price

• Best for: teams that want published prices, EU hosting and certifications in one tool.
• Can test: A/B and split URL tests; multivariate, full stack and feature flags from Pro; Shopify prices via Cart Transform Functions.
• Shop systems: a Shopify app plus WooCommerce, BigCommerce, Magento, PrestaShop and others.
• Data location: “EU-based servers in Frankfurt by default”.
• Entry price: $299 a month billed annually, $399 monthly (Growth); 15-day trial (checked October 2026).
• Main strength: published pricing with Frankfurt hosting, ISO 27001 and SOC 2 Type 2.
• Main limitation: on Shopify a connector with no App Store reviews; checkout-level price tests need Shopify Plus.

Documented capabilities. Convert says it “does not know any cross-border data transfer from to or from outside EEA borders in its infrastructure” and calls itself “GDPR, TTDSG, and BDSG Compliant”. It uses “first-party cookies only”, offers a free signed DPA with Standard Contractual Clauses, and has two consent modes: experiments without cookies before consent, or nothing until consent.

Limitations. A subprocessors page and a named cookieless mode were not found.

Not the right choice for teams that need a published subprocessor list before signing, and stores that need checkout-level price tests without Shopify Plus. Compare: Apex vs Convert.

Kameleoon: best for enterprise testing and feature flags from a French vendor

• Best for: enterprise teams that want client-side tests, server-side flags and AI agents.
• Can test: any page element the snippet can change, plus server-side features through flags.
• Shop systems: Shopify integration documented for Shopify Plus only; snippet and SDKs elsewhere.
• Data location: dedicated servers; subprocessors include OVHcloud, Hetzner and Cloudflare; region not stated on the pages read. Headquarters: Paris.
• Entry price: PBX Starter “Starting from $495/month”; 30-day free trial (checked October 2026).
• Main strength: client-side tests, server-side flags and an MCP server, with ISO 27001 and SOC 2 Type 2.
• Main limitation: Shopify support for Plus only, and no App Store reviews.

Documented capabilities. The security portal lists ISO/IEC 27001:2022, SOC 2 Type 2, PCI DSS, HIPAA, GDPR, CCPA and CyberVadis Platinum, plus subprocessors including OpenAI. Consent can be not required, required, or IAB TCF 2.3; with unknown consent, a shop can run only “Technical” experiments or run without data collection.

Limitations. A public DPA, a named cookieless mode and a product-level CNIL statement were not found.

Not the right choice for Shopify stores not on Plus, teams that want native price or checkout tests, and small budgets. Compare: Apex vs Kameleoon.

VWO and AB Tasty (Wingify): best for agents across the test lifecycle

• Best for: teams that want agents to research, propose, build, launch and roll out tests, with approval gates.
• Can test: page variations built from text, Figma or screenshots, and staged rollouts; Shopify price testing is “coming soon”.
• Shop systems: a VWO Shopify app since March 2024, with the script not on checkout pages.
• Data location: not covered in our research of October 6, 2026; ask the vendor. Wingify has an office in Cologne and a GmbH address in Frankfurt.
• Entry price: not published; a third party reports $665 a month (VWO Growth, annual, 100k tracked users, May 2026).
• Main strength: Wingz agents with “an approval gate, guardrail metrics, traffic caps, a kill switch, and a permanent holdout”.
• Main limitation: no public prices, and the free Starter plan is gone.

Documented capabilities. VWO and AB Tasty merged and relaunched as Wingify on September 16, 2026, headquartered in New Delhi; both stay as product brands. The agents cover research, ideas, build, launch and rollout, and “Nothing goes live without approval”. Wingz connects via MCP to Claude, ChatGPT, Cursor and Gemini.

Limitations. Data location, certifications and consent handling were not part of our research; check them with Wingify.

Not the right choice for buyers who need a published price, and Shopify shops that need price tests today. Compare: Apex vs VWO.

GrowthBook: best for keeping test data in your own infrastructure

• Best for: teams with engineers and a data warehouse who want data in their own infrastructure.
• Can test: page content via the AI Visual Editor (Pro and Enterprise), URL redirects, and any code path through feature flags.
• Shop systems: Shopify via a theme snippet, with no App Store app; “24+ SDKs”.
• Data location: self-hosted, or Cloud on AWS with an EU region in Ireland for event data since September 11, 2026; the application stays in the US.
• Entry price: free to self-host; Cloud Pro “$40 / seat / month” (checked October 2026).
• Main strength: open source and free to self-host with unlimited traffic.
• Main limitation: Shopify support is a snippet, with no documented checkout or price testing.

Documented capabilities. GrowthBook states SOC 2 Type II and GDPR compliance, says “no PII ever leaves your data warehouse; only aggregate data is accessed”, and has a DPA with Standard Contractual Clauses. Self-hosting adds an air-gapped option.

Limitations. In the EU region, login, UI, configuration and computed results stay in the US. ISO 27001, a subprocessors page and consent documentation were not found.

Not the right choice for shops without a data warehouse, and teams that want Shopify price or checkout tests without code. Compare: Apex vs GrowthBook.

Optimizely: best for enterprise statistics and agents with EU data centers

• Best for: enterprises that want sequential statistics, server-side testing and agents in one suite.
• Can test: anything in the page DOM, and server-side logic through 20+ SDKs; A/B, multivariate and bandit tests.
• Shop systems: a snippet in the Shopify theme; checkout is measured, not changed; no testing app on the App Store.
• Data location: “Your data will be stored in EU data centers”; “the majority” of products are in the EU Data Boundary.
• Entry price: not published, quote only; Vendr reports a median of $81,447 a year across the Optimizely portfolio.
• Main strength: a documented statistics and agent stack: sequential Stats Engine, SRM detection, bandits, an MCP server.
• Main limitation: no public pricing.

Documented capabilities. Optimizely lists ISO 27001:2022, ISO 27017, ISO 27018, a “SOC 2 Type 2 Attestation” and PCI DSS, with reports “available upon request”, a DPA with SCCs plus UK and Swiss addendums, and a public subprocessor list. For its Opal agents: “Your data is never used to train the model or shared across customers”.

Limitations. The products outside the EU Data Boundary are not named; a cookieless mode was not checked.

Not the right choice for small budgets, teams that want Shopify checkout tests, and anyone who wants an App Store install. Compare: Apex vs Optimizely.

06What Do the Shopify Testing Apps Say About Data Transfers?

Six Shopify apps come up in most shortlists, mostly for price, shipping and theme tests. None names an EU hosting region. That moves the work to the contract: ask for the DPA, the transfer clauses and the subprocessor list.

Intelligems: best for price, shipping and offer tests on Shopify

• Best for: Shopify merchants who test prices, shipping and offers and read results as profit.
• Can test: prices, discounts, bundles, upsells, shipping rates, themes, templates, content, checkout blocks (Plus).
• Shop systems: Shopify only.
• Data location: region not published; data “will be transferred outside of Europe, including to Canada and the United States”.
• Entry price: $69 a month (Smart Content, up to 1,000 orders) (checked October 2026).
• Main strength: prices, shipping, offers and content in one app, with profit and COGS reporting.
• Main limitation: price testing needs a team-built integration with a 3-month minimum.

A DPA, subprocessors page, SOC 2, ISO 27001 and consent documentation were not found. Not the right choice for buyers who need those up front. Compare: Apex vs Intelligems.

Shoplift: best for theme and template tests in the Shopify Theme Editor

• Best for: Shopify brands that test themes and templates in the Theme Editor.
• Can test: page templates, header, footer, navigation, global styles; prices on Advanced and Pro.
• Shop systems: Shopify and Shopify Plus; headless “not currently supported”.
• Data location: data “is transferred to and processed in the United States”.
• Entry price: $99 a month, $74 billed annually (Core) (checked October 2026).
• Main strength: tests run on Shopify's own themes and templates.
• Main limitation: no headless, checkout or A/B/n tests.

Shoplift is processor under a DPA with EEA SCC Module 2 and the UK IDTA. If consent is declined, “no visitor data is collected, logged, or stored”. ISO 27001 and SOC 2 were not found. Not the right choice for buyers who need data processed in the EU. Compare: Apex vs Shoplift.

ABConvert: best for Shopify price, shipping and offer tests read on profit

• Best for: growing Shopify brands that test prices, shipping and offers without a developer.
• Can test: price, shipping, offer, URL redirect, template, theme, visual editor, checkout and combined tests.
• Shop systems: Shopify only, no headless.
• Data location: “MongoDB Atlas, Linode and Google Cloud”; region not published.
• Entry price: $99 a month (Starter); price tests from Growth at $199 (checked October 2026).
• Main strength: nine Shopify-native test types, read on profit per visitor.
• Main limitation: Shopify only, with no headless support.

Its DPA includes “EU standard contractual clauses where they apply”, sent countersigned on email request. It does not collect shopper names, emails, phones or addresses, and “Your cookie notice is your responsibility”. ISO 27001 and SOC 2 were not found. Compare: Apex vs ABConvert.

Visually.io: best for testing, personalisation and upsells in one Shopify app

• Best for: Shopify shops that want testing, personalisation and upsells in one app priced by orders.
• Can test: themes, discounts, product pages, carts, checkouts, upsells; price tests from 600+ orders on Scale.
• Shop systems: Shopify and Shopify Plus; headless via Hydrogen.
• Data location: region not published; data “will be transferred outside of Europe, including to Canada and the United States”.
• Entry price: $19 a month up to 200 orders (checked October 2026).
• Main strength: testing, personalisation, recommendations and upsells in one app.
• Main limitation: client-side only; SOC 2 and GDPR programs still in progress.

Visually.io is “in the process of completing formal compliance and audit programs for: SOC 2, GDPR”. In opt-in mode it “remains completely inactive until consent is granted”. A DPA and subprocessors page were not found. Not the right choice for buyers who need a completed SOC 2 report today. Compare: Apex vs Visually.

Elevate: best for low-cost price and checkout tests on Shopify

• Best for: Shopify stores that want price, shipping and checkout tests at a low entry price.
• Can test: pages, themes, content; prices, shipping and offers from Standard; checkout components on Plus.
• Shop systems: Shopify only; headless via an SDK on Premium.
• Data location: region not published.
• Entry price: $49 a month (Basic); price tests from $99 (Standard) (checked October 2026).
• Main strength: price, shipping and checkout tests from $99 a month.
• Main limitation: no published hosting region, DPA, subprocessors or certification.

Its privacy policy does not mention GDPR; the FAQ says “Only anonymous behavioral data is collected” and that the app “respects the visitor's consent choice”. Assignment uses a visitor ID cookie. Not the right choice for buyers who need a signed DPA before purchase. Full profile in our deep dive.

Shopify Rollouts: best for simple tests inside the Shopify admin

• Best for: Shopify merchants who want scheduled changes and simple tests without another app.
• Can test: theme changes, checkout and customer account pages, discounts and catalog status.
• Shop systems: Shopify only; experiments from the Grow plan; no headless.
• Data location: not published.
• Entry price: included in Shopify from Grow, no separate fee listed (checked October 2026).
• Main strength: testing built into the admin at no listed extra fee.
• Main limitation: conversion-type metrics only, no published statistical method.

Shopify is “certified Level 1 PCI DSS compliant” and has “issued SOC 2 Type II and SOC 3 reports”. Cookies and consent handling for experiments are not published. Not the right choice for teams that judge tests on revenue or profit. Compare: Apex vs Shopify Rollouts.

07How Should a European Shop Choose an A/B Testing Tool?

1. Write down your data requirements before the first demo: hosting region, accepted transfers, required certificates, behaviour before consent.
2. Ask every vendor for its DPA, transfer clauses, subprocessor list and, if needed, its ISO 27001 certificate or SOC 2 report.
3. Test consent in your own banner. Load a page with consent declined and check what the script stores and whether the test still runs.
4. Compare what the remaining tools can test: Shopify price and checkout tests come from different tools than server-side flags.
5. Decide how you will choose tests. A tool that passes the data review still spends your traffic on whatever you put into it.

For the last step, Apex by DRIP gives every test idea a Likelihood to Win before it is built. See it next to two Shopify apps in Apex vs Shoplift vs Intelligems.

08What Is the Verdict for European Shops in 2026?

On data, a European shop has documented options: three tools document hosting in Germany, three publish ISO 27001 and SOC 2, and GrowthBook runs in your own infrastructure. The Shopify apps built for price and shipping tests name no EU hosting region, so read their contracts closely.

After the data review, the choice moves to revenue. If your tests keep coming back flat, the constraint is which tests you run. Apex by DRIP is built for that: it scores each idea against 4.3 million observed A/B tests from 151,000 shops, shows how many tests back each score, and hosts in the EU plus UK. Its price is not published; a card-free free tier for one store exists, and the next step is to book a call.