Matomo for banks and insurers
Banks and insurers want to know where applications drop off and which content works, without customer data leaving the house. I set up Matomo so that IT security, data protection and internal audit can approve it, in Germany and in Switzerland. My projects include cantonal banks, private banks, insurers and a financial supervisory authority.
Sound familiar?
- 01Every script needs approvalIT security and data protection review every tool on the website, and third parties usually fail.
- 02Data must not leave the houseCloud services are ruled out, web analytics should run in your own data centre.
- 03Applications drop off, nobody knows whereAccount opening, loans or insurance calculators lose customers, but at which step?
- 04Login areas are sensitiveNothing personal may end up in the analytics in online banking or the customer portal.
- 05Many brands, regions and websitesGroup, product and regional sites should be analysable separately and together.
- 06Evidence for audit and supervisorsWho has access, what is stored and for how long? That has to be documented.
Web analytics in-house
Matomo runs on your servers or in a data centre of your choice. No data goes to a third party, configuration and access stay with you. That makes approval by IT security and data protection much easier than with cloud services.
Measuring application journeys without storing input
Where do customers drop off when opening an account, applying for a loan or using an insurance calculator? I measure the steps as a funnel and with form analytics: time, drop-offs and corrections per field, but never the content entered such as amounts, names or account numbers.
Login areas without personal data
In online banking and customer portals I measure pages and functions, not people. Account and contract numbers or names in URLs and page titles are removed before they are stored. A user ID is only used after approval and pseudonymised.
Security and evidence
A hardened instance, single sign-on via your identity provider, roles following the principle of least privilege and a log of who changed what. Plus documentation of data flows, access and retention that supports your evidence for internal audit and supervisors, for example for ICT risk management under DORA or FINMA requirements.
Germany and Switzerland
For banks and insurers in Switzerland the revised Federal Act on Data Protection (FADP) applies, in Germany the GDPR and the TDDDG. The settings in Matomo are the same, the documentation follows your law. I often run projects in Switzerland together with Swiss agencies.
Several brands and websites
Group, product and regional sites run in one instance, analysable separately and, if you like, additionally in a shared profile. I grant permissions per team so that each unit sees only its own websites.
Projects for, among others
FAQ
Frequently asked questions
Does Matomo run in our own data centre?
Yes. Matomo runs on your servers without any connection to third parties. Your IT runs it with my documentation or, if you want to outsource it, our sister brand feinwerk.io with an SLA.
Can we measure in online banking or the customer portal?
Yes, as long as pages and functions are measured and not people. I remove account and contract numbers or names from URLs and page titles before they are stored. A user ID is only used after approval and pseudonymised.
Does form analytics record what customers type?
No. It measures time, drop-offs and corrections per field, not the content entered. You see which field holds customers up without storing amounts, names or account numbers.
How does Matomo get through IT security approval?
With a hardened instance in-house, single sign-on via your identity provider, roles following the principle of least privilege and documentation of data flows, access and retention.
Do you also work for banks in Switzerland?
Yes, among others for cantonal banks and private banks, often together with Swiss agencies. The configuration follows the Swiss Federal Act on Data Protection, the legal assessment stays with your legal advisers.
Sounds like your project?
In an intro call we'll clarify where you stand and what comes first.
Your contactPeter Boehlke, Matomo consultant from Munich, 17 years in the Matomo team