Which law applies, who holds the data, and where it can run.
An analytics tool holds data about the people your organization serves, so it gets the same review as any other system that does.
EU transfer law keeps moving
The Court of Justice of the EU invalidated the EU-US Privacy Shield in its Schrems II judgment of July 16, 2020. Its successor, the EU-US Data Privacy Framework, rests on an adequacy decision adopted on July 10, 2023 and upheld at first instance by the General Court on September 3, 2025; that judgment was appealed to the Court of Justice on October 31, 2025 (Case C-703/25 P). Between 2021 and 2023, before the Framework was adopted, several EU data protection authorities found specific websites' use of Google Analytics unlawful under the transfer rules then in force.
Who holds the data matters, not only where
The US CLOUD Act lets US authorities compel providers under US jurisdiction to disclose data in their possession, custody or control, wherever it is stored. It reaches providers under US jurisdiction, not only US-based ones. For a sovereignty review, that makes who holds the data as important as where it is stored.
Isolated networks and cloud authorization
Some systems sit on isolated or air-gapped networks, where software that has to reach the internet won't work. US federal agencies also have FedRAMP to consider. FedRAMP's scope is cloud products and services that create, collect, process, store or maintain federal information on behalf of a federal agency. For independent software an agency installs and operates single-tenant, FedRAMP's scope page says the host service is within FedRAMP's scope but the independent software is not. Each agency decides whether its use falls within FedRAMP's scope, and still authorizes the system with its own authority to operate (ATO).
Analytics that runs where your rules say it has to.
The Marver server runs on your hardware or your cloud account, and analysts work in the desktop Workbench on their own machines. Marver keeps customer data in your environment and sends none to Chip Hosting Solutions.
Data residency
Keep customer data inside infrastructure and jurisdictions your team controls. Deploy on bare metal or your own private cloud: your AWS account, your Azure tenant, your GCP project, or a local Linux server.
Air-gap capable Enterprise
Enterprise licenses can run fully offline, with no license server and no outbound calls. Every other license makes a daily license check that carries a license ID and an install fingerprint, never customer or event data.
Sensitive workloads
Run regulated workloads with TLS and mutual TLS between components, three-role access control, and an audit trail of configuration and identity changes.
Deletion and retention
Retention and deletion happen on storage you own. Raw events sit on your disks as plain NDJSON text, readable without Marver.
What running Marver yourself changes, and what it doesn't.
Self-hosted architecture does not replace legal review, but it does give security, privacy, and procurement teams cleaner answers about where data lives, who controls it, and which vendors sit in the path.
What self-hosting does
- Marver keeps customer data in your environment and sends none to Chip Hosting Solutions. Collection, processing and identity run on the Marver server, on your hardware or cloud account.
- Once a day the Marver server makes a license check carrying a license ID and an install fingerprint, never customer or event data. It can go through your HTTP proxy. Air-gapped Enterprise licenses skip it entirely.
- You choose the jurisdiction and the hardware: bare metal, your AWS account, your Azure tenant, your GCP project, or a local Linux server.
- Reduce dependence on third-party analytics vendors, subprocessors, and external data paths.
What it doesn't do
- It doesn't meet GDPR or NIS2 obligations on its own. Your lawful basis, records of processing and any data protection impact assessment still apply.
- It doesn't decide FedRAMP scope or replace an authority to operate. Each agency decides whether its use falls within FedRAMP's scope, and still authorizes the system itself.
- It doesn't take Chip Hosting Solutions out of your supply-chain review. Chip Hosting Solutions is a US company and a software supplier, and NIS2 Article 21(2)(d), applied through national law, covers "supply chain security, including security-related aspects concerning the relationships between each entity and its direct suppliers or service providers."
- It doesn't put a cloud host beyond the CLOUD Act: if you run Marver on a cloud provider under US jurisdiction, that provider is still subject to the Act.
- It doesn't remove the daily license check, except on air-gapped Enterprise licenses. If it can't get through for 30 days, Marver goes read-only until it can.
Sources
- Court of Justice press release 91/20: Schrems II (Case C-311/18), July 16, 2020 (opens in a new tab)
- Commission Implementing Decision (EU) 2023/1795 on the EU-US Data Privacy Framework, July 10, 2023 (opens in a new tab)
- General Court press release 106/25: Latombe v Commission, September 3, 2025 (opens in a new tab)
- Digital Policy Alert: Latombe's appeal to the Court of Justice, Case C-703/25 P (secondary source) (opens in a new tab)
- noyb: the Austrian data protection authority's decision on Google Analytics, published January 13, 2022 (opens in a new tab)
- CNIL: formal notice on Google Analytics and transfers to the United States, February 10, 2022 (in French) (opens in a new tab)
- IMY, the Swedish data protection authority: decision on CDON's use of Google Analytics, June 30, 2023 (in Swedish) (opens in a new tab)
- 18 U.S.C. § 2713 (CLOUD Act), Cornell Legal Information Institute (opens in a new tab)
- OMB Memorandum M-24-15: Modernizing the Federal Risk and Authorization Management Program, July 25, 2024 (opens in a new tab)
- FedRAMP: scope (opens in a new tab)
- Directive (EU) 2022/2555 (NIS2), Articles 21 and 41 (opens in a new tab)
Evaluate it on your hardware, on your schedule.
Request a license, start the server with Docker Compose, and point real traffic at it. Marver sends no customer data to Chip Hosting Solutions' systems, and every question gets a written answer from the engineer who built it.
Inside your network
Your channels
Web and tag-manager events, server-side calls, and CRM, POS or call-center files
Marver server
Collection, processing and identity, on your hardware or cloud account
Marver Workbench
Desktop app on your analysts' machines: macOS, Windows and Linux.
Leaves your network
A license check, once a day
A license ID and an install fingerprint. Never customer or event data. It can go through your HTTP proxy. If it can't get through for 30 days, Marver goes read-only until it can. Air-gapped Enterprise licenses skip it entirely.
Request a license
Tell Chip Hosting Solutions your company and where the server will run, and get back a signed 45-day license file and the Docker Compose bundle.
Run it on your infrastructure
Bring the server up on a Linux host (x86-64 or ARM64), or under Docker Desktop on a Mac or Windows machine. Analysts install the desktop Workbench and connect to it.
Keep it, or let it lapse
To continue, reply for an order form or invoice and drop in the paid license, with no reinstall. If you don't, Marver stops taking new events and you keep view, query and export access to everything it already holds. Raw events sit on your disks as plain NDJSON text, readable without Marver.
Who Marver is for, and who it isn't.
Who it's for
- Teams with privacy, residency, or procurement constraints around customer data
- Organizations that need user-level analytics across web, server-side, and offline events
- Technical teams frustrated by per-seat pricing, vendor lock-in, or slow cloud analytics workflows
Probably not for
- Organizations that want a fully managed multi-tenant SaaS product instead of owning the stack
- Teams with no one to run a server: Marver runs on infrastructure you operate, so it needs a technical owner
- Teams looking for a plug-and-play marketing dashboard in an afternoon
Pricing that scales with your deployment, not your headcount.
No per-seat fees, no MAU pricing, and no event metering on paid tiers. Start with a full 45-day trial on your own hardware, then pick the tier that fits. Every tier includes unlimited users.
Analytics
$2,500
per month · flat
Unmetered events · No identity layer
The analyst workbench with no event caps: schema authoring, Path Browser, Funnels, Correlation and cluster analysis, with role-based access for every user.
Analytics + CDP
$5,000
per month · flat
Persistent customer identity
For teams that need trusted customer identity, not just event counts. Everything in Analytics, plus unified profiles, attribution, an identity formation audit with un-merge, and direct founder support.
Enterprise
Typical fitCustom
based on scale
Air-gapped · Custom terms
Everything in Analytics + CDP, plus offline licenses for air-gapped networks, a TLS-on deployment profile, custom license terms, and help with your security review. SSO and high availability are on the roadmap.
Typical fit: Enterprise. Enterprise is the tier for air-gapped networks: it adds offline licenses for air-gapped networks, a TLS-on deployment profile, custom license terms, and help with your security review to everything in Analytics + CDP. SSO and high availability are on the roadmap. On a connected network, where the daily license check can go through your HTTP proxy, Analytics + CDP or Analytics also run on infrastructure you control.
Full pricing detailsBuilt by an Adobe Certified Data Workbench Architect.
Andrew Chepurny
Founder & Principal Architect, Chip Hosting Solutions
Andrew Chepurny built and operated Adobe Data Workbench at enterprise scale for Fortune 500 organizations. When Adobe announced end-of-life, three clients, in telecom, insurance and financial services, got in touch within 48 hours, all asking where to go now. Everything was cloud-only, and the thick-client power-analyst workflow had disappeared. Marver is the answer, five years in the making.
- 17+ years in analytics and MarTech for Fortune 500 brands
- 11 years at Adobe · CS degree, business minor
- Adobe Certified Expert: Data Workbench Architect · CJA Developer
Analytics architecture delivered for
Consulting and in-house engagements, not Marver deployments.
- Dollar General
- Amtrak
- Western Union
- ForeFlight
- Pfizer
- City National Bank
- Adobe Systems
- + many more
Questions teams ask before a trial.
Chip Hosting Solutions is a US company. Does the CLOUD Act reach our data?
The US CLOUD Act lets US authorities compel providers under US jurisdiction to disclose data in their possession, custody or control, wherever it is stored. Marver keeps customer data in your environment and sends none to Chip Hosting Solutions: the server runs on your hardware or your cloud account, and the daily license check carries a license ID and an install fingerprint, never customer or event data. One caveat: if you run Marver on a cloud provider under US jurisdiction, that provider is still subject to the Act. How the Act applies to your organization is a question for your counsel.
Does Marver work on an air-gapped network?
Yes, with an Enterprise license. Enterprise licenses can run fully offline, with no license server and no outbound calls. Enterprise also adds a TLS-on deployment profile, custom license terms, and help with your security review. SSO and high availability are on the roadmap. To discuss it, choose "Air-gapped network (Enterprise)" in the trial request form.
Do we need FedRAMP authorization for Marver?
Your agency decides. FedRAMP's scope is cloud products and services that create, collect, process, store or maintain federal information on behalf of a federal agency. Marver is software your agency installs and runs on its own hardware or cloud account. For independent software an agency installs and operates single-tenant, FedRAMP's scope page says the host service is within FedRAMP's scope but the independent software is not. Agencies are solely responsible for determining whether their use of a cloud service falls within FedRAMP's scope, and your agency still authorizes the system with its own authority to operate (ATO).
What leaves our network?
From the Marver server, a license check, once a day, carrying a license ID and an install fingerprint, never customer or event data. It can go through your HTTP proxy. If it can't get through for 30 days, Marver goes read-only until it can. Air-gapped Enterprise licenses skip it entirely. Collection, processing and identity run on the Marver server, on your hardware or cloud account.
What does it cost?
Pricing scales with your deployment, not your headcount. Analytics is $2,500 and Analytics + CDP is $5,000, each per month and flat; Enterprise, which covers air-gapped deployment, is custom, based on scale. Every tier includes unlimited users, and the 45-day trial is free. Security questionnaires, order forms and purchase orders are handled by email.
What happens if we try it and don't buy?
Marver stops taking new events, and you keep view, query and export access to everything it already holds. Raw events sit on your disks as plain NDJSON text, readable without Marver.
Request your 45-day trial.
Tell Chip Hosting Solutions who you are and where the server will run. Andrew Chepurny, who built Marver, reviews each request and replies with a signed license.dwb file and the matching install bundle, usually within one business day.
Prefer email? Write to andrew@chip-hosting.com
Licensing question? Use the contact form · Implementation partner? Talk partnerships