everviz

What is everviz?

everviz is an online data visualisation platform launched in 2018 by everviz AS, a subsidiary of Highsoft AS, the Norwegian company behind the popular Highcharts charting library. It targets editorial teams, communications departments, public sector analysts, and data journalists who need to publish interactive charts, tables, dashboards, and maps without writing JavaScript. Editors paste a CSV, connect to a Google Sheet, or upload an Excel file, choose a chart type from the catalogue (line, bar, pie, area, treemap, sankey, geographic maps), then embed the chart on any website with a one, line iframe or a JavaScript snippet. The platform is hosted on AWS Frankfurt and operated entirely from Norway / EEA.

Cookies and data collected by everviz

On a public, embedded chart, everviz does not write any analytics or advertising cookie. The everviz domain may set a small number of functional cookies for the embed runtime: a Cloudfront security cookie used to distinguish humans from bots, and a session cookie used by the chart configuration loader. Inside the everviz editor application (app.everviz.com), additional functional cookies are set to keep editors authenticated. The platform processes the chart configuration, the dataset, and the visitor IP at the moment of embed load, but no persistent visitor identifier is stored.

GDPR and ePrivacy implications

Because no tracking or advertising cookie is written and the visitor IP is processed only for routing the embed request, everviz does not trigger Article 5(3) of the ePrivacy Directive in the same way as analytics or marketing tools. The functional cookies needed to deliver the chart fall under the strictly necessary exemption. Under the GDPR, everviz AS acts as a processor for the chart configurations and any dataset that contains personal data, while the publisher remains controller. The Norwegian / EEA data location avoids any Chapter V transfer issue.

Consent requirements

In a typical configuration, no cookie banner is required to embed an everviz chart. The chart loads under the strictly necessary category and runs on legitimate interest as the legal basis. If the chart's underlying dataset contains personal data of identified individuals (for example, a journalistic chart that names specific people), the publisher needs a separate legal basis for that data processing, typically consent or journalistic exemption under Article 85 GDPR plus national press laws. The embed itself does not require a CMP gate.

International data transfers

None outside the EEA. everviz AS is incorporated in Norway, which is part of the EEA, and the application is hosted on AWS in Frankfurt. Sub, processors are limited to EU and EEA based providers. There are no transfers to the United States or other third countries, which removes the need for SCCs, a Transfer Impact Assessment, or any DPF, dependent fallback. This is a meaningful advantage compared with US, headquartered visualisation tools (Datawrapper has EU hosting too, but Tableau Public, Flourish, and Infogram involve US transfers).

Practical compliance steps

Sign the DPA published by everviz AS, list everviz and AWS Frankfurt as sub, processors in the privacy policy, and add the platform to the record of processing activities under Editorial visualisation or Reporting. Restrict editor access using SSO or two, factor authentication. If you embed charts that include personal data of identified individuals, document the legal basis for that dataset and the retention period. The chart embed itself can be loaded without a consent gate, which is one of the practical reasons European newsrooms and public, sector communications teams pick everviz over US, hosted alternatives.