verifier.org

PostHog

masks all inputs by default, hosts in the eu on every plan including free, and you can self-host the mit core.

$272.50/mo at 100k sessions#engineering-teams-that-w#eu-hosting#the-option-to-run-it-the

the best combination of correct defaults, real eu hosting and an escape hatch, if you can live with an enterprise carve-out in the licence.

the docs state the reasoning plainly: 'as any input element is highly likely to contain sensitive text such as email or password, we mask these by default'. `maskAllInputs` is true until you set it false. that is the right posture, and posthog is one of the few here that explains why rather than listing it as a feature.

eu or us region is selectable at signup on every plan, including the free one — most competitors gate eu residency behind enterprise. pricing is genuinely computable rather than quoted: the published per-recording tiers work out to $272.50 for 100,000 web sessions a month, which we can show the arithmetic for, unlike five other vendors on this page. mobile replay is billed separately and starts higher, at $0.0100 a recording.

the description above is ours, condensed from the ranking. pricing moves — check it on the vendor's own page before you rely on it.

pricing
$272.50/mo at 100k sessions
our verdict

the best combination of correct defaults, real eu hosting and an escape hatch, if you can live with an enterprise carve-out in the licence.

we researched this category against vendors' own pricing pages and licence files. that is where this line comes from — not from the vendor, and not from anything they paid for.

more session replay tools

Microsoft Clarity

we checked thisfree

input masking you are not allowed to switch off, free, with no traffic limit — and a business model worth understanding.

#teams-that-want-the-safe#cannot-rely-on-developer

Contentsquare

we checked thisfree to 200k sessions/mo

redacts emails, tokens and card numbers in the browser, before anything is sent.

#teams-that-want-masking-

Quantum Metric

we checked thisquoted

pii is encrypted at capture with a key only you hold — quantum metric cannot decrypt its own customers' data.

#regulated-enterprises-th

Datadog RUM

we checked this~$2.50 per 1,000 replayed sessions

`mask` is the default privacy level, and password, email, tel and card fields stay masked whatever you set.

#teams-already-running-da#logs#infrastructure