WEB ANALYTICS
BASAIR
بصائر
Know what your visitors do, without their data leaving your borders.
A web analytics platform that runs inside your network and keeps your data whole and inside the Kingdom. Every figure is computed on the complete data with no sampling, it surfaces any shift in visitor behaviour and says where it happened and when, and it answers questions through an assistant running on a language model installed on site.
The product in figures
- 100%
- Of the data inside the Kingdom
- 0
- Sampling — every figure on complete data
- ∞
- Retention of aggregated reports
- 2s
- Live visitor refresh
- 1.9 KB
- Tracking file size
- 3
- Privacy modes
- 2
- Installation modes
- 5
- Years of audit log retention
What it solves
Your visitors’ data lives in somebody else’s cloud. Global analytics tools send every click and every network address to servers outside the Kingdom — which conflicts with data classification and residency requirements in government entities and security-sensitive sectors.
The figures turn into estimates once the data grows. Free tools fall back on sampling when traffic rises, delete data after a limited period, and fold rare paths into an “other” bucket — so the decision rests on a number that was estimated rather than counted.
A shift is found late and without explanation. A metric drops and the team starts hunting by hand across channels, cities and devices to work out what changed — and a weekend alone is enough to set off a false alarm.
Privacy offers two losing choices. Either full tracking that demands explicit consent and exposes the organisation, or no tracking at all. No tool lets the organisation set the level itself and prove to an auditor what it applied.
What the product does
Overview
Visits, unique visitors, sessions, bounce rate and session length, compared against the previous period, with activity spread across the hours of the day in Riyadh time.
Visitors now
Live activity, active pages and cities and an event feed, refreshing every two seconds straight from the event store with no processing delay.
Audience
Geographic distribution across regions and cities, devices, browsers and browser language, new against returning visitors, and weekly retention tables.
Content
Performance for every page with no cap on the number of paths, entry and exit pages, an analysis of where visits end and why, and the routes that brought the visitor to each page.
Acquisition
Channels, referrers and UTM campaigns with their conversion rates, and what visitors type into the search box on your own site.
Conversion
Event-based goals, and funnels you build step by step so you can see exactly where the visitors are lost.
Anomaly detection
An expected range for every metric that separates the underlying trend from the weekly cycle, and names the segment that explains the change and the day it began.
Session explorer
Each visit on its own and its whole journey click by click, under an identifier that belongs to the browser rather than the person, with no names and no accounts.
Analytics assistant
An assistant on a local language model that reads the dashboard’s own figures, answers questions and writes the executive summary, with no external connection.
Privacy and governance
Three tracking modes, consent controls, respect for Do Not Track, configurable retention periods, and immediate execution of erasure requests.
Audit log
Every action with who performed it, when, and from which network address — not editable, not deletable, and exportable as PDF and CSV.
Operating model and security
- Operating model
- Inside the network first — the server sits in the Kingdom, and no data is moved outside the network
- Installation
- Two modes: external, where the file is fetched from the analytics server, and local, which routes every request through the site’s own domain for complete isolation
- Tracking
- A twelve-line tag and a 1.9 KB file, with server-side tracking that is not stopped by ad blockers
- Computation
- Complete data with no sampling · unlimited retention of aggregated reports · automatic compaction of raw events
- Local AI engine
- A language model installed inside the network · zero dependency on any external API
- Privacy
- Cookieless · balanced · full — with the last portion of the IP address dropped, Do Not Track respected, and a consent mode
- Governance
- Role-based access control · an audit log that cannot be edited · immediate right to erasure · linked to THIQ for compliance
- Language
- Native Arabic right-to-left interface alongside English · Hijri and Gregorian calendars · Saudi UTC+3
- Sectors served
- Government · security-sensitive sectors · large enterprises with strict data-residency requirements
Frequently asked
- Does any visitor data leave our network?
- No. BASAIR runs on servers inside your network, and in local mode the visitor’s browser connects to no domain other than your own — neither to fetch the file nor to send events. Even the analytics assistant runs on a local language model.
- Do we need a cookie consent banner?
- It depends on the mode you choose. The cookieless mode needs no banner, the balanced mode sets a single first-party cookie, and the full mode requires explicit consent. Every change of mode is written to the audit log.
- How does the system handle data erasure requests?
- A specific visitor’s data can be erased in full by their own cookie identifier, and the erasure is immediate. The aggregated figures remain as they are with no way to tie them back, and the requests are synchronised with THIQ for compliance.
- Does the platform reveal why the figures changed?
- It identifies where the change happened, when, and which segment explains it — and does not claim to know the cause, because the real causes usually lie outside the site’s own data. That narrowing gets you to the cause in seconds rather than hours.
See BASAIR inside your own environment
One session on your infrastructure as it stands: we install it, show what your team would see on day one, and answer every question in front of your engineers.