The B2B SaaS tracking stack, in one tool
A typical SaaS team pays for five things to get one clean conversion signal: a tag manager and a server-side container, a consent banner, a bot filter, a signup fraud check, and a CRM sync that pushes deals back to the ad platforms. Each one holds a different version of the truth. DataCops does all of it in one place, so the signup your ad platform hears about is the same signup your sales team sees.
1. A first-party script that survives ad blockers
DataCops runs from your own subdomain, for example datacops.yourapp.com, with endpoints named so that common blocklists do not catch them. Technical buyers run ad blockers more than most, so this alone recovers visits and signups a normal pixel never sees. Every visit gets a human or bot verdict, and every IP is checked against our own IP intelligence covering 360+ billion addresses for datacenter, VPN, proxy and Tor traffic. Your user count is real people only, and every page in the dashboard shows the same number.
Many SaaS products live on two hosts: a marketing site on yourapp.com and the product on app.yourapp.com. When a visitor clicks from your site through to your app subdomain, DataCops carries their ad click across with them.
2. Signups that keep their ad click
Sign in with Google sends the visitor away and back without the click ID. SignupCops holds the click on your own domain while Google handles the login, then joins it to the signup when your app calls identifyUser. Pass accountCreatedAt and an account made more than an hour earlier is treated as a login, not a new signup.
Each new signup email is scored by DataCops email intelligence: disposable domains, missing mail authentication, brand-new domains, random-looking usernames, bulk patterns and plus-addressing. High-risk and disposable signups, and second accounts on the same device, are held back from your ad platforms. Your product still lets them in. Every site gets 500 SignupCops checks free on every plan.
3. Demo requests that only count when they qualify
For sales-led SaaS, a demo form fill is not the conversion you want ads to chase. The one that matters is the lead your sales team says is real. DataCops can hold a lead and send it to your ad platforms only once it qualifies, still carrying the original click IDs from the first visit.
There are three ways to release a held lead:
- HubSpot: connect HubSpot and pick the field and value that mean qualified. DataCops checks every 5 minutes and releases the lead when it matches.
- Your dashboard: move a lead to Qualified in the DataCops leads list and the conversion is released. Mark it Not a fit and the held lead is dropped.
- The release API: any CRM, including Salesforce and Pipedrive, can call your private DataCops release URL with the event name and email, directly or through Zapier, Make or n8n.
Release is claim-first, so a lead is never sent twice. Held leads that are not released within 14 days expire, which keeps the click inside the ad platforms' matching windows.
If you use DataCops LeadCops forms for demo requests, each form can also refuse disposable emails, free email addresses, domains that cannot receive mail and VPN submissions. High-risk submissions are saved as blocked, never counted and never sent.
4. Closed deals and payments back to the ad
B2B deals close weeks after the click, often off your website. Your backend or CRM can post later conversions, such as a paid plan or a closed-won deal, to the DataCops conversions API or to your private sales webhook. DataCops ties each one back to the person and sends it to your ad platforms, and the same sale is sent once per platform, even when more than one tool reports it.
You can also push the same verified lead into HubSpot, Klaviyo, Brevo or ActiveCampaign, or post it to any webhook, so marketing and sales work from the same record.
Sending to every ad platform you buy
DataCops sends server-side to 8 ad platforms: Meta, Google Ads, TikTok, LinkedIn, Microsoft Ads, Reddit, Pinterest and X. Meta, Google Ads, TikTok, LinkedIn and X connect with a one-click sign-in. Microsoft Ads, Reddit and Pinterest connect with an API key. Microsoft uses its UET Conversions API, which Microsoft runs as a pilot: ask your Microsoft account manager to enable it, and send events within 7 days.
Customer details are cleaned and SHA-256 hashed before they leave our servers, so a signup still matches when the click ID is missing. For Google Ads, a refund you report lowers or retracts the original conversion value, so the account learns from revenue you actually kept.
Real people only, per platform
Each connected platform has its own delivery settings. Switch on Real people only and conversions from bots and datacenter traffic never reach that platform. You can add VPN, proxy and Tor as well. It is off by default, and most B2B teams leave the VPN option off, because many real buyers browse from a company VPN. The delivery report shows what reached each platform, and a plain-English reason for anything that did not.
Click fraud on your Google Ads
Competitors and bots click B2B keywords because they are expensive. On the Organization plan, DataCops can block known bot traffic at the Cloudflare edge before it reaches your site, and export the evidence for Google's Click Quality Form: a CSV of suspicious clicks from the last 60 days. Google decides on any refund.
Consent for global SaaS
DataCops includes a first-party cookie banner built to the IAB TCF v2.2 standard, with Google Consent Mode v2 on by default. It shows to EU, UK and Swiss visitors by default, or to everyone if you switch it on. The server re-checks consent before every send, so EU visitors are never sent to an ad platform before they opt in. Every choice is kept in a consent log you can use as proof, and visitors can ask for their data to be deleted through a ready-made form for your privacy page.
Plans for SaaS teams
Start on Free with 2,000 sessions a month. Business is $59 a month ($49 a month yearly) with 50,000 sessions. Organization is $359 a month ($299 a month yearly) with 350,000 sessions, Cloudflare edge blocking and the Google refund evidence export. Agencies running SaaS clients have their own Agency plans, and Enterprise is priced with our team.
Good to know before you start
- Put the DataCops script on your marketing site and your app, with the same key, so signups on either host keep their click.
- Pass accountCreatedAt with identifyUser, so logins are never counted as new signups.
- Hold demo requests only if your team qualifies within 14 days; otherwise send them as they come in.
- Salesforce and Pipedrive connect through the DataCops webhook, directly or via Zapier, Make or n8n.