Sub-processors

Last updated: January 2026

Overview

Metricly uses third-party service providers ("sub-processors") to help deliver our service. This page lists all sub-processors that may process personal data on behalf of our customers.

We maintain appropriate data processing agreements with each sub-processor to ensure they meet GDPR requirements and provide adequate data protection.

Current Sub-processors

Google Cloud Platform

Purpose
Cloud infrastructure including compute (Cloud Run), database (Firestore), storage (Cloud Storage), and data warehouse connectivity
Data Location
EU (europe-west1, Belgium)
Data Processing Agreement
View DPA →

Firebase

Purpose
User authentication, web hosting, and real-time database services
Data Location
EU (europe-west1) for data storage; US for authentication service
Data Processing Agreement
View DPA →

Anthropic

Purpose
AI/LLM services for natural language query processing
Data Location
United States
Data Processing Agreement
View DPA →

Data Processing Locations

We prioritize EU data residency. Our primary infrastructure runs in Google Cloud's europe-west1 (Belgium) region, including:

  • Cloud Run (API servers)
  • Firestore (database)
  • Cloud Storage (file storage)
  • Cloud Functions (serverless compute)

Firebase Authentication is a global service hosted in the US. This service handles authentication tokens only and is covered by Google's Standard Contractual Clauses for EU-US data transfers.

Changes to Sub-processors

We will update this page when we add or remove sub-processors. If you have a Data Processing Agreement with us, we will notify you of any material changes to our sub-processor list as required by that agreement.

Questions

If you have questions about our sub-processors or data processing practices, please contact us at privacy@metricly.xyz.