---
title: "Subprocessors · MetricDeck"
description: "The service providers that process data for MetricDeck, what each does, and where."
url: https://metricdeck.app/subprocessors
updated: 2026-10-12
---

Legal

# Subprocessors

The companies that process data on MetricDeck's behalf, only to run the service and only on our instructions. We'll update this page before adding a new one.

Effective 12 October 2026

| Provider    | What it does for us                                                                                                                                     | Data it handles                                                                                                                                                                                                               | Where                                                 |
| ----------- | ------------------------------------------------------------------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ----------------------------------------------------- |
| Vercel      | Hosts the website and the app, and runs the code that answers each request                                                                              | Everything you see or send while using the app; request logs; page-visit counts (Vercel Web Analytics: no cookies or IP addresses kept)                                                                                       | United States, with a global edge network             |
| Supabase    | Our database, and signing in (passwords and two-factor login)                                                                                           | All stored data: your account, projects, synced data, reports                                                                                                                                                                 | Mumbai, India (Amazon Web Services, through Supabase) |
| Trigger.dev | Runs the background jobs: nightly syncs, hourly uptime checks, AI summaries                                                                             | The data those jobs read and write; job logs                                                                                                                                                                                  | United States (Virginia)                              |
| Anthropic   | Writes AI summaries, alert explanations and search-term reviews                                                                                         | The numbers and names described under "What goes to AI" in our privacy policy. Not used to train models                                                                                                                       | United States                                         |
| Resend      | Sends account emails: sign-up and reset codes, security notices, invitations to a workspace                                                             | Your email address (or the address you invite) and the message                                                                                                                                                                | Sent from Tokyo, Japan (company in the United States) |
| Sentry      | Tells us when a page or request fails, so we can fix it                                                                                                 | Error reports: what failed and where, the page's address with any secret part removed, and the browser and device type. Set not to collect cookies or IP addresses. Kept 30 days                                              | United States                                         |
| Google      | PageSpeed Insights measures the speed of pages you watch; the favicon service shows a site's icon; Google Analytics counts visits to our public website | The addresses of the pages and sites you watch; for website visits, the page, the site you came from, an analytics cookie, your browser, device and approximate location. Never anything from the app or the data you connect | United States and Google's global network             |
| Microsoft   | Clarity shows how visitors use our public website (heatmaps and session recordings)                                                                     | On public website pages only: scrolls, clicks and mouse movement, the page, browser, device and approximate location, with what's typed in forms hidden. Never anything from the app or the data you connect                  | United States                                         |

## Not subprocessors, but worth knowing

Google (Search Console, Analytics, Ads) and OpenAI (OpenAI Ads) are the platforms you connect: we read from them on your behalf, under their own terms with you. Dodo Payments sells paid plans as the merchant of record: it is the seller of your subscription and handles your card and tax details directly, under its own terms with you.

See also our [privacy policy](https://metricdeck.app/privacy). Questions to [hello@metricdeck.app](mailto:hello@metricdeck.app).
