Data Processing Agreement

Last updated: May 22, 2026

This Data Processing Agreement describes how Metricwise processes personal data on behalf of customers when providing the services.

Roles and scope

For customer personal data processed in the services, the customer is the controller or processor, and Metricwise acts as processor or sub-processor as applicable.

Metricwise will process personal data only to provide the services, comply with customer instructions, and meet legal obligations.

Processing details

  • Subject matter: hosting, analyzing, securing, supporting, and improving Metricwise workspaces.
  • Duration: the term of the customer subscription plus any retention period required by law or agreement.
  • Categories of data: account data, workspace metadata, usage data, support data, and customer-submitted data.
  • Categories of data subjects: customer users, employees, contractors, and individuals represented in customer data.

Security

Metricwise maintains technical and organizational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access.

Measures may include access controls, encryption in transit, logging, backups, vulnerability management, and internal confidentiality requirements.

Sub-processors

Metricwise may use sub-processors to provide the services. The current list is available on the Subprocessors page. We remain responsible for sub-processor performance as required by applicable data protection law.

Data subject requests and incidents

Metricwise will reasonably assist customers with data subject requests, security incidents, and compliance obligations where required by applicable law and the customer agreement.

If Metricwise becomes aware of a personal data breach affecting customer personal data, we will notify affected customers without undue delay.

Return and deletion

At the end of the services, Metricwise will delete or return customer personal data according to the customer agreement, unless retention is required by law.