Last updated: 2026-05-01
The third parties below process personal data on behalf of METRYNX MDM customers (controllers). Each entry lists the role, hosting location, lawful international-transfer mechanism (where applicable), and a link to the vendor's data-processing agreement.
Per our privacy notice and the standing DPA, we notify customers at least 30 days before adding or replacing a subprocessor. Customer signatories may object on reasonable data-protection grounds during the notice window.
| Vendor | Role | Location | Transfer mechanism | Data categories | DPA |
|---|---|---|---|---|---|
Resend | Transactional email (account verification, password reset, invite, DSR notifications) | United States ⚖️ DPF certification under counsel review | EU-US Data Privacy Framework / Standard Contractual Clauses | Email address, recipient name, transactional message body | DPA |
Object storage (S3-compatible) | Personal-data export bundles (GDPR Art. 15 / 20), report files, audit-log WORM backup | EU/EEA target — vendor selection in progress | EEA (self-hosted) / SCCs (managed AWS) | DSR export bundles, report files, audit-log backup (sensitive credentials excluded by construction) | pending |
Sub-processors currently under selection. Each row will move to Active only after the 30-day customer-notice window has elapsed and a signed DPA is in place.
| Vendor | Role | Location | Transfer mechanism | Data categories | DPA |
|---|---|---|---|---|---|
PostgreSQL hostingPlanned | Primary application database | EU/EEA target — vendor selection in progress | EEA / SCCs depending on chosen vendor | All application data (users, organizations, meters, readings, audit log) | pending |
Redis hostingPlanned | Cache, background-job queue, session-revocation sentinels | EU/EEA target — vendor selection in progress | EEA / SCCs depending on chosen vendor | User identifiers (cuid), IP addresses (rate limits), revocation timestamps. No personal data inline. | pending |
Application log shipperPlanned | Application log aggregation | EU/EEA target — vendor selection in progress | EEA / SCCs depending on chosen vendor | Application logs after redaction (no credentials, no consumption values) | pending |
Questions about a specific subprocessor or a customer-specific carve-out? See the privacy notice for the data-controller-vs-processor split, or contact us via the security disclosure policy channels for any privacy-relevant security concern.