This page is Annex 3 of the Data Processing Agreement. We give at least 30 days' notice before adding or replacing a sub-processor by updating this page and emailing workspace owners. Last reviewed: 4 November 2026.
Infrastructure
| Sub-processor | What it does | Data it handles | Location |
|---|---|---|---|
| Hosting provider (name given on request) | Runs the production servers and database | All Customer Data | Given on request |
| Cloudflare, Inc. | Network proxy, DDoS protection, TLS termination, DNS for workspace addresses | Request metadata (IP address, URL, headers) in transit; request logs | Global network; US company |
| Resend, Inc. | Sends transactional email (sign-up codes, invitations, password resets, notifications, survey invitations the Customer sends by email) | Recipient email address, name where included, message content | United States |
Optional features
| Sub-processor | When it is used | Data it handles | Location |
|---|---|---|---|
| NVIDIA Corporation | Only in workspaces that switch on AI follow-up questions | The question text and the respondent's answer with contact details removed; voice recordings for transcription; follow-up text for speech synthesis | United States |
Note on the AI provider. The current integration points at a trial endpoint whose terms allow the provider to use submitted data to improve its models. Until a contract with no-training and processor-only terms is in place, AI follow-up questions must be used on test interviews only. This note is removed when that contract exists.
Not sub-processors, but third-party requests
- Google Fonts (Google LLC): the website, the application and surveys on Metalytiq's standard themes fetch their typeface from Google, which receives the visitor's IP address. No Customer Data is sent. See the Cookie Policy.
- YouTube (Google LLC): training videos on the website, in privacy-enhanced mode, load only when played.
- The Customer's own integrations: webhooks the Customer configures, the Customer's identity provider for single sign-on, and external content survey authors embed. These are the Customer's processors, not ours.
What we do not use
No analytics or advertising services, no error-tracking service, no payment processor (invoices are issued directly), and no SMS provider (SMS invitations are not offered).
METALYTIQ RESEARCH & SOLUTIONS PRIVATE LIMITED · Noida, India · CIN U70200UW2026PTC254788