Data Processing Agreement
DPA, Explained Clearly
The Quick Version
GDPR-compliant data processing terms for Metricall
Standard Contractual Clauses (SCCs) available where needed
Clear list of sub-processors we may use
Your data, your control — we process only as instructed
Request a signed DPA at legal@metricall.com
Need a signed DPA?
Contact us to request our standard DPA or a signed copy.
Current Sub-processors (Group Level)
We carefully vet and monitor third parties that may process your data at the group level.
| Provider | Purpose |
|---|---|
| Hosting / infrastructure providers | Website and systems hosting |
| Email / communications tools | Sending and managing communications |
| Analytics (if used) | Website analytics with appropriate safeguards |
Last updated: January 26, 2026. We notify customers before adding new sub-processors where required by our DPA.
Key Points
- Required by GDPR when we process personal data on your behalf
- You are the controller; Metricall is the processor
- Specifies how we handle data and assist with your compliance
- Legally binding commitment to data protection
Plain English
A Data Processing Agreement (DPA) is a contract between:
- •You (the "Data Controller") — You decide what data is collected and why
- •Metricall (the "Data Processor") — We process data on your behalf
When It Applies
When you use Metricall's services (including products under our brand) and we process personal data on your instructions, the DPA sets out how we will do so in compliance with GDPR and other applicable laws.
What It Covers
- •What data we process and for what purpose
- •How we protect it (security measures)
- •Sub-processors we may use
- •Your rights (audit, deletion, instructions)
- •Breach notification and assistance with your compliance
When You Need One
If you have EU/UK users or enterprise compliance requirements, you may need a DPA with Metricall.
Our Commitments
We process data only on your instructions and implement appropriate security and confidentiality measures.
Your Rights
You can instruct us, request information, and audit our processing (within the scope of the DPA).
Sub-processors
We may use a limited set of sub-processors for hosting, email, and analytics. We will notify you of changes where required.
Data Locations
Data may be processed in different regions. We use appropriate safeguards for international transfers.
Security Measures
We implement technical and organizational measures to protect the data we process.
Request a DPA
Need a signed DPA? Contact legal@metricall.com. We will provide our standard DPA or discuss custom terms.
Questions about our DPA? Contact our legal team at legal@metricall.com.