Legal
Subprocessor Notice
Last updated: 7 September 2026
Nymetric uses the providers below to deliver and secure the service. A primary production region describes the selected data-plane location where meaningful; it is not a promise that all support, corporate or subprocessor activity is confined there.
| Provider | Service and purpose | Data reasonably processed | Primary production region |
|---|---|---|---|
| Google Cloud | HTTPS load balancing, Cloud Run hosting, logging/monitoring, build/deployment and secret-management infrastructure. | Match data transiently in request processing; account/contact request data; network, request and operational metadata. | Cloud Run: London (europe-west2). Other processing may occur elsewhere. |
| Neon | Managed PostgreSQL production database. | Account data and credential hashes; match metadata; audit/security records; identifiers and timestamps. API input names are not stored in the match-request database. | London (eu-west-2). Other processing may occur elsewhere. |
| Upstash | Redis for request limiting, login throttling and contact-form throttling. | Opaque hashed limiter identifiers, counters and short-lived timing/state data. | London. Other processing may occur elsewhere. |
| Spaceship, Inc. / SpaceMail | Transactional account email, invitations, password resets, setup email, contact-form delivery and business mailboxes. | Recipients, message content, account-link tokens and contact enquiry information. | No exclusive UK region is claimed. |
International transfers
Provider processing, support or subprocessing may occur outside the UK. Appropriate safeguards are used where required. Provider agreements and subprocessor frameworks include relevant data-protection and transfer provisions; for SpaceMail these include UK-specific contractual safeguards where applicable.
Changes
Customers give general authorisation for these subprocessors under the Nymetric DPA. We will provide reasonable advance notice of material additions or replacements so customers can raise reasonable data-protection objections. Questions may be sent to privacy@nymetric-match.com.