Legal
Subprocessors
These vendors process personal data for Metzia. We last updated this list on September 24, 2026.
The data processing terms govern this list. The list is also available as JSON.
Current list
| Subprocessor | Purpose | Data | Region |
|---|---|---|---|
| Descope | Buyer sign in and buyer sessions | The buyer email address and sign in records | United States |
| WorkOS | Seller and staff sign in | The name and email address of seller users and staff. Not buyer data | United States |
| Neon | The database | Every record that the privacy policy lists | United States |
| Vercel | Hosting, request logs, and stored files | Request data, such as the IP address, and the files that sellers upload | United States |
| Upstash | Rate limit counters | A hash of the IP address or of the account identifier | United States |
| Sentry | Error reports | Error details, with personal data removed before they are sent | United States |
| Resend | Transactional email | The recipient email address and the message content | United States |
Changes
- Metzia publishes the first list of subprocessors.