Sub-processors

The companies behind the service

Ghost Metrics relies on a small, vetted set of companies to run the platform and support our customers. Here is every one, what it does, and where your data lives. We hold each to data-protection terms no weaker than our own, and we sign a Business Associate Agreement with any company that handles PHI.

Last updated June 24, 2026  ·  Referenced by our Data Processing Agreement

Looking for our software components? The open-source projects that power the product, such as the analytics engine and its libraries, are listed on our Open Source page. Those run inside our own infrastructure, not outside companies that receive your data, so they are not sub-processors and are not listed here.

The backbone

The infrastructure the entire service runs on, and where customer data is stored.

Amazon Web ServicesInfrastructure

Cloud hosting, database, file storage, encryption key management, and backups. The Ghost Metrics platform and all customer data run on AWS, in U.S. regions only.

Data
All customer data collected through the service, including PHI where applicable
Location
United States
BAA
Yes

Operating the service

Companies that may process customer data, and in some cases PHI, while we deliver and support the platform.

FreshdeskSupport

Customer support and ticketing, operated by Freshworks.

Data
Contact details and anything a customer includes in a support request, which may include PHI
Location
United States
BAA
No
Google WorkspaceProductivity

Business email, collaboration, video meetings (Meet), and meeting notes (Gemini).

Data
Business communications and meeting transcripts that may contain customer or prospect personal data
Location
United States
BAA
Yes
Better StackMonitoring

Uptime and performance monitoring of the service.

Data
Operational metadata such as endpoint URLs and IP addresses. Not customer analytics data or PHI
Location
United States
BAA
Not applicable
SevallaHosting

Hosting for staging and documentation environments.

Data
Ghost Metrics content. Customer data only if used in the staging environment
Location
United States
BAA
No

Business systems

Tools we use to run sales, billing, and engineering. These process limited business personal data, such as the contact details of prospects or signatories, but are not used to process customer analytics data or PHI. We disclose them for transparency.

HubSpotCRM

Customer relationship management and sales pipeline.

Data
Business contact details of prospects and customers, and sales communications. No PHI
Location
United States
BAA
Not applicable
StripePayments

Billing and payment processing.

Data
Billing contact and payment metadata. Card data is handled by Stripe under PCI DSS. No PHI
Location
United States
BAA
Not applicable
CalendlyScheduling

Meeting scheduling for sales and support.

Data
Name, email, and scheduling details of people who book meetings. No PHI
Location
United States
BAA
Not applicable
DocuSignE-signature

Electronic signature for agreements.

Data
Names and email addresses of contract signatories. No PHI
Location
United States
BAA
Not applicable
VantaCompliance

Security and compliance automation for our SOC 2 program.

Data
Our own security, configuration, and employee access data. No customer data or PHI
Location
United States
BAA
Not applicable
GitHubEngineering

Source code hosting and version control.

Data
Our own source code. No customer data or PHI
Location
United States
BAA
Not applicable

How we handle changes

Before a new company begins processing customer data, we give at least 30 days notice by updating this page and emailing each customer's account contact, so you can review and, if needed, object as described in the Data Processing Agreement. To follow changes to this list, email [email protected].

Data residency and BAA status reflect the agreements Ghost Metrics has executed with each company. Trademarks and company names belong to their respective owners and are listed for transparency.