Source API
Your chosen upstream system
SECURITY & PRIVACY
Keep the data useful.
Keep the boundaries clear.
Metricindex is built to minimise what it stores, protect credentials, and make sharing deliberately narrow.
Server-side extractionAES-256-GCM at restNo third-party ad trackers
DATA FLOW
Only the value you need
moves forward.
Credentials are held separately from the browser. Source responses are fetched and reduced server-side before a metric is shown or shared.
Encrypted credential vault
Credentials encrypted at rest
Edge fetch & extract
Server-side, coalesced refresh
Your wallet & boards
Selected values, not raw payloads
Raw upstream response remains server-sideShared viewers receive extracted values only
CONTROLS
Practical protections.
Clearly stated.
Security is a set of concrete behaviours, not a list of borrowed badges.
Request our security pack →Credential protection
Third-party credentials are encrypted at rest with AES-256-GCM. Once saved, credentials are never returned to the browser.
Identity & sessions
Passwords are hashed using PBKDF2. Session cookies are HttpOnly and Secure. Google and Microsoft sign-in use PKCE.
Narrow sharing
Collections can be shared read-only by email. Shared viewers receive extracted values only; raw upstream API payloads never reach them.
Controlled refresh
Each upstream endpoint is fetched server-side at most once per refresh interval. Concurrent requests are coalesced.
Write protection
Writes use strict same-origin checks.
Infrastructure
Metricindex runs on Cloudflare’s global edge network.
PRIVACY
Your data is yours.
We do not sell data and do not use third-party ad trackers. You can request deletion of your data. You remain in control of the connections and collections you create.
OUR COMMITMENTYour business data is not an advertising product.Data is used to provide the metricindex service you choose to use.
RESPONSIBLE DISCLOSURE
Help us protect the service.
If you believe you have identified a security issue, please share it privately so we can investigate.
security@metricindex.com ↗Security documentation
and DPA available on request.Contact us for your security review.Request security documentation
and DPA available on request.Contact us for your security review.Request security documentation