{ "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-14", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.4", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run" }, "tool": { "slug": "metriport", "name": "Metriport Medical API", "vendor": "Metriport Inc.", "vendorUrl": "https://www.metriport.com", "kind": "http-api", "category": "health-data", "summary": "Metriport's Medical API retrieves a patient's records from US health information exchanges, pharmacies and labs, converts them to deduplicated FHIR, and returns them through a REST API with webhooks. Production use requires a covered entity with an NPI.", "url": "https://www.anchorterminal.com/tools/metriport", "markdownUrl": "https://www.anchorterminal.com/tools/metriport.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/metriport.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/metriport.json", "repo": "https://github.com/metriport/metriport", "license": "Proprietary hosted service under Metriport's terms of use. The source in metriport/metriport is AGPLv3, with an enterprise directory under its own licence, and the @metriport/api-sdk package on npm is MIT", "transports": [ "http" ], "packages": [ { "registry": "npm", "name": "@metriport/api-sdk" } ], "auth": "api-key", "authNotes": "Every request sends a key in the `x-api-key` header to https://api.metriport.com, or https://api.sandbox.metriport.com in sandbox mode. Keys are generated in the developer dashboard after Metriport approves the account, up to two at once for rotation, each revocable at once and each with full access including destructive operations. No scopes or read-only key were found. Production access needs a covered entity with an NPI and a treatment purpose of use, agreed on an intro call.", "pricing": "paid", "pricingNotes": "No public prices. metriport.com has no pricing page, the terms say some services carry a fee paid by card, wire or Stripe, and production access starts with an intro call booked from the dashboard. A sandbox with example patients opens once Metriport approves the access request, and its cost is not stated (checked 2026-10-14).", "priceSummary": "Paid", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the documentation, llms.txt, the repository README or the terms (checked 2026-10-14).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 793, "npmWeekly": 28168, "pypiWeekly": null, "asOf": "2026-10-14" }, "docsUrl": "https://docs.metriport.com/medical-api/getting-started/quickstart", "llmsTxt": "https://docs.metriport.com/llms.txt", "capabilities": [ "health.records", "health.fhir", "health.consent", "health.ehr" ], "tags": [ "hosted", "health-records", "fhir", "open-source", "agpl", "typescript", "llms-txt", "webhooks", "status-page", "sales-led", "hitrust", "soc2" ], "lastRelease": "2026-09-28", "graded": true, "anchor": { "graded": true, "score": 50.1, "grade": "D", "agentReady": false, "rank": 833, "ranked": true, "rankOf": 1076, "categoryRank": 10, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 70, "maintenance": 74, "payments": 5, "reliability": 45, "schema": 65, "security": 41, "transparency": 56 }, "pending": [ "performance", "tasks" ], "breakdown": [ { "key": "reliability", "name": "Reliability", "weight": 16, "effectiveWeight": 20, "score": 45, "points": 9, "reason": "Read with the hosted lines. status.metriport.com is a Checkly dashboard that renders only with JavaScript, so we confirmed the page exists but could not read components or history (10 of 20, history unreadable 5). Rate limits are published per operation, such as 15 patient creates and 20 network queries a minute (15). No 429, Retry-After or backoff guidance was found. ETag with `If-Match` and a 412 on stale updates gives safe concurrent writes (5 of 15). No SLA was found, and the terms say the site cannot be guaranteed available (0). The Medical API is generally available, with legacy document query endpoints marked as such (10)." }, { "key": "performance", "name": "Performance", "weight": 10, "effectiveWeight": 0, "pending": true, "points": 0, "reason": "Pending. Latency is measured per call by our probes, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until the first probe window closes." }, { "key": "schema", "name": "Schema \u0026 documentation", "weight": 13, "effectiveWeight": 16.25, "score": 65, "points": 10.56, "reason": "The public repository holds a Fern API definition that the docs call the OpenAPI specification. It covers patients, facilities, FHIR, documents and webhooks, but not network query, cohorts, messages or settings, and the repository was last synced on 27 August 2026 (12 of 25). llms.txt and a Markdown copy of every page (10). Descriptions state when to use an endpoint and its traps, such as the consolidated query returning cached data and network query returning 2XX with partial failures (16 of 20). Parameters are typed with defaults in hand-written reference pages, without a schema file for most of them (10 of 15). SDK examples on each page and an RFC 7807 error format (12 of 15). Paths are versioned under /medical/v1, but no public changelog was found (5 of 15)." }, { "key": "ergonomics", "name": "Agent ergonomics", "weight": 13, "effectiveWeight": 16.25, "score": 70, "points": 11.38, "reason": "Lists take `count` up to 500, consolidated queries filter by resource type and date, a count endpoint sizes a patient's record before fetching, and summaries cut the volume (18 of 25). Cursor-style pagination with `nextPage` URLs and filters (18 of 20). Errors carry a stable `title` and an occurrence `detail` (16 of 20). No idempotency keys. ETag guards updates, and failed webhooks can be listed and retried (10 of 20). Few required fields, but the only official SDK is TypeScript (8 of 15)." }, { "key": "security", "name": "Security \u0026 auth", "weight": 14, "effectiveWeight": 17.5, "score": 41, "points": 7.18, "reason": "One kind of key, sent in the `x-api-key` header, with full access including destructive operations. Two keys can be active for rotation and each is revocable at once (15 of 30). No read-only key or scopes for the API. Dashboard roles separate clinical, billing and developer access, and patients can be opted out of HIE exchange (5 of 20). The API returns external C-CDA, PDF and image documents with no prompt-injection guidance (3 of 15). Webhook requests can be listed, and no API audit log was found (4 of 15). HITRUST r2 and SOC 2 Type 2 are claimed in the README, SECURITY.md routes reports through GitHub or email, with no security.txt or bug bounty (14 of 20)." }, { "key": "payments", "name": "Payments \u0026 pricing", "weight": 10, "effectiveWeight": 12.5, "score": 5, "points": 0.63, "reason": "Read with the hosted rubric. No x402, MPP or L402 (0). No published prices (0). A sandbox with example patients opens after Metriport approves the account, with no price or card requirement stated (5 of 20). A person signs up in the dashboard and waits for approval, and production starts with an intro call (0). The AGPLv3 source can be self-hosted, but it needs the operator's own network memberships, so the hosted API is what we graded." }, { "key": "tasks", "name": "Task success", "weight": 10, "effectiveWeight": 0, "pending": true, "points": 0, "reason": "Pending. Task success needs the category task suites run through each tool, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until then. A data provider's data-quality score is published on its listing now and becomes half of this category when it's scored." }, { "key": "maintenance", "name": "Maintenance \u0026 community", "weight": 7, "effectiveWeight": 8.75, "score": 74, "points": 6.48, "reason": "@metriport/api-sdk 18.22.0 was published on 28 September 2026 (30). Seven SDK releases since 16 July 2026 (20). No public changelog. Support is by email, and the public repository has 74 open issues that we could not read because GitHub's API rate-limited us (7 of 25). One current official SDK, in TypeScript (10 of 15). The repository has CI workflows for build, deploy and end-to-end tests (7 of 10)." }, { "key": "transparency", "name": "Transparency \u0026 trust", "weight": 7, "effectiveWeight": 8.75, "score": 56, "points": 4.9, "note": "editorial 43, provenance 69", "reason": "The source is AGPLv3, with an enterprise directory under a separate licence, while the hosted service runs under terms of use from January 2024. The public mirror lags the private repository (25 of 30). The privacy policy (February 2023) covers the website and contacts only, and no DPA, BAA or retention period for API data was found in public (8 of 30). Legacy endpoints are labelled, with no dated deprecation policy (5 of 20). Data stays in the US per the privacy policy, with no sub-processor list (5 of 20)." } ], "assessment": { "date": "2026-10-14", "basis": "public evidence", "confidence": "medium", "notes": { "ergonomics": "Lists take `count` up to 500, consolidated queries filter by resource type and date, a count endpoint sizes a patient's record before fetching, and summaries cut the volume (18 of 25). Cursor-style pagination with `nextPage` URLs and filters (18 of 20). Errors carry a stable `title` and an occurrence `detail` (16 of 20). No idempotency keys. ETag guards updates, and failed webhooks can be listed and retried (10 of 20). Few required fields, but the only official SDK is TypeScript (8 of 15).", "maintenance": "@metriport/api-sdk 18.22.0 was published on 28 September 2026 (30). Seven SDK releases since 16 July 2026 (20). No public changelog. Support is by email, and the public repository has 74 open issues that we could not read because GitHub's API rate-limited us (7 of 25). One current official SDK, in TypeScript (10 of 15). The repository has CI workflows for build, deploy and end-to-end tests (7 of 10).", "payments": "Read with the hosted rubric. No x402, MPP or L402 (0). No published prices (0). A sandbox with example patients opens after Metriport approves the account, with no price or card requirement stated (5 of 20). A person signs up in the dashboard and waits for approval, and production starts with an intro call (0). The AGPLv3 source can be self-hosted, but it needs the operator's own network memberships, so the hosted API is what we graded.", "reliability": "Read with the hosted lines. status.metriport.com is a Checkly dashboard that renders only with JavaScript, so we confirmed the page exists but could not read components or history (10 of 20, history unreadable 5). Rate limits are published per operation, such as 15 patient creates and 20 network queries a minute (15). No 429, Retry-After or backoff guidance was found. ETag with `If-Match` and a 412 on stale updates gives safe concurrent writes (5 of 15). No SLA was found, and the terms say the site cannot be guaranteed available (0). The Medical API is generally available, with legacy document query endpoints marked as such (10).", "schema": "The public repository holds a Fern API definition that the docs call the OpenAPI specification. It covers patients, facilities, FHIR, documents and webhooks, but not network query, cohorts, messages or settings, and the repository was last synced on 27 August 2026 (12 of 25). llms.txt and a Markdown copy of every page (10). Descriptions state when to use an endpoint and its traps, such as the consolidated query returning cached data and network query returning 2XX with partial failures (16 of 20). Parameters are typed with defaults in hand-written reference pages, without a schema file for most of them (10 of 15). SDK examples on each page and an RFC 7807 error format (12 of 15). Paths are versioned under /medical/v1, but no public changelog was found (5 of 15).", "security": "One kind of key, sent in the `x-api-key` header, with full access including destructive operations. Two keys can be active for rotation and each is revocable at once (15 of 30). No read-only key or scopes for the API. Dashboard roles separate clinical, billing and developer access, and patients can be opted out of HIE exchange (5 of 20). The API returns external C-CDA, PDF and image documents with no prompt-injection guidance (3 of 15). Webhook requests can be listed, and no API audit log was found (4 of 15). HITRUST r2 and SOC 2 Type 2 are claimed in the README, SECURITY.md routes reports through GitHub or email, with no security.txt or bug bounty (14 of 20).", "transparency": "The source is AGPLv3, with an enterprise directory under a separate licence, while the hosted service runs under terms of use from January 2024. The public mirror lags the private repository (25 of 30). The privacy policy (February 2023) covers the website and contacts only, and no DPA, BAA or retention period for API data was found in public (8 of 30). Legacy endpoints are labelled, with no dated deprecation policy (5 of 20). Data stays in the US per the privacy policy, with no sub-processor list (5 of 20)." }, "sources": [ { "what": "documentation index", "url": "https://docs.metriport.com/llms.txt", "seen": "2026-10-14" }, { "what": "quickstart", "url": "https://docs.metriport.com/medical-api/getting-started/quickstart.md", "seen": "2026-10-14" }, { "what": "API keys", "url": "https://docs.metriport.com/medical-api/getting-started/api-keys.md", "seen": "2026-10-14" }, { "what": "sandbox", "url": "https://docs.metriport.com/medical-api/getting-started/sandbox.md", "seen": "2026-10-14" }, { "what": "rate limits", "url": "https://docs.metriport.com/medical-api/more-info/limits.md", "seen": "2026-10-14" }, { "what": "error responses", "url": "https://docs.metriport.com/medical-api/more-info/error-responses.md", "seen": "2026-10-14" }, { "what": "start network query", "url": "https://docs.metriport.com/medical-api/api-reference/network/start-network-query.md", "seen": "2026-10-14" }, { "what": "repository, licence and Fern definition", "url": "https://github.com/metriport/metriport", "seen": "2026-10-14" }, { "what": "SDK on npm", "url": "https://registry.npmjs.org/@metriport/api-sdk", "seen": "2026-10-14" }, { "what": "terms of use", "url": "https://www.metriport.com/terms", "seen": "2026-10-14" }, { "what": "privacy policy", "url": "https://www.metriport.com/privacy-policy", "seen": "2026-10-14" }, { "what": "status page", "url": "https://status.metriport.com", "seen": "2026-10-14" } ], "openQuestions": [ "unchecked: status page history, because status.metriport.com renders only with JavaScript", "unchecked: the trust centre at security.metriport.com, which renders only with JavaScript", "unchecked: GitHub issue response times, because the GitHub API rate-limited us", "Whether the sandbox is free, and how long approval takes, is not stated" ] }, "negative": 0, "verdict": "One network query pulls a patient's records from HIEs, pharmacies and labs and returns deduplicated FHIR, with per-operation rate limits, RFC 7807 errors and AGPLv3 source. Each API key has full access with no scopes, there are no public prices, and the sandbox opens only after Metriport approves the account.", "bestFor": "US care providers and digital health companies that need a patient's network records as FHIR with webhooks.", "strengths": [ "One asynchronous network query covers HIEs, pharmacies and labs, with a webhook as each source is merged", "Consolidated FHIR output is deduplicated and coded, with PDF or HTML record summaries", "Rate limits published per operation, and `count` up to 500 per page", "AGPLv3 source on GitHub and an MIT TypeScript SDK released on 28 September 2026" ], "weaknesses": [ "Every API key has full access, including destructive operations, with no scopes", "No public prices, and the sandbox needs Metriport's approval first", "The Fern definition covers only part of the API and no public changelog was found", "The status page renders only with JavaScript, so its history could not be read" ], "agentNotes": [ "Check the `errors` array after Start Network Query. It returns 2XX even when some sources fail", "Wait for `network-query.*` webhooks or poll Get Network Query Status before reading consolidated data, which is cached from the last query", "Send the resource's `eTag` in `If-Match` on updates to avoid overwriting newer data", "Keep patient creates under 15 a minute and network queries under 20 a minute per source", "In sandbox, create patients whose first name matches a pre-defined persona to get example records" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "D", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 50.1 } ], "editorialScores": { "ergonomics": 70, "maintenance": 74, "payments": 5, "reliability": 45, "schema": 65, "security": 41, "transparency": 43 }, "provenanceScore": 69 }, "connect": { "install": "npm install --save @metriport/api-sdk", "http": "POST https://api.sandbox.metriport.com/medical/v1/patient?facilityId=\u003cfacility-id\u003e\nx-api-key: \u003capi-key\u003e\nContent-Type: application/json" }, "letme": { "capability": "https://letme.dev/health.records", "tool": "https://letme.dev/metriport" }, "notable": [ "A network query runs asynchronously across HIEs, pharmacies and labs, and emits `network-query.hie`, `network-query.pharmacy` and `network-query.lab` webhooks as each source is merged (https://docs.metriport.com/medical-api/api-reference/network/start-network-query.md)", "Start Network Query returns 2XX even when some sources fail, with failures listed in an `errors` array (https://docs.metriport.com/medical-api/api-reference/network/start-network-query.md)", "Individual Access Services let a verified patient pull their own records, with an AAL2 session header required when `purposeOfUse` is `ias` (https://docs.metriport.com/medical-api/getting-started/ias.md)", "Customers must contribute net-new clinical data back to the networks, through FHIR bundles or document uploads (https://docs.metriport.com/medical-api/getting-started/quickstart.md)", "The public repository is synced from a private one. Its history shows commits on 28 to 30 October 2025 and then a sync on 27 August 2026 (https://github.com/metriport/metriport)", "The README claims HITRUST r2, SOC 2 Type 2 and HIPAA compliance and links a trust centre at security.metriport.com, which renders only with JavaScript (https://github.com/metriport/metriport)" ], "area": "domain-data", "details": [ { "label": "Endpoints", "value": "Production https://api.metriport.com, sandbox https://api.sandbox.metriport.com, all under /medical/v1" }, { "label": "Data sources", "value": "HIE networks, pharmacies and labs through one network query, plus ADT notifications and EHR apps for athenahealth, Canvas, Elation, Healthie, Salesforce, Epic, Practice Fusion and eClinicalWorks" }, { "label": "Data out", "value": "Consolidated FHIR bundles (deduplicated, coded), C-CDA and PDF source documents, a Medical Record Summary in PDF or HTML, AI summaries, care gaps and suspected conditions" }, { "label": "Rate limits", "value": "Patient create or update 15 a minute, network query 20 a minute per source, consolidated query and create 120 a minute, send message 20 a minute" }, { "label": "Pagination", "value": "`count` up to 500 (default 50), `fromItem` and `toItem`, with `meta.nextPage` URLs" }, { "label": "Errors", "value": "RFC 7807 style bodies with `status`, `name`, `title` (stable) and `detail`" }, { "label": "Writes", "value": "ETag on resources, sent back with `If-Match`, and 412 on a stale update" }, { "label": "Sandbox", "value": "Pre-defined personas matched by first name, about six example documents each (C-CDA, FHIR, PDFs, images), test NPI 1234567893" }, { "label": "SDK", "value": "@metriport/api-sdk 18.22.0 (28 September 2026), TypeScript only, MIT" }, { "label": "Status", "value": "status.metriport.com, a Checkly dashboard that renders only with JavaScript" } ], "provenance": { "legalEntity": "Metriport Inc.", "domain": "metriport.com", "domainRegistered": "2021-02-09", "endpointOnVendorDomain": true, "terms": "https://www.metriport.com/terms", "privacy": "https://www.metriport.com/privacy-policy", "statusPage": "https://status.metriport.com", "changelog": "", "securityTxt": "none", "checked": "2026-10-14", "notes": [ "The terms of use (last updated January 2024) give a registered office at 2261 Market Street #4818, San Francisco, CA 94114, forbid access 'through automated or non-human means' and the use of 'data mining, robots, or similar data gathering and extraction tools', and say the site is not built for HIPAA-regulated use. We read them as a fact and fetched only what robots.txt allows.", "The privacy policy (last updated 21 February 2023) covers website visitors and customer contacts, says data is stored in the US, and does not mention API data or PHI.", "www.metriport.com/.well-known/security.txt returns 404. SECURITY.md in the repository sends reports to GitHub's vulnerability reporting or support@metriport.com.", "No public changelog was found in the documentation or on the website.", "RDAP gives metriport.com a registration date of 2021-02-09." ], "score": 69, "checks": [ { "check": "Legal entity named", "value": "Metriport Inc.", "points": 20, "max": 20, "state": "ok" }, { "check": "Domain age", "value": "metriport.com, registered 2021-02-09 (5 years)", "points": 11, "max": 15, "state": "part" }, { "check": "Endpoint on the vendor's domain", "value": "metriport.com", "points": 15, "max": 15, "state": "ok" }, { "check": "Terms of service", "value": "read, states 6 of the 7 things a reader expects, and has 3 clauses that cost points", "points": 3.1, "max": 10, "state": "part" }, { "check": "Privacy policy", "value": "read, states 8 of the 8 things a reader expects", "points": 10, "max": 10, "state": "ok" }, { "check": "Status page", "value": "status.metriport.com", "points": 10, "max": 10, "state": "ok" }, { "check": "Changelog", "value": "not found", "points": 0, "max": 10, "state": "no" }, { "check": "security.txt", "value": "not found", "points": 0, "max": 10, "state": "no" } ], "policies": [ { "kind": "terms", "url": "https://www.metriport.com/terms", "state": "read", "readAt": "2026-10-14", "statedDate": "2024-01-01", "words": 5127, "points": 3.1, "max": 10, "expected": [ { "key": "terms.date", "label": "Gives the date it was last updated", "found": true, "quote": "Last updated January 2024", "says": "Last updated 2024-01-01" }, { "key": "terms.law", "label": "Names the governing law or courts", "found": true, "quote": "and yourself irrevocably consent that the courts of the United States shall have exclusive jurisdiction to resolve any dispute which may arise in connection with these terms.", "says": "Disputes go to the courts of the United States" }, { "key": "terms.liability", "label": "States a limit on its liability", "found": true, "quote": "IN NO EVENT WILL WE OR OUR DIRECTORS, EMPLOYEES, OR AGENTS BE LIABLE TO YOU OR ANY THIRD PARTY FOR ANY DIRECT, INDIRECT, CONSEQUENTIAL, EXEMPLARY, INCIDENTAL, SPECIAL, OR PUNITIVE DAMAGES, INCLUDING LOST PROFIT, LOST REVENUE, LOSS OF DATA, OR OTHER DAMAGES ARISING FROM YOUR USE OF THE SITE, EVEN IF WE HAVE BEEN ADVISE…", "says": "Rules out indirect and consequential losses, with no cap named in this sentence" }, { "key": "terms.termination", "label": "Says how the agreement or account can be ended", "found": true, "quote": "If you provide any information that is untrue, inaccurate, not current, or incomplete, we have the right to suspend or terminate your account and refuse any and all current or future use of the Site (or any portion thereof)." }, { "key": "terms.changes", "label": "Says how changes to the terms are announced", "found": true, "quote": "We will alert you about any changes by updating the “Last updated” date of these Terms of Use, and you waive any right to receive specific notice of each such change.", "says": "Says it gives notice of a change" }, { "key": "terms.use", "label": "Lists what users may not do", "found": true, "quote": "The Site is not tailored to comply with industry-specific regulations (Health Insurance Portability and Accountability Act (HIPAA), Federal Information Security Management Act (FISMA), etc.), so if your interactions would be subjected to such laws, you may not use this Site." }, { "key": "terms.sla", "label": "Refers to a service level or uptime commitment", "found": false } ], "toKnow": [ { "key": "terms.automated", "label": "Restricts automated access", "found": true, "quote": "(3) you will not access the Site through automated or non-human means, whether through a bot, script or otherwise;", "costsPoints": true }, { "key": "terms.benchmark", "label": "Restricts benchmarking or competitive use", "found": true, "quote": "Use the Site as part of any effort to compete with us or otherwise use the Site and/or the Content for any revenue-generating endeavor or commercial enterprise.", "costsPoints": true }, { "key": "terms.nonotice", "label": "Says the terms or the service can change without notice", "found": true, "quote": "We will alert you about any changes by updating the “Last updated” date of these Terms of Use, and you waive any right to receive specific notice of each such change.", "costsPoints": true }, { "key": "terms.cutoff", "label": "Says access can be ended without notice or for any reason", "found": true, "quote": "WE MAY TERMINATE YOUR USE OR PARTICIPATION IN THE SITE OR DELETE ANY CONTENT OR INFORMATION THAT YOU POSTED AT ANY TIME, WITHOUT WARNING, IN OUR SOLE DISCRETION." }, { "key": "terms.arbitration", "label": "Requires arbitration or waives class actions", "found": true, "quote": "Binding Arbitration If the Parties are unable to resolve a Dispute through informal negotiations, the Dispute (except those Disputes expressly excluded below) will be finally and exclusively resolved by binding arbitration." } ], "notes": [ { "date": "2026-10-14", "text": "The terms say the Site is not built to comply with HIPAA or FISMA and must not be used where those laws apply.", "quote": "The Site is not tailored to comply with industry-specific regulations (Health Insurance Portability and Accountability Act (HIPAA), Federal Information Security Management Act (FISMA), etc.), so if your interactions would be subjected to such laws, you may not use this Site." }, { "date": "2026-10-14", "text": "Using a buying agent or purchasing agent to make purchases is prohibited.", "quote": "Use a buying agent or purchasing agent to make purchases on the Site." }, { "date": "2026-10-14", "text": "Metriport excludes liability for all damages arising from use of the Site, direct damages included.", "quote": "IN NO EVENT WILL WE OR OUR DIRECTORS, EMPLOYEES, OR AGENTS BE LIABLE TO YOU OR ANY THIRD PARTY FOR ANY DIRECT, INDIRECT, CONSEQUENTIAL, EXEMPLARY, INCIDENTAL, SPECIAL, OR PUNITIVE DAMAGES, INCLUDING LOST PROFIT, LOST REVENUE, LOSS OF DATA, OR OTHER DAMAGES ARISING FROM YOUR USE OF THE SITE" } ] }, { "kind": "privacy", "url": "https://www.metriport.com/privacy-policy", "state": "read", "readAt": "2026-10-14", "statedDate": "2023-02-21", "words": 1955, "points": 10, "max": 10, "expected": [ { "key": "privacy.date", "label": "Gives the date it was last updated", "found": true, "quote": "Last updated February 21st 2023", "says": "Last updated 2023-02-21" }, { "key": "privacy.collected", "label": "Says what personal data is collected", "found": true, "quote": "• How we collect and use (process) your personal information" }, { "key": "privacy.retention", "label": "Says how long data is kept", "found": true, "quote": "Persistent cookies last until you or your browser delete them or until they expire." }, { "key": "privacy.processors", "label": "Says who else receives the data", "found": true, "quote": "• When and how we share information with third parties" }, { "key": "privacy.sale", "label": "Says whether personal data is sold or shared for advertising", "found": true, "quote": "We do not sell personal information to anyone and only share it with third parties who are facilitating the delivery of our services.", "says": "Says it does not sell personal data" }, { "key": "privacy.rights", "label": "Says what rights people have over their data", "found": true, "quote": "You have a right to correct (rectify) the record of your personal data maintained by Metriport if it is inaccurate." }, { "key": "privacy.contact", "label": "Gives a privacy contact", "found": true, "quote": "Metriport has appointed an internal data protection officer for you to contact if you have any questions or concerns about Metriport’s personal data policies or practices.", "says": "Names a data protection officer" }, { "key": "privacy.transfers", "label": "Says where data is transferred or stored", "found": true, "quote": "Information we collect about you will be processed in the United States.", "says": "Data goes to the United States" } ], "toKnow": [ { "key": "old", "label": "Has not been updated for three years or more", "found": true, "quote": "Last updated February 21st 2023" } ], "notes": [ { "date": "2026-10-14", "text": "Metriport keeps service data after the customer relationship ends, to analyse it for its own operations and for archiving.", "quote": "The Metriport retains service data for the duration of the customer’s business relationship with the Metriport and for a period of time thereafter, to analyze the data for Metriport’s own operations, and for historical and archiving purposes associated with Metriport’s services." } ] } ] }, "pageJsonUrl": "https://www.anchorterminal.com/tools/metriport.json", "live": { "slug": "metriport", "vendorStatus": { "page": "https://status.metriport.com", "indicator": "unknown", "summary": "no machine-readable status found", "checkedAt": "2026-10-14T08:53:23.949542071Z" }, "updatedAt": "2026-10-14T08:53:23.949542071Z" } } }