# Do we need a Data Processing Agreement with Metabase to comply with GDPR?
Metabase is a self-hosted application, and as such we have no access to any data on your instance. We only collect [anonymized usage stats][information-collection] if you opted-in during installation, but even in that case, we do not gather any personally-identifiable data. As such, we are not a data processor for the purposes of GDPR.
If you self-host your Metabase instance, we have no access to any of your data, and only collect [anonymized usage stats][information-collection] if you opted-in during installation. Even in that case, we do not gather any personally-identifiable data. As such, if you are self-hosting, we are not a data processor for the purposes of GDPR.
If you are a [Metabase Cloud](https://www.metabase.com/pricing/) customer, your [Terms of Service](https://www.metabase.com/license/hosting/) include a Data Processing Agreement (DPA).
