We count visits with Google Analytics cookies and Vercel Web Analytics to see which pages help readers most.

Cookie settings
The Assurance Desk
Metomic logo

Metomic review

Software product

Software for security teams that watches cloud apps and AI tools such as ChatGPT, and blocks sensitive data from leaking. You run it; it is not advice.

Relevant if you need to see and stop sensitive data going into AI tools across your apps

Price Not published
Indemnity cover Not published
How it uses AI Published
Facts last checked

Not published means we did not find it on the firm's own pages.

Metomic scores

Six scores, each 1 to 5. The evidence for each is further down.

Help when things go wrong 3/5
Qualifications of the people who do the work 4/5
What it publishes about fees 1/5
Knowledge of your sector 3/5
Independence from what it sells 4/5
Who carries the risk if the advice is wrong 1/5

What Metomic offers, and what it publishes

Metomic is software you license, not a consultancy. It scans 25 or more apps, including Slack, Google Drive, Microsoft 365 and Salesforce, and watches traffic to AI agents and browser AI tools such as ChatGPT, Claude and Cursor. A feature it calls 'AI Judge' checks data in context before it reaches an AI model.

Metomic does not publish a price. Its site shows no figures, and software marketplaces list its pricing as custom and quote-only, with no free plan. It does not publish a service level agreement. Its terms say it does not promise the service will be uninterrupted, and exclude most liability.

Metomic, a UK company, announced in June 2024 that it had completed a SOC 2 Type II security audit by Johanson Group. It names customers such as Zoopla, Oyster and Codat, and its chief executive, Bethany Ayers. We found no named security lead, and no UK government listing such as G-Cloud.

Strengths

  • SOC 2 Type II certification achieved and publicly announced in June 2024, audited by Johanson Group
  • Named enterprise customers (including Zappi, Juni, Zoopla, Ecovadis, Wrapbook, Oyster and Codat) published as case studies and logos
  • Purpose-built monitoring for AI-agent and GenAI tool data flows (e.g. ChatGPT, Claude, Cursor), not just generic SaaS DLP

Things to check

  • No SLA or uptime guarantee is published; the public Terms & Conditions state Metomic does not promise the website or service will be uninterrupted or continuously available.
  • No pricing figures are published anywhere on the vendor site; third-party marketplaces confirm this is fully custom, sales-quoted pricing with no free plan.

Common questions

Does Metomic cover AI tools, or only ordinary apps?

Both. It scans apps such as Slack, Google Drive and Microsoft 365, and separately watches AI agents and browser AI tools, using its 'AI Judge' feature for AI-specific decisions.

Does Metomic publish its prices?

No. Its site shows no figures, and software marketplaces list custom, quote-only pricing with no free plan.

Does Metomic promise uptime?

No. Its terms say it does not promise the service will be uninterrupted or always available, and exclude most liability. It publishes no service level agreement.

Evidence for each Metomic score

Show our working

Notes behind each thing to check

  • No SLA or uptime guarantee is published; the public Terms & Conditions state Metomic does not promise the website or service will be uninterrupted or continuously available. (metomic.io/terms-conditions liability section disclaims uptime promises and most liability beyond legally unavoidable obligations.)
  • No pricing figures are published anywhere on the vendor site; third-party marketplaces confirm this is fully custom, sales-quoted pricing with no free plan. (G2 and Capterra pricing listings for Metomic show contact-vendor custom pricing, consistent with the absence of a public pricing page on metomic.io.)
Six criteria, each scored 1 to 5, with the evidence for each.
CriterionScoreEvidence
Help when things go wrong 3/5 SIEM integration and audit-trail language are mentioned for compliance monitoring, but no explicit documentation of an evidence-export workflow built specifically for a regulator or ICO investigation was found.
Qualifications of the people who do the work 4/5 SOC 2 Type II is independently audited by Johanson Group and dated June 2024, and CEO Bethany Ayers is named on the vendor's about page, though no separately named CISO or technical leader was found.
What it publishes about fees 1/5 No pricing figures are published on the vendor site; third-party marketplaces confirm fully custom, quoted pricing.
Knowledge of your sector 3/5 Markets explicitly to fintech, healthcare, insurance and HR verticals with named customers in those spaces, but no distinct per-sector product modules were found.
Independence from what it sells 4/5 SOC 2 Type II is a third-party-audited certification (Johanson Group) rather than a self-declared claim, though other marketing claims such as AI Judge accuracy are not independently verified.
Who carries the risk if the advice is wrong 1/5 The Terms & Conditions explicitly disclaim uptime guarantees and most liability, and no SLA percentage or liability cap is published.

Sources for Metomic

  • Metomic Ltd is registered with Companies House and shown as an active company. (Company no. 11400246; incorporated 6 June 2018; status: Active) (Companies House, checked 17 July 2026)
  • The platform scans content across 25+ SaaS integrations (Google Drive, Slack, Notion, Microsoft 365, Salesforce, etc.) plus AI-agent and browser-based GenAI traffic, with an 'AI Judge' feature for context-aware data-loss decisions and SIEM integration for audit logging. (Product scope confirmed on vendor site) (metomic.io, checked 17 July 2026)
  • Pricing is not published on the vendor site; third-party software marketplaces confirm Metomic uses custom, sales-quoted pricing with no free tier. (Pricing disclosure: gated / quote-based) (g2.com, checked 17 July 2026)
  • Metomic completed a SOC 2 Type II audit, announced June 2024 and audited by Johanson Group, which it publishes as its primary vendor security credential; no UK-government-specific engagement (e.g. AI Safety Institute, G-Cloud) was found published. (SOC 2 Type II achieved June 2024) (metomic.io, checked 17 July 2026)

SOC 2 Type II

Exposed to the EU AI ActRegulated sectorsAfter a breach or ICO contact

Where this firm appears

If you represent this firm and something here is wrong or out of date, email hello@theassurancedesk.com with the evidence.

This is an independent editorial guide, not legal advice.