Prio Services

Privacy-respecting application metrics.

What is Prio?

Prio is a privacy-respecting system for the collection of aggregate statistics such as application metrics.

Applications such as web browsers, mobile applications, or websites generate data. Normally they would just send all of the data back to the application developer, but Prio applications split the data into two anonymized and encrypted shares and upload each share to different data share processors that do not share data with each other. This way only minimal information about the original data is revealed to either processor. Each processor then aggregates its data shares into a partial sum. The partial sums can then be combined into a final aggregation, permitting useful statistics over the whole body of data while revealing minimal information about individual participants.

To learn more about the foundations of Prio, consult the Prio research paper by Henry Corrigan-Gibbs and Dan Boneh of Stanford University.

ISRG Prio Services

ISRG can operate Prio data share processors for your organization. The software we use is open source and we have extensive experience running public benefit infrastructure. Our team also operates the Let's Encrypt certificate authority.

Because the privacy-respecting architecture of Prio depends on splitting user metrics up into two shares, you will need a second Prio data share processor server. The second data share processor can be operated by your organization or another provider.


If you would like to use ISRG's Prio services, please email

You will need to agree to the Subscriber Agreement for this service, which you can find below.

Open Source

Most of the code we use to operate ISRG Prio Services is open source.