Systems and methods for securely using cloud services on on-premises data

1. A computer-implemented method comprising:

storing a plurality of first-party user records within a first network, each first-party user record of the plurality of first-party user records including one or more first-party user features, and each first-party user feature of the one or more first-party user features being generated based on an interaction between a user device and the first network;

storing a plurality of third-party user records within a cloud network, each third-party user record of the plurality of third-party user records including one or more third-party user features, and each third-party user feature of the one or more third-party user features being generated based on an interaction between a user device and a second network;

establishing a communication channel between the first network and the cloud network, the communication channel being configured to transmit a first-party user feature from the first network to the cloud network or a third-party user record from the cloud network to the first network;

detecting a communication over the communication channel, the communication originating from the first network, the communication corresponding to a request to map a first-party user record of the plurality of first-party user records to one or more third-party user records stored within the cloud network;

monitoring a number of the one or more third-party user records received from the cloud network in response to the request from the first network, the monitoring being performed at each of the first network and the cloud network;

determining that the number of the one or more third-party user records received by the first network matches the number of the one or more third-party user records transmitted by the cloud network;

generating a value based on the number of the one or more third-party user records received by the first network that matched the number of the one or more third-party user records transmitted by the cloud network; and

exchanging the value from the first network for the one or more third-party user records transmitted by the cloud network.

2. The computer-implemented method of claim 1 , further comprising:

determining whether a maximum value associated with the first network has been exceeded, the maximum value being defined by a user associated with the first network;

wherein:

when the maximum value has not been exceeded, proceeding with processing the request received by the first network; and

when the maximum value has been exceeded, denying the request to map the first-party user record to the one or more third-party user records stored within the cloud network, and transmitting a signal over the communication channel to the first network, the signal indicating that the request has been denied.

3. The computer-implemented method of claim 2 , wherein the maximum value is defined by the user accessing an interface associated with the first network, the interface enabling the user to define a configuration of one or more cloud services provided by the cloud network.

4. The computer-implemented method of claim 1 , wherein the first network is an on-premises network or a virtual private cloud network, wherein the plurality of first-party user records are generated in response to one or more user devices navigating a web page hosted by the first network.

5. The computer-implemented method of claim 1 , wherein the monitoring of the number of the one or more third-party user records received by the first network includes using a code-implemented meter executed at the first network.

6. The computer-implemented method of claim 1 , wherein the monitoring of the number of the one or more third-party user records transmitted by the cloud network includes using a code-implemented meter executed at the cloud network.

7. The computer-implemented method of claim 1 , wherein the monitoring further comprises:

detecting the number of the one or more third-party user records received by the first network;

detecting the number of the one or more third-party user records transmitted by the cloud network;

comparing the number of the one or more third-party user records received by the first network with the number of the one or more third-party user records transmitted by the cloud network; and

generating the value based on the comparison.

8. A system, comprising:

one or more processors; and

a non-transitory computer-readable storage medium containing instructions which, when executed on the one or more processors, cause the one or more processors to perform operations including:

storing a plurality of first-party user records within a first network, each first-party user record of the plurality of first-party user records including one or more first-party user features, and each first-party user feature of the one or more first-party user features being generated based on an interaction between a user device and the first network;

storing a plurality of third-party user records within a cloud network, each third-party user record of the plurality of third-party user records including one or more third-party user features, and each third-party user feature of the one or more third-party user features being generated based on an interaction between a user device and a second network;

establishing a communication channel between the first network and the cloud network, the communication channel being configured to transmit a first-party user feature from the first network to the cloud network or a third-party user record from the cloud network to the first network;

detecting a communication over the communication channel, the communication originating from the first network, the communication corresponding to a request to map a first-party user record of the plurality of first-party user records to one or more third-party user records stored within the cloud network;

monitoring a number of the one or more third-party user records received from the cloud network in response to the request from the first network, the monitoring being performed at each of the first network and the cloud network;

determining that the number of the one or more third-party user records received by the first network matches the number of the one or more third-party user records transmitted by the cloud network;

generating a value based on the number of the one or more third-party user records received by the first network that matched the number of the one or more third-party user records transmitted by the cloud network; and

exchanging the value from the first network for the one or more third-party user records transmitted by the cloud network.

9. The system of claim 8 , wherein the operations further comprise:

determining whether a maximum value associated with the first network has been exceeded, the maximum value being defined by a user associated with the first network;

wherein:

when the maximum value has not been exceeded, proceeding with processing the request received by the first network; and

when the maximum value has been exceeded, denying the request to map the first-party user record to the one or more third-party user records stored within the cloud network, and transmitting a signal over the communication channel to the first network, the signal indicating that the request has been denied.

10. The system of claim 9 , wherein the maximum value is defined by the user accessing an interface associated with the first network, the interface enabling the user to define a configuration of one or more cloud services provided by the cloud network.

11. The system of claim 8 , wherein the first network is an on-premises network or a virtual private cloud network, wherein the plurality of first-party user records are generated in response to one or more user devices navigating a web page hosted by the first network.

12. The system of claim 8 , wherein the monitoring of the number of the one or more third-party user records received by the first network includes using a code-implemented meter executed at the first network.

13. The system of claim 8 , wherein the monitoring of the number of the one or more third-party user records transmitted by the cloud network includes using a code-implemented meter executed at the cloud network.

14. The system of claim 8 , wherein the operation of monitoring further comprises:

detecting the number of the one or more third-party user records received by the first network;

detecting the number of the one or more third-party user records transmitted by the cloud network;

comparing the number of the one or more third-party user records received by the first network with the number of the one or more third-party user records transmitted by the cloud network; and

generating the value based on the comparison.

15. A computer-program product tangibly embodied in a non-transitory machine-readable storage medium, including instructions configured to cause a processing apparatus to perform operations including:

storing a plurality of first-party user records within a first network, each first-party user record of the plurality of first-party user records including one or more first-party user features, and each first-party user feature of the one or more first-party user features being generated based on an interaction between a user device and the first network;

storing a plurality of third-party user records within a cloud network, each third-party user record of the plurality of third-party user records including one or more third-party user features, and each third-party user feature of the one or more third-party user features being generated based on an interaction between a user device and a second network;

establishing a communication channel between the first network and the cloud network, the communication channel being configured to transmit a first-party user feature from the first network to the cloud network or a third-party user record from the cloud network to the first network;

detecting a communication over the communication channel, the communication originating from the first network, the communication corresponding to a request to map a first-party user record of the plurality of first-party user records to one or more third-party user records stored within the cloud network;

monitoring a number of the one or more third-party user records received from the cloud network in response to the request from the first network, the monitoring being performed at each of the first network and the cloud network;

determining that the number of the one or more third-party user records received by the first network matches the number of the one or more third-party user records transmitted by the cloud network;

generating a value based on the number of the one or more third-party user records received by the first network that matched the number of the one or more third-party user records transmitted by the cloud network; and

exchanging the value from the first network for the one or more third-party user records transmitted by the cloud network.

16. The computer-program product of claim 15 , wherein the operations further comprise:

determining whether a maximum value associated with the first network has been exceeded, the maximum value being defined by a user associated with the first network;

wherein:

when the maximum value has not been exceeded, proceeding with processing the request received by the first network; and

when the maximum value has been exceeded, denying the request to map the first-party user record to the one or more third-party user records stored within the cloud network, and transmitting a signal over the communication channel to the first network, the signal indicating that the request has been denied.

17. The computer-program product of claim 16 , wherein the maximum value is defined by the user accessing an interface associated with the first network, the interface enabling the user to define a configuration of one or more cloud services provided by the cloud network.

18. The computer-program product of claim 15 , wherein the first network is an on-premises network or a virtual private cloud network, wherein the plurality of first-party user records are generated in response to one or more user devices navigating a web page hosted by the first network.

19. The computer-program product of claim 15 , wherein the monitoring of the number of the one or more third-party user records received by the first network includes using a code-implemented meter executed at the first network.

20. The computer-program product of claim 15 , wherein the monitoring of the number of the one or more third-party user records transmitted by the cloud network includes using a code-implemented meter executed at the cloud network.