Subprocessors
Last updated 1 September 2026.
This page lists parties that may process personal data to help operate Decised, as referenced in our Privacy Policy, Terms of Service and Data Processing Agreement. We update this page when the list materially changes.
Infrastructure and operations subprocessors
Exact vendor names depend on the production deployment. Where a named provider is engaged, this page will be updated with the legal name, location and role.
| Name | Location | Service |
|---|---|---|
| Brevo (Sendinblue) | [Owner to confirm: provider data residency] | Transactional email delivery for account verification, password reset, email-change confirmation, and Workspaces (Beta) invitations when OPTIMISER_EMAIL_PROVIDER=brevo. |
| Cloudflare Turnstile | Cloudflare (global edge; [Owner to confirm subprocessing details]) | Bot and abuse prevention on registration, sign-in, and password-reset request forms. May process IP address, browser signals, and challenge metadata. Turnstile is configured not to set marketing cookies in our integration. |
| [Owner to confirm: infrastructure host] | [Owner to confirm] | Application hosting, compute, and related cloud infrastructure for production deployments. |
| [Owner to confirm: object/file storage provider] | [Owner to confirm] | Private object storage for uploads when OPTIMISER_STORAGE=s3 (for example DigitalOcean Spaces after owner confirmation). Local filesystem storage is used in development. |
Public data recipients (not Decised subprocessors)
When you run a signed-in search or report, Decised may send the minimum query needed to public or licensed APIs. Those organisations process requests under their own terms; they are listed here for transparency, not as Decised hiring them as processors of your account database.
- Companies House — Company lookup and register identity when you request a company report.
- Nomis / Office for National Statistics — Business counts, population and related official statistics for places and industries.
- police.uk — Optional street-level crime context panels (descriptive only; not used in a decision score).
- OpenStreetMap / Overpass API — Optional nearby venue context on maps.
- News search / Google News RSS — Optional local headline context (descriptive only).
- Esri / CARTO / OpenStreetMap tile providers — Map basemap tiles displayed in the browser (tile requests from your device).
Not currently used
Decised does not currently use payment processors, advertising pixels, or non-essential product-analytics vendors. If that changes, they will appear on this page and in the Cookie policy with consent where required.
Contact
Questions: [email protected].