Subprocessors
Last updated 28 September 2026.
This page lists parties that may process personal data to help operate Decised, as referenced in our Privacy Policy, Terms of Service and Data Processing Agreement. We update this page when the list materially changes.
Infrastructure and operations subprocessors
Production and staging App Platform apps run in DigitalOcean’s London region. Local development may use SQLite and filesystem storage instead of Managed Databases and Spaces.
| Name | Location | Service |
|---|---|---|
| DigitalOcean, LLC | London, United Kingdom (App Platform region lon) | Application hosting and compute for the Decised web app and API on DigitalOcean App Platform. |
| DigitalOcean Spaces | London, United Kingdom (Spaces region lon1) | Private object storage for validated CSV uploads when OPTIMISER_STORAGE=s3. Local filesystem storage is used in development. |
| DigitalOcean Managed Databases | London, United Kingdom | PostgreSQL for accounts, reports, sessions, and related application data in deployed environments. |
| Brevo (Sendinblue) | European Union (Brevo EU processing) | Transactional email delivery for account verification, password reset, email-change confirmation, and Workspaces (Beta) invitations when OPTIMISER_EMAIL_PROVIDER=brevo. |
| Cloudflare Turnstile | Cloudflare global edge | Bot and abuse prevention on registration, sign-in, and password-reset request forms. May process IP address, browser signals, and challenge metadata. Turnstile is configured not to set marketing cookies in our integration. |
Public data recipients (not Decised subprocessors)
When you run a signed-in search or report, Decised may send the minimum query needed to public or licensed APIs. Those organisations process requests under their own terms; they are listed here for transparency, not as Decised hiring them as processors of your account database.
- Companies House, Company lookup and register identity when you request a company report.
- Nomis / Office for National Statistics, Business counts, population and related official statistics for places and industries.
- police.uk, Optional street-level crime context panels (descriptive only; not used in a decision score).
- OpenStreetMap / Overpass API, Optional nearby venue context on maps.
- News search / Google News RSS, Optional local headline context (descriptive only).
- Esri / CARTO / OpenStreetMap tile providers, Map basemap tiles displayed in the browser (tile requests from your device).
Not currently used
Decised does not currently use payment processors, advertising pixels, or non-essential product-analytics vendors. If that changes, they will appear on this page and in the Cookie policy with consent where required.
Contact
Questions: [email protected].