Encryption
Data is encrypted in transit with TLS and encrypted at rest with modern managed infrastructure.
Security
Built to protect your spreadsheet and data work.
Decide handles spreadsheets, financial models, PDFs, prompts, and generated outputs with practical security controls across product, infrastructure, and support.
Access control
Internal access is limited by role, protected with MFA, and reviewed around operational need.
Compliance roadmap
Decide follows GDPR principles and is actively preparing SOC 2 controls and audit readiness.
Controls
Security controls for files, models, and workflows.
Decide is designed for work where the source files matter. We keep the controls visible and grounded: encrypted transport, limited access, trusted providers, and clear reporting paths.
Your files stay private
Uploaded spreadsheets, PDFs, prompts, and outputs are processed to complete your requested work.
Protected infrastructure
Decide uses trusted AI processing, infrastructure, database, payment, and analytics providers to operate the product.
Credential protection
Passwords are hashed and salted. OAuth integrations use approved scopes and secure authorization flows.
Data control
Users can request export or deletion, and Decide does not sell, rent, or trade user data.
How we protect your workspace
TLS protection for traffic between your browser, Decide, and supported integrations
Encryption at rest for files and database records
Least-privilege access for internal systems
Multi-factor authentication for administrative access
Regular review of sensitive permissions
Secure sandboxing for code and file processing workflows
Trusted services
Decide relies on established AI processing, cloud, database, payment, and analytics services to deliver the product reliably.
AWS
DigitalOcean
MongoDB Atlas
Groq
Stripe
PostHog
Google Analytics
Report a security issue
If you believe you found a vulnerability or privacy issue, send details to our team. We review reports responsibly and prioritize issues that could affect user data.
Contact securityDoes Decide train models on my data?
Decide processes data to provide the work you request. We do not sell your data, and enterprise controls can be reviewed with our team.
Can I delete my data?
Yes. You can request data deletion or export by contacting us, and we will handle the request through our support process.
Is Decide SOC 2 certified?
Decide is preparing SOC 2 controls and audit readiness. We only describe certification as complete once it has been independently verified.