Trust Center
Last updated: 22 October 2026
What the platform is
Decisions Lab is a behavioural simulation platform. Customers describe an audience, we build personas for the individuals in it, and simulations run against those personas. All infrastructure and all subprocessors are in the United States.
Documents
Encryption and AI
Encryption and secrets
TLS 1.2 or higher for all client to server and service to service traffic. AES-256 at rest across all of our databases and object storage. Production credentials are held in a dedicated secrets manager, never in source code or version control.
AI providers
Our AI services include Vercel AI Gateway (Vercel Inc.), OpenAI (OpenAI OpCo, LLC), and AWS Bedrock (Amazon Web Services, Inc.). They do not retain prompts, and customer data is not used to train AI models.
Subprocessors
| Vendor | Purpose | Region |
|---|---|---|
 VercelVercel Inc. | Application hosting and AI inference services | United States |
 ConvexConvex, Inc. | Database services | United States |
 WorkOSWorkOS, Inc. | Authentication and user management services | United States |
 AWSAmazon Web Services, Inc. | Cloud storage and generative AI inference services | United States (Virginia) |
 OpenAIOpenAI OpCo, LLC | Generative AI and AI model inference services | United States |
 AxiomAxiom, Inc. | Log aggregation and monitoring services | United States |
 PostHogPostHog, Inc. | Analytics services | United States |
Formal assessments
Decisions Lab does not currently have a completed SOC 2 report and is not yet formally in audit. Our roadmap targets SOC 2 Type I with an initial scope focused on Security criteria.
Until then we can share, on request: a security overview, subprocessor summary, data residency summary, controller and processor position, policy summaries, and an incident reporting contact. Email security@decisionslab.io.
Security contact
security@decisionslab.io