Privacy & Security
Security, privacy, and compliance at Decisions Lab.
Decisions Lab (Almita Limited) is a Hong Kong-based company building AI-powered simulation tools for understanding human behavior.
Our platform runs on Vercel with Supabase databases, optimized for Asia-Pacific users with strong security and performance.
We use Microsoft Azure OpenAI and Google Cloud AI with zero data retention policies across global cloud infrastructure; your data is never used to train AI models.
Authentication is managed by StackAuth with OAuth support. All database access is protected by Row-Level Security (RLS) policies.
Security Highlights
Encryption
TLS 1.3 in transit, AES-256 at rest. SMTP credentials encrypted in database.
Row-Level Security
Supabase RLS policies enforce strict user-based data access controls.
Zero AI Retention
Azure OpenAI and Google Cloud AI process data with zero retention, never used for training.
PCI Compliance
Payment processing via Stripe. We never store card details.
Subprocessors
| Company | Purpose | Location |
|---|---|---|
 | Database & file storage | Singapore |
 | Authentication & user management | United States |
 | AI/LLM features (zero data retention) | United States |
 | AI/LLM features (zero data retention) | United States |
 | Payment processing | United States |
 | Product analytics | United States |
Have security questions?
Our team is here to help with any security or compliance inquiries.