Last updated: March 2026
DecisionOS uses the following third-party sub-processors to deliver our service. We maintain data processing agreements with each sub-processor that require equivalent data protection standards. We will provide at least 30 days' notice before adding or replacing a sub-processor, as described in our Data Processing Agreement.
| Sub-Processor | Purpose | Data Processed | Location |
|---|---|---|---|
| Anthropic | AI decision classification, confidence scoring, and natural language query processing | Decision text, surrounding context, and query text | San Francisco, USA |
| OpenAI | Text embeddings (text-embedding-3-small) for semantic search | Decision text for vector embedding generation | San Francisco, USA |
| Clerk | Authentication, session management, and user identity | Email address, name, profile picture, organization membership | San Francisco, USA |
| Railway | API and backend hosting infrastructure | All application data in transit and at rest (PostgreSQL, Redis) | San Francisco, USA |
| Vercel | Frontend hosting and static asset delivery | Browser requests, page content served to users | San Francisco, USA |
| Cohere | Search result reranking (optional, can be disabled) | Search queries and candidate result text | Toronto, Canada |
| Stripe | Payment processing and subscription billing | Billing email, payment method details, invoice history | San Francisco, USA |
If you self-host DecisionOS, the sub-processors used depend on your configuration. Anthropic and OpenAI are used only if you provide API keys. Clerk is required for authentication. Railway, Vercel, and Stripe are not used in self-hosted deployments. You are responsible for ensuring your hosting provider meets your data protection requirements.
We notify all organization administrators by email at least 30 days before adding or changing a sub-processor. You may object to a new sub-processor within 14 days of notification, as described in our Data Processing Agreement.
For questions about our sub-processors, contact privacy@decisionos.dev.