Decision Formula is built and operated by Latend Inc. (“Latend”, “we”, “us”). This page summarises how we protect the data our customers entrust to the platform and how to reach us about a security concern. Customers and prospects who need more detail can request our security documentation under a non-disclosure agreement at security@decisionformula.com.
Reporting a Security Issue
If you believe you have found a vulnerability in Decision Formula or any Latend service, email security@decisionformula.com. We acknowledge reports within one business day and keep you informed while we investigate and fix the issue.
Please include enough detail for us to reproduce the problem, give us a reasonable time to address it before any public disclosure, and do not access, modify or retain data that is not your own. We will not pursue legal action against research carried out in good faith under these conditions.
Our contact details are also published in machine-readable form at /.well-known/security.txt.
Where Data Is Stored and How It Is Protected
Decision Formula runs on established cloud providers. The storage location of customer data and the full list of sub-processors are set out in our customer agreements and in the security documentation available on request.
All traffic between your browser and the platform, and between the platform and its providers, is encrypted in transit with TLS. Customer data is encrypted at rest by the storage providers we use. Credentials that customers supply to connect data catalogs are additionally encrypted by the application before they are stored.
Access to the Platform
Decision Formula supports single sign-on through your organisation’s identity provider. Access is scoped to the user’s organisation; users see only the content their organisation has made available to them.
Latend staff access to production systems is limited to the small number of people who operate the platform and is granted on a least-privilege basis.
Use of AI
Decision Formula uses third-party AI models to process documents and answer questions. Our model providers are engaged under terms that prohibit using customer content to train their models. We never use your content to train models.
How We Build and Operate the Service
Every change to the platform passes automated tests and checks before it reaches production. Dependencies are monitored continuously for known vulnerabilities and updated when fixes are available. Production systems are monitored for errors and anomalous behaviour.
Incidents
We maintain an incident response process covering detection, containment, customer notification and post-incident review. If an incident affects your data, we notify you without undue delay and within the timelines set out in your agreement with us and in applicable law.
Compliance
A SOC 2 audit of Decision Formula is in progress. Infrastructure controls such as physical security, network isolation and encryption at rest are inherited from our cloud providers, each of which publishes its own independent audit reports. Details of our sub-processors and data-protection terms are set out in our customer agreements.
Contact
Security: security@decisionformula.com
Privacy: privacy@latend.com, see our Privacy Policy.