Operations
Supply Chain Policy
Who we depend on to keep Food Info running, and how we choose them.
Last updated:
Overview
DCPNET LTD's supply chain is short, digital, and weighted heavily towards reputable established providers. We do not manufacture, distribute, ship or warehouse physical goods.
Supplier categories
Infrastructure
- Cloud compute, database, object storage and content-delivery services.
- Email-delivery services for transactional messages (password resets, account notifications).
- Domain registration and DNS.
Software
- Open-source libraries used at build time and runtime, inventory at third-party licences.
- Identity / OAuth providers we offer as sign-in options (currently Google).
Data
- The U.S. Department of Agriculture's FoodData Central , public-domain reference data we republish in a friendlier format.
How we choose suppliers
- Security & data-protection posture, published security pages, ISO 27001 / SOC 2 attestations or equivalent, GDPR-aligned data-processing addenda.
- Jurisdiction, preference for suppliers headquartered in or operating under UK, EEA, or US jurisdictions with mature data-protection regimes.
- Operational reliability, public uptime history, incident response, transparent post-mortems.
- Ethics, published modern-slavery and supply-chain statements where the s.54 threshold applies; reasonable labour practices otherwise.
- Cost, selected last, after the above are met.
Data-processing arrangements
Where a supplier processes personal data on our behalf, we have (or rely on the supplier's published) data-processing terms that bind them to UK GDPR / EU GDPR Art. 28 obligations: processing only on documented instructions, confidentiality, security, sub-processor controls, assistance with data-subject rights, and deletion or return of data on termination.
Changes & review
Material supplier changes are reflected in the next revision of this page. The supplier list is reviewed at least once a year, and immediately after any incident affecting a supplier we use.
Raising a concern
If you have evidence that a supplier we use is acting unethically or unlawfully, we want to know. Please email