dilisense GmbH ("dilisense", "we", "our" or "us") understand that you entrust us with personal and non-personal data, and we take our data privacy obligations seriously. This privacy policy informs you about the collected data and how the data is handled.
Effective: February 20, 2025
The following sections stipulate when data is collected, by whom it is processed and for what purpose.
When visiting our website and using the free AML search service we utilise the following data processors. While we use analytics software, this is done without collecting any personal data or personally identifiable information (PII).
1.1.1 dilisense (data controller and processor)
Company: dilisense GmbH, Weinbergstrasse 131, 8006 Zurich, Switzerland
Purpose: Ensure that all of the website's functions are available, are working as expected and are relevant for the website users.
Processed data:
Page URL: The hostname and path are collected.
IP address: The IP address itself is not logged and immediately anonymised (hashed) on our system, so that you are not identifiable.
Referrer: Information about the referrer through which you came to our website.
Events: The interactions you perform with our website (e.g. when a button is clicked).
Timestamp: The timestamp of the event.
Language: The preferred language according to your browser settings.
Operating system: The operating system which you are using.
Search text: Search text / search term / search query is included if feedback is sent via the Feedback forms.
Messages: Text that you send to us through Contact Us or Feedback forms.
Email: Email address if provided through Contact Us or Feedback forms.
Processing location: European Union
Technology: HTTP request
Retention time: 12 months (https://dilisense.com/en/privacy)
Data category: Strictly necessary for operating the website
1.1.2 Sentry (data processor)
Company: Functional Software, Inc., 45 Fremont Street, 8th Floor, San Francisco, CA 94105, United States (https://sentry.io)
Purpose: Error tracking and performance monitoring.
Processed data:
IP address: The storage of your IP address is prevented on Sentry by a setting that we activated, so that you are not identifiable.
Location: The country the device is logged in from.
Page URL: The hostname and path are collected.
Browser and version: The browser (e.g. Chrome) and the version that you are using.
Device information: The device you are using.
Referrer: The URL of the website from which you were referred to our website.
Timestamp: The timestamp of the error related event.
Operating system: The operating system which you are using.
Processing location: United States and other countries (https://sentry.io/privacy)
Technology: HTTP request
Retention time: 90 days (https://sentry.io/security)
Data category: Strictly necessary for operating the website
We enabled server-side data scrubbing on Sentry. Please refer also to https://sentry.io/trust/privacy.
1.1.3 Amazon Web Services (data processor)
Company: Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg (https://aws.amazon.com/)
Purpose: Enable the free AML search service.
Processed data:
Session ID: Anonymised ID that is generated randomly. It will be generated before the first search request is sent to our systems. It will persist until you close the browser window or tab. A new session ID will be generated again, when you visit our website and send a new search request.
Timestamp: The date and time of the request.
Search text and parameters: The text to be screened against and search parameters like fuzzy search.
Processing location: European Union
Technology: Cookie
Retention time: 12 months
Data category: Strictly necessary for operating the website
1.1.4 Google (data processor)
Company: Google Ireland Limited, Google Building Gordon House, 4 Barrow Street, Dublin D04 E5W5, Ireland (https://www.google.com/)
Purpose: Optimisation of the website and conversion tracking. We disabled remarketing on our account.
Processed data:
Page URL: The hostname and path are collected.
Conversion ID: An ID associated with the click on a Google Ads advertisement.
Events: The interactions you perform with our website (e.g. when a button is clicked).
Timestamp: The date and time of the request.
Location: The country, region or city the device is logged in from.
Processing location: European Union and other countries (https://policies.google.com/privacy)
Technology: HTTP request, Cookie
Retention time: Please refer to https://policies.google.com/privacy#inforetaining
Data category: Strictly necessary for operating the website
1.1.5 Plausible (data processor)
Company: Plausible Insights OÜ, Västriku tn 2, 50403, Tartu, Estonia (https://plausible.io/)
Purpose: Optimisation of the website.
Processed data:
Page URL: The hostname and path are collected.
Browser and version: The browser (e.g. Chrome) and the version that you are using.
Device information: The device you are using.
Referrer: The URL of the website from which you were referred to our website.
Operating system: The operating system which you are using.
Location: The country, region or city the device is logged in from.
Events: The interactions you perform with our website (e.g. when a button is clicked).
Timestamp: The timestamp of the error related event.
Processing location: European Union (https://plausible.io/data-policy)
Technology: HTTP request
Retention time: Please refer to https://plausible.io/data-policy
Data category: Strictly necessary for operating the website
When registering an account with us we utilise the following data processors to collect and / or process personal and non-personal data.
1.2.1 dilisense (data controller and processor)
Company: dilisense GmbH, Weinbergstrasse 131, 8006 Zurich, Switzerland
Purpose: Enable invoicing, provide dashboard features to clients and support marketing activities.
Processed data:
Company name
Address (street, city, zip code and country)
First name, last name and email address
Processing location: European Union
Technology: HTTP request
Retention time: Up to 10 years when payments have been made.
Data category: Strictly necessary for operating the website
1.2.2 Intuition Machines (data processor)
Company: Intuition Machines, Inc., 350 Alabama St, San Francisco, CA 94110, United States (https://www.hcaptcha.com/)
Purpose: Prevent malicious activities.
Processed data:
Mouse movements
Scroll position
Keypress events
Touch events
Gyroscope / accelerometer
Processing location: United States
Technology: HTTP request
Retention time: Please refer to https://www.hcaptcha.com/privacy
Data category: Strictly necessary for operating the website
1.2.3 Stripe (data processor)
Company: Stripe, Inc., 185 Berry Street, Suite 550, San Francisco, CA 94107, United States (https://stripe.com/)
Purpose: Enable card payments.
Processed data:
Unique ID: A unique ID assigned to the card holder.
Card number: The credit / debit card number. This number is not shared with us.
Card expiry date: The credit / debit card expiry date.
CVV: The CVV of the credit / debit card. This number is not shared with us.
This data is only collected and processed when providing card details.
Processing location: United States
Technology: HTTP request, Cookie
Retention time: Please refer to https://stripe.com/en-gb-de/privacy-center/legal
Data category: Strictly necessary for operating the website
For the paid Services "AML Screening API", "AML Database" and "Batch Processing" (see sections 4.2, 4.3 and 4.4 on https://dilisense.com/en/terms) we don't store any of the clients' search requests (including search terms and search parameters) in databases or logs. In case of a persisting issue, we will ask for your permission to enable logging in order to conduct a root cause analysis for your specific account. The log data will be removed, once the respective issue has been resolved.
For the "Ongoing Monitoring" (see section 4.7 on https://dilisense.com/en/terms) we store names of individuals and entities / companies as well as optional search parameters (e.g., date of birth) for the term of the contractual relationship. The details of the processing are stipuldated in a separate Data Processing Agreement.
When you register for an account, we collect personal data, including your email address, to manage your account and keep you informed about important matters related to our Services. We use your information in the following ways:
When submitting feedback via email, we will store your feedback and your email address. We reserve the right to contact you back in case an email address has been provided.
Should you wish to have your email address deleted, please submit your request to: privacy@dilisense.com We will then remove your record from our databases.
To support dilisense GmbH in delivering its Services, we engage third-party service providers to assist dilisense GmbH with our data processing activities. While we are the data controller and processor, the third-party service providers are sub-processors of dilisense GmbH who comply to the EU General Data Protection Regulation 2016/679.
A list of the currently engaged sub-processors (cloud service provider, file storage provider, payment processing provider, analytics provider etc.) is available on request.
If required by law, we may disclose your Personal Data.
We safely store all the Personal Data related to you in our systems according to industry best practices. Due to the nature of our business this might include storing the data in several jurisdictions. The access to this data is highly secured to avoid loss, misuse and unintended disclosure.
If you wish to exercise your rights (e.g. access or erasure of Personal Data) under any applicable law, including the EU General Data Protection Regulation (GDPR), please contact us at privacy@dilisense.com
We have a Data Processing Agreement available for the paid Services.
We reserve the right to modify this Privacy Policy at any time and it becomes effective on the date of publishing.
It is the responsibility of the website user to check the latest version of the Privacy Policy before using our Services. Your continued use of our website and its free AML search service following the posting of any changes to this Privacy Policy constitutes acceptance of those changes.
In contrast to the website users, we may send the updated version of the Privacy Policy via email to our clients who are using the paid Services (see clauses 4.2, 4.3 and 4.4 of Terms of Service) if we consider the changes as substantial. In this case we will provide a 10-day prior notice period and after such notice period, all updates shall be deemed accepted by you if not communicated otherwise within the period.
You can find the latest version of the Privacy Policy on our website: https://dilisense.com/en/privacy
All of our Services are not available for children under the age of 18. If we learn that Personal Data was collected from a child under the age of 18 or if an account was created by a child under the age of 18, we delete the data and remove the account accordingly. If you believe that such data was collected or such an account was created, please contact us at privacy@dilisense.com
We provide this Privacy Policy and all related documents only in the English language.
Should you have any questions, concerns, or requests regarding personal data, we encourage you to contact us directly. Our dedicated team is here to assist you and ensure your data protection rights are fully respected and addressed. For inquiries related to privacy and data protection, please reach out to our Data Protection Officer (DPO) or privacy team at privacy@dilisense.com
This website uses cookies to improve your online experience and to analyze the usage of this website. By continuing to use this website, you accept our cookie policy. Learn more