Security
How we protect your data
Selling data only works if sellers trust the process. These are the controls we apply from the first conversation to the final delivery.
No access until there's a deal
Estimates and inventory calls are based on what you tell us. We don't ask for credentials or system access to give you a number. Data is only collected once you've approved a specific buyer, use and price.
Least access, for the shortest time
- Exports are scoped to the systems, date ranges and teams named in your agreement.
- Where possible you export the data yourself, or grant read-only access that you revoke after collection.
- Only the staff preparing your dataset can reach it.
De-identification before delivery
Before anything goes to a buyer we remove or replace personal information — names, email addresses, phone numbers, account and card numbers, addresses and similar identifiers — and check samples by hand. You review a sample of the prepared data and can ask for further exclusions before delivery.
Encryption and storage
- Data is encrypted in transit (TLS).
- Raw exports are kept in isolated storage and deleted after the prepared dataset is delivered and accepted, unless your agreement says otherwise.
- Buyers receive data only through access-controlled delivery, never as a public link.
Contractual protections
Every buyer signs a license that limits use to the agreed purpose, prohibits re-identification and resale, and requires deletion at the end of the term. Public listings never show your company name or raw records. We vet every buyer before an introduction, and you approve each buyer individually.
Our own systems
Admin access is password-protected, with repeated failed sign-ins blocked. Catalog sessions expire and can be ended by an administrator at any time. We keep audit logs of sign-ins, views, downloads and requests in the buyer catalog.
Subprocessors
These providers process data on our behalf to run the site:
- Railway (United States): hosting, database and backups.
- Umami: cookieless website analytics (page views and completed forms; no personal details).
We'll update this list before adding a provider that handles seller data.
Reporting a vulnerability
If you think you've found a security issue, email us with details and steps to reproduce. Please don't access data that isn't yours. We'll acknowledge reports promptly and keep you updated.