Snapshot 184325
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Skip to content Enrow Trust Center Security, privacy and compliance Enrow finds and verifies contact data in real time. Security and privacy are built into how we collect, process and store data. This page gathers our security practices, policies and compliance documents. security@enrow.io Privacy policy Terms and conditions Data Processing Agreement Cookie policy Overview Compliance View all GDPR Compliant We process personal data under the EU General Data Protection Regulation, with a Data Processing Agreement, a designated DPO and hosting in the European Economic Area. CCPA / CPRA Compliant We follow the California Consumer Privacy Act as amended by the CPRA: we do not sell or share personal information, act as a service provider for our clients, and honour the rights to know, delete, correct and opt out. Resources View all Legal Data Processing Agreement PDF Privacy policy PDF Terms and conditions PDF Cookie policy PDF ControlsUpdated Oct 13, 2026 View all Infrastructure security Hosted in the EU Network isolation Continuous monitoring View 5 more controls Data security Encryption at rest Encryption in transit Limited retention View 5 more controls Access control Least privilege Multi-factor authentication Password hashing View 5 more controls Organizational security Confidentiality agreements Security awareness training Internal password policy View 2 more controls Incident and vendor management Breach notification within 72 hours Regulator and individual notification Subprocessor contracts View 4 more controls Privacy and data subject rights Legitimate interest assessment Requests handled in 24 business hours Permanent exclusion list View 5 more controls Legal and contractual DPA part of every contract B2B-only use of data 99% availability target View 7 more controls Security questionnaire 54 answers ready to copy into your vendor questionnaire, also as CSV. See the answers Data collected Collected Professional contact details (name, work email, phone number, job title) Company information (sector, size, location, website) LinkedIn profile URLs Never collected Sensitive data (GDPR Article 9, e.g. health information) Payment card information Subprocessors12 subprocessors View all Amazon Web Services · Hosting, infrastructure, databases, storage aws.amazon.com EU (Paris, eu-west-3) Stripe · Payment processing and billing stripe.com EU (Ireland) SigNoz · Logging, monitoring and observability signoz.io EU (European instance) HubSpot · CRM: client and prospect relationship management hubspot.com EU (France/Germany) FAQ View all Where is my data stored? All data is hosted in the European Economic Area, on Amazon Web Services servers in Paris (eu-west-3). See the subprocessors page for the services that may process data on our behalf. Do you sign a Data Processing Agreement? Yes. Our DPA applies to every customer and covers GDPR Article 28, our security measures and international transfers. How do I report a security vulnerability? Email security@enrow.io with a description and steps to reproduce. Please give us reasonable time to fix the issue before disclosing it publicly. Will I be told when you change subprocessors? Yes. Customers are notified at least 15 days before a change, and the subprocessors page is kept up to date. Updates View all Launching the Enrow Trust CenterGeneral Published October 8, 2026 One place for our security practices, policies, subprocessors and compliance documents. Read more