Skip to content
ProspectScouter

Sales intelligence data security for teams that get reviewed

Buying a sales intelligence tool means answering two sets of questions: where the data about prospects comes from and how it is handled, and how your own team's data and access are protected. This page answers both for security reviewers, legal teams and sales leaders. It covers data sources, GDPR and CCPA handling, opt-out, the data processing agreement, SSO, SCIM, roles, the audit log, encryption, retention and how we use subprocessors.

Scout an account See pricing

Where prospect data comes from

ProspectScouter uses three kinds of sources. Company information comes from public company pages, such as the homepage, careers and jobs pages, about page, news and blog. Company events come from public filings and announcements. Contact details for business roles, such as work emails and direct lines, come from licensed data providers who supply business contact data under their own legal basis and contractual terms.

Company snapshot

Source
Public company pages
Where it appears
Scouting report

Buying signals

Source
Public company pages, public filings and announcements
Where it appears
Report, with a source link and quote

Roles to contact

Source
Inferred from company pages and your ICP
Where it appears
Report, as role titles

Work emails and direct lines

Source
Licensed data providers
Where it appears
Only when a signed-in user reveals contacts

Every buying signal links to the page it came from, so anyone can check what the scout read. The demo on the homepage shows role titles only and never names or personal data. When the scout reads a website it respects robots.txt and reads a small number of public pages.

GDPR and CCPA handling

Contact data about people in business roles is personal data under GDPR and personal information under CCPA. We process it for the purpose of business-to-business prospecting, limit it to business contact details for professional roles and do not collect sensitive categories of data. Contacts are revealed only for accounts a user decides to work, which keeps the amount of personal data in each workspace proportionate.

  • Data subjects can ask what we hold about them, ask for correction and ask for deletion.
  • California residents can exercise their CCPA rights, including the right to know and the right to delete, and we do not sell personal information as CCPA defines it.
  • Requests go to [email protected] and are answered within the time limits the law sets.

Your own use of contact data, such as sending email, remains subject to the rules that apply to your outreach, including anti-spam law in the countries you sell into. The privacy policy describes processing in full.

Opt-out is honored across the service

Anyone can ask to be removed. Send a request to [email protected] with the email address or name and company concerned. Once confirmed, the person is added to a suppression list, their contact details stop appearing in reports and exports for every workspace, and they are excluded from future reveals. Suppression is kept so that the same details do not return later from a provider.

How your workspace data is protected

Your workspace holds your ICPs, scouting boards, reports, revealed contacts, openers, CRM connections and settings. Your data stays yours. We do not use one customer's ICPs, notes, CRM data or results to build boards for another customer, and we do not sell workspace data.

  • Encryption in transit with TLS for the app, the API and CRM connections.
  • Encryption at rest for databases and backups.
  • CRM credentials stored as tokens, never as passwords, and revocable by an admin at any time.
  • API keys created and revoked by workspace admins on Scale and Enterprise.
  • Payments handled by our payment processor; we do not store full card numbers.

Retention follows the life of your account. Reports, contacts and openers stay in the workspace while your subscription is active, and admins can delete accounts, contacts and reports at any time. After an account is closed, workspace data is deleted within the period described in the privacy policy, except records we must keep for billing and legal reasons.

Compare plans

SSO, SCIM, roles and audit log

Access controls scale with the plan. Every plan includes email and password sign-in confirmed by a one-time code sent to the work email. Scale adds admin roles that decide who can manage seats, ICPs, CRM connections and exports. Enterprise adds the controls most security reviews ask for.

Email sign-in with code confirmation

Starter
Yes
Growth
Yes
Scale
Yes
Enterprise
Yes

Team board with shared access

Starter
No
Growth
Yes
Scale
Yes
Enterprise
Yes

Admin roles

Starter
No
Growth
No
Scale
Yes
Enterprise
Yes

SSO with SAML

Starter
No
Growth
No
Scale
No
Enterprise
Yes

SCIM provisioning

Starter
No
Growth
No
Scale
No
Enterprise
Yes

Custom roles

Starter
No
Growth
No
Scale
No
Enterprise
Yes

Audit log

Starter
No
Growth
No
Scale
No
Enterprise
Yes

Data processing agreement

Starter
No
Growth
No
Scale
No
Enterprise
Yes

SLA 99.9 percent

Starter
No
Growth
No
Scale
No
Enterprise
Yes

Security review package

Starter
No
Growth
No
Scale
No
Enterprise
Yes

SSO connects sign-in to your identity provider, and SCIM provisions and removes users automatically when they join or leave in your directory. The audit log records sign-ins, exports, contact reveals, CRM connections and changes to roles and settings, so admins can review who did what.

Subprocessors by category

We use a small number of subprocessors to run the service. They are described here by category. Enterprise customers receive the current list as part of the data processing agreement and are notified of changes.

  • Cloud hosting and storage, where the application and databases run.
  • Email delivery, for sign-in codes and alerts.
  • Payment processing, for subscriptions.
  • AI text processing, for reading public pages, grading and drafting openers.
  • Licensed business contact data providers, for work emails and direct lines.

Each subprocessor is bound by a written agreement that limits use of the data to providing its service to us.

Documents for your security review

Enterprise includes a data processing agreement, an SLA of 99.9 percent and a security review package that answers the standard questions about data handling, access control, encryption, incident response and subprocessors. We do not hold a SOC 2 report or an ISO 27001 certificate, and we say so plainly rather than describe controls as certified. Questions about anything on this page go to [email protected]. For a view of what other vendors offer, our sales intelligence page and the ZoomInfo alternatives comparison describe the wider market.

What to ask any sales intelligence vendor

  • Where each type of data comes from, and whether claims link to a source.
  • How opt-out works and whether suppression applies across all customers.
  • Whether your workspace data is ever used for other customers.
  • Which access controls come with which plan, including SSO, SCIM and audit log.
  • Whether a DPA is available and how subprocessor changes are notified.

FAQ

Where does ProspectScouter get its data?

Company information and buying signals come from public company pages and public filings and announcements. Work emails and direct lines come from licensed data providers. Every signal in a report links to the public page it came from.

Is ProspectScouter GDPR and CCPA compliant?

We handle personal data under GDPR and CCPA rules: business contact details only, access, correction and deletion on request, a suppression list for opt-outs, no sale of personal information and a data processing agreement on Enterprise.

How does someone opt out?

They email [email protected] with the email address or name and company concerned. Once confirmed, the details are suppressed across every workspace and excluded from future reports, exports and reveals.

Which plan includes SSO, SCIM and the audit log?

Enterprise includes SSO with SAML, SCIM provisioning, custom roles, the audit log, a data processing agreement, an SLA of 99.9 percent and the security review package. Scale includes admin roles.

Is ProspectScouter SOC 2 certified?

No. We do not hold a SOC 2 report or an ISO 27001 certificate. Enterprise customers receive a security review package that describes our controls, including encryption in transit and at rest, access control and subprocessor management.

Is our data used to train or improve results for other customers?

No. Your ICPs, notes, CRM data and results stay in your workspace and are not used to build boards for other customers or shared with them.

Review the product before the paperwork

Run the demo on a company you sell to and see exactly what a scouting report contains and where each signal comes from, with no card required.

Scout this account Compare plans