How we use your data
We use the data you send us to process your enrichment requests. We don’t repurpose or resell those inputs, or cache them for reuse across customers. Send an email, company domain, or IP address to the relevant endpoint. We process the request and return the result to your application. Your product events, scoring rules, and CRM logic stay in your own systems. This applies to customer data submitted to this service. Your customer agreement and Data Processing Agreement (DPA) set out how we process that data on your behalf.Retention and deletion
We may temporarily keep job records so we can deliver your results and let you retrieve them later. Operational logs help us investigate issues and are automatically deleted after 180 days. Talk to our team about how long job records are kept, requests for earlier deletion, and any retention requirements for backups or legal purposes.Security controls
Encrypted data
Encryption protects data in transit and at rest. Access is restricted to authorized people and services with a business need.
Cloud infrastructure
Waterfall runs on AWS infrastructure, with monitoring and controlled access to production systems.
SOC 2 Type II
Waterfall has completed a SOC 2 Type II examination. Qualified customers can request the report under NDA.
Independent testing
Independent penetration testing and continuous control monitoring through Drata support our security program.