> ## Documentation Index
> Fetch the complete documentation index at: https://devtools.waterfall.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Security and data handling

> How we protect your data, process enrichment requests, and support your security review.

## How we use your data

We use the data you send us to process your enrichment requests. We don't repurpose or resell those inputs, or cache them for reuse across customers.

Send an email, company domain, or IP address to the relevant endpoint. We process the request and return the result to your application. Your product events, scoring rules, and CRM logic stay in your own systems.

This applies to customer data submitted to this service. Your customer agreement and Data Processing Agreement (DPA) set out how we process that data on your behalf.

## Retention and deletion

We may temporarily keep job records so we can deliver your results and let you retrieve them later. Operational logs help us investigate issues and are **automatically deleted after 180 days**.

Talk to our team about how long job records are kept, requests for earlier deletion, and any retention requirements for backups or legal purposes.

## Security controls

<CardGroup cols={2}>
  <Card title="Encrypted data" icon="lock">
    Encryption protects data in transit and at rest. Access is restricted to authorized people and services with a business need.
  </Card>

  <Card title="Cloud infrastructure" icon="cloud">
    Waterfall runs on AWS infrastructure, with monitoring and controlled access to production systems.
  </Card>

  <Card title="SOC 2 Type II" icon="shield-halved">
    Waterfall has completed a SOC 2 Type II examination. Qualified customers can request the report under NDA.
  </Card>

  <Card title="Independent testing" icon="magnifying-glass">
    Independent penetration testing and continuous control monitoring through Drata support our security program.
  </Card>
</CardGroup>

## Privacy and compliance

Our privacy program supports applicable GDPR and CCPA requirements. If you're reviewing Waterfall as a vendor, ask us for our DPA and details about processing, subprocessors, and international data transfers.

For access, correction, or deletion requests, contact [privacy@waterfall.io](mailto:privacy@waterfall.io). Our [Privacy Policy](https://www.waterfall.io/privacy-policy) explains our broader data practices and your privacy rights.

## Availability

Waterfall publishes **99.99% uptime** on its [website](https://www.waterfall.io/). Check our [status page](https://status.waterfall.io/) for current availability and incident history. Your agreement defines any contractual service levels.

## Need a security review?

[Contact our team](https://www.waterfall.io/book-a-call) for the SOC 2 report, penetration-test documentation, DPA, and retention details. We share sensitive security reports through a controlled access process.