security & compliance

YOUR LIST

IS YOUR LISTduck

You're uploading your most valuable asset. Here's exactly what happens to it, in plain English, with the technical detail underneath.

TLS 1.3 in transit·AES-256 at rest·30-day auto-purge·Zero emails sent
the life of your file

UPLOADED, SCRUBBED, SHREDDEDduck

Minute 0

Encrypted before it even finishes uploading. TLS 1.3 on the wire.

🔒
At rest

AES-256, access logged and audited. Nobody opens your list casually.

The scrub

Automated pipeline only. No message is ever sent to your subscribers.

🗑
Day 30

Auto-purged, backups included. Or hit delete yourself: instant, everywhere.

NEVER SHARED

Your addresses are used for exactly one thing: verifying your addresses. They never train models, never feed "data partnerships", never leave the pipeline.

no resale · no enrichment · no third parties beyond hosting
NO EMAILS SENT

Verification happens at the protocol level: an SMTP handshake, not a message. Your subscribers will never know we exist.

SMTP handshake only · zero messages delivered
YOU HOLD DELETE

One button removes every copy immediately: working data, results, backups. No support ticket, no 60-day "processing window".

instant manual delete · backups expire with source
AUDITED ACCESS

Human access to customer data requires a reason, leaves a log entry, and gets reviewed. Boring by design, exactly how security should be.

least-privilege roles · full audit trail · quarterly review
GDPR
READY
GDPR-READY

We act as your data processor under a published Data Processing Agreement. Data subject requests (access, deletion, export) are honoured within statutory timelines.

POPIA
READY
POPIA-READY

Built with South Africa's Protection of Personal Information Act in mind from day one: lawful processing, purpose limitation, and operator agreements for SA customers.

Need the deep detail?

Read the Data Processing Agreement, or ask us for the subprocessor list.

Ask security@

CLEAN CONSCIENCE, CLEAN LISTduck

Start with a free evaluation. Delete everything after. We won't mind.