Security

Intent Leads finds the people in the US who are researching what you sell or visiting your website, and delivers them to your CRM, your systems or your AI agents, through the dashboard, API, CLI, MCP and webhooks.

What Intent Leads does

• We find people showing intent on the topics you choose.
• We find everyone in the US who fits the market you sell to (Search).
• We identify your US website visitors.
• We deliver them to you, in the dashboard, by API, CLI and MCP, and by webhook.
• We do not repackage or resell your data.

Security statement

We are committed to data privacy and integrity. This page outlines our security practices. The full list of our commitments is in the Information Security Addendum on our Compliance page.

Security checklist

Intent Leads never resells your data. Data you submit to us, such as exclusion lists, company lists and your settings, belongs to you. It isn't added to any database, repackaged or resold, ever.

Intent Leads doesn't use your data to train AI models. Lists you upload are used only to include or exclude people in your own account.

Your data is separated from everyone else's. Each organization, and each workspace inside it, has its own data, keys, users and webhooks. The database denies all direct access; only our server reads it, and every request is scoped to your organization.

Encrypted in transit, hashed where it matters. Everything runs over HTTPS. API keys are stored only as one-way hashes, and so are the emails and LinkedIn profiles in your exclusion lists.

You control access. Standard and admin API keys, one-time display, rotation and revocation; owner and member roles; workspace users who see only their own workspace; and a full audit trail of key, user and setting changes in your dashboard.

Signed webhooks. Removal and visitor webhooks are signed in the Standard Webhooks format, go only to public HTTPS endpoints, and retry until they are delivered.

Removals reach you automatically. When someone asks to be removed, we clear them in Intent Leads and tell you straight away, by email, API and webhook.

Payments are handled by our payment processor. We never see or store your full card number.

Compliance

Intent Leads is a US-only data service: we don't identify anyone in the UK, the EEA or Switzerland (see GDPR). DBEE does not currently hold a SOC 2 report or an ISO 27001 certificate. We complete customers' security questionnaires (for example SIG Lite or CAIQ) on request: write to privacy@intentleads.si.

See our Sub-processors list, our Data Protection Addendum and our Compliance page.