Default GDPR Security Settings

All personally identifiable information is cleaned in real-time. This includes Name, Email, Phone, Address, IP Address, Drivers License and others depending on lead type.

All sensitive fields are cleaned in real-time. This includes Social Security Number, bank account number, health-related fields and others depending on lead type.

All existing PII and sensitive data is cleared from your system. The lead ID and remaining data is still stored in your system, but the PII and sensitive fields are deleted.

All email and phone fields are hashed before being cleaned in real-time. This allows you to search for leads via email and phone and continue using email and phone as dedupe fields.

No standard email or non-SSL lead deliveries are allowed. If currently in-use, these deliveries will fail upon attempt. Only PDF emails with passwords and secure custom deliveries are allowed.

All remaining lead data is deleted from your system after 365 days. This includes hashed email and phone fields which, after deletion, can no longer be searched or used for deduping.

Calls from EU phone numbers no longer record.

Suppression files may be disabled entirely for GDPR lead types. If allowed, email & phone suppression lists must be encrypted.

Leads held in manual review will retain their PII fields for 24 hours to allow for manual approval. After 24 hours, PII fields are cleaned and the lead cannot be processed.

Export each lead in real-time before PII and sensitive field cleaning. Alternatively, you can use a delay to export leads after field cleaning.

Bulk export all existing data in your system. This can be done before the mandatory PII and sensitive field cleanup or after the cleanup is complete.

Search for contacts via email or phone to provide customers their information, update fields or clean data upon request.