Data Compliance & Security
Pumpfiat provides only first-party, permission-based data. Every prospect in our dataset has explicitly opted-in via one of our verified partner networks. This page summarizes our sourcing, consent standards, and security controls.
1. First-Party Data Sourcing
All records originate from fully permissioned first-party partners, including:
- Premium B2B publishers with explicit third-party consent options
- Industry exchanges & membership networks with authenticated user accounts
- Opt-in comparison platforms across finance, software, HR and more
- Verified product review ecosystems where users select “Yes — I agree to be contacted”
No scraped, harvested, or inferred email data is ever used. All partners undergo a quarterly compliance review.
2. Consent & Legal Framework
Each record includes:
- Timestamp of opt-in
- Consent method (checkbox, policy acceptance, or authenticated portal)
- Allowed contact categories
- Partner source + compliance reference ID
Our data complies with GDPR, CCPA, and CAN-SPAM requirements. Consent metadata is available in audit exports.
3. Security & Certifications
Certification target completed — Q3 2025.
Our systems follow SOC-aligned best practices including access controls, encryption at rest and in transit, intrusion monitoring, and data retention minimization.
4. Transparency & Auditability
Every customer receives a full audit export containing:
- Consent metadata
- Partner source information
- Segmentation logic used
- Deliverability readiness diagnostics