Data Sourcing & Compliance
We maintain transparent sourcing practices and align delivery to your compliance requirements. Here's how we operate.
Our Approach to Data
IntentSignal builds custom GTM universes using a combination of publicly available data, licensed datasets, and proprietary sourcing methods. We don't sell a static database—we build data assets tailored to your specific use case.
Every record we deliver includes:
- Sourcing trail: Where the data came from
- Confidence scoring: How reliable the field is
- Last verified date: When we last confirmed accuracy
Compliance Frameworks We Support
GDPR
We support GDPR-compliant delivery for EU contacts, including lawful basis documentation and data subject rights processes.
CCPA
We align with CCPA requirements for California residents, including opt-out mechanisms and data access requests.
LGPD
We support LGPD-compliant delivery for Brazilian contacts with appropriate legal basis and processing limitations.
How We Work With Your Compliance Team
During the install phase, we align on your specific compliance requirements:
- Scoping call: We document your internal policies, geographic restrictions, and field limitations
- Sourcing plan: We provide a written sourcing methodology for review
- Delivery controls: We apply any required suppressions, region blocks, or field omissions
- Ongoing compliance: Weekly sprints maintain compliance as your requirements evolve
Data Sources
Publicly Available Data
Professional profiles, company websites, press releases, job postings, and other publicly accessible business information.
Licensed Datasets
Data from licensed providers with appropriate contractual rights for B2B use cases.
Proprietary Research
Human-in-the-loop verification and manual research to fill gaps and verify accuracy.
AI-Assisted Processing
Machine learning to identify patterns, detect role changes, and improve field accuracy—always with human review.
What We Don't Do
- We don't scrape personal social media accounts
- We don't purchase data from sources with unclear provenance
- We don't collect or store sensitive personal data (health, financial, etc.)
- We don't deliver data that violates your stated compliance policies
Questions about compliance?
We're happy to discuss your specific requirements or provide documentation for your legal/compliance team.
compliance@intentsignal.ai →