Your data.
Our responsibility.

Yes. Enrich-CRM is 100% EU-native: all data processing and storage occurs exclusively on AWS eu-west-3 (Paris, France). No data is transferred outside the European Union. Enrich-CRM only processes publicly available professional information. A signed DPA is available for all customers, and a full sub-processor list is published at enrich-crm.com/en/sub-processors.

All data processed by Enrich-CRM — enrichment requests, results, and customer account data — is stored exclusively on AWS eu-west-3 (Paris, France). No US infrastructure is used. This eliminates Schrems II transfer risk and ensures data residency compliance for EU customers subject to GDPR.

Yes. Enrich-CRM provides a standard DPA available for signature directly from the Trust Center. The DPA covers: the nature and purpose of processing, categories of personal data, data subject rights, security measures, and sub-processor obligations. Custom DPAs are available on request for Enterprise customers.

Enrichment results are cached for up to 30 days to optimize credit usage on unchanged records. No personal data is retained beyond the enrichment cache window without explicit consent. Customer account data is retained for the subscription duration plus 90 days. All data can be deleted on request via the Trust Center.