Data Processing Addendum

Last updated: 2026-07-16

This Data Processing Addendum (DPA) forms part of your SourcemAI Terms of Service and applies when SourcemAI processes personal data on your behalf in connection with the service.

1. Roles

You are the Controller. SourcemAI is the Processor for the personal data you upload or sync.

2. Processing details

Categories of data: contact names, business email addresses, job titles, employer (account) names, CRM activity timestamps. Purposes: surfacing ranked account recommendations to your sales team. Duration: while your account is active plus 30 days for export.

3. Subprocessors

See the subprocessor list. We notify subscribers of new subprocessors with 30 days' notice.

4. Security

Encryption at rest and in transit, least-privilege access, audit logging, breach notification within 72 hours.

5. International transfers

Standard Contractual Clauses apply where data leaves the EEA / UK.

6. Returns & deletion

On termination, personal data is deleted within 30 days, except where retention is required by law.