Data Processing Agreement
Last reviewed: 24 October 2026
When you send us lists of email addresses, you are the controller and we process them for you. This page summarises our data processing agreement and gives you a template to review and sign.
Who does what
- You decide which addresses and numbers to send and why. You are the controller.
- SimpleVerifier checks them and returns results on your instructions. We are the processor.
- For our own account, billing and analytics data about you, we act as a controller, as the privacy policy explains.
What the template says
- We process data only on your instructions, and tell you if one looks unlawful.
- People who handle the data are bound by confidentiality.
- We apply the measures on the security page, including deleting result files and job records after 7 days and cached results after 14 days. On paid plans, a finished list's risky addresses (only those marked Send with care or Check again later, with their earlier status and reason, no other columns) and its job record without the results file are kept for 14 days after the list finishes, so you can re-check them; free accounts keep them only as long as the results file.
- Our subprocessors are authorised generally; you can object to a new one.
- We tell you without undue delay after confirming a breach that affects your data.
- We help with data subject requests and delete your data within 30 days when the agreement ends.
- Audits are answered with documents first. We hold no third-party certification to hand over.
How to get a signed copy
The template is for your lawyer to review and is not legal advice. Email support@simpleverifier.com from the address on your account with your company details and we will countersign it. International transfer terms and governing law are completed at signing, because they depend on where you are.