📂

Publicly Available Sources

▸ Corporate & Official Business Records

• Government business registries: Companies House (UK), SEC EDGAR (US), SIRENE (France), Handelsregister (DACH), KVK (Netherlands), ASIC (Australia), and equivalent national incorporation databases
• Charity & nonprofit registries: Charity Commission for England & Wales, Office of Scottish Charity Register (OSCR), Irish Charities Regulator (licensed under Open Government Licence v3.0 / CC-BY 4.0)
• Public procurement & tender portals: Official government contract notices, vendor registration databases, and public spending records
• Regulatory filings: Annual reports, 10-K/10-Q submissions, prospectuses, and mandatory corporate disclosures

▸ Company-Controlled Digital Properties

• Corporate websites: About pages, leadership/team directories, press rooms, investor relations sections, and career/job postings
• Official press releases & newsrooms: Company-published announcements distributed via PR Newswire, Business Wire, GlobeNewswire, or hosted directly on corporate domains
• Product documentation & technical blogs: Publicly accessible knowledge bases, API documentation, and engineering updates that reveal technology stack or organizational structure

▸ Media, News & Industry Publications

• Business news outlets: Reuters, Bloomberg, Financial Times, TechCrunch, VentureBeat, and regional business journals covering funding, M&A, executive appointments, and market expansion
• Trade publications & association directories: Industry-specific media, conference speaker lists, award announcements, and membership rosters published by professional bodies
• Public earnings calls & transcripts: Verified recordings and written summaries of quarterly financial briefings

▸ Professional & Technical Signals (Public-Facing Only)

• Public professional profiles: Business-focused profile sections on platforms where users have elected to make professional information publicly visible (e.g., public LinkedIn profile URLs, company directory pages)
• Job boards & career platforms: Publicly posted openings on Indeed, Glassdoor, LinkedIn Jobs, and company career sites that signal hiring trends, team growth, or technology adoption
• Technographic indicators: Publicly detectable website technologies (via DNS records, HTTP headers, JavaScript libraries), app store listings, and open-source repository activity

▸ Open Data & Aggregated Public Resources

• Open-data initiatives: OpenCorporates, Crunchbase (public tier), and similar platforms that aggregate registry information under permissive licenses
• Geospatial & postal reference data: Office for National Statistics postcode lookups, Royal Mail address databases (licensed under Open Government Licence)
• Academic & research repositories: Publicly shared datasets from universities, think tanks, or government research bodies covering industry trends or economic indicators

Transparency Note: All public-source collection is performed via automated parsing of openly accessible HTML, RSS feeds, APIs with public endpoints, or licensed open-data feeds. We do not bypass login walls, scrape content behind authentication, or harvest data from private user profiles.

💼

Licensed Third‑Party Sources

▸ Generic Categories of Licensed Partners

• Validated B2B data aggregators: Specialized providers of firmographic, technographic, or intent data who warrant lawful acquisition and provide documentation of consent or legitimate interest basis
• Intent & behavioral signal networks: Partners who aggregate anonymized B2B research activity across publisher networks under explicit user consent frameworks (e.g., Bombora-style co-op models)
• Global compliance & suppression services: Providers of Do Not Call (DNC), Telephone Preference Service (TPS), and regional opt-out registry feeds used to suppress contacts who have exercised privacy rights
• Public records aggregators: Licensed access to consolidated government filing databases, incorporation records, or insolvency registers where direct API access is restricted or requires commercial licensing
• Contributory data networks (opt-in only): Professionals who voluntarily share their business contact information through browser extensions or platform integrations, with clear consent mechanisms and the ability to withdraw at any time

▸ Legal Safeguards Applied to All Licensed Sources

• Every third-party provider undergoes a due diligence review covering data origin, collection methodology, consent documentation, and compliance certifications (GDPR, CCPA, ISO 27001, SOC 2)
• Contracts include data processing agreements (DPAs) specifying purpose limitation, retention periods, audit rights, and breach notification obligations
• Licensed data is tagged with source attribution internally, enabling traceability for subject access requests or deletion workflows
• We maintain a vendor compliance register updated quarterly, with immediate suspension of any partner failing to meet our ethical sourcing standards

🔍

Manual Research & Verification

▸ When Manual Review Is Applied

• Executive-level contacts: C-suite, VP, and Director profiles undergo additional validation of title, reporting structure, and contact details
• Low-confidence algorithmic matches: Records where automated scoring flags inconsistencies across sources are routed to researchers for reconciliation
• High-priority accounts: Companies in target industries or geographic markets receive enhanced profiling, including verification of revenue estimates, employee counts, and technology stacks
• User-reported corrections: Feedback from customers about outdated or inaccurate records triggers immediate human review and database updates

▸ Verification Methodologies

• Multi-source cross-referencing: Researchers compare candidate data points against 3+ independent public sources before confirming accuracy
• Direct validation workflows: Email addresses undergo SMTP handshake checks; phone numbers are validated via carrier lookup and, where permitted, test-call verification
• Confidence scoring transparency: Each data point receives a reliability score (e.g., "Verified," "Likely," "Unconfirmed") based on source credibility and cross-reference consistency, visible to users at point of export
• Freshness cycles: Director-level and above contacts are re-verified on a 30-day cadence; company firmographics are refreshed quarterly or upon detection of material change signals (funding, M&A, leadership changes)

Human Oversight Principle: Manual research is supplemental—not primary—to our collection methodology. It exists to correct algorithmic edge cases, not to replace scalable, compliant automation.

🚫

What We Explicitly Do NOT Do

No Hidden Scraping of Private or Non-Public Profiles

• We do not harvest data from social media profiles set to "private," "friends-only," or otherwise restricted by user privacy settings
• We do not bypass authentication walls, CAPTCHAs, rate-limiting protections, or terms-of-service restrictions on any platform

No Data from Unauthorized Access or Breached Sources

• We do not purchase, ingest, or utilize data known or reasonably suspected to originate from security breaches, credential stuffing, or unauthorized database dumps
• We maintain automated monitoring to flag and quarantine records with provenance inconsistent with our documented sourcing methodology

No Processing Without Lawful Basis or Transparency

• For contacts within GDPR/CCPA jurisdictions, we process business contact information under the lawful basis of legitimate interest (for B2B outreach) or consent (where required), with clear notification and opt-out mechanisms
• Every individual in our database receives a notification email explaining our processing activities and providing a one-click opt-out link
• We honor all deletion and suppression requests within 30 days and maintain auditable logs of compliance actions