Security & trust
Your data is handled like it's ours.
BounceBlock is built security-first. Here's how we protect every list you upload.
Encrypted everywhere
AES-256 at rest, TLS 1.3 in transit — end to end.
24-hour deletion
Uploaded files are processed and permanently deleted within 24 hours.
Never sold or shared
Verification is the only thing we ever do with your contacts.
Least-privilege access
Role-based access controls and audit logging on every action.
Compliant from day one
GDPR, CCPA and DPDP. A DPA is available to every customer.
Monitored & resilient
Continuous monitoring, rate limiting and a documented incident plan.
How your upload is handled
1
Upload
Your file is encrypted in transit (TLS 1.3).
2
Store
Held in AES-256 encrypted temporary storage.
3
Process
Verified in memory — no raw data kept longer than needed.
4
Delete
Raw file cryptographically erased within 24 hours.
Security questions? Email security@bounceblock.io. See also our sub-processors and compliance roadmap.