Processing terms

Data Processing Addendum

This addendum forms part of the Terms of Use and describes how RegistryScouts processes personal data on behalf of customers. A countersigned copy is available on request.

Last updated August 4, 2026

TLS

Encryption in transit

Row-level

Access control

United States

Hosting region

Without delay

Breach notice

Roles

Controller and processor

RegistryScouts as controller

For account data — the name, email and company you register with.

RegistryScouts as processor

For personal data you process through the service and how you use exported records; you act as controller on your documented instructions.

Scope of processing

  • Subject matter: provision of the RegistryScouts lead search, archive and export service.
  • Duration: the term of your account, plus a short period for backups and legal retention.
  • Data subjects: your authorized users, and business contacts in public registry records.
  • Data categories: account identifiers, authentication data, usage logs, business contact details.

Subprocessors

Application and database hosting

Transactional email delivery

State open-data portals and enrichment APIs

We remain responsible for their performance of these terms and will give notice of material changes on request through the Contact page.

Security measures

  • Accounts are protected by authenticated sign-in; passwords are never stored in readable form.
  • Database access is restricted by row-level security so users only reach data their role permits.
  • Data is transmitted over encrypted connections (HTTPS/TLS) and stored on managed infrastructure.
  • Privileged operations run server-side and are not exposed to the browser.

International transfers

Our infrastructure providers operate in the United States. Where a transfer mechanism is required for personal data originating in the EEA or UK, we rely on Standard Contractual Clauses, which are incorporated into this addendum by reference.

Assistance and incidents

We will assist you, taking into account the nature of processing, with data subject requests and with security and impact assessments.

We notify you without undue delay after becoming aware of a personal data breach affecting your data.

Deletion and return

On termination we delete or return personal data processed on your behalf, except where retention is required by law. Request deletion through the Contact page.

Need a countersigned DPA or a subprocessor list?

Request it here and we'll send it across.

Contact us

This page is maintained by the RegistryScouts team to answer common questions about our service. It is general information, not legal advice, and it is not an independent certification or audit.