Security & data handling

How ListPlus handles your data.

Saved lists, provider lookups, connection authorization and agent access are different parts of the service. Each has its own rules.

Customer lists

Stored encrypted in the EU (Frankfurt) for ongoing work, until you delete them.

Lookup cache

Provider results are cached briefly and expire. Separate from your saved lists.

Agent permissions

Fields and actions you configure per connection. Nothing else is exposed.

Data handling

Saved lists, lookups and connections.

Three parts of the service with different storage and access rules.

Customer lists

Your lists live in the EU, hosted on Vercel in Frankfurt, and stay available until you delete them.

Provider lookups

Enrichment and verification send the identifier being looked up, such as an email or a domain, to the provider. Results are cached briefly, separate from your lists.

Connection authorization

Pipedream handles OAuth for connected tools and holds the credentials. ListPlus never sees your CRM password.

What reaches an AI model

Never the whole list.

AI features receive only what their job needs.

AI commands
Receive your instruction and the column structure, then return a command that runs on your data in ListPlus.
AI checks
Receive only the values they check, for example the distinct city and country pairs of a list.
Your own agent
Receives what the connection exposes: visible columns, allowed sublists and permitted actions. Every call is logged.
Controls you can configure

Restrict access to your lists.

Field visibility, permitted changes and connection limits are settings, not promises.

Data visibility

Hide columns and restrict the record set through allowed sublists.

Permitted changes

Choose allowed actions, writable columns and Only fill empty.

Connection lifetime

Expiry date, rate limit per minute and a maximum of records per enrichment request.

Processing details

Request the details for your review.

Storage location, encryption, deletion, backups, external providers and the data processing agreement: write to us with your workflow and we answer with the specifics.

Ask about data handling

team@listplus.ai

Good to know.

Where are lists stored?

In the EU, hosted on Vercel in Frankfurt. CRM credentials are held by Pipedream, not by ListPlus. Both providers are SOC 2 Type 2 certified. A data processing agreement is available on request for every plan.

Does an AI model see my lists?

Never as a whole. AI commands receive your instruction and the column structure. AI checks receive only the values they check. Enrichment providers receive the identifier being enriched, such as an email or a domain.

Are lookup results and saved lists the same thing?

No. Lookup results are cached temporarily and expire. Saved lists remain available for ongoing work until you delete them.

Can an agent access the whole list?

Only if you configure the connection that way. Hide columns, restrict sublists and choose allowed actions when the task needs a narrower scope.

Can I request a DPA?

Yes. Write to team@listplus.ai with your workflow and the information your review requires.

Start with anything. End with contacts that are ready.

Try the sample list or bring your own starting point.