Technical authorization, contractual permission and a lawful basis are three different things. We keep them separate.
Connectors request only the fields needed. Rejected records are reduced to a hash. Secrets are never stored.
Detected identifiers are masked and the record is quarantined for review. Automated de-identification does not guarantee anonymity.
Suppliers choose categories, purposes, buyer types, territories and exclusivity. They can pause, revoke and request deletion of data not yet licensed.
Data processing agreements, DPIA support and data-subject request handling are part of onboarding where personal data is involved. Templates require review by counsel.