What we collect, where it lives, who can see it and how we prove it. Figures here are placeholders until Cardinal confirms them.
Cardinal uses your data to work for you and no one else. It never trains shared models, and our model providers are contracted not to train on it either.
- No training on customer data
- Zero-retention agreements with model providers
- You can export or delete everything, any time
An independent firm tests Cardinal every year. The full report is available under NDA from the trust center.
Least access
Each person sees only what they can already see in your CRM.
GDPR ready
A DPA on request, with EU hosting for teams that need it.
Your controls
Admins decide what syncs, what sends and what gets deleted.
Dedicated domains
Sends go from secondary domains, so your main domain stays clean.
Warm-up
New mailboxes ramp over three weeks before plays use them.
Daily limits
Per mailbox and per play, set by you and never exceeded.
Send us your security questionnaire. We’ll return it with the pen test summary, our DPA and a call with an engineer.
