Purpose Statement

Services we Provide

RampedUp helps organizations keep their "opted-in" professional contact data updated to comply with international regulatory organizations. We also help organizations identify professionals within their own Legitimate Business Interests for business purposes.

The Type of Data we Collect

RampedUp collects publicly available information such as employer, employment dates, title of employment, location of employment, address of employer, phone number, and email address. We associate this information with the source of the data such as a social profile, corporate website, or press release.

Legitimate Business Interest Impact Assessment

Our most recent Impact Assessment found that RampedUp’s legitimate interests are not overridden by the risks to individuals’ rights and freedoms, given the professional context and safeguards. Our data is publicly available and therefore subjects would have a reasonable expectation of its use.

ESG Statement

As a cloud-based company with a relatively small physical footprint, we work to minimize our environmental impact by favoring digital workflows, efficient use of resources, and responsible business travel. We provide equal employment opportunities, prohibit discrimination and harassment, support flexible work where feasible. We prohibit bribery and corruption, maintain documented data privacy and security controls, and consider ESG-related risks as part of our broader risk management strategy.

We are committed to the ethical and responsible use of Artificial Intelligence (AI) technologies. RampedUp does not expose customer data to our AI Agents. Our primary focus is leveraging AI to extract business insights from publicly available sources. We are dedicated to using AI responsibly and with a limited scope, ensuring that our practices respect legal and ethical boundaries at all time.

Data Processing Addendum (DPA)

RampedUp's Data Processing Addendum sets out how we handle personal data when providing its services to Subscribers. It clarifies two roles: (1) for RampedUp Data (RampedUp’s global B2B contact and company data), RampedUp and the Subscriber act as independent Controllers; and (2) for Subscriber Personal Data (data that the Subscriber uploads or sends for enrichment, appending, or other processing), the Subscriber is the Controller/Business and RampedUp acts as a Processor/Service Provider.

The DPA outlines how RampedUp aligns with GDPR, CCPA, and other privacy laws while clearly allocating responsibilities between RampedUp and the Subscriber for compliance, security, and individual privacy rights.