Security and compliance
Your data, your program, your terms.
What your compliance, security and procurement teams will ask, answered plainly. Written to be forwarded.
- Built on Secretary of State filings
- CAN-SPAM on every email
- Your domain never used
- MSA and DPA for review
- Questionnaire on request
01 · The data
Public filings in. Your results out.
Sourced from Secretary of State filings
Every record begins with a verified Secretary of State business filing, from offices in all 50 states and DC, compiled by MarketForce Corporation since 1984. Business filings are sourced directly from Secretary of State offices and enriched with deliverability-screened contact data.
We never take your customer data
Programs deploy to newly filed businesses. Nothing from your customer file is uploaded, matched or stored to run a program.
Response data belongs to you
Every open, click, scan and reply in your program lives in your dashboard and exports to your CRM. We don’t sell it or share it. The filings are public record; your program’s responses are not.
Business addresses only
Every contact is tied to a public filing. Registered-agent addresses are filtered out before an audience exists, so outreach reaches the business, not its agent.
02 · Sending
Compliant on every send, both channels.
Dedicated sending domains
Emails send from dedicated domains we provision and manage. Your corporate domain is never used for outbound prospecting. Committed programs receive brand-aligned sending domains.
CAN-SPAM on every email
Every email identifies the sender and includes a physical mailing address and a working unsubscribe link, per federal CAN-SPAM requirements.
Opt-outs honored immediately
Every email carries an unsubscribe link. An owner who opts out receives no further email from the program.
Mail that meets USPS standards
Addresses are CASS-certified and DPV-validated before printing. Postcards are printed to USPS mailpiece standards, sent First-Class and tracked to the mailbox by USPS scan.
03 · Agreements
Everything in writing before anything sends.
A statement of work for every program
Audience, territory, monthly cap, creative and price, approved before anything deploys. Month to month; stop before any wave.
MSA, DPA and security questionnaire
A master services agreement and data processing addendum are available for review before any program begins. Security questionnaire completed on request.
Nothing sends without approval
Your email, your postcard and your audience are submitted for approval. Changes are approved the same way before the next wave uses them.
Retention and return
Program data is kept for the duration of the agreement. How it is returned or deleted when the agreement ends is set out in the MSA.
Last reviewed September 2026. First Ad Wins is a product of MarketForce Corporation. Questions this page doesn’t answer go to the same people who run your program.
Send us your questionnaire.
Request 15 minutes and mention your security review. We’ll send the MSA and DPA for review with times for the call.