Terms and Conditions

Version v5.0.0 - published 13 October 2026

Terms and Conditions

Last updated: 13 October 2026

These Terms and Conditions (the "Terms") govern your use of this website and the provision of services and products by Tech Brand Limited trading as Sales Triage (Company Number: 13495362), Suite 525, 5 The High St, Maidenhead, SL6 1JN ("Sales Triage", "we", "us", or "our"). By accessing this website, submitting an enquiry, placing an order, creating an account, accessing the Platform Services, or engaging Sales Triage to provide services, you ("the Client", "you") agree to be bound by these Terms.

If you do not accept these Terms, you must not use this website or purchase services or products from Sales Triage.

1. Background

The Client believes Sales Triage has the skills and experience to provide the required services, and Sales Triage agrees to do so under the terms of this Agreement.

These Terms apply whether the Client is an individual or representing a company. They replace all previous versions of the Sales Triage Master Services & Products Agreement, as well as any prior terms, agreements, or understandings - whether written or verbal. These Terms may be supplemented by one or more signed or agreed Service & Product Schedules, which form part of this Agreement. If there is any conflict, these Terms take precedence.

In consideration of the above and the mutual benefits and obligations set out in these Terms and any related Schedules, the Client and Sales Triage (each a "Party" and together the "Parties") agree as follows.

2. Definitions

"Services" means the commercial consulting, sales training, coaching, online learning, AI-powered coaching, and any other services provided by Sales Triage, including the Platform Services.

"Products" means any materials, tools, templates, or workbooks (digital or physical) made available for purchase by Sales Triage.

"Platform Services" means any software, SaaS platform (including the Revenue Engine platform), CRM system, contact management functionality, AI assistant, portal, digital environment, email delivery capability, email engagement tracking capability, or related technology provided by Sales Triage which stores, processes, manages, analyses, or facilitates the communication of Client data.

"AI Services" means any feature of the Services that uses artificial intelligence or machine learning to generate responses, summaries, content, or analysis, including the AI Coach.

"AI Output" means any content generated by the AI Services in response to inputs.

"Client Data" means all data, content, and personal data that the Client or its users submit to, store in, or generate through the Platform Services, including CRM records, prospect data, notes, uploaded files, and AI inputs.

"Data Protection Laws" means the UK GDPR, the Data Protection Act 2018, the Privacy and Electronic Communications Regulations 2003 (PECR), and any other applicable data protection or e-privacy legislation.

"Sales Triage Confidential Information" means any non-public information relating to Sales Triage's business, the Platform Services, or the Services, in whatever form and whether or not marked confidential, including: the design, structure, architecture, logic, workflows, data models, and non-public functionality of the Platform Services; the AI Coach's methods, prompts, and configuration; Sales Triage's sales, coaching, and commercial methodologies, frameworks, and know-how; pricing and product roadmap; and any information a reasonable person would understand to be confidential given its nature or the circumstances of disclosure. It does not include information that is or becomes public through no breach by the Client, that the Client can show it already lawfully held without a duty of confidence, or that is independently developed by the Client without use of or reference to Sales Triage Confidential Information.

"Competing Product or Service" means any software, platform, tool, programme, or service (whether provided as a product, as a service, or through consulting) that is the same as, or materially similar to, and is offered to the same or a similar market as, the Services or Platform Services, including any of the following where directed at small and medium-sized enterprises or their sales functions:

  • AI-assisted or AI-powered sales coaching, sales training, or sales enablement;
  • customer relationship management (CRM), contact, prospect, opportunity, or pipeline management functionality;
  • the design, definition, documentation, or delivery of a sales process or sales methodology;
  • the design or advising on the structure, organisation, roles, or operating model of a sales function or sales team;
  • prospecting, lead discovery, or data-enrichment functionality of the kind provided by the Platform Services; or
  • AI-generated sales analysis, meeting or call summarisation, or coaching insight of the kind provided by the Platform Services.

A product or service is a Competing Product or Service whether it replicates the Services or Platform Services in whole or in part, and whether offered on their own or bundled with other offerings.

3. Website Use

The content of this website is provided for general information and marketing purposes only.

You agree to use this website lawfully and not in any way that causes, or may cause, damage to the website or impairment of its availability or accessibility.

You must not use this website to copy, store, host, transmit, send, use, publish, or distribute any material which consists of (or is linked to) any spyware, computer virus, trojan horse, worm, keystroke logger, rootkit, or other malicious computer software.

Unauthorised use of this website may give rise to a claim for damages and/or be a criminal offence.

4. Services Provided

The Client agrees to engage Sales Triage to provide the Services, which may include commercial consulting, sales training, coaching, online learning programmes, AI-powered coaching, and the Platform Services.

The Services will also include any other consulting tasks which the Parties may agree on. Sales Triage agrees to provide such Services to the Client.

The specifics of Services or Products to be provided will be outlined in a separate Services Schedule or emailed as a booking confirmation, where applicable.

Platform Services may include CRM and contact management functionality, opportunity and task management, reporting, AI assistance, outbound email delivery, and email engagement tracking (including open and click tracking) where the Client enables such functionality.

5. Term of Agreement

The term of this Agreement (the "Term") will begin on the date the Client accepts these Terms (including by placing an order, confirming a booking, creating an account, accessing the Platform Services, or signing a Services Schedule) and will remain in full force and effect indefinitely until terminated as provided in this Agreement.

In the event that either Party wishes to terminate this Agreement or a specific Services Schedule, that Party will be required to provide 30 days' written notice, by email, to the other Party.

Where a Services Schedule states a minimum term, notice to terminate that Schedule may be given at any time but will not take effect before the end of that minimum term. Where notice is given during the minimum term, the Schedule ends on the later of the end of the minimum term and the expiry of the notice period. After the minimum term, the Schedule continues until terminated on 30 days' written notice in accordance with this clause. Fees paid in respect of a minimum term are not refundable.

Where Platform Services are used, the Client will have a period of 30 days following termination to request export of its Client Data.

After this period, Sales Triage reserves the right to permanently delete all Client Data.

Data exports will be provided in a reasonable format at Sales Triage's discretion.

The Client shall pay for all Services rendered up to the termination date, including any non-cancellable expenses incurred. Sales Triage shall return or securely delete any Client Data upon termination, as requested and subject to clause 5.3.

In the event that either Party breaches a material provision under this Agreement, the non-defaulting Party may terminate this Agreement immediately and without notice, and require the defaulting Party to indemnify the non-defaulting Party against all reasonable damages.

This Agreement or a Services Schedule may be terminated at any time by mutual agreement of the Parties.

Except as otherwise provided in this Agreement, the obligation of Sales Triage will end upon the termination of this Agreement.

6. Performance

The Parties agree to do everything necessary to ensure that the terms of this Agreement take effect.

Sales Triage provides Services and advice in good faith but makes no guarantees regarding specific outcomes. The Client is solely responsible for any decisions and actions taken based on the Services. Where coaching is included, the Client understands that it is not therapy or counselling, and that progress depends on their own participation and implementation of agreed actions.

The Client assumes all responsibilities for the actions/inactions of its employees or associated parties.

The Client agrees to attend scheduled coaching sessions punctually, participate actively, and take ownership of their own progress.

7. Currency and VAT

Except as otherwise provided in this Agreement, all monetary amounts referred to in this Agreement are in GBP.

All fees, charges and prices stated in this Agreement, in any Services Schedule, and on the Platform Services are exclusive of VAT. Where VAT is chargeable, it is added at the prevailing rate.

8. Payment

Invoices submitted by Sales Triage to the Client are due within 14 days of the date of the invoice, or within such other period as is agreed in writing with the Client (the Client's "payment terms").

Sales Triage is responsible for all income tax liabilities, National Insurance contributions, and any other form of taxation or social security costs relating to its own business and to the remuneration and benefits of its own personnel.

Where Platform Services or other Services are provided on a subscription basis, fees are payable in advance in accordance with the relevant Services Schedule or order, and recur until cancelled in accordance with clause 5.

Sales Triage may vary the fees and charges set out in a Services Schedule on not less than 30 days' written notice to the Client. Where the Client does not wish to accept a varied fee, the Client may terminate the relevant Services Schedule by written notice given before the varied fee takes effect, and the existing fee will continue to apply until that termination takes effect. Apart from a change agreed in writing by both Parties, this is the only way in which the fees set out in a Services Schedule may be varied.

All Product sales are final unless otherwise agreed in writing. Orders cannot be cancelled or refunded once access to a digital product has been provided or a physical product has been dispatched. The Client acknowledges that placing an order constitutes acceptance of these Terms.

Digital products will be delivered via download link or email. Physical products will be shipped to the Client's nominated address. Sales Triage is not responsible for courier delays or incorrect addresses. Risk passes to the Client upon dispatch.

Where the Client is a consumer purchasing digital content online, the Client acknowledges that statutory cancellation rights are lost once download or streaming of digital content begins with the Client's consent, and the Client consents to immediate supply on that basis.

Sales Triage grants access under a Services Schedule on receipt of the first invoice under that Schedule in full, and confirms by email that access has been provided. The date that email is sent is the access date for that Schedule. Sales Triage is under no obligation to begin delivery, or to reserve capacity, before that invoice is paid in full.

All recurring fees are invoiced in advance of the service period to which they relate. A Service, Services Schedule, seat or plan is not deployed or activated until the invoice for it has been paid in full. Recurring invoices for Services already in place are issued in advance of the service period by not less than the number of days of the Client's payment terms, so that payment falls due on or before the first day of that period.

The Client's billing date is the day of the month of its first access date. It applies to the Client and to every Services Schedule, seat and plan the Client holds, and one invoice is issued for each billing month covering everything then in force. Where a Services Schedule begins part way through a billing month, the first invoice under it covers the remainder of that month pro-rata together with the first full month, and recurring invoices follow on the billing date thereafter. Where a seat or plan is added part way through a billing month, it is charged pro-rata for the remainder of that month and invoiced at the time it is added, and it is included in the recurring invoice from the next billing date. Where a seat or plan is removed, the removal takes effect from the next billing date and the remainder of the paid month is not refunded.

9. Reimbursement of Travel and Expenses

Sales Triage will be reimbursed from time to time for reasonable and necessary expenses incurred by Sales Triage in connection with providing the Services.

Accommodation. Where possible, accommodation will be booked at a Premier Inn or a hotel of similar standard on a flexible rate that allows cancellation.

Train Travel. Train travel will be booked in First Class to ensure a productive working environment during transit.

Air Travel.

  • For flights under three (3) hours, travel will be booked in Economy or Premium Economy (or an equivalent class).
  • For flights exceeding three (3) hours, travel will be booked in Business Class (or an equivalent class).

Ground Transportation.

  • Taxis will be used, within reason, for travel between Sales Triage's home, office, travel hubs, the Client's office, and the hotel.
  • Where available, Uber or similar ride-hailing services will be used as a preference to manage costs effectively.

Meal Expenses (Overnight Stays). When overnight stays are required, meals will be expensed within the following approximate guidelines:

  • Breakfast: GBP 15
  • Lunch: GBP 15
  • Dinner: GBP 30

A 20% premium may apply for meals when staying in Central London due to increased costs.

All expenses will be supported by receipts and submitted in accordance with agreed invoicing procedures.

10. Session Cancellation Policy

Any coaching session, consulting engagement, training session, or workshop cancelled by the Client with less than 7 days' notice may be forfeited or charged in full. Sales Triage will make reasonable efforts to reschedule but cannot guarantee availability beyond the original booking.

11. Interest on Late Payments

Interest payable on any overdue amounts under this Agreement is charged at a rate of 25% per annum or at the maximum rate enforceable under applicable legislation, whichever is lower.

12. Suspension of Services

Where an invoice remains unpaid at its due date, Sales Triage may suspend the Services to which it relates, and any other Services provided to the Client, until payment is received in full. Suspension shall not relieve the Client of its payment obligations, and all agreed fees and schedules will continue to apply during the period of suspension.

Where the Services under a Services Schedule have not yet commenced and the initial invoice under that Schedule remains unpaid thirty days after issue, Sales Triage may withdraw that Schedule by written notice, in which case no fees are payable under it.

Sales Triage reserves the right to suspend access to Platform Services where the Client breaches acceptable use (clause 13), creates a security risk, or exposes Sales Triage to legal or regulatory liability.

Where Platform Services include email delivery or email engagement tracking features, the Client shall not use such features in a manner that breaches PECR, the UK GDPR, CAN-SPAM, CASL, or any equivalent marketing, e-privacy, or anti-spam legislation applicable to the recipient. Sales Triage reserves the right to suspend access immediately where it reasonably believes such use creates legal, regulatory, reputational, or operational risk.

13. Acceptable Use

The Client and its users must not use the Services or Platform Services to:

  • break any applicable law or regulation, or infringe the rights of any third party;
  • send unlawful, unsolicited, deceptive, or bulk communications, or any communication in breach of PECR or applicable anti-spam law;
  • upload, store, or transmit unlawful, infringing, defamatory, obscene, or malicious content, or any malware;
  • store or process special category personal data or criminal-offence data unless expressly agreed in writing with Sales Triage;
  • import, scrape, or use personal data (including prospect data) without a lawful basis to do so;
  • attempt to gain unauthorised access to, interfere with, or disrupt the Services or any other user's data;
  • reverse engineer, copy, resell, or sublicense the Platform Services except as permitted by law;
  • use the AI Services to generate unlawful, harmful, or infringing content, or in breach of the AI provider's usage policies;
  • circumvent usage limits, security features, or compliance mechanisms.

The Client is responsible for all activity under its accounts and for ensuring its users comply with this clause.

Sales Triage may investigate suspected breaches and may suspend or terminate access in accordance with clauses 5 and 12.

14. Platform Services - Availability and Provision

The Platform Services are provided on an "as is" and "as available" basis.

Sales Triage does not guarantee that the Platform Services will be uninterrupted, timely, secure, or error-free, and does not warrant the results that may be obtained from their use.

Sales Triage may, without liability, suspend or restrict access to perform maintenance, apply updates, address security issues, or for other operational reasons, and will use reasonable efforts to give advance notice of planned downtime where practicable.

Unless a specific service level is expressly agreed in writing in a Services Schedule, no uptime or availability commitment applies.

Sales Triage may modify, add, or remove features of the Platform Services from time to time, provided it does not materially degrade core functionality the Client is paying for.

15. AI Services and AI-Generated Content

The AI Services use one or more third-party AI providers (which may include providers such as OpenAI and Anthropic, and which may change from time to time) to generate AI Output from inputs submitted by the Client and its users.

The Client acknowledges that AI Output:

  • is generated automatically and may be inaccurate, incomplete, out of date, biased, or misleading ("hallucinations");
  • does not constitute professional, legal, financial, tax, or other regulated advice;
  • must be independently reviewed and verified by the Client before being relied upon or acted on.

Sales Triage gives no warranty as to the accuracy, fitness for purpose, originality, or non-infringement of any AI Output, and is not liable for decisions made or actions taken in reliance on AI Output.

The Client is responsible for ensuring that inputs it submits to the AI Services are lawful, that it has the right to submit them, and that it does not submit special category data or data it is not entitled to share.

As between the Parties, and to the extent permitted by the relevant AI provider's terms, the Client owns its inputs and the AI Output generated from them, and grants Sales Triage a licence to process them to provide and improve the Services. Sales Triage does not claim ownership of Client inputs.

Inputs submitted to AI providers via their business/API services are not used to train the providers' models. A provider may retain inputs and outputs for a limited period for abuse monitoring before deletion, and indexed content may persist until deleted, as described in our Privacy Policy.

16. Email Delivery and Engagement Tracking

Where Platform Services include email delivery or email engagement tracking functionality, the Client acknowledges that personal data processed may include:

  • email addresses;
  • email delivery status information;
  • email open events and timestamps;
  • email click events and timestamps;
  • clicked URLs;
  • hashed or truncated IP address information;
  • browser, device, and user-agent information;
  • opt-out, objection, suppression, or tracking-preference records.

Where the Client enables email delivery or engagement tracking, the Client warrants that:

  • it has identified and documented an appropriate lawful basis, including legitimate interests supported by a Legitimate Interests Assessment where required, or valid consent where required by applicable law;
  • its privacy notice accurately describes the processing;
  • any privacy notice URL supplied to the Platform Services accurately reflects such processing;
  • it remains responsible for determining whether tracking and sending is lawful in each relevant jurisdiction.

Sales Triage may automatically insert compliance disclosures, tracking notices, preference-management links, objection mechanisms, tracking pixels, click-tracking mechanisms, and related compliance functionality into communications generated, managed, or sent through the Platform Services.

The Client shall not remove, suppress, alter, obscure, bypass, disable, or otherwise interfere with:

  • any "Why am I receiving this?" disclosure;
  • any unsubscribe or objection mechanism;
  • any privacy notice link;
  • any tracking-preference mechanism;
  • any compliance-related footer or disclosure inserted by the Platform Services.

The Client shall honour and maintain any objection, suppression, unsubscribe, or tracking-preference request recorded through the Platform Services and shall not knowingly circumvent, override, or disregard such preferences through subsequent use of the Platform Services.

Emails are sent through each user's own connected mailbox (Google/Gmail or Microsoft/Outlook) via an OAuth connection authorised by the user. The user's use of that mailbox remains subject to the mailbox provider's own terms, and the user is responsible for complying with them and with any sending limits or policies the provider imposes.

17. Confidentiality

Sales Triage will keep confidential all proprietary or sensitive information relating to the Client's business, including financial, operational, or client data, whether disclosed verbally or in writing, before or after the Agreement. This duty continues beyond termination unless disclosure is required by law.

Sales Triage will not, during the Term of this Agreement, use introductions made by the Client with the purpose or effect of deliberately excluding the Client from an opportunity in which the Client has a legitimate commercial interest, unless otherwise agreed in writing.

Sales Triage may engage in future work with individuals, companies, or organisations introduced by or encountered through the Client, provided that:

  • such engagement does not involve the misuse or disclosure of the Client's Confidential Information; and
  • such engagement does not intentionally cause material harm to the Client's commercial relationships.

Sales Triage agrees not to solicit the employment of the Client's employees during the Term and for twelve (12) months thereafter.

Where Sales Triage believes the Client or another person is at serious risk of harm, they may disclose relevant information to appropriate authorities.

Sales Triage may reference working with the Client beyond the Term of this Agreement in conversations, documentation, websites, or digital channels, including social media. The Client permits reasonable use of their name, logo, and website address but may request removal in writing, by email.

Client Confidentiality Obligations. The Client shall, during the Term and at all times after it:

  • keep all Sales Triage Confidential Information confidential and use it only for the purpose of receiving and using the Services in accordance with this Agreement;
  • not disclose Sales Triage Confidential Information to any third party without Sales Triage's prior written consent, except to those of its personnel who need it for that purpose and who are bound by confidentiality obligations no less protective than these;
  • not use Sales Triage Confidential Information to design, develop, train, or operate any Competing Product or Service;
  • apply at least the same degree of care to Sales Triage Confidential Information as it applies to its own confidential information, and no less than a reasonable degree of care.

The Client may disclose Sales Triage Confidential Information to the extent required by law, regulation, or a court or regulator of competent jurisdiction, provided that (where lawful to do so) it gives Sales Triage reasonable prior notice so that Sales Triage may seek protective measures.

This obligation survives termination or expiry of this Agreement.

18. Recording

The recording of any coaching or training sessions by the Client, whether audio, video, or screen capture, is strictly prohibited unless Sales Triage has given express verbal permission at the start of the specific session. Any such permission applies only to that session and must not be assumed for future sessions.

By accepting this Agreement, the Client acknowledges and agrees that Sales Triage may use secure third-party services, including but not limited to transcription, recording, and AI-based analysis tools, to capture, transcribe, and process meeting and call content for the purposes of delivering the Services - including producing summaries and follow-up actions, supporting coaching, and improving the quality of the Services. Where Sales Triage provides a meeting notetaker or call recording feature, it may join or record a meeting or call and generate a recording and transcript. All such use will remain subject to the confidentiality and data protection obligations set out in this Agreement. Sales Triage will not share transcripts or outputs with any third party other than approved sub-processors providing such tools, and will ensure that those sub-processors are bound by equivalent confidentiality and data protection obligations.

This may include, but is not limited to, cloud hosting providers, AI processing tools, analytics platforms, and infrastructure services.

Where the Client uses a meeting notetaker or call recording feature within the Platform Services to record its own meetings or calls, the Client is the Data Controller for the personal data of the people it records and is responsible for informing those attendees, for having a lawful basis, and for handling their objections and requests. Sales Triage acts as the Data Processor for that recording and transcript under the DPA appended to these Terms. A recording or transcript captures what all participants say, including individuals who are not registered users of the Platform Services.

19. Ownership of Intellectual Property

All intellectual property developed or provided under this Agreement, including slides, templates, diagrams, and supporting materials, remains the sole property of Sales Triage. The Client receives a non-exclusive, non-transferable licence for internal use only. Materials may not be copied, shared, adapted, or rebranded without prior written consent. Branding may not be removed from documents without permission.

As between the Parties, the Client retains ownership of Client Data and its AI inputs and outputs, and grants Sales Triage a non-exclusive licence to host, process, and use them to provide, secure, and improve the Services.

Any login credentials or access to online courses, platforms, or digital resources provided by Sales Triage are for the sole use of the named Client or its authorised users as agreed in writing. The Client must not share, transfer, or allow multiple users to access materials using a single login without Sales Triage's prior written consent. Unauthorised sharing constitutes a breach of this Agreement.

Products provided digitally or physically are licensed for the Client's individual use only. Redistribution, copying, or sharing of these products, in whole or in part, is prohibited without prior written consent from Sales Triage. Unless expressly agreed in writing, products may not be used for group training, copied for team-wide use, or distributed within the Client's organisation beyond the named user.

All content on this website - including text, graphics, logos, images, and software - is the property of Sales Triage or its licensors and is protected by applicable intellectual property laws. You may not reproduce, distribute, modify, or create derivative works from any website content without our prior written consent.

No Reverse Engineering or Competing Product. Except to the extent that this restriction cannot lawfully be excluded under applicable law (including the Client's non-excludable rights under the Copyright, Designs and Patents Act 1988 to observe, study, or test the functioning of the Platform Services to determine the ideas and principles underlying them, or to decompile for permitted interoperability purposes), the Client shall not, and shall not permit or assist any third party to:

  • reverse engineer, decompile, disassemble, or otherwise attempt to derive the source code, underlying structure, algorithms, or logic of the Platform Services;
  • access or use the Platform Services in order to build, or to assist any person to build, a Competing Product or Service;
  • copy, replicate, or reproduce any feature, function, design, or workflow of the Platform Services for the purpose of developing a Competing Product or Service; or
  • use the Platform Services to benchmark against, or to gather information for the development of, a Competing Product or Service.

Nothing in this clause prevents the Client from independently developing a product or service without use of or reference to Sales Triage Confidential Information.

20. Data Protection

Each Party agrees to comply with applicable Data Protection Laws.

Where the Client uses Platform Services, the Client acts as the Data Controller and Sales Triage acts as a Data Processor in respect of the Client Data. The Data Processing Agreement (DPA) appended to these Terms governs that processing and forms part of this Agreement.

The Client is solely responsible for:

  • ensuring it has a lawful basis for processing personal data;
  • obtaining any required consents;
  • ensuring the accuracy and legality of the data entered;
  • maintaining an up-to-date privacy notice describing the processing activities carried out using the Platform Services;
  • ensuring that any privacy notice URL configured within the Platform Services remains accurate, accessible, and legally compliant;
  • responding to data subject requests relating to the Client Data, with Sales Triage's assistance as set out in the DPA.

Sales Triage will process personal data only as necessary to provide the Services and in accordance with this Agreement and the DPA.

The Client agrees not to store or process:

  • unlawful or infringing data;
  • special category personal data (including health, biometric, or criminal data) unless expressly agreed in writing;
  • any data that would impose additional regulatory obligations on Sales Triage.

The Client is solely responsible for the content and legality of all data entered into the Platform Services.

Sales Triage will implement reasonable technical and organisational measures to protect Client Data. The Client acknowledges that no system can be guaranteed to be completely secure and Sales Triage does not warrant that the Platform Services will be free from unauthorised access, interruption, or data breach.

21. Backups and Data Loss

The Client is responsible for maintaining independent backups of all data entered into the Platform Services.

Sales Triage may perform routine backups for operational purposes but does not guarantee the availability, completeness, or restoration of such backups.

Subject to clause 31 (Limitation of Liability) and except to the extent required by law, Sales Triage shall not be liable for any loss, corruption, or deletion of data, including data loss caused by third-party providers.

22. Third-Party Integrations and Providers

The Services may integrate with, or rely on, third-party providers and platforms (including AI providers, payment processors, hosting, email delivery, data enrichment, and CRM integrations).

The Client's use of any third-party integration may be subject to that third party's own terms and privacy policy, and the Client is responsible for complying with them.

Where the Client connects or imports data from third-party tools (including prospecting and enrichment providers such as Apollo or Lusha), the Client warrants it has the right and lawful basis to do so. Sales Triage does not verify the lawfulness of data the Client imports.

Sales Triage shall not be liable for failures, outages, changes, or data loss caused by third-party providers outside its reasonable control.

23. Return of Property

Upon the expiry or termination of this Agreement, Sales Triage will return to the Client any property, documentation, records, or Confidential Information which is the property of the Client, subject to the data export and deletion provisions in clause 5 and the DPA.

24. Capacity / Independent Contractor

In providing the Services under this Agreement it is expressly agreed that Sales Triage is acting as an independent supplier and not as an employee or agent of the Client. The Parties acknowledge that this Agreement does not create a partnership or joint venture between them, and is exclusively a contract for services.

25. Right of Substitution

Except as otherwise provided in this Agreement, Sales Triage may, at its absolute discretion, engage a third-party sub-contractor to perform some or all of its obligations under this Agreement.

In the event that Sales Triage engages a sub-contractor:

  • Sales Triage will pay the sub-contractor for its services and the compensation will remain payable by the Client to Sales Triage.
  • For the purposes of the indemnification clause of this Agreement, the sub-contractor is an agent of Sales Triage.

The Client agrees not to solicit, engage, or employ any subcontractor, employee, or associate of Sales Triage for 12 months after the Term, unless agreed in writing.

26. Autonomy

Except as otherwise provided in this Agreement, Sales Triage will have full control over working time, methods, and decision making in relation to provision of the Services in accordance with the Agreement. Sales Triage will work autonomously and not at the direction of the Client. However, Sales Triage will be responsive to the reasonable needs and concerns of the Client.

27. Equipment

Except as otherwise provided in this Agreement, Sales Triage will provide at its own expense any and all equipment, software, materials and any other supplies necessary to deliver the Services in accordance with the Agreement.

28. No Exclusivity

The Parties acknowledge that this Agreement is non-exclusive and that either Party will be free, during and after the Term, to engage or contract with third parties for the provision of services similar to the Services.

29. Notice

All notices, requests, demands or other communications required or permitted by the terms of this Agreement will be given in writing by email or in writing, and delivered to the Parties at the addresses documented in the relevant Services Schedule or booking confirmation, or to such other address as either Party may from time to time notify the other. Notices to Sales Triage should be sent to the contact email provided on this website.

30. Indemnification

Except to the extent paid in settlement from any applicable insurance policies, and to the extent permitted by applicable law, each Party agrees to indemnify and hold harmless the other Party, and its respective directors, shareholders, affiliates, officers, agents, employees, and permitted successors and assigns against any and all claims, losses, damages, liabilities, penalties, expenses, reasonable legal fees and costs which result from or arise out of any act or omission of the indemnifying party in connection with this Agreement.

Without limiting clause 30.1, the Client shall indemnify Sales Triage against any claims, losses, or penalties arising from: (a) Client Data or the Client's use of the Platform Services in breach of this Agreement or Data Protection Laws; (b) the Client's failure to have a lawful basis for processing or marketing; or (c) the Client's import or use of unlawfully sourced personal data.

This indemnification will survive the termination of this Agreement.

31. Limitation of Liability

Nothing in this Agreement limits or excludes either Party's liability for death or personal injury caused by negligence, for fraud or fraudulent misrepresentation, or for any liability that cannot be excluded or limited by law.

Subject to clause 31.1, neither Party shall be liable, whether in contract, tort (including negligence), or otherwise, for any loss of profits, loss of business, loss of anticipated savings, loss of goodwill, or any indirect or consequential loss.

Subject to clauses 31.1 and 31.2, and except in cases of fraud or wilful misconduct, Sales Triage's total aggregate liability under or in connection with this Agreement shall not exceed the total fees paid in relation to the associated Services Schedule by the Client in the 6 months preceding the event giving rise to liability. This limitation expressly includes any loss of data, loss of business, loss of profits, or interruption of operations arising from use of the Platform Services.

32. Modification of Agreement

Changes to a signed Services Schedule require the written agreement of both Parties. Sales Triage reserves the right to update these Terms from time to time by posting an updated version on this website; continued use of the website, the Platform Services, or ongoing engagement of Services following such posting constitutes acceptance of the updated Terms.

Where these Terms are updated, the fees, charges and scope of Services set out in a Services Schedule already in force are not varied by that update.

33. Time of the Essence

Time is of the essence in this Agreement in relation to payment obligations. No extension or variation of this Agreement will operate as a waiver of this provision.

34. Assignment

Neither Party may assign or otherwise transfer its rights or obligations under this Agreement without the prior written consent of the other Party, save that Sales Triage may assign this Agreement to an affiliate or in connection with a merger, acquisition, or sale of its business, on notice to the Client.

35. Entire Agreement

It is agreed that there is no representation, warranty, collateral agreement or condition affecting this Agreement except as expressly provided in this Agreement.

36. Contract Hierarchy and Scope of Schedule

A Services Schedule may set out the scope of the Services and Products to be provided, the fees and charges payable and how they are invoiced, delivery dates and timelines, the minimum term and notice period applicable to that Schedule, the obligations of the Client on which delivery of those Services depends, and any figure, rate or period which this Agreement provides for a Services Schedule to state.

A Services Schedule may not amend, override, restrict or expand this Agreement in any other respect. Any provision of a Services Schedule which purports to do so is void and of no effect, whether or not the Services Schedule has been signed by both Parties. In the event of any conflict or inconsistency between this Agreement and a Services Schedule, this Agreement prevails.

37. Enurement

This Agreement will enure to the benefit of and be binding on the Parties and their respective heirs, executors, administrators and permitted successors and assigns.

38. Titles / Headings

Headings are inserted for the convenience of the Parties only and are not to be considered when interpreting this Agreement.

39. Interpretation

Words in the singular mean and include the plural and vice versa.

40. Force Majeure

Neither Party shall be liable for any failure or delay in performance due to events beyond its reasonable control, including but not limited to acts of God, war, pandemic, strike, or government restrictions.

41. Governing Law

This Agreement will be governed by and construed in accordance with the laws of England and Wales.

42. Dispute Resolution

The Parties shall attempt in good faith to resolve any dispute arising out of or relating to this Agreement through negotiations. If the dispute is not resolved within 30 days, the Parties agree to attempt mediation before resorting to litigation. The courts of England and Wales shall have exclusive jurisdiction.

43. Severability

In the event that any of the provisions of this Agreement are held to be invalid or unenforceable in whole or in part, all other provisions will nevertheless continue to be valid and enforceable with the invalid or unenforceable parts severed from the remainder of this Agreement.

44. Waiver

The waiver by either Party of a breach, default, delay or omission of any of the provisions of this Agreement by the other Party will not be construed as a waiver of any subsequent breach of the same or other provisions.

45. Acceptance of These Terms

By placing an order, booking a session, signing a Services Schedule, creating an account, accessing Platform Services, or otherwise engaging Sales Triage to provide Services or Products, the Client confirms acceptance of these Terms and agrees to be bound by them. Electronic acceptance (including acceptance by email, online form, or confirmation click-through) shall have the same legal effect as a wet-ink signature.

Where these Terms are accepted on behalf of an organisation, the person accepting warrants that they have authority to bind that organisation. Where acceptance is recorded from a user account held by an organisation, Sales Triage may rely on that acceptance as the acceptance of that organisation.

46. Referral Rewards

Where Sales Triage offers a referral reward, the following applies.

A reward is earned only when a person or organisation introduced by the Client registers through the Client's own referral link or invite and subsequently becomes a paying client of Sales Triage. Registering, starting a trial, or a trial ending without payment does not earn a reward.

A reward takes the form of a credit to the value of one month of one Revenue Engine seat at the then-current list price. The value is fixed at the point the reward is earned, and a later change to the list price does not alter a reward already earned.

The credit is applied to the Client's next invoice that is still outstanding at the time the credit is raised. Where no amount is outstanding, the credit is held as a credit balance on the Client's account. A credit has no cash value, is not transferable, and will not be paid out in money.

One reward is earned per referred organisation. An organisation that already holds, or has previously held, a subscription or an account with Sales Triage is not a referral. A person may not refer themselves, their own organisation, or another person within their own organisation.

A reward may be withdrawn where the referred organisation's payment is refunded, reversed, charged back, or found to have been obtained by misuse of the referral scheme, or where the referral did not meet the conditions above.

Sales Triage may change or end the referral scheme, and may change the value or form of the reward, at any time. A reward already earned before such a change will be honoured.

47. Platform Seats and Calling Plans

Seats on the Platform Services are named users. The Client may add or remove seats through the Revenue Engine platform. Seats added part way through a billing month are charged pro-rata and invoiced at the time they are added in accordance with clause 8, and Sales Triage may withhold activation of a seat until that invoice is paid. Seats are charged at the rate stated in the relevant Services Schedule or, where that Schedule states no rate, at the rate published on the platform at the time the seat is added.

Calling and messaging allowances are provided for each calendar month, cover the destinations stated in the relevant Services Schedule, and do not carry over to the following month. Unused allowance has no cash value and is not refundable. Calls and messages to destinations other than those stated in the Schedule require an additional pack.

Additional calling packs are purchased through the Revenue Engine platform at the prices published there at the time of purchase, and are paid at the point of purchase.

48. Outreach Programmes

Where a Services Schedule includes an outreach programme, the following applies. "Dedicated SDR" means the sales development representative allocated by Sales Triage to the Client under that Schedule.

Outreach begins once the Client's blueprint is signed off, the prospecting playbooks are built and agreed with the Client, and the first target organisations have been identified from them. Sales Triage will confirm the outreach start date by email. The capacity, ramp-up period, meetings objective and minimum term stated in the Schedule all run from the outreach start date. Recurring fees run from the access date in accordance with clause 8.

No calling, preparation or prospecting work is carried out before the blueprint is signed off, because the playbooks, the target list and the calling strategy are all derived from it. Where the outreach start date has not occurred within six months of the access date, it is treated as having occurred on the last day of that six-month period.

The ramp-up period stated in the Schedule begins on the outreach start date, and is the period in which the target list, messaging and objection handling are tuned against live market response. The meetings objective stated in the Schedule applies from the end of the ramp-up period. Meetings delivered during the ramp-up period are ahead of the objective rather than the standard.

The capacity stated in the Schedule is the basis on which the fee is calculated and on which the Client's delivery slot is reserved. It is not a number of hours Sales Triage is obliged to work in any given month, and Sales Triage's commitment is to the activity set out in the Schedule. Where the Client wishes to increase the activity carried out, additional capacity is available by agreement at an additional monthly fee. Sales Triage will not carry out materially more activity than the resourced capacity without the Client's prior agreement to the revised fee.

From time to time meetings arise that are useful and impactful but do not fit the usual qualification standard, typically partnership opportunities, or opportunities that do not exhibit a symptom of a pain the Client solves in the way the Schedule expects. Sales Triage and the Client will discuss each one as it arises and agree whether to take the meeting. Where the Client declines, nothing follows and the meeting does not count towards the objective. Where the Client agrees to take the meeting, it is measured in the same way as any other meeting under the Schedule.

Delivery of an outreach programme depends on the Client providing the following, and Sales Triage is not responsible for any shortfall in the Services caused by a failure to provide them: a mailbox on the Client's own domain for the dedicated SDR, connected to the Platform Services, so that outreach is sent from that domain; sign-off of the Client's blueprint; agreement of the prospecting playbooks; at least two named points of contact with access to the Platform Services and their calendars connected, so that meetings are booked into the correct diaries; and responses to the dedicated SDR's questions on objections within two working days.

An outreach programme requires the Client to hold a Services Schedule for Platform Services carrying seats for at least the named points of contact required above. While an outreach Schedule is in force, the Client may not reduce its Platform Services below that level.

49. Success Fee

Where a Services Schedule states a success fee rate, the following applies. Where a Services Schedule states no success fee rate, no success fee is payable under it.

The Client shall pay Sales Triage the success fee rate stated in the Schedule, applied to the first-year value of any deal the Client signs with a Qualifying Organisation, where that deal is signed within the success fee period stated in the Schedule. That period runs from the date of Sales Triage's first contact with the organisation.

A Qualifying Organisation is an organisation which the Revenue Engine platform records as having been first contacted by Sales Triage under that Schedule, and with which a two-way conversation took place. An organisation is not a Qualifying Organisation where the Client added it to the Client's exclusion list in the Revenue Engine platform before Sales Triage's first contact with it.

Where a meeting with a partner organisation is accepted under clause 48, the success fee also applies to the first-year value of any deal the Client signs with a customer introduced to the Client by that organisation, where that deal is signed within the success fee period measured from Sales Triage's first contact with the partner organisation.

The Client shall notify Sales Triage in writing within ten working days of signing a qualifying deal, stating the organisation, the date of signature and the first-year value of the deal. Sales Triage may ask the Client to confirm in writing whether any qualifying deal has been signed, not more than once in any calendar quarter, and the Client shall respond within ten working days of the request. Both obligations apply whether or not the Schedule is still in force, and continue for the success fee period.

The success fee is paid in twelve equal monthly instalments. The first three instalments fall due together at the end of the third month following signature of the deal, and the remaining nine are paid monthly thereafter. Where the Client's customer pays the first year in full in advance, the whole success fee falls due at the end of that third month.

The instalment arrangement is offered on the basis that the Client notifies Sales Triage of a qualifying deal within the period stated above. Where the Client does not do so, or responds to a confirmation request stating that no qualifying deal has been signed when one has, Sales Triage may invoice the whole of the success fee for that deal, payable in full in accordance with clause 8 and without instalments.

This clause survives termination of the relevant Services Schedule and of this Agreement.

50. Contact

If you have any questions about these Terms, please contact Sales Triage at the contact details published on this website.


Data Processing Agreement

This Data Processing Agreement ("DPA") forms part of the Terms and applies where Sales Triage processes personal data on behalf of the Client in connection with the Platform Services. It is intended to satisfy Article 28 of the UK GDPR. Where the Client requires a separately countersigned DPA, Sales Triage will provide one on request; in the absence of that, this DPA applies.

1. Roles and Scope

The Client is the Controller and Sales Triage is the Processor in respect of the Client Data described in Annex B.

Sales Triage shall process Client Data only on the documented instructions of the Client (including those set out in the Terms and as configured through the Platform Services), unless required to do otherwise by law, in which case it will inform the Client unless legally prohibited.

2. Processor Obligations

Sales Triage shall:

  • process Client Data only for the purposes of providing the Platform Services and as instructed;
  • ensure persons authorised to process Client Data are bound by confidentiality;
  • implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk (Article 32 UK GDPR), including those summarised in Annex C;
  • not engage another processor (subprocessor) except as permitted by clause 3 of this DPA;
  • taking into account the nature of the processing, assist the Client by appropriate measures, insofar as possible, in responding to data subject requests;
  • assist the Client in ensuring compliance with its obligations regarding security, breach notification, data protection impact assessments, and prior consultation (Articles 32-36 UK GDPR);
  • notify the Client without undue delay after becoming aware of a personal data breach affecting Client Data;
  • at the Client's choice, delete or return Client Data at the end of the provision of the Services, subject to the 30-day export window in clause 5 of the Terms, and delete existing copies unless storage is required by law;
  • make available to the Client information necessary to demonstrate compliance with Article 28, and allow for and contribute to audits, including inspections, conducted by the Client or an auditor it mandates, subject to reasonable notice, confidentiality, and frequency limits.

3. Subprocessors

The Client provides general authorisation for Sales Triage to engage the subprocessors listed in Annex A.

Sales Triage shall impose data protection obligations on each subprocessor that are no less protective than those in this DPA, and remains liable for its subprocessors' acts and omissions.

Sales Triage shall inform the Client of any intended addition or replacement of subprocessors, giving the Client the opportunity to object on reasonable data protection grounds.

4. International Transfers

Where processing involves a transfer of Client Data outside the UK, Sales Triage shall ensure an appropriate transfer mechanism is in place (e.g. UK adequacy regulations, the IDTA, or the UK Addendum to the EU SCCs), together with a transfer risk assessment where appropriate.

5. Client Obligations

The Client warrants that it has a lawful basis for the processing, has provided required privacy information to data subjects, and that its instructions comply with Data Protection Laws.

The Client is responsible for the accuracy, quality, and legality of the Client Data and the means by which it acquired it.

6. Liability

The liability provisions of the Terms (clause 31) apply to this DPA.

Annex A - Subprocessors

The current list of subprocessors is maintained in code and shown below. It is the same list published on our Privacy Policy and Security pages, so the three cannot drift apart.

Anthropic

Their role
A processor: they handle data only on our instructions, under a data processing agreement with us.
What we use them for
Powers our AI features - drafting emails, analysing meeting transcripts, and generating playbooks and reports.
What we share with them
The content you put into AI features, which can include messages, meeting transcripts, and CRM notes.
Where they process data
United States
How transfers out of the UK are safeguarded
UK Addendum to the EU SCCs, incorporated at Schedule 3 of the Anthropic DPA.
Data processing agreement
View the agreement

Apollo

Their role
A processor: they handle data only on our instructions, under a data processing agreement with us.
What we use them for
An alternative provider for discovering and enriching the prospects you choose to research.
What we share with them
Contact identifiers such as name, company, and work email used to retrieve professional information.
Where they process data
United States
How transfers out of the UK are safeguarded
UK Transfer Addendum (the ICO IDTA of 21 March 2022), named in the Apollo DPA, which is incorporated into their terms of service.
Data processing agreement
View the agreement

Bunny.net

Their role
A processor: they handle data only on our instructions, under a data processing agreement with us.
What we use them for
Hosts and streams the video messages you record in the platform.
What we share with them
The video and audio you record, along with video titles and thumbnail images.
Where they process data
United Kingdom and European Union (storage in London and Frankfurt, with EU-only delivery routing).
How transfers out of the UK are safeguarded
Storage is pinned to London and Frankfurt. The UK leg is domestic, and the Frankfurt leg is a transfer to the EEA, which the UK adequacy regulations cover, so no IDTA or UK Addendum is needed. That matters because the signed DPA names no instrument of its own: it instead treats the account's region settings as our documented instruction (sections 3 and 9), while section 4.6 reserves processing 'from anywhere in the world'. The region setting is therefore the safeguard, and changing it would leave global processing with nothing behind it.

Companies House

Their role
A public data source: we read information they publish. They do not process anything on our behalf.
What we use them for
Looks up UK company information when you research and add prospects.
What we share with them
The company names and registration numbers you search for.
Where they process data
United Kingdom
How transfers out of the UK are safeguarded
United Kingdom only - no restricted transfer.

Exa

Their role
A processor: they handle data only on our instructions, under a data processing agreement with us.
What we use them for
An alternative provider for discovering companies and searching news when you research prospects.
What we share with them
The company names, search terms, and ideal-prospect criteria used to find companies and relevant news.
Where they process data
United States
How transfers out of the UK are safeguarded
UK IDTA to the EU SCCs (version B.1.0), named in the Exa DPA, which is incorporated into their terms of service.
Data processing agreement
View the agreement

Fasthosts

Their role
A processor: they handle data only on our instructions, under a data processing agreement with us.
What we use them for
Provides the UK virtual server that hosts the application and database during beta.
What we share with them
All platform data is hosted on this server, including the records and notes you store.
Where they process data
United Kingdom
How transfers out of the UK are safeguarded
United Kingdom only - no restricted transfer.
Data processing agreement
View the agreement

GoCardless

Their role
An independent controller: they decide their own purposes for the data, so they answer for it directly rather than processing it on our instructions.
What we use them for
Collects payment by Direct Debit for invoices raised through Xero.
What we share with them
Your name, email address, billing address, bank account details, and the invoices collected against your account.
Where they process data
United Kingdom and European Union
How transfers out of the UK are safeguarded
United Kingdom and European Economic Area processing, relied on under adequacy. GoCardless is an independent controller, so no Article 28 transfer instrument applies between us.

Lusha

Their role
A processor: they handle data only on our instructions, under a data processing agreement with us.
What we use them for
An alternative provider for enriching the prospect and contact records you choose to research.
What we share with them
Contact identifiers such as name, company, and work email used to retrieve professional information.
Where they process data
United States and European Union
How transfers out of the UK are safeguarded
UK IDTA to the EU SCCs (version B.1.0), named in the Lusha DPA, which is incorporated into the master services agreement.
Data processing agreement
View the agreement

Microsoft OneDrive

Their role
A processor: they handle data only on our instructions, under a data processing agreement with us.
What we use them for
Stores offsite backup copies of the platform.
What we share with them
Backup copies of the platform database, which contain the data you store in the platform.
Where they process data
United Kingdom
How transfers out of the UK are safeguarded
IDTA implemented by Microsoft, per the Microsoft Products and Services Data Protection Addendum, which applies automatically to a Microsoft 365 business tenant.
Data processing agreement
View the agreement

Nylas

Their role
A processor: they handle data only on our instructions, under a data processing agreement with us.
What we use them for
Connects your email inbox and calendar so you can send messages and manage meetings from inside the app, and powers the meeting notetaker that records and transcribes online meetings.
What we share with them
Email content, calendar events, and contact details from the inbox you connect, and the audio recording and transcript of meetings the notetaker joins.
Where they process data
European Union (the account is set to their Europe region), with limited access from the United States or Canada when a support ticket needs it.
How transfers out of the UK are safeguarded
UK Addendum to the EU Standard Contractual Clauses, incorporated at Annex III of Exhibit B to the Data Processing Addendum signed 8 October 2026. The Clauses are signed for both Module Two and Module Three, so they cover the data we control and the data we process on behalf of a client. The account is set to their Europe region, so application data, connector data and grant information are stored in their European data centre, and the EU and US regions are isolated with no data moved between them. The only routine transfer out is a support engineer outside the region reading error logs on a support ticket, which the Clauses govern. Nylas is additionally certified under the UK Extension to the EU-U.S. Data Privacy Framework; the signed Clauses are the primary instrument and the certification a secondary basis. The region setting is load-bearing: moving the account out of the Europe region would widen what crosses the border, so treat it as a control rather than a preference.

OpenAI

Their role
A processor: they handle data only on our instructions, under a data processing agreement with us.
What we use them for
An alternative AI provider for the same drafting, analysis, and generation features, and transcribes recorded calls to text.
What we share with them
The content you put into AI features, which can include messages, meeting transcripts, and CRM notes, and the audio of recorded calls, which is transcribed to text.
Where they process data
United States
How transfers out of the UK are safeguarded
UK Addendum to the EU SCCs, defined and incorporated in the OpenAI DPA.
Data processing agreement
View the agreement

Stripe

Their role
Both, depending on what they are doing: they follow our instructions for part of it, and decide their own purposes for the rest - a payment provider deciding how to screen a card payment for fraud, for example.
What we use them for
Takes card payment against an invoice. Our Stripe account is connected to Xero, so the "Pay now" link on an invoice is processed by Stripe.
What we share with them
The payer's name and email address, billing address, the amount and reference of the invoice being paid, and the card details entered to pay it. We never see or hold the full card number.
Where they process data
United States and European Union
How transfers out of the UK are safeguarded
UK International Data Transfer Addendum, via the Data Transfers Addendum incorporated into the Stripe DPA.
Data processing agreement
View the agreement

Tavily

Their role
A processor: they handle data only on our instructions, under a data processing agreement with us.
What we use them for
Searches the web for company news and context when you research prospects.
What we share with them
The company names and search terms used to find relevant news.
Where they process data
United States

Telnyx

Their role
A processor: they handle data only on our instructions, under a data processing agreement with us.
What we use them for
Powers the Calling and SMS add-on - in-browser calling, call recording, and text messaging.
What we share with them
The phone numbers you dial or text, the content of text messages, and the audio recordings of calls, which are recorded for training and quality. Recordings are stored in a Telnyx-managed store whose region is not customer-selectable.
Where they process data
United States and European Union
How transfers out of the UK are safeguarded
UK International Data Transfer Addendum to the EU SCCs, at Schedule 3 of the Telnyx DPA.
Data processing agreement
View the agreement

Xero

Their role
A processor: they handle data only on our instructions, under a data processing agreement with us.
What we use them for
Raises and sends your invoices, and holds them as our accounting records. Card payment against an invoice is passed to the payment service connected to Xero (Stripe); Direct Debit collection is passed to GoCardless.
What we share with them
Your organisation name, billing contact email, billing address, VAT number where you have given one, and the invoices raised against your account.
Where they process data
New Zealand, Australia, United States and European Union
How transfers out of the UK are safeguarded
UK Addendum to the EU SCCs, named in the Xero data processing terms; New Zealand relied on under adequacy.
Data processing agreement
View the agreement

This list is maintained and updated by Sales Triage. Material changes are notified to platform clients in accordance with clause 3.3 of this DPA. Sales Triage uses, or may use, the providers listed above, and routes personal data to a given provider only once it is engaged under an appropriate data processing agreement.

Annex B - Details of Processing

Subject matter: provision of the Platform Services (CRM, contact management, AI Coach, email delivery and tracking).

Duration: for the Term and the post-termination export period in clause 5 of the Terms.

Nature and purpose: storage, organisation, retrieval, analysis, transmission, and deletion of Client Data to provide the Services.

Types of personal data: names, email addresses, phone numbers, job titles, company information, contact/prospect/customer/supplier records, notes, communications and activity history, email engagement data, meeting and call recordings and transcripts, AI inputs and outputs, technical and usage data.

Categories of data subjects: the Client's staff and users, and the Client's contacts, prospects, customers, suppliers, and other stakeholders.

Special category data: not sought, not required by the Services, and clients are instructed not to submit it (clause 13). Where meeting or call recording is enabled, incidental capture is possible: a transcript records whatever participants say, which can include references to health, religion, trade union membership or other special category data. Such content is not solicited, is not used to profile or make decisions about any individual, and is subject to the same security, access controls, retention and deletion rights as all other Client Data. Deliberate storage or processing of special category data remains outside the scope of this Agreement unless expressly agreed in writing.

Annex C - Technical and Organisational Measures (summary)

Our Security and Transparency pages describe in full what is in place today and what is still being implemented, and are kept up to date. This annex summarises that position; where the two differ, those pages are the current one.

In place:

  • access controls and role-based permissions; unique credentials; passwords stored hashed;
  • multi-factor authentication enforced at sign-in for all users, including administrators (authenticator app or one-time email code);
  • encryption of data in transit (HTTPS/TLS);
  • encryption at rest of stored API credentials and integration secrets, and of stored OAuth mailbox/calendar tokens (AES-256-GCM);
  • use of reputable hosting and infrastructure providers under data processing terms;
  • logical separation of client data within the Platform Services, enforced by tenant scoping in code;
  • operational error logging and an activity/audit trail of changes within the platform;
  • a login and access audit trail (sign-ins, sign-outs, failed sign-ins and tenant boundary violations) with targeted operator alerting, and brute-force protection on sign-in;
  • regular backups for operational continuity, with a full restore to a working system carried out and documented and re-tested at least annually (subject to clause 21 of the Terms);
  • a separate staging environment, with changes deployed there before production, and automated access-control and dependency vulnerability testing before each release;
  • a written incident response runbook, reviewed after any incident;
  • production access restricted to named individuals under multi-factor authentication;
  • documented breach response steps;
  • subprocessor due diligence and contractual data protection obligations.

Not yet in place, stated so the Client can weigh it (see our Security and Transparency pages):

  • full-database (volume-level) encryption at rest. Stored credentials and mailbox/calendar tokens are encrypted at the field level; the database volume itself is not;
  • independent penetration testing;
  • centralised, fully automated intrusion detection across the environment. Alerting is targeted at specific high-signal events rather than general anomaly detection;
  • separation of the database from the application server, which is a resilience limitation rather than a confidentiality one;
  • a self-serve, time-bound data export and deletion process. Both are carried out on request today.

Copyright Tech Brand Limited t/a Sales Triage. All rights reserved.