The customer controls the campaign
The customer is normally the controller for its recipient data and decides why and to whom messages are sent.
Trust Centre
Clear foundations. Documented controls.
Find the public information needed to assess roles, privacy, security and responsible use of Intellipush.
Responsibility in practice
A clear allocation of roles
The agreement describes what Intellipush does on the customer’s behalf, while the customer remains responsible for purpose, recipients and content.
Intellipush processes data
Intellipush is normally the processor for customer data and the controller for its own account, billing, support and security purposes.
The DPA is included
The Data Processing Addendum applies automatically as Schedule 1 to the service terms, without a separate order or signature.
Read Terms + DPA →Four policy resources
Find the detail you need
The Trust Centre is the hub. The four documents below are the current public policy resources.
Public policy
Privacy and cookies
Roles, data, legal bases, retention, rights and the technologies we actually use.
Document owner: Intellipush ManagementRead document →Public policy
GDPR and data processing
The DPA incorporated into the terms, allocation of roles, erasure and provider roles.
Document owner: Intellipush ManagementRead document →Public policy
Security
Documented controls, the file model, backups, incidents, testing and responsible disclosure.
Document owner: Intellipush ManagementRead document →Public policy
Acceptable use
Binding requirements for marketing messages, opt-out, sender identity, content and enforcement.
Document owner: Intellipush ManagementRead document →Documented today
Selected controls and operating facts
These are approved high-level descriptions, not certification badges or guarantees.
Administrative access
Privileged access uses MFA, and remote production administration takes place through a VPN.
Core infrastructure
Core infrastructure and backups are with AWS in Ireland. Message routes and supporting functions may involve other countries.
Testing and backups
An external penetration test was performed in April 2026. Production backups follow a 14-day expiry cycle.
Files shared by link
Shared files are public to anyone with the link. Links are unlisted, not intended for indexing and can be revoked.
Responsible messaging
STOPP/STOP, blacklists and alternative opt-out channels support responsible use. For marketing, the customer must document prior consent.
Read the AUP →Provider categories and data processing
See the types of providers and communications networks that may be involved, how roles are assessed and how customers can request the confidential schedule.
View provider categories →Ongoing improvement
Controls today, continued development
Security and privacy are ongoing disciplines. We distinguish controls already in use from priorities in the improvement programme.
View the improvement programmeTerms with DPA
One agreement for the service and data processing
Version 2026.08 of the service terms includes the Data Processing Addendum as Schedule 1. Individual written agreements may contain separate terms.