---
title: "Data sources, accuracy and compliance"
description: "Where Database records come from, how K3X verifies them, and what stays your responsibility when you contact people."
url: https://help.k3x.ai/en/articles/73-data-sources-accuracy-and-compliance
collection: "Database: 200M+ records built in"
updated: 2026-10-04
language: en
---

# Data sources, accuracy and compliance

Where Database records come from, how K3X verifies them, and what stays your responsibility when you contact people.

The Database holds US business contacts: companies and the people who run them. Every email carries the date it was last verified. How you use that data, including compliance with TCPA and CAN-SPAM, is your responsibility.

## What is in the Database

-   200,000,000+ US companies and people.
    
-   Business attributes: industry, headcount, location, annual revenue, founding year, funding and role.
    
-   Growth signals that help you find companies that are growing right now.
    
-   Verified business emails and direct phone numbers, masked until you reveal them.
    

The Database is business-to-business data. It is built to help you reach decision-makers at companies, not consumers at home.

## How accuracy works

-   Every email shows when it was last verified, so you can judge how fresh it is before you send.
    
-   Bounced emails and dead numbers are removed rather than left in the list.
    
-   K3X states a 90%+ verified email accuracy rate on its site. Treat that as a strong average, not a promise for every row. Some messages will still bounce.
    

## What K3X does with your data

-   Records you reveal and push into Companies and People belong to your workspace.
    
-   K3X does not sell or share your account data across accounts, and does not use your data to train third-party AI models.
    
-   Data is hosted in the United States and encrypted in transit and at rest. K3X holds SOC 2 Type II and follows GDPR. See "Security, privacy and data handling".
    

## Your responsibilities

K3X gives you the data and the tools. Compliance with outreach law stays with you. Under the K3X Terms of Service you are responsible for:

-   **Calls and texts (TCPA)**: consent rules, do-not-call lists, calling hours and opt-out handling. US SMS requires A2P 10DLC registration, which you complete in **Settings → Phone & Voicemail**.
    
-   **Email (CAN-SPAM)**: accurate sender details, an honest subject line, a physical address and a working unsubscribe.
    
-   **Call recording**: getting consent where your state requires it before you record.
    
-   **Canada (CASL)** and other jurisdictions if you contact people outside the US.
    

If you are unsure what applies to your business, check with a compliance professional before you launch a campaign.

## Practical habits

-   Reveal only the people you intend to contact.
    
-   Honor STOP replies and unsubscribe requests the same day.
    
-   Keep outreach relevant to the person's role and business.
    
-   Use agents that watch for replies, so a person who answers stops receiving the sequence.
    

## Questions

For questions about data handling, email hey@k3x.ai. The Privacy Policy, Terms of Service and Data Processing Agreement are at `k3x.ai/legal`.

## Related

-   Reveal emails and direct phones
    
-   Security, privacy and data handling
    
-   What the Database is and how it differs from Companies and People