Security at LeadMole

Your data is protected at every level

Last updated: 29 July 2026

Encryption

All data in transit is protected using TLS 1.2+ encryption. All data at rest is encrypted using industry-standard AES-256 — the same level of protection used by banks and financial institutions.

Authentication

Access to LeadMole requires secure authentication. Passwords are hashed using bcrypt. Sessions expire automatically after inactivity. Role-based access ensures users only see their own data.

Data Isolation

Every LeadMole user's data is completely isolated. No user can access another user's leads, reports, or search history. Data isolation is enforced at the database level.

Infrastructure

LeadMole is hosted on enterprise-grade cloud infrastructure with 24/7 monitoring, automated failover, and DDoS protection. Data is stored and processed within the UK/EU.

Backups

Your data is backed up continuously. Daily automated backups are retained for 30 days. You can export all your data at any time in CSV or JSON format.

AI & Data Usage

AI is used solely to assist with lead discovery. AI does not access, store, or share user data beyond the immediate search request. No user data is used to train AI models.

Responsible Disclosure

If you discover a security vulnerability, please report it to security@leadmole.co.uk. We respond within 48 hours and will not take legal action against good-faith researchers.