Compliance
Compliance and transparency
Full transparency on how we protect your data and run outreach on your behalf. We build systems for people doing targeted, consultative work, never spam bots.
Where we stand
Data privacy
A GDPR legitimate interest framework, CCPA and CPRA compliance, and proper Controller and Processor relationships with every client.
Email marketing
CAN-SPAM compliant, adherent to the Google and Yahoo bulk sender guidelines, and properly authenticated with SPF, DKIM and DMARC.
LinkedIn practices
Risk acknowledged and mitigated: deliberately low volume, client-approved leads only, and a person overseeing every follow-up.
AI usage
AI assists with drafting, openly. You review and approve every piece of content before it goes out.
Life sciences
Industry-aware practices. Not a HIPAA Business Associate. Compliant with PhRMA/AdvaMed code considerations.
Data ownership
You own all data, contacts and content generated. We're your service provider, not a data broker.
Efficiency, not spam
We build systems that let people do the targeted marketing and selling the best reps would do anyway. No spam, just efficiency where it helps, in service of consultative selling that solves a real problem.
From your team's own profiles
- Low volume: a deliberately low daily pace
- Client-approved leads only: you review and approve every lead list before outreach
- Human oversight: a person writes or approves every follow-up
- Automating what you'd do: we save time on tasks you'd do yourself every day
From domains we warm for you
A managed sending platform, with its own warming and vetted sender groups
Dedicated, warmed domains, never your corporate domain
Volume discipline: a deliberately low daily volume
Highly targeted: only contacts that fit your ideal client and that you've approved
Real value: personal messages that offer a solution to a real problem
Drafted with AI, approved by a person
Drafting: AI assists in drafting LinkedIn posts and emails
Human review: you review and approve everything AI drafts
Transparency: we recommend disclosing AI assistance in your communications
Your data stays yours
You own everything: all data, contacts and content generated
Processor role: we process data on your behalf as your service provider
Suppression honored: opt-outs processed immediately
Not a data broker: we don't sell your data to third parties
Clear lines, assumed liability
BioCreative Assumes Liability
If liability arises from platform enforcement or regulatory action related to our execution methods, BioCreative assumes responsibility, not you.
- LinkedIn account restrictions due to automation
- Email deliverability issues from our configuration
- Regulatory inquiries about our processing methods
Clear Responsibilities
We maintain clear separation of responsibilities so you always know what's expected.
Lead identification: BioCreative → You approve
Content drafting: BioCreative → You approve
Campaign execution: BioCreative
Suppression management: Shared
Legal basis for outreach: You own
The rules we operate under
Data Privacy Laws
GDPR (EU) - Legitimate Interest basis
CCPA/CPRA (California)
State privacy laws (VA, CO, CT, UT)
Data Processing Agreements
Email Regulations
CAN-SPAM Act compliance
Google/Yahoo 2024 guidelines
SPF/DKIM/DMARC authentication
One-click unsubscribe
AI Regulations
EU AI Act (Limited Risk tier)
Colorado SB24-205
FTC AI marketing guidelines
Transparency requirements
Next step
Bring us your market. We'll show you the system.
Every engagement starts the same way: one working session on your market, your buyers and your goals, before anyone proposes anything.