> Is 6sense GDPR compliant? B2B intent data, IP address processing, US data transfers and the consent requirements for 6sense on European websites. > > Canonical: https://www.flowconsent.com/en/services/marketing/6sense Marketing # 6sense Marketing 6sense is a US-based B2B account intelligence and intent data platform that uses IP-to-company matching, behavioural signals, and third-party data to identify anonymous website visitors and predict purchase intent. From a GDPR perspective, the individual IP address processing constitutes personal data handling. B2B intent profiling at individual level requires a documented legal basis, and the US data transfer requires SCCs. 6sense is one of the more complex GDPR cases in the B2B marketing technology space. [Block 6sense until consent](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=marketing) · [Scan my site](https://www.flowconsent.com/en/scan) At a glance - Category [Marketing](https://www.flowconsent.com/en/services/marketing) - Consent Marketing - Prior consent Required - Documented cookies 2 - Third-party domains 3 - Servers United States (6sense is a US company with US-primary infrastructure) Overview ## What does 6sense do? ## **What is 6sense?** 6sense is a B2B revenue intelligence platform that combines account-based marketing, intent data, predictive analytics, and AI to help sales and marketing teams identify in-market buyers. Its core capability is deanonymising website traffic by matching visitor IP addresses to company records, enriching that data with third-party intent signals, and predicting which accounts are most likely to buy. It is widely used by enterprise B2B companies for account-based marketing campaigns. ## **The GDPR challenge: individual vs company data** 6sense occupies a complex GDPR space. Pure company-level data (company name, industry, size) is not personal data. However, the IP addresses used to identify companies are personal data under GDPR because they can identify individual employees making the visit. The moment 6sense links an IP address to a company record, it is processing personal data. Third-party intent data tracking individuals across websites is clearly personal data requiring a lawful basis. ## **Consent vs legitimate interest** Some organisations argue that B2B intent data enrichment at company level is justified by legitimate interest, arguing that contacting a company that has shown interest in your product serves a proportionate business purpose. However, this argument requires a documented Legitimate Interest Assessment, must pass the balancing test, and does not cover individual-level tracking or cross-site behavioural profiling. Consent is the safer and more defensible basis for cookie-based individual tracking. ## **US data transfer and SCCs** All 6sense processing occurs on US infrastructure. SCCs are required for EU personal data transfers. Sign the 6sense DPA and SCCs. Implement a Transfer Impact Assessment if required by your DPA. Disclose the US transfer and legal mechanism in your privacy policy. ## **Practical compliance steps** Conduct a DPIA before deploying 6sense on EU-facing websites. Document your legal basis: consent for cookie tracking, and a documented LIA for company-level IP matching if relying on legitimate interest. Sign DPA and SCCs. Implement consent-based tag loading. Add 6sense to your privacy policy disclosing IP processing, intent data enrichment, and US transfer. Compliance ## 6sense and the GDPR 6sense is classified as “Marketing”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy. - Legal basis Consent (Art. 6(1)(a) GDPR) required for cookie-based tracking and individual-level behavioural profiling. IP-to-account matching using company-level aggregated data may be arguable under legitimate interest (Art. 6(1)(f)), but individual visitor IP processing requires careful assessment. High-risk profiling for B2B targeting requires documented legitimate interest balancing test. - Risk level high - Applicable regulations GDPR, ePrivacy Directive, SCCs required for US data transfers, DPIA recommended for intent data profiling ### Impact assessment (DPIA) A DPIA is strongly recommended for 6sense deployments on EU-facing websites. The combination of IP-to-account matching, third-party intent data enrichment, and individual-level behavioural profiling constitutes large-scale systematic monitoring of website visitors, triggering Article 35 DPIA requirements. ### Sample text for your banner > This website uses 6sense to identify companies visiting our site and measure purchase intent using your IP address and browsing behaviour. This data is processed in the US. You can opt out of this tracking below. Cookies and trackers ## What 6sense sets and contacts - Tracking method JavaScript tag, third-party cookies, IP-to-account matching, reverse IP lookup, intent data, account intelligence profiling - Server location United States (6sense is a US company with US-primary infrastructure) - Data transferred outside the EU 6sense is a US-based B2B account intelligence and intent data platform. All data processing occurs on US infrastructure. EU personal data transfers require Standard Contractual Clauses. The platform performs IP-to-company matching which constitutes processing of personal data (IP addresses) under GDPR. ### Cookies set (2) | Name | Type | Duration | Purpose | | -------- | ---------- | --------- | ---------------------------------------------------------------------------------------- | | \_6s | persistent | 13 months | 6sense visitor tracking cookie for IP-to-account matching and B2B intent data collection | | \_\_ssid | persistent | 12 months | 6sense session and account intelligence identifier | ### Third-party domains contacted (3) - `6sense.com` - `b2b.6sense.com` - `api.6sense.com` Questions ## Frequently asked questions about 6sense Can't find your question? Write to us, we answer fast. [Write to us](https://www.flowconsent.com/en/demo) ### Is 6sense GDPR compliant? 6sense provides a GDPR DPA and SCCs for EU customers. However, deploying 6sense on EU-facing websites is complex under GDPR due to IP address processing and individual-level behavioural tracking. A DPIA is strongly recommended before deployment. ### Does 6sense process personal data under GDPR? Yes. IP addresses are personal data under GDPR. 6sense processes visitor IP addresses to perform company identification. Cross-site behavioural tracking of individuals via third-party intent data clearly constitutes personal data processing. ### What legal basis applies to 6sense? Consent for cookie-based individual tracking. A documented Legitimate Interest Assessment may support company-level IP-to-account matching at aggregate level, but individual-level profiling requires consent or another specific basis. Consult your DPO before deploying on EU sites. ### Does 6sense require a DPIA? Yes, strongly recommended. The combination of IP processing, third-party data enrichment, individual-level profiling, and US data transfers constitutes high-risk processing under GDPR Article 35. A DPIA should be completed before deployment. ### What SCCs are needed for 6sense? Sign the 6sense Data Processing Agreement which includes Standard Contractual Clauses for EU-US data transfers. Complete a Transfer Impact Assessment to document the risks and supplementary measures. 6sense provides these documents via its trust portal. ### Can I use 6sense without consent on EU websites? Not for individual-level cookie tracking. For pure server-side IP-to-company matching without cookies, a legitimate interest basis with a balancing test and clear opt-out mechanism may be arguable, but this is legally uncertain and should be reviewed by a DPO. ### How do I disclose 6sense in my privacy policy? Describe: IP address-to-company matching, third-party intent data enrichment, US data transfer via SCCs, the B2B marketing purpose, and how visitors can object. Link to 6sense's privacy policy and opt-out mechanism. ### What are GDPR-compliant alternatives to 6sense? EU-based alternatives with similar capabilities include Leadinfo (Netherlands), Albacross (Sweden), and Clearbit (EU options). These provide company-level website visitor identification with EU infrastructure, simplifying the GDPR compliance picture. Same category ## More services: Marketing [See the whole category](https://www.flowconsent.com/en/services/marketing) ### [Conversio](https://www.flowconsent.com/en/services/marketing/conversio) [Conversio is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. Conversio enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, Conversio empowers marketing teams to achieve measurable growth.](https://www.flowconsent.com/en/services/marketing/conversio) [Marketing](https://www.flowconsent.com/en/services/marketing/conversio) · ### [Kudobuzz](https://www.flowconsent.com/en/services/marketing/kudobuzz) [Kudobuzz is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Kudobuzz integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Kudobuzz helps organizations maintain robust websites that meet user expectations and technical requirements.](https://www.flowconsent.com/en/services/marketing/kudobuzz) [Preferences](https://www.flowconsent.com/en/services/marketing/kudobuzz) · ### [All in One SEO Pack](https://www.flowconsent.com/en/services/marketing/all-in-one-seo-pack) [All in One SEO Pack is an advanced SEO tool suite designed to help websites improve their search engine rankings and organic traffic. It provides comprehensive keyword research, site auditing, backlink analysis, and rank tracking. All in One SEO Pack offers actionable insights and recommendations to optimize on-page content, technical SEO, and link building strategies. With competitive analysis and real-time monitoring, All in One SEO Pack empowers marketers to make data-driven decisions that boost.](https://www.flowconsent.com/en/services/marketing/all-in-one-seo-pack) [Marketing](https://www.flowconsent.com/en/services/marketing/all-in-one-seo-pack) · ### [Marsello](https://www.flowconsent.com/en/services/marketing/marsello) [Marsello is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Marsello integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Marsello helps organizations maintain robust websites that meet user expectations and technical requirements.](https://www.flowconsent.com/en/services/marketing/marsello) [Preferences](https://www.flowconsent.com/en/services/marketing/marsello) · ### [Poltio](https://www.flowconsent.com/en/services/marketing/poltio) [Poltio is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Poltio supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Poltio ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/marketing/poltio) [Marketing](https://www.flowconsent.com/en/services/marketing/poltio) · ### [Growform](https://www.flowconsent.com/en/services/marketing/growform) [Growform is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Growform integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Growform helps organizations maintain robust websites that meet user expectations and technical requirements.](https://www.flowconsent.com/en/services/marketing/growform) [Marketing](https://www.flowconsent.com/en/services/marketing/growform) ## Make your site compliant today. Free up to 25,000 sessions a month. No credit card, no commitment. [Create my banner](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=general) · [Scan my site](https://www.flowconsent.com/en/scan)