Question 1

What is Encrata?

Accepted Answer

Encrata is one API for checking people, credentials and content before you trust them. You can check whether an email address is real and see who is behind it, find out whether someone's data or passwords have leaked, scan code and text for exposed keys, and check links, QR codes, images and files for threats. You send in what you have and get clear, structured answers back. There's one API key and one credit balance for all of it.

Question 2

So what am I actually paying for?

Accepted Answer

Mostly, finding people. Every other check costs 1 credit or less, so you can run them across your whole list or codebase without worrying about the bill. The person lookup costs 1,000 credits, so that's the one to use deliberately. In practice: run the cheap checks first, and only look up the people you actually need.

Question 3

Do I get charged if something goes wrong or nothing is found?

Accepted Answer

If something breaks on our end, you're never charged. Failed requests and timeouts are free, and in a bulk job, rows that fail because the input was invalid are free too. Leak and secret scans only charge for what they find, so a clean repo or clean text costs nothing. Any lookup that comes back with no data at all is free too. If we find something, even a little, the lookup is charged at its normal rate.

Question 4

Do I pay again if I check the same thing twice?

Accepted Answer

No. If you check the same email address, password or other input again within 6 months, we give you the saved answer for free. This also applies to person lookups, so you never pay 1,000 credits twice for the same address.

Question 5

How accurate is it?

Accepted Answer

For email validity, we ask the receiving mail server directly instead of guessing from the address format, so the answer reflects whether the inbox actually exists. Breach and password checks run against known breach data. Scans of links and files combine live inspection with threat intelligence. For person lookups, how much we find depends on the person: someone with a public work profile comes back with job title, company and social accounts, while someone who keeps a low profile comes back with less. We always show which details we found and which we didn't, so you know what you can rely on.

Question 6

Can I check a whole list at once?

Accepted Answer

Yes. You can upload a CSV, Excel, TXT, Word or PDF file, or send a list through the API, with up to 1 million rows per job. Bulk upload works for email validity, person lookup, email breaches, gender and country, and password breaches. For password lists, you send hashes instead of the passwords themselves, so the raw passwords never leave your systems. We hold the credits when the job starts and refund whatever isn't used when it finishes. When the job is done, we can notify you by webhook, and you can download the results as CSV, Excel or JSON.

Question 7

Are there any limits?

Accepted Answer

By default, each account can make 200 requests per minute, shared across all of its API keys. Bulk jobs are the better choice for large lists. You can see your remaining credits at any time in the dashboard or through the API, and we can email you or send a webhook before you run low. If you need a higher limit, talk to us.

Question 8

Where do you keep my data, and for how long?

Accepted Answer

Your account details stay with us for as long as your account is open. Lookup results are saved for 6 months so that repeat checks are free, and then deleted automatically. When you check a password, you can send just its hash, so the password itself never reaches us. Usage logs are kept for 90 days so we can spot abuse and show you your own usage. Everything runs on AWS in Europe, with Cloudflare in front. We don't sell data, no customer can see another customer's data, and we never use your data to train AI for anyone else. If you need a data processing agreement, we have a standard one ready to sign.

Question 9

Do you do phone numbers, domains and IP addresses too?

Accepted Answer

Not yet. Phone, domain, IP address and company lookups are on the way. They'll work the same way as everything else: same API key, same format, same credits. Tell us which one you need most and we'll move it up the list.

Turn dark web data into
competitive advantage

Good morning, Alex

Encrata draws data from beyond the searchable web

Judge an address on more than its syntax

Feet on the ground. Insights from the inside.

Tell customers what leaked, and when

How businesses use Encrata

Signup Validation

Breach Alerts

Lead Enrichment

Password Screening

Fraud Screening

Domain Monitoring

Ask your favorite AI
how Encrata can help you

Used by data-driven
companies

4000+ startups

NTT DATA

Audience analytics

10+ skincare brands

Indra Group

400+ retailers

50+ fine dining restaurants

Core capabilities

Search anything, instantly

Compose powerful workflows

Four ways of using Encrata

Use the dashboard

Use the API

Use the CLI

Use the MCP server

Common questions

Turn dark web data intocompetitive advantage