Data & Enrichment
D

Derrick

Derrick is a B2B prospecting and enrichment engine that runs in a web app, a Google Sheets sidebar, AI assistants through an MCP server and an API, all drawing on one pool of credits. It builds lead lists from Sales Navigator searches, LinkedIn post engagers, followers and connections, Google Maps, search results, French company codes or a plain language prompt that it turns into a Sales Navigator search, then finds emails and mobile numbers, verifies emails and adds company, tech stack and registry details. Signal watches lists daily and sends alerts to Slack, email, a webhook or a new spreadsheet row.

LinkedIn features run on the customer's own LinkedIn session, connected through a Chrome extension or by pasting the session cookie into Derrick's settings, and a Sales Navigator import pulls up to 2,500 leads per search from the user's own seat. Ask Claude and Ask OpenAI columns run a prompt on each row, and leads push to La Growth Machine and lemlist or reach CRMs through Zapier, Make, n8n or the API. The Google Sheets add-on has more than 34,000 installs.

A free plan gives 100 credits, and paid plans run from €20 a month for 10,000 credits to €320 for 200,000, with the API and MCP server starting on the €47.50 Plus plan. A found email costs five credits, a found phone number 200 and a LinkedIn profile one, and finders bill only on a result. Derrick is a French company based in Marseille, founded in 2022 by Jonathan Maurin, hosts its service on Heroku in Europe and sells to founders, SDRs, agencies and recruiters, with tools built for French company data.

Last VerifiedOctober 18, 2026
Compare Derrick with other vendors
Founded
2022
Headquarters
Marseille, France
Website
derrick-app.com
Categories
data-and-enrichment, linkedin-social-selling
Assessment

Capability Axes

Capability grades

17 of 17 axes rated · 7 graded A or B

AI Capability
AI CentralityAI CentralityWhether AI is the product or a feature veneer. The removal test: peel the AI label off, and does anything sellable remain?
CC on AI CentralityAI features on a conventional platform. Peel the AI label off and the product still works roughly as before.
Vendor Published

AI turns a plain language prompt into a Sales Navigator search, and Ask Claude and Ask OpenAI columns run a custom prompt on each spreadsheet row, while an MCP server exposes about 20 tools to AI agents. The finders, enrichment and Signal alerts, which carry the product, are not described as AI and work without it.

Autonomy and Oversight ModelAutonomy and Oversight ModelWhat the system does without a human. Draft for review, auto send, or fully agentic, and what contains a bad run.
CC on Autonomy and Oversight ModelAutonomy is claimed or implied with the oversight model asserted rather than documented. Buyers cannot tell from public sources what runs unsupervised.
Vendor Published

Signal checks lists every day in the background, the Sheets add-on can run when the user is not present and fills columns automatically, and through MCP an agent states the credit cost and then runs a chain of lookups and pushes to La Growth Machine or lemlist with no approval step described. Overwrite rules for spreadsheet columns are not described, and nothing writes directly into a CRM.

AI Disclosure and Model TransparencyAI Disclosure and Model TransparencyWhat models power the product, whether AI generated outreach discloses itself, and whether scoring and routing logic is explainable.
BB on AI Disclosure and Model TransparencyMeaningful disclosure of the model stack or the disclosure posture, with one real gap, commonly silence on whether AI authored outreach identifies itself.
Vendor Published

Anthropic and OpenAI are named as subprocessors used only when a customer runs an AI feature, and the feature pages name Claude 3.5 Sonnet and GPT-4 or GPT-4o. How a prompt becomes a Sales Navigator search is explained in a single sentence.

Operational and Outcome EvidenceOperational and Outcome EvidenceMeasured outcomes with a stated basis: replies, meetings, pipeline, win rates. Logos are not evidence and prestige is not measurement.
CC on Operational and Outcome EvidenceOutcome claims are headline percentages with no stated basis, or customer logos standing in for results.
Vendor Published

Case studies name users only by first name, such as an SDR whose bounce rate fell from 12 percent to under 3 percent, and Derrick's own benchmarks put email match at 82 to 89 percent and mobile at 52 percent. The Google Sheets add-on carries more than 34,000 installs at 4.8 stars, while the 323 Trustpilot reviews Derrick cites run well ahead of the count on Trustpilot itself.

Compliance and Risk
Outreach Compliance PostureOutreach Compliance PostureHow the product handles regulated outreach: consent, DNC scrubbing, opt out mechanics, caller ID conduct, and the public enforcement record.
CC on Outreach Compliance PostureCompliance is mentioned as the customer’s responsibility, with little or no product enforcement described. The tool can be run lawfully, and nothing about it helps.
Vendor Published

The terms make the customer the controller and Derrick a processor, and the data comes from public and opt in sources by Derrick's account, but no legal basis, legitimate interest assessment or notice to the people in the data is described. There is no opt out page for those people, rights requests go to a general contact address, and CCPA, data broker registration and Do Not Call handling for the mobile numbers it sells are not addressed.

Data Privacy PostureData Privacy PostureGDPR and CCPA posture: lawful basis, data subject rights handling, DPA availability, subprocessor disclosure.
BB on Data Privacy PostureA real privacy program is visible (DPA available, policy substantive) with a gap on the hard question, commonly lawful basis for enriched or tracked individuals.
Vendor Published

Privacy terms and a DPA name Heroku on AWS in Europe, Stripe, Google, Anthropic and OpenAI as subprocessors alongside unnamed enrichment providers, with a full list on request, rely on standard contractual clauses for transfers and promise breach notice without undue delay. The hard question for a data vendor, the legal basis for enriching the people it finds, is left to customers, and Derrick's claim to store no personal data sits against its storage of users' LinkedIn session tokens.

Data Licensing and ProvenanceData Licensing and ProvenanceWhere the data comes from and on what legal footing: licensed, contributed, public record, or scraped, and who stands behind the answer.
CC on Data Licensing and ProvenanceData is described by its size and coverage with its origin unstated. The provenance question is answerable only by asking the vendor.
Vendor Published

Data comes from more than ten sources, among them the LinkedIn graph, company websites, registry data, web crawling and third party providers, with the first confident match used and blank cells left otherwise. No provider behind the email or phone finders is named, emails are either found or generated, and refresh cadence is not stated.

Platform Terms ExposurePlatform Terms ExposureWhether the product operates inside the terms of the platforms it touches, and the restriction risk a buyer inherits when it does not.
DD on Platform Terms ExposureThe method visibly violates platform terms (headless automation of a prohibiting platform), or the vendor’s account restriction record is public and unacknowledged.
Vendor Published

LinkedIn features run on the customer's own session: users copy their li_at session cookie from browser developer tools into Derrick, which stores the token and uses it to access LinkedIn and Sales Navigator on their behalf, despite Derrick's assurance that it never asks for that cookie.

Derrick also promotes renting LinkedIn accounts from MirrorProfiles, its terms leave LinkedIn compliance, volume and pace to the user and disclaim liability for account restrictions, and two earlier Derrick extensions that requested LinkedIn cookie access have been pulled from the Chrome Web Store.

AI Safety and Data StewardshipAI Safety and Data StewardshipThe cross client boundary: whether customer data trains models that serve competitors, plus retention and deletion posture.
CC on AI Safety and Data StewardshipSecurity language exists but the training question, the one this axis turns on, is unanswered: a buyer cannot tell whether their pipeline data improves a competitor’s instance.
Vendor Published

Whether customer data trains models is not stated. Derrick says it keeps no personal records beyond each lookup and that every MCP call is stateless, yet users' LinkedIn session tokens are stored, account data is kept while the account is active and logs for a limited period, and the DPA deletes or returns customer data at termination.

Recipient Disclosure and AuthenticityRecipient Disclosure and AuthenticityHow the product presents itself to the people it targets: whether automated outreach and AI agents disclose themselves, whether sender personas are real, and whether personalization is grounded in verifiable fact. Measured as known compliance with Article 50 of the EU AI Act, in force since August 2, 2026, which requires AI systems that interact with individuals to disclose that fact.
CC on Recipient Disclosure and AuthenticityNothing published on whether recipients are told they are dealing with software. For a product whose AI talks to prospects, silence here is now a regulatory posture, not a style choice.
Vendor Published

Derrick sends nothing itself and pushes leads into La Growth Machine and lemlist for outreach. No notice to the people in the data is described, and no position on Article 50 of the EU AI Act is taken.

Integration and Deployment
Ecosystem and Integration DepthEcosystem and Integration DepthDocumented depth of CRM and stack integration: objects, sync direction, API surface, marketplace presence that matches the claims.
BB on Ecosystem and Integration DepthSolid primary CRM integration documented, with depth unstated at the edges (sync direction, custom objects, failure behavior).
Vendor Published

The Google Sheets add-on, an API with 35 endpoints at 60 requests a minute and one record per call, and an MCP server that works with Claude, ChatGPT, Cursor and Windsurf all share one credit pool, and Zapier, Make and n8n connect natively. Leads push free to La Growth Machine, lemlist and webhooks, while HubSpot, Salesforce and Pipedrive have no native sync. The API and MCP server start on the Plus plan.

Deployment Model and Data ResidencyDeployment Model and Data ResidencyWhere the product runs and where customer data lives, including residency options for EU buyers.
BB on Deployment Model and Data ResidencyThe deployment model is clear and residency options are partially specified.
Vendor Published

The service is hosted on Heroku using AWS servers in Europe. No residency options or tenancy details are described.

Security Certifications and Trust CenterSecurity Certifications and Trust CenterVerifiable security posture: enumerated current certifications and a trust center an outsider can actually read.
DD on Security Certifications and Trust CenterNo verifiable security posture published for a product that ingests commercial data at scale.
Vendor Published

HTTPS encryption in transit, access limited to authorized staff and API keys are the only security measures described. SOC 2, ISO 27001, a trust center, encryption at rest, single sign on and multi factor sign in are not listed, on a service that stores users' LinkedIn session tokens.

Commercial and Operational
Commercial TransparencyCommercial TransparencyWhether a buyer can budget without a sales call. Published pricing graded on completeness, not on the price itself.
AA on Commercial TransparencyReal prices published: plans, seat or usage economics, and the shape of enterprise pricing, sufficient for a buyer to budget without a call.
Vendor Published

Prices are in euros: a free plan gives 100 credits, Standard costs €20 a month for 10,000 credits, Plus €47.50 for 25,000 with the API and MCP, Pro €175 for 100,000 and Scale €320 for 200,000, with larger volumes priced on usage. A LinkedIn profile costs one credit, a found email five, a found phone number 200, verification one and an Ask Claude row two, and finders charge only when they find something. Credits roll over on paid plans, and no annual plan is offered.

Exit and Data PortabilityExit and Data PortabilityWhat happens when a customer leaves: completeness of data export, rights to enriched or licensed data after termination, deletion commitments, and auto renewal mechanics, graded from published terms and documentation.
BB on Exit and Data PortabilityReal export capability documented, with a material exit question unstated in public terms, commonly post termination rights to licensed or enriched records.
Vendor Published

Plans renew monthly until cancelled and can be stopped at any time with no notice period, while refunds are not addressed. Results already sit in the customer's spreadsheets, account data can be exported or deleted on request by email, and the DPA deletes or returns customer data at termination. French law and the courts of Marseille govern, and liability is capped at twelve months of fees.

Deliverability and Sending DisciplineDeliverability and Sending DisciplineThe operational craft of sending: warmup, rotation, volume governance, spam rate monitoring, and what happens when reputation degrades.
CC on Deliverability and Sending DisciplineDeliverability is invoked as a benefit with no documented mechanism. For senders this is the axis where marketing most outruns evidence.
Vendor Published

Emails are checked by SMTP before they are written back and marked with a status that includes catch all, but no further method is described. Verification is presented as guaranteeing validity, while the terms provide results as is and disclaim accuracy, and no bounce refund is offered.

Segment and Market CoverageSegment and Market CoverageWho the product actually serves, evidenced: segments, geographies, languages, and customers that match the claim.
BB on Segment and Market CoverageSegment focus is clear and evidenced with a gap in geographic or language specifics.
Vendor Published

Founders, SDRs, sales teams, agencies, recruiters and freelancers are the named buyers, and lookups by SIREN, SIRET and NAF codes and a product in English and French point to a strong French market. Benchmarks cover the US, UK, France, Germany and APAC.

Alternatives

Alternatives to Derrick

Vendors in the same categories as Derrick whose graded profiles look most alike, with a line on what each product does.

Similar is not the same, so check that each one does the job you need. No vendor pays for placement.

Generect is a B2B lead search engine that finds companies and people matching an ideal customer profile, then finds and validates their work emails and direct phone numbers.

RocketReach is a contact database for finding the email addresses and phone numbers of business professionals.

European business lead sourcing and cold outreach platform aimed at agencies, consultants, freelancers and small sales teams.

Leadsforge is a business to business contact data product with a conversational interface.

UpLead is a B2B contact and company database built for small and mid sized sales teams.

Browser extension and platform that captures lead identities from professional network profiles and search results, resolves them to a claimed database of verified business emails and phone…

Ordered by how closely the graded profiles match across the seventeen axes, inside the same categories. See how each axis is graded in the methodology.

Commercial

Pricing

What this vendor charges, what it commits to in writing, and where the bill can move. Figures the vendor publishes itself are labeled Vendor Published. Figures labeled Estimated come from other sources and the vendor has not confirmed them.

What it costs
Vendor Published
Standard €20/month (10,000 credits)
In short
  • ›Derrick sells monthly credit plans in euros, from €20 for 10,000 credits to €320 for 200,000, with a free plan of 100 credits. A LinkedIn profile costs one credit, a found email five and a found phone number 200, and lookups that find nothing are free.

How the price works

What you are charged for, and what makes the bill go up.

Monthly credit plans in euros from €20 to €320; credits per action; finders charge only on a result; usage pricing above 200,000 credits

What the contract says about your data

What the vendor commits to in writing once your data is in the product.

No BAA tier listed; a DPA is published.

Getting started

What it costs and what is included before the product is running.

No setup fee listed.

What to watch for

Where this pricing can surprise a buyer who has not read it closely.

A free plan gives 100 credits without a card. A found phone number costs 200 credits, about €0.32 to €0.40 depending on plan, and a found email five. Credits roll over on paid plans and expire on return to the free plan, the API and MCP server start on Plus, no annual plan is offered, and refunds are not addressed.

Contact us

Found a vendor we missed? Have feedback on the index? We’d love to hear from you.