Independent verification of data-removal efficacy: Priwall by mePrism's AICPA AT-C 215 practitioner report
By Tom Daly, founder and CEO, Priwall by mePrism · Published September 16, 2026 · Last reviewed September 16, 2026
We intend to refresh this measurement annually as our enterprise dataset and broker coverage mature. The full methodology, scope, and the practitioner report itself will live at priwall.io/methodology and priwall.io/efficacy at launch. Qualified enterprise buyers who want the underlying data package under NDA can write to enterprise@meprism.com.
TL;DR
Independent practitioner report. Sensiba LLP, an independent Certified B Corp CPA firm, performed an AICPA AT-C Section 215 agreed-upon procedures engagement on Priwall by mePrism's removal-tracking data. The practitioner report was signed August 18, 2026.
Greater than 92% at 30 days and greater than 99% at 90 days. Sensiba independently recalculated Priwall's removal-rate figures for a representative sample of enterprise customers. Median time to first confirmed removal was 4 days.
Consumer Reports 2024 subset. On the 12 remaining people-search brokers used in the study, Sensiba's recalculation showed 100% confirmed removal within 90 days on 11 brokers and 99.24% on PeopleFinders. Dataveria has since gone offline.
A defined evidence tier. The engagement provides AICPA AT-C Section 215 factual findings from specified procedures. It is not an audit, certification, or endorsement, and it sits alongside rather than replacing Priwall's separate SOC 2 Type 2 report on security controls.
First of its kind, to our knowledge. To our knowledge, this is the first published AICPA AT-C Section 215 engagement on data-removal efficacy figures in the category.
Removal performance independently recalculated by Sensiba LLP
Priwall by mePrism, an enterprise data-removal service, published a signed AICPA AT-C Section 215 practitioner report on August 18, 2026, prepared by Sensiba LLP, an independent Certified B Corp CPA firm.
at 90 days
Sensiba independently recalculated Priwall's removal-rate figures for a representative sample of Priwall's enterprise customers, reporting greater than 92% confirmed removal at 30 days and greater than 99% at 90 days, with a median time to first confirmed removal of 4 days. On the Consumer Reports 2024 subset, the recalculation showed 100% confirmed removal within 90 days on 11 of the 12 remaining people-search brokers and 99.24% on PeopleFinders. Dataveria has since gone offline. To our knowledge, this is the first published AICPA AT-C Section 215 engagement on data-removal efficacy figures in the category.
Why this matters
Most efficacy numbers in the data-removal category come from the companies publishing them. That has been true for years, and it is why I have been careful about how Priwall by mePrism talks about efficacy. "Our own math on our own data" is not the evidence a security or procurement team should have to accept on faith.
So we asked an independent Certified B Corp CPA firm, Sensiba LLP, to run the calculation for us — under a defined U.S. standard, on our real enterprise data, with the procedures agreed in advance and the findings reported factually.
What AICPA AT-C 215 is
AICPA AT-C Section 215 is the American Institute of Certified Public Accountants' standard for agreed-upon procedures engagements. In this format, the engaging party and a CPA practitioner define specific procedures in advance. The practitioner performs those procedures and reports factual findings. The report does not offer a company-wide conclusion. It does not predict future performance. It reports exactly what the practitioner did and what the practitioner found.
The five procedures Sensiba performed on Priwall by mePrism's data
Evaluate Confirmator
Sensiba walked Confirmator, our internal removal-verification tool, end-to-end so they could evaluate whether it measures what we say it measures.
Verify recorded removal status
Sensiba independently queried the corresponding broker pages for a source-and-broker verification sample of 25 records and compared what they observed to Priwall by mePrism's recorded status. All 25 matched.
Recalculate removal rates
Sensiba independently recalculated the 30-day and 90-day removal-rate percentages from Priwall by mePrism's raw tracking data.
Recalculate median time to first removal
Sensiba independently recalculated the median time to first confirmed removal, which was 4 days.
Recalculate the Consumer Reports subset
Sensiba isolated the subset of Priwall by mePrism's data corresponding to the people-search brokers used in Consumer Reports' August 2024 Data Defense study, and recalculated that subset at 90 days only.
Sensiba walked Confirmator, our internal removal-verification tool, end-to-end so they could evaluate whether it measures what we say it measures. Sensiba then independently queried the corresponding broker pages for a source-and-broker verification sample of 25 records and compared what they observed to Priwall by mePrism's recorded status; all 25 matched. Sensiba independently recalculated the 30-day and 90-day removal-rate percentages from our raw tracking data. Sensiba independently recalculated the median time to first confirmed removal, which was 4 days. And Sensiba isolated the subset of our data corresponding to the people-search brokers used in Consumer Reports' August 2024 Data Defense study, and recalculated that subset at 90 days only.
How the evidence tiers compare
| Evidence class | Vendor | Standard / study | What it calculates | Independent CPA firm? |
|---|---|---|---|---|
| Agreed-upon procedures | Priwall by mePrism | AICPA AT-C Section 215 (2026) — Sensiba LLP | Recalculated removal-rate outcome at 30 days, 90 days, CR-13 90-day subset, and median time to first confirmed removal on Priwall's enterprise data. | Yes — Sensiba LLP, Certified B Corp CPA firm |
| Limited assurance report | Incogni | Deloitte ISAE 3000 Independent Limited Assurance Report (August 2025) — Deloitte Lietuva UAB | Broker coverage, request cadence, and requests processed. Process and volume claims. | Yes — Deloitte Lietuva UAB |
| Vendor self-report | DeleteMe | Company disclosures | More than 141 million lifetime opt-out requests processed. First report delivered in 7 days. Request-activity metric, not a removal-rate outcome. | No |
| Vendor self-report | Optery | Company disclosures | Coverage of 950+ sites. Coverage metric, not a removal-rate outcome. | No |
| Independent consumer-journalism test | Consumer Reports | Data Defense: Evaluating People-Search Site Removal Services (August 2024) | Real-world outcomes across 13 people-search sites under the study's published methodology, with 32 volunteer participants. | No — independent journalism, not a CPA engagement |
How the CR-13 subset reads at 90 days
Consumer Reports' 2024 Data Defense study is the reference point most enterprise buyers already know. Of the 13 people-search brokers Consumer Reports tested in its August 2024 Data Defense study, 12 remain operational; Dataveria has since gone offline. Privacy Guides removed Dataveria from its data-broker list as defunct in February 2026.
| Broker | Priwall by mePrism — Sensiba recalculation, 90-day confirmed removal |
|---|---|
| BeenVerified | 100% |
| CheckPeople | 100% |
| ClustrMaps | 100% |
| Intelius | 100% |
| MyLife | 100% |
| Nuwber | 100% |
| PeopleFinders | 99.24% |
| PublicDataUSA | 100% |
| Radaris | 100% |
| Spokeo | 100% |
| ThatsThem | 100% |
| Whitepages | 100% |
| Dataveria | Not applicable — Dataveria has since gone offline |
The result is reported per broker, not as a single blended percentage. Blending it away would hide where the work is hardest, and it would stack a different denominator against Consumer Reports'. The CR-13 subset was designed so the site denominator matches Consumer Reports' study, which is the only way the two efforts can be compared without stacking different denominators against each other.
Where this sits in the data-removal category
The data-removal category has, to date, largely measured itself by requests sent, not records removed. DeleteMe (Abine) publicly advertises more than 141 million lifetime opt-out requests processed and a first report delivered in 7 days. Optery publicly advertises coverage of 950+ sites; as of September 7, 2026, Optery became a majority-owned subsidiary of Netherlands-registered Surfshark B.V. inside the Nord Security group. Incogni operates as a product of the same Surfshark B.V. entity and published a Deloitte ISAE 3000 Independent Limited Assurance Report in August 2025 covering broker coverage, request cadence, and requests processed. None of these public claims is a customer-record removal-rate outcome.
That is the gap Priwall by mePrism's AICPA AT-C Section 215 engagement addresses — the outcome question, calculated on the actual tracking data, by an independent CPA firm, under a U.S. attestation standard.
Scope of the engagement — what the practitioner report does not do
An AICPA AT-C Section 215 practitioner report is not an audit, not a certification, and not an endorsement. Sensiba did not evaluate our security controls in this engagement; that is what our separate SOC 2 Type 2 report is for. Sensiba LLP also serves as Priwall by mePrism's SOC 2 auditor. The practitioner-report findings cover CY2026 enterprise data and do not predict future performance. Individual and consumer accounts are outside the population in scope. The practitioner report presents factual findings from specified procedures.
For enterprise procurement, insider-risk, and executive-protection buyers who evaluate vendors against defined evidence tiers, this shifts the removal-rate claim from vendor self-report to an independent CPA-firm-calculated outcome. That shift is the point.
— Tom Daly, founder and CEO, Priwall by mePrism
Tom Daly is the founder and CEO of Priwall by mePrism, the enterprise open-source data-removal platform used by security, executive-protection, and digital-risk teams to shrink broker exposure across 700+ U.S. data brokers. He writes on data privacy, cybersecurity, and constitutional privacy at the Priwall blog and on LinkedIn.