Merge API
Transparency
Breakdown
| Subprocessor list | 30 / 30 | |
| Processing locations | 8 / 8 | |
| Purposes | 7 / 7 | |
| Data processing addendum | 12 / 12 | |
| Trust center | 8 / 8 | |
| Privacy policy | 6 / 6 | |
| security.txt | not found | 0 / 6 |
| Security page | 5 / 5 | |
| Status page | 5 / 5 | |
| Vulnerability disclosure | not found | 0 / 5 |
| Pages still reachable | 8 / 8 | |
| Total | 89 / 100 |
Only documents we can retrieve count: a page behind a login or a broken link scores nothing.
Badge
For Merge API's own site; it updates with the rating.
<a href="https://thirdpartyindex.com/vendors/merge-api"><img src="https://thirdpartyindex.com/badge/merge-api.svg" alt="Merge API transparency rating on Third Party Index" height="20"></a>[](https://thirdpartyindex.com/vendors/merge-api)Compliance
- Certified
- Says it complies with
Certifications as Merge API's trust center lists them; reports are usually shared on request (evidence)
Documents
| Document | Verified | Changed | Evidence |
|---|---|---|---|
| Trust center safebase | snapshot | ||
| Subprocessor list safebase | snapshot | ||
| Data processing addendum | snapshot | ||
| Privacy policy | snapshot | ||
| Terms | snapshot | ||
| Security page | snapshot | ||
| Status page | snapshot |
Subprocessors
| Name | Purpose | Location | Listed since |
|---|---|---|---|
| Anthropic | Anthropic provides large language models that Merge uses to enhance various services it provides to customers. | United States | |
| Cloudflare | Web security, DDoS protection, and content delivery (CDN). | Processing is performed at the data center that is closest to the End User | |
| Looker | Enables the viewing of Customer Data including personal data via the Service. This is restricted internally via hard access controls and policies, and a limited subset of Merge employees is only able and permitted to access this data in response to support requests. Location | Google Cloud Platform - US West | |
| OpenAI | OpenAI provides large language model services that Merge uses to process customer data in connection with Support cases and ongoing maintenance of our services, including onboarding assistance, support request analysis, issue diagnosis, and integration support. | US, EU | |
| PostHog | PostHog provides a hosted solution for analyzing and improving the services Merge provides to its customers. | United States | |
| Pylon | Pylon is a hosted service that enables its customers to track support issues across various other platforms, such as email, messaging, and in-app forms. | United States | |
| Sentry | Sentry is an error monitoring and remediation platform used to better understand and resolve issues encountered in our products. Incidental to the purpose of the error monitoring, Customer and End User data may be processed by Sentry. Example data includes Customer and End User IP addresses, linked account IDs, user names, email addresses, and other types of data processed by Merge. | United States, Germany | |
| Slack | Slack (Salesforce.com) is a messaging platform Merge uses for internal collaboration as well as external communication with customers. | United States | |
| Structify | Structify is an AI-powered tool that automates the collection and organization of data from various platforms into organized datasets for analytics and reporting purposes. | United States |
Listed as a subprocessor by (11)
Purposes as each company states them.
BrightHire brighthire.com Vendor integration
Culture Amp cultureamp.com Merge provides integrations to multiple HRIS providers. It enables Culture Amp customers to integrate with their chosen HRIS provider where Culture Amp does not have a native integration. Customer’s employee data is pulled in using a common format from Customer HRIS tools to the Culture Amp platform via Merge.
Freshworks freshworks.com 3rd party applications via; Merge API is a platform which helps; and its customers can integrate to; enable integration between; freshworks products and other; marketplace apps through Merge Connector API.; software applications. Freshworks
Gem gem.com Data integration solution to help connect to various ATS (Applicant Tracking Systems) and other internal systems
OpenAI openai.com Infrastructure management
Oyster HR oysterhr.com Facilitation of API-based data transfers between the Oyster Platform and Customer HRIS and Payroll Systems
SurveyMonkey surveymonkey.com For customers using the HRIS integration, Merge facilitates the customer-authorized transfer of data from the customer’s chosen HRIS to the the SurveyMonkey platform
Telnyx telnyx.com Integration and synchronization of data between business systems. Processes personal data contained in records transmitted through the configured integrations.
Vanta vanta.com Optional integrations and tools; Platform Integration Tool (customer optional)
WorkRamp workramp.com
incident.io incident.io To manage employee on-call coverage
Changes
None since tracking began.