Privacy & Data

Access requires Merkle credentials and app-based two-factor authentication (TOTP). Two-factor secrets are encrypted at rest and recovery codes are stored only as hashes. Viewers are folder-scoped — they see only the regions and workspaces assigned to them; administrators see everything. Sessions use encrypted cookies.

People data is pulled from Salesforce via read-only queries — nothing is ever written back to Salesforce. It covers work-context attributes such as name, work email, manager, title, region/country, cost center, certifications, and engagement/skillset scores. This is employee data and is treated with care and minimized to what the reporting needs.

The data powers analysis and reporting for practice leadership — certification coverage, deployment readiness, and engagement trends. It is used inside Merkle for that purpose only. It is not sold, and it is not shared outside Merkle.

Heavy per-run snapshots are pruned from analysis runs older than roughly one year, while the latest run per workspace and lightweight trend metrics are always kept. A compact person-level archive is retained for longitudinal analysis in place of the full snapshot.

Every administrative and automated action is logged with attribution, filterable by category, and exportable. The daily email job writes a per-run heartbeat, so a missed run is visible rather than silent.

Operational sync notices are transactional. Leadership digests and lifecycle nudges are low-frequency and can be turned off in one click; addresses that hard-bounce or report spam are automatically suppressed from future sends. Sender identity is accurate and authenticated (SPF/DKIM/DMARC).

To ask a question about your data, or to exercise a data right, contact john.khuu@merkle.com. Trailblazer Scout operates within Merkle's corporate data-protection governance; refer to Merkle's corporate privacy policy for lawful basis, data-subject rights, and how they are exercised.