Integrations for GDPR-compliant companies
At Merge, data protection is top priority — and has been from the beginning.
While the GDPR only governs data protection in the EU, Merge recognizes that the obligations set by the GDPR are the world’s strongest set of data protection directives and as such, Merge chooses to implement these for all data transfers, regardless of geography.

Trusted to power integrations at top European companies




Merge is committed to supporting our growing European customer base
- 30% of Merge customers are based in Europe
- Global offices in NYC, SF, and Berlin
- Merge supports a wide range of European software integrations

Data localization and transfer
Merge puts in place a DPA (data processing agreement) with all customers, whereby Merge commits to processing data transfers in accordance with GDPR’s Standard Contractual Clauses. In addition, Merge offers customers control over where their data is stored.

EU-tenants
If the customer selects our EU multi-tenant environment, data will only be stored in the EU in Stockholm
Single-tenants
Receive your own servers and databases that are fully separated from other Merge customers
Data minimization
Meaningfully control and limit what data is shared
Scopes
Set precise scopes to sync only what’s needed, respecting your customers’ data privacy
Redact unmapped data
Redact data from third-party unmapped fields to hide sensitive data from logs and remote data
Data access and erasure
Seamlessly delete any data at any time
Data deletion via ignore endpoint
Exclude accessing specific individuals' personal data, while continuing to pull others
Linked Account deletion
When a Linked Account is deleted, all data associated with that account is also deleted from Merge
Accountability and compliance
Automatically keep detailed records of data processing activities and easily restrict access to Merge
Audit trail
Full transparency and accountability for all user actions in the Merge Dashboard
SSO with SAML
Compatible with Single Sign-On (SSO) with Security Assertion Markup Language (SAML), control access to the Merge dashboard and enforce organizational policies
Role-based access control
Restrict what type of access Merge users have based on their assigned role
How deskbird uses Merge’s European-focused HRIS integrations to expand across the continent
“Through Merge, we’ve been able to provide HRIS integrations that exceed our European-based customers’ security requirements.”