Integrations for GDPR-compliant companies

At Merge, data protection is top priority — and has been from the beginning.

While the GDPR only governs data protection in the EU, Merge recognizes that the obligations set by the GDPR are the world’s strongest set of data protection directives and as such, Merge chooses to implement these for all data transfers, regardless of geography.

Trusted to power integrations at top European companies

Merge is committed to supporting our growing European customer base

  • 30% of Merge customers are based in Europe
  • Global offices in NYC, SF, and Berlin
  • Merge supports a wide range of European software integrations

Data localization and transfer

Merge puts in place a DPA (data processing agreement) with all customers, whereby Merge commits to processing data transfers in accordance with GDPR’s Standard Contractual Clauses. In addition, Merge offers customers control over where their data is stored.

EU-tenants

If the customer selects our EU multi-tenant environment, data will only be stored in the EU in Stockholm

Learn more
Single-tenants

Receive your own servers and databases that are fully separated from other Merge customers

Data minimization

Meaningfully control and limit what data is shared

Scopes

Set precise scopes to sync only what’s needed, respecting your customers’ data privacy

Learn more
Selective sync

Configure data synced to Merge based on third-party fields and parameters

Learn more
Redact unmapped data

Redact data from third-party unmapped fields to hide sensitive data from logs and remote data

Learn more

Data access and erasure

Seamlessly delete any data at any time

Data deletion via ignore endpoint

Exclude accessing specific individuals' personal data, while continuing to pull others

Learn more
Linked Account deletion

When a Linked Account is deleted, all data associated with that account is also deleted from Merge

Learn more

Accountability and compliance

Automatically keep detailed records of data processing activities and easily restrict access to Merge

Audit trail

Full transparency and accountability for all user actions in the Merge Dashboard

Learn more
SSO with SAML

Compatible with Single Sign-On (SSO) with Security Assertion Markup Language (SAML), control access to the Merge dashboard and enforce organizational policies

Role-based access control

Restrict what type of access Merge users have based on their assigned role

Case study

How deskbird uses Merge’s European-focused HRIS integrations to expand across the continent

View case study

“Through Merge, we’ve been able to provide HRIS integrations that exceed our European-based customers’ security requirements.”

Ilija Bozic
Senior Product Manager, deskbird