HR Cloud

Authentication & Authorization

Credentials

• DataGrail uses the Merge Platform to connect HR Cloud integration.
• API credentials can be obtained via HR Cloud account (see HR Cloud Connection Instructions).
• Publicly exposing your API credentials can allow unauthorized access to the HR Cloud API endpoints, and your HR Cloud data by a third party. DataGrail doesn't store your API credentials and delegates this to the Merge Platform.

Access

For an access request, DataGrail will take the following actions:

• Search employees by the Data Subject email.

You can edit which objects and fields you want to provide to the Data Subject via our Portal Requests.

Endpoints Utilized

• GET https​://api.merge.dev/api/hris/v1/employees

note

DataGrail also supports the Direct Contact Access workflow for HR Cloud integration.

Deletion

For a deletion request, DataGrail uses Merge Authenticated Passthrough Requests.

DataGrail will take the following actions:

• Search employees by the Data Subject email.
• Update an employee to anonymize personal data (see Anonymization Setup Process).

Endpoints Utilized

• GET https​://corehr-api.hrcloud.com/v1/cloud/xEmployee
• PUT https​://corehr-api.hrcloud.com/v1/cloud/xEmployee

note

DataGrail also supports the Direct Contact Deletion workflow for HR Cloud integration.