All services encompassed by the add-on are under permissions enforced by EBX®. However, for the merge user interface, it must be taken into consideration that-at the default level-permission applied to the data is not yet enforced. This means that only a user with appropriate access must be authorized to merge records because all data are directly available. It is possible to force the application of EBX® permission on the merge view from the process policy configuration ('Applied EBX® permission on merge view').