How This Briefing Works
This report opens with key findings, then maps the gaps between what Clari discloses and what BLACKOUT observed at runtime. From there: what it means for your organization, what to do about it, and the detection data and evidence underneath.
Key Findings
Analysis pending. Findings will appear here once intelligence collection is complete.
Claims vs. Observed Behavior
pending
“Awaiting scanner verification”
Clari's primary data collection occurs server-side through API integrations rather than client-side JavaScript, limiting observable runtime behavior
What This Means For You
What To Do About It
Role-specific actions based on observed behavior
Recommended Actions for Clari
- →- Audit Clari's data ingestion scope: review exactly which email, calendar, and CRM data flows are active and whether they match documented permissions. - Review Clari's data retention and deletion policies to understand how long captured sales activity data persists after contract termination. - Assess forecasting dependency: determine whether the organization retains independent pipeline analysis capability outside of Clari. - Evaluate employee notification: confirm that sales reps understand the extent of email and calendar data being captured and analyzed. - Request Clari's SOC 2 report and review access controls governing who within Clari can view customer pipeline and communication data.
Negotiation Leverage
- →Clari's leverage comes from forecasting dependency -- once an organization's pipeline management runs through Clari, switching costs are substantial. Negotiate data portability clauses upfront: ensure contractual rights to export all captured activity data in standard formats upon termination. Require explicit data deletion timelines post-contract. Push for transparency on which Clari employees or AI systems can access your organization's email and calendar data. If Clari claims anonymization or aggregation of customer data for model training, demand contractual exclusion of your data from cross-customer model development. The 87% miss rate on revenue targets reported by Clari Labs (2025) is worth raising -- if the platform's own research shows most customers miss targets, the ROI conversation should focus on measurable lift with clear benchmarks.
Runtime Detections
BLACKOUT observed this vendor's JavaScript executing in a live browser and classified each hostile behavior using our BTI-C (Behavioral Threat Intelligence — Capability) taxonomy. These are not theoretical risks — each code below was triggered by something we watched this vendor's code actually do.
Evasion infrastructure, auditor bypass
Impact: Clari replaces internal forecasting with proprietary AI models, creating organizational dependency on a single vendor for pipeline truth. Removing Clari requires rebuilding revenue visibility from scratch.
Keystroke/mouse tracking
Impact: Clari captures demand signals across the entire revenue stack -- engagement patterns, deal velocity, buying signals -- creating a comprehensive map of customer behavior and sales team performance.
Full session replay
Ignoring CMP signals
Device identification
Long-lived identifiers
IOC Manifest
Indicators of compromise across 4 categories. Use for detection rules, CSP policies, or Pi-hole blocklists.
Ecosystem & Supply Chain
Evidence Artifacts
Artifacts collected during analysis, available with evidence-tier access.
Complete network capture with all requests and responses
84 detection signatures across scripts, domains, cookies, and network endpoints