How This Briefing Works
This report opens with key findings, then maps the gaps between what Close discloses and what BLACKOUT observed at runtime. From there: what it means for your organization, what to do about it, and the detection data and evidence underneath.
Key Findings
Claims vs. Observed Behavior
pending
“Requires claims extraction via CDT”
Live website analysis pending
What This Means For You
What To Do About It
Role-specific actions based on observed behavior
If You Use Close
- →Audit call recording consent workflows across deployed regions
- →Review data processing addendum for clarity on Close's rights to aggregate insights
- →Implement retention policies to minimize storage of prospect communication data
If You're Evaluating Close
- →API access to raw engagement data to reduce dependency on Close analytics
- →Alternative conversation intelligence tools that offer greater data portability
- →Self-hosted communication infrastructure to eliminate third-party intelligence layer
Negotiation Leverage
- →Request explicit contractual prohibition on using your prospect data for Close's machine learning or benchmarking products
- →Demand data export capabilities that include raw behavioral signals, not just Close's scored outputs
- →Negotiate clear data residency and cross-border transfer controls for prospect communication records
Runtime Detections
BLACKOUT observed this vendor's JavaScript executing in a live browser and classified each hostile behavior using our BTI-C (Behavioral Threat Intelligence — Capability) taxonomy. These are not theoretical risks — each code below was triggered by something we watched this vendor's code actually do.
Keystroke/mouse tracking
Impact: Fingerprints prospect engagement patterns across email, calls, and web interactions to build predictive engagement scores
Identity stitching
Impact: Synchronizes prospect identity across communication channels and web sessions to unify behavioral profiles
IOC Manifest
Indicators of compromise across 2 categories. Use for detection rules, CSP policies, or Pi-hole blocklists.
No indicators in this category
Ecosystem & Supply Chain
Evidence Artifacts
Artifacts collected during analysis, available with evidence-tier access.
Complete network capture with all requests and responses
14 detection signatures across scripts, domains, cookies, and network endpoints