How This Briefing Works
This report opens with key findings, then maps the gaps between what Folloze discloses and what BLACKOUT observed at runtime. From there: what it means for your organization, what to do about it, and the detection data and evidence underneath.
Key Findings
Analysis pending. Findings will appear here once intelligence collection is complete.
Claims vs. Observed Behavior
pending
“First-party data platform”
Awaiting scanner verification of tracking script behavior, cookie deployment timing relative to consent, and cross-channel data transmission endpoints
pending
“GDPR compliant”
Progressive identity resolution mechanics need runtime observation to confirm whether behavioral capture initiates before consent mechanisms fire
pending
“AI-powered personalization”
Scope and nature of AI data processing on visitor behavioral data needs direct observation to fully characterize
What This Means For You
What To Do About It
Role-specific actions based on observed behavior
Recommended Actions for Folloze
- →- Audit consent flow timing: Verify that Folloze tracking scripts do not fire before your consent management platform captures visitor preferences. - Map data flows: Document exactly what behavioral data Folloze captures on your properties and where that data is transmitted, stored, and shared with integrated platforms. - Review DPA terms: Ensure your Data Processing Agreement with Folloze explicitly covers the progressive identity resolution mechanics and cross-channel behavioral data collection. - Assess measurement overlap: Compare Folloze engagement metrics against your primary analytics to identify attribution conflicts and measurement fragmentation. - Evaluate visitor disclosure: Confirm your privacy policy accurately describes the behavioral tracking and personalization activities Folloze performs on your site.
Negotiation Leverage
- →When negotiating with Folloze, focus on data ownership and portability clauses — ensure you retain full ownership of all behavioral data captured on your properties and can export it without restriction. Push for explicit contractual commitments on pre-consent data handling: what happens to behavioral signals captured before a visitor provides consent? Request transparency on data retention policies and deletion timelines. If integrating with 6sense or Demandbase through Folloze, clarify the data-sharing boundaries between platforms and ensure your DPA covers the full chain of custody. Folloze's value proposition depends on deployment on your properties, which gives you leverage to demand favorable data governance terms.
IOC Manifest
Indicators of compromise across 4 categories. Use for detection rules, CSP policies, or Pi-hole blocklists.
Ecosystem & Supply Chain
Evidence Artifacts
Artifacts collected during analysis, available with evidence-tier access.
Complete network capture with all requests and responses
51 detection signatures across scripts, domains, cookies, and network endpoints