Who sees what, and who changed it.
Roles, data scope, an audit log and undo keep control with your administrators.
Sign in with care
Every request without a login gets a 401 answer and no data.
- Login with refresh tokens
- Optional two-factor sign-in with an authenticator app
- Password reset
- A list of signed-in devices, with sign-out for each one
- On the phone, fingerprint or Face ID unlock that the server can require
- The server can block screenshots in the app
Who sees what
Each role has tick-box permissions and a data scope. The scope applies to lists, exports and reports.
| Scope | What the person sees |
|---|---|
| Own | Only the records that belong to them |
| Group | Records of their group |
| Branch | Records of their branch |
| All | Every record in the company |
- A read-only user is refused on every write, with a 403 answer
- A person with own scope who asks for someone else's record gets a 404, as if it did not exist
- Read-only users see no create, edit or delete buttons in the app
- Nobody can approve their own request
See what changed, and take it back
Changes leave a record. Most mistakes can be undone.
Audit log
A log of who changed what, with the values before and after. It is append-only.
30-second undo
Undo most changes within 30 seconds.
Admin restore
An administrator can restore deleted records.
Undoing a lead restores the lead row only. A contact merge cannot be undone.
Set it up your way
Each company decides what is on, what it is called and how it looks.
- Turn modules on or off in Settings > Modules
- Your company name, logo and colours, with no vendor name in the product
- Custom fields in 15 types on any record, and editable dropdown lists
- Number series that follow the financial year
- Saved views you can share
- Import from CSV, XLS or XLSX, and export any list to CSV or Excel
- English and Hindi, with a language choice for each user
Pages anyone can reach
Public forms and links are limited and checked.
Public forms
- Rate limits on public endpoints
- A built-in captcha question, a honeypot field and an origin list on web forms
- Referral sign-up with captcha and phone OTP, approved by an admin
Signed links and calls
- Webhooks are signed with HMAC, with retries and a delivery log
- Public links are checked with HMAC
- Email campaigns carry an unsubscribe link and keep a suppression list
The built-in captcha is a simple question. For stronger checks, MerlinLead connects to Cloudflare Turnstile when you add your own keys.
A backup method that has been restored
The encrypted database backup method was checked by restoring it into an empty database. The restored database had the same row counts.
- An encrypted dump of the database
- Restore into an empty database
- Export any list to CSV or Excel at any time
- Accounting vouchers as Tally Prime XML or CSV files
What is not included
So nothing here is a surprise later.
MerlinLead does not file GST returns or connect to Tally directly; it writes export files. It does not record calls: you can attach a file of your own to a call on the customer record. Screens are in English and Hindi only. Messages, push and lead portals start in sandbox mode and send nothing until you add your own provider account.
Already have an account?
Sign in to MerlinLead at app.merlinlead.com.