How does an agency get Scintilla access, and does it need Verified Service Provider status first?

Through sponsored access, the structure Walmart built for outside firms. The client, as the supplier, sponsors your firm as a third-party service provider; your firm holds Verified Service Provider status with Walmart Data Ventures; your firm signs a Service Provider Access Agreement (an SPAA) directly with Walmart; and once those three are in place, your people are assigned their own credentials under your firm’s own Scintilla account. From there, one login per person can serve the whole client roster: full access to one primary client’s subscription, plus a limited, defined set of self-service applications for each additional client, each under its own SPAA. That is the Walmart-side structure as of September 2026; the screens inside Scintilla govern, and if what you see in the portal differs, trust the portal.

Why can’t the client just add your team under their own logins?

Because Walmart’s sharing terms for Scintilla rule it out explicitly: a supplier is prohibited from sharing its own credentials with any third party, and an outside firm receives access on four conditions. It must be sponsored by the supplier; it must hold Verified Service Provider status with Walmart Data Ventures; it must sign an access agreement with Walmart directly; and it must then be assigned its own credentials. The first three are gates. Only the fourth is a login.

The signature map is worth having straight before the engagement letter goes out, because two of the four steps are not yours to take. The supplier sponsors; that is their act. Your firm applies for verification and signs the SPAA; the client’s own master service agreements with Walmart continue to govern what the data may be used for, and the same terms that prohibit credential borrowing bar Walmart data, even masked, from leaving the supplier organization it belongs to. The SPAA is per supplier relationship: a second client needs its own SPAA with your firm before their admin can grant you anything, and each SPAA scopes your access to that one client. Category-scope work adds a further legal layer, the Category Advisor Agreement, which a role toggle alone does not confer.

Does an agency have to be a Walmart Data Ventures Verified Service Provider first?

Yes. Walmart Data Ventures runs a Verified Service Provider program, and its public program page states that participation is “required for all third parties seeking access to Walmart data through Scintilla” on either a Basic or a Charter subscription. For firms supporting Charter clients, the page describes verification as a prerequisite to being eligible to sign an SPAA at all, and more broadly as required to establish, maintain, or renew any SPAA with a Scintilla subscriber.

What the program asks for, as the page describes it in September 2026: a firm must provide data and analytics services relevant to Scintilla, must be eligible to register with Walmart as a Goods Not For Resale supplier, and must pass an External Party Risk Management security assessment. Verification has three independent steps: onboarding as that GNFR supplier to obtain system access, which includes securing Retail Link credentials; the security assessment; and a learning module on SPAA terms that ends in a final exam. There is no fee. Applications are reviewed within ten business days, and most providers finish within six to eight weeks. Verification lasts while the firm stays in good standing, and it carries an annual confirmation form (the VSPAC, covering eight areas of data use and compliance), a 90 to 120 minute annual conversation with the Walmart Data Ventures team, and a full program renewal every two years.

Verification does not by itself grant access to Scintilla or to any Walmart data; the program’s published terms say so, and access still arrives through the supplier’s Scintilla agreement and the third-party access agreement. Nor is it an endorsement: the pages state that providers are independent third parties, not affiliated with Walmart Data Ventures, and that a listing is not a Walmart endorsement.

That listing is the other half of the program. The public directory is filterable by service type and location, and the service types are where a broker or agency finds its category: Secure Data Exchange, Data Analytics, Sales Brokering, Field Merchandising (PSP), Retail Media, Category Advising, and Business Consulting. A sales broker fits Sales Brokering; a firm running a client’s Walmart Connect campaigns fits Retail Media. Pick the type that matches the SPAA scope you will actually sign.

What does the provisioning actually look like, end to end?

Three things get built: your firm’s verification, your firm’s own Scintilla organization, and the grants from each supplier into it. Verification comes first because it precedes the SPAA; the organization comes before the grants because nothing can be granted to a login that does not exist.

Your firm’s account has its own miniature administration. An Agency Admin role manages your firm’s domains and users, but it can only create accounts; it cannot grant Scintilla application access, which stays with the client’s admin. Before anyone can be added, your firm’s email domain has to be authorized in the account: open consumer domains such as Gmail cannot be authorized, so a contractor on a personal address needs a firm mailbox first, and a domain registers to one company account, not several. A newly added user sits pending until they click their activation email, which is the usual answer to “we added her but she can’t log in.”

Then the supplier side. The client’s admin has three routes to you: add your people directly through User Management, approve requests as they arrive, or grant access proactively through the 3P Partners screen, which lists firms holding an SPAA with both Walmart and that supplier. The route that has mattered most since Walmart’s January 2026 release is the middle one, the Account Access self-service flow: your analyst goes to Profile, then Settings, then Account Access, selects a client whose SPAA with your firm is signed, checks the applications, and supplies a role and a required written reason, which is what the client’s admin sees in their Access Requests queue. The decision comes back by email, and every request, approval, and denial is written to the account’s Activity Log.

How does one login serve multiple clients?

Through a two-level structure Walmart defines: full access to one primary supplier, limited access for every additional supplier. Your analyst holds full access to one primary client’s account, meaning every Scintilla product that client subscribes to, and for any number of additional clients, access to a short, fixed list of self-service applications, Report Builder and Channel Performance Insights among them. The request screen shows the exact list; it is the same set the self-service flow covers.

Two boundaries inside that structure shape engagements. First, “full access to the primary” depends entirely on what the primary subscribes to: full access to a Basic client’s account is Report Builder over their own data, and the Basic versus Charter line is worth walking before the SOW is scoped. Second, Shopper Behavior is not in the self-service set. A secondary client who needs you in Shopper Behavior is handled outside the request flow; Walmart listed it as coming to self-service in the January 2026 release and had not moved it there as of July 2026. When you do hold Shopper Behavior across clients, the module’s Active Client switcher is how one login changes which client account it is operating against. One more boundary, in Customer Perception: the third-party role there can create and modify only its own research projects and cannot view others in the account, so reviewing a client’s prior studies happens on the client’s side of the glass.

What are the lead times, and what expires?

Four clocks are worth planning around, current as of September 2026. First, verification: a ten-business-day application response, then six to eight weeks for most providers, and it precedes the SPAA rather than running alongside it. Second, Shopper Behavior provisioning takes up to two business days after the grant, while other application permissions land effectively immediately; an analyst promised into Shopper Behavior for a Monday deliverable needs the grant before Thursday. Third, a pending access request expires quietly after sixty days if the supplier’s admin neither approves nor denies it; check the Requested tab and resubmit after resolving it with the client’s admin. Fourth, the SPAA moves at contract speed on both sides, and verification has maintenance of its own, the annual confirmation and the two-year renewal, which the program ties to keeping any SPAA in force.

API and warehouse-feed access to a client’s data runs on a separate track with a longer clock. The supplier, not your firm, files the third-party access request, and the filing lives or dies on its business justification: who gets access, why, and at what level. Requests without that paragraph get denied; the ones that get provisioned carry it. The request routes through the client’s Walmart Data Ventures account manager, Walmart issues a consumer ID, your firm hands back only the public key of a keypair it generates, and in practice this year the turnaround has run two to three weeks. Confirm the current form with the account manager before quoting a date.

Access also cascades on the way out: removing a user strips Scintilla, its applications, and the Knowledge Base together, and editing an authorized domain’s settings can remove the access of users on that domain. What a user currently holds across suppliers lives in the Active tab of User Management, and the history behind every grant lives in the Activity Log; those two screens, not memory, hold the answer when an engagement’s access comes into question.

What about the access question that surfaces mid-engagement?

The questions you cannot schedule are the mid-engagement kind: whether a secondary client’s grant covers the module the deliverable needs, which role a new analyst should request, whether the thing that stopped working expired or was revoked, whether a lapsed annual confirmation is why an SPAA renewal stalled. Retail Reason answers those directly, in the middle of the work. In chat, check the available guidance verification date and references to any files you provided. Guidance through a connected assistant includes an as-of date and confidence class; confirm current access in the appropriate system. It answers questions and checks plans; it does not file anything or touch anyone’s account. See pricing, or contact Matt.

What are the limits of this answer?

The program requirements, fee, timelines, and directory categories above are as published on the public Walmart Data Ventures program page on September 6, 2026, and that page says eligibility criteria are subject to change. The provisioning mechanics are as Walmart described them as of July 2026. The program page says verification is needed to maintain an existing SPAA as well as to sign a new one, but gives no transition date for firms already holding an agreement; ask the client’s Walmart Data Ventures account manager before assuming an existing SPAA carries over. If the current portal differs from this article, use the current portal.

Retail Reason is an independent service. It is not affiliated with, sponsored by, or certified by Walmart Inc. or Walmart Data Ventures, and it is not a Walmart Data Ventures Verified Service Provider. It does not connect to Scintilla or Retail Link, files nothing, and holds no credentials. It can identify which of the four conditions an engagement is missing, help frame the request, and reason from the context you choose to provide. See the broker and agency guide and the full service limitations.

Sources checked

• https://www.walmartdataventures.com/resources/vsp-landing.html (program page), checked 2026-09-06
• https://www.walmartdataventures.com/resources/vsp-directory.html (directory), checked 2026-09-06
• https://www.walmartdataventures.com/content/dam/walmartdataventures/images/pdf/Verified-Service-Provider-TandC.pdf (program terms), checked 2026-09-06