Security
Safe to connect. Private by default.
Morrison only reads your site and your search data. Here is what it can see, and who on your team can see it.
Your accounts
Read-only, all the way down.
Morrison needs your numbers, not your controls. It reads your data and never changes your accounts.
Read-only Google access
Search Console and GA4 connect with Google’s read-only permissions, so Morrison can’t change your properties.
Google Ads: reports only
Morrison only sends report queries to Google Ads, and checks every request before it goes out.
Encrypted connections
Google and Ahrefs credentials are encrypted with AES-256-GCM before they’re stored.
Disconnect any time
Disconnect a source and Morrison removes its stored credentials straight away.
Nothing published
Morrison reads your public pages. It never publishes or changes anything on your website.
A named crawler
Page fetches identify themselves as MorrisonBot.
Personal data
Pages, not people.
Morrison works with page-level numbers. The fields that could identify a person are left out before anything reaches a model.
Search Console
Search queries that look like an email address or a phone number are dropped.
GA4
Custom dimensions and metrics, where user-level fields live, are refused. Morrison sticks to GA4’s standard reports.
Google Ads
Search terms, click IDs, customer lists, lead forms and contact fields are blocked.
Not used for training
Chat runs on the business APIs from Anthropic, Google and OpenAI, whose terms keep your data out of model training.
Your team
Private where it should be.
Everyone on your team works in the same sites, but what each person asks stays theirs.
Private chats
Each person’s chats are visible only to them.
Shared on purpose
Website memory, chat context and the Skills you choose to share are what the team sees together.
Admins and members
Admins manage members, billing and content scans. Only admins can delete a website or the workspace.
Sign-in by Clerk
Sign-in and sessions run on Clerk, a dedicated identity provider. Single sign-on (SSO) is coming to Business.
For your IT and legal team
The paperwork, in one place.
Data processing agreement
Built into our Terms of Service (section 9), under GDPR Article 28. Nothing extra to sign.
Security questionnaire
Send it to hello@morrison.app and we’ll fill it in.
Report a security issue
Email hello@morrison.app with what you found, and we’ll get back to you.
See Morrison on your own site.
Start a 14-day free trial and index your site in minutes. Or book a demo and we crawl it before the call.
Compare plans