Legal

Security Policy

How we protect your search data and integrations.

1. Infrastructure & Architecture

SearchAnalytics.ai is hosted on industry-leading, enterprise-grade cloud providers. Our architecture enforces strict environment separation, network isolation, and automated database backups. Load balancing, firewall protection, and DDoS prevention are active on all public entry points.

2. Encryption Protocols

We protect data both in transit and at rest:

  • In Transit: All web traffic and API calls are encrypted using TLS 1.3/1.2 protocols. SSL configuration is audited continuously.
  • At Rest: Databases, logs, and server cache volumes are encrypted with AES-256. API keys and OAuth tokens are stored inside a dedicated secret vault.

3. Google Search Console OAuth

We access Google Search Console data via the secure Google OAuth API. We request the minimum scopes required to pull analytics queries. We never see or store your Google password. You can revoke access instantly at any time in your Google Account security preferences.

4. Access Controls

Inside SearchAnalytics.ai, staff access to system and client production data is limited based on the principle of least privilege. Authentication requires hardware keys or multi-factor authentication (MFA). Logs are kept for all operational configurations.

5. Security Vulnerabilities

We perform quarterly dependency scans, static code analysis, and regular penetration testing. If you discover a vulnerability, please reach out directly to our security response team at security@searchanalytics.ai for swift resolution.