MarketMuse Enterprise Risk Assessment | AI Tool Risk

Back to AI Tools

MarketMuse

Risk Overview

Moderate Risk

3.7

/10

Research

Writing Assistant

SEO Optimization

Top Risks

No SOC 2 certification confirmed. Microsoft Clarity used for advertising/marketing including session replay. Privacy Shield reference is legally defunct. No explicit AI training prohibition. Outdated privacy policy sections (last updated April 2024 but with outdated Privacy Shield language).

Mitigations

Strong customer data ownership clause in ToS. New York court venue (no mandatory arbitration). GDPR compliant. Liability cap to prior 12 months of fees. No IP claim over customer outputs.

Get started

Is your team using

MarketMuse

safely?

Book a Demo Free Assessment

Highest Risk Categories

The highest-scoring risk categories identified in this assessment.

Security Posture

No SOC 2 certification mentioned in privacy policy or ToS. Uses Google Analytics, Microsoft Clarity (with advertising use), Pendo, Pardot. Privacy Shield reference in policy is legally defunct (invalidated by Schrems II, 2020). No dedicated security page found. Nudge Security profile exists. Basic security posture for a B2B SaaS; outdated policy language is a flag.

/10

Training Use

Privacy policy does not explicitly address AI model training on user data. ToS states Customer Data 'are and shall remain the property of Customer.' No explicit training prohibition found, but also no explicit training permission beyond service delivery. Absence of a clear prohibition creates moderate risk.

/10

3rd-Party Sharing

Data shared with service providers (Google Analytics, Pendo, Pardot/Salesforce, Qualified, Microsoft Clarity). Microsoft Clarity used for behavioral metrics, heatmaps, session replay 'to improve and market products' and 'for advertising.' Data transferred to US for tracking. Marketing partners receive behavioral data. Standard B2B SaaS profile but notable use of Clarity for advertising purposes.

/10