Merlin AI — shadow AI risk profile
Foyer · browser extension · base risk score 4 / 5
Same shape as Monica AI; broad page-content access; default training on inputs.
Tier comparison
| Tier | Trains on inputs? | Retention | SSO | Admin controls | Risk flag |
|---|---|---|---|---|---|
| Free | Yes | unlimited days | No | No | high |
| Paid (consumer / personal) | Yes | unlimited days | No | No | high |
| Enterprise / Team | No | 365 days | No | No | medium |
Frequently asked questions
Is Merlin AI safe to use with company data?
Match the tier to the data type — consumer tiers are usually unsuitable for regulated data; enterprise tiers with SSO and no-training contracts are the minimum for most corporate use.
Does Merlin AI offer SSO?
SSO support varies by tier — check the tier comparison above.
How does this tool appear in shadow AI audits?
Merlin AI typically shows up via MERLIN AI * and merlin.foyer.work traffic. Use a CASB to surface it if you suspect shadow use.
Audit your shadow AI
Is Merlin AI live in your organisation alongside other tools your security team has not sanctioned? Run a free 12-minute audit to find out.
Start your audit