The power of an enterprise privacy compliance governance platform lies in automating how organisations validate their compliance with privacy regulation, under:

• Regional regulation, inc. General Data Protection Regulation & ePrivacy Directive
• National legislation, inc. Privacy and Electronic Communications Regulations & Data Use and Access Act 2025

Modern marketing stacks and website ecosystems are complex, dynamic, and often sprawling across multiple domains, third-party tools, and fragmented ownership. The Cressive Privacy Score creates a single, objective, quantifiable measure that enables governance at scale.

It can be used by DPOs in their role to ensure operations comply with regulations, by CMOs as the owners and promoters of brand assets (as well as their marketing agencies responsible for campaign activities), and by technical teams charged with implementation.

Why a Privacy Score Matters

1. Automation with Precision, Scale & Speed

Governance processes are enabled by automated scanning and provide:

• Deep detection across modern marketing and analytics technology stacks
• Independent verification and AI-assisted identification of complex tracking patterns
• Scalable and fast auditing across large portfolios of websites and digital properties
• Continuous monitoring rather than periodic manual checks

The resulting privacy score becomes the central metric used throughout the governance lifecycle – from auditing and remediation to ongoing monitoring and improvement.

A well-known management maxim often attributed to Peter Drucker states:

“What gets measured gets managed.”

A standardised privacy score enables organisations to prioritise remediation, benchmark progress, and provide measurable governance.

2. What the Privacy Score Measures

A website can only be considered privacy compliant when it achieves 100 /100.
Any lower score indicates a gap in compliance with legislation regarding the processing of personal data.

The Cressive Privacy Score evaluates:

• Use of tracking technologies
• Consent practices
• Data sharing with third-party domains
• Behaviour of scripts and marketing technology
• Compliance before and after consent interaction

Three Critical Phases Are Assessed

1. Pre-consent – What tracking is initiated before the user interacts with the banner
2. Consent interaction – The banner, choices presented, and consent capture
3. Post-rejection – Whether tracking respects the user’s refusal

3. How the Assessment Works

Detection Includes:

• Cookie deployment timing and type
• Third-party domain network requests
• Marketing and analytics technology firing patterns
• Effectiveness of consent enforcement

Legal Evaluation Framework

Assessed against:

• GDPR Articles 5, 6 and 7 (principles, lawful basis, consent)
• ePrivacy Article 5(3) (cookies and tracking technologies)
• UK regulatory requirements under PECR and DUAA

4. Scoring Methodology

5. Data Collection & Scope

• Analysis is based solely on publicly observable behaviour (NB nothing sneaky, no hacking, all externally available data, experienced by every user and seen by regulators)
• No privileged access, credentials, or internal systems are used
• Results reflect what any visitor experiences
• Findings are independently verified

6. Integrating Privacy Scoring Into Governance & Marketing Operations

The Privacy Score becomes most powerful when integrated into:

• Marketing dashboards
• Analytics reporting frameworks
• Ongoing operational monitoring

This allows marketing and digital teams to see compliance status directly, rather than waiting for issues to be escalated by legal, privacy, or security teams.

Agencies and external partners should be held accountable for the tracking technologies they deploy, ensuring privacy is built into the digital supply chain rather than retrofitted.

7. Operationalising Privacy by Design

The Cressive Privacy Compliance platform embeds:

• Continuous monitoring
• Portfolio-wide visibility
• Automated auditing
• Clear remediation pathways

This shifts privacy from a periodic compliance exercise into an ongoing operational discipline.

Summary

A measurable, standardised privacy score enables organisations to:

• Build trust through demonstrable compliance
• Understand compliance posture at scale
• Prioritise remediation
• Maintain regulatory alignment
• Operationalise privacy governance

The post Cressive Privacy Score: Calculation & Methodology appeared first on Cressive DX.

Here’s the thing about agencies and privacy compliance – they don’t mix.

The truth is – privacy compliance tools weren’t built for agency operations.
(btw if you need a fast intro to privacy compliance, this quick read will help.)

They expect you to manually configure scanning for each client/site, provide violation reports without explaining how to actually fix things, and miss violations anyway. On the other hand, clients expect agencies to “handle the privacy stuff” but don’t want to pay for the time it actually takes using conventional tooling.

Below we explain how Cressive Privacy Compliance helps digital agencies efficiently implement privacy compliance workflows their clients need.

✔ Cressive Privacy Compliance enables fast audits, at scale

Assessment-focused privacy compliance that integrates with site evaluation workflows:

• Minimal configuration setup: Start comprehensive privacy scanning without any pre-configuration
• Automated classification: AI-powered violation categorization reduces manual review requirements
• Batch assessment capabilities: Efficiently evaluate privacy compliance across multiple client sites, locations, privacy law regimes, reporting into client-wise portfolios

✔ Cressive Privacy Compliance helps marketing agencies succeed

Our super-smart Privacy Compliance agent, Cressive AI, understands both digital marketing and privacy law. It helps automate the entire privacy compliance process for our clients and agencies.

• Pre-deployment scanning: Analyse privacy compliance impact before go-live
• Complete tracking detection: Network requests, pixels, API calls, and data transmission patterns that traditional tools miss
• Marketing platform integration: Understand tracking implementations across Google Ads, Facebook, LinkedIn, and other campaign platforms
• Campaign-specific guidance: Remediation guidance based on Martech being used.

Developer-focused remediation guidance that connects privacy compliance and technical implementation:

• Prioritized fix lists: High-impact violations first
• Technical implementation steps: Specific changes, configuration adjustments, and platform settings for each violation type
• Platform-specific guidance: Different approaches for WordPress, Shopify, custom applications, and various CMS platforms

The post Why Agencies Struggle with Client Privacy Compliance appeared first on Cressive DX.

✔ Cressive AI categorises all tracking technologies without any manual input

Our super-smart Privacy Compliance agent, Cressive AI, understands both digital marketing and privacy law. It helps us achieve:

• Instant categorization: New tracking pixels get automatically classified by business purpose and regulatory risk
• Marketing intelligence: Differentiates cart abandonment from advertising retargeting, conversion measurement from audience building
• Campaign-aware scanning: Understands Google Ads, Facebook Campaigns, and marketing automation in context
• Risk-based approvals: No-risk functional tracking gets approved automatically; high-risk advertising pixels get flagged.

The post Why Marketing Teams Struggle with Privacy Compliance appeared first on Cressive DX.

Problem 1: Privacy Compliance Reporting for Execs

Board meetings and executive reviews typically include privacy compliance questions like:

• “How compliant are we across all markets to their respective privacy laws?”
• “Are we improving or getting worse quarter-over-quarter?”
• “If we’re regressing, where and why?”

For organisations with multiple websites across different countries, current tools typically show:

• Website A: “5 violations detected”
• Website B: “Cookie scan complete ✓”
• Website C: “Tracking pixels found”

These reports don’t answer the strategic questions. When violations increase from 3 to 7, it’s unclear whether compliance actually worsened or scanning improved. The data doesn’t indicate which business units or geographic regions are driving trends.

✗ Other tools don’t solve the reporting problem

Current tools have limitations in executive-level reporting:

• Limited comparative context: Show current violations but don’t track trends or explain changes over time
• No root cause analysis: Can’t identify whether increases come from new violations, improved detection, or specific business units
• Equal violation weighting: Treat all violations the same, making it difficult to assess compliance risk
• Fragmented reporting: Each tool provides disparate data without portfolio-level aggregation or geographic context
• Tactical focus: Generate violation lists rather than help define a strategy for privacy compliance across the organisation

✔ Cressive Privacy Compliance solves the Exec Reporting Problem

Executive dashboards that address strategic questions:

“How compliant are we?”

• Risk-based scoring (0-100) across all properties and jurisdictions
• Weighted by violation severity and regulatory context
• Adjusted for classification accuracy

“Are we improving or worsening?”

• Quarter-over-quarter trend analysis with explanations
• Scoring that accounts for detection improvements
• Progress tracking against compliance targets

“Where and why are we regressing?”

• Geographic and business unit breakdowns showing risk concentration
• Root cause analysis: new violations vs. detection improvements
• Automated alerts when specific regions or properties show compliance issues

Problem 2: Privacy >> Cookies

Quarterly compliance reviews may show clean results, but regulatory investigations can reveal network requests to Google Analytics and Facebook that transmitted user data without consent. These were added by marketers, who don’t have compliance visibility. These violations often go undetected by scanning tools.

As we explain in our on primer on website privacy compliance, network requests can transmit personal data (IP addresses, referrer URLs, user agents) to third parties through pixels and API calls without setting cookies. Tools focused on cookie detection miss these data transmissions.

✗ Most tools can only detect non-compliance from cookies

Detection and diagnostics of violations caused by network requests, hybrid mechanisms and emerging techniques is very hard. That’s why most tools either don’t detect these or require extensive pre-configuration by the user to blacklist them individually.

Cookie-focused and pre-configured scanning creates detection gaps, that put your brands at risk:

• Network-level tracking: API calls, pixels, and beacons transmit personal data without setting cookies
• Hybrid mechanisms: JavaScript combines cookie data with network requests
• Advanced techniques: Browser fingerprinting, cache timing attacks, and other cookie-less methods
• Third-party integrations: Marketing automation, chat widgets, and analytics tools making data calls

✔ Cressive Privacy Compliance detects and diagnoses all tracking tech

• Network request analysis: Every API call, pixel fire, and data transmission captured and analysed
• Data flow mapping: Visual representations of where user data goes, not just where cookies are set
• Hybrid violation detection: JavaScript-cookie combinations that create privacy violations
• Behavioural analysis: Automatic detection of fingerprinting, tracking pixels, and other techniques

This provides visibility into data transmission patterns that regulators examine during investigations.

Problem 3: Why is a violation a violation and how risky is it?

Compliance scans often flag violations but provide limited explanation. Legal teams receive reports like:

• “Adobe Analytics cookie: VIOLATION”
• “Facebook network request: VIOLATION”
• “Google Tag Manager script: VIOLATION”

Without understanding why each item violates regulations, legal teams spend time researching each violation to understand actual compliance risk and prepare explanations for potential regulatory scrutiny.

✗ Most tools don’t provide the diagnostics and risk assessment

Most tools use basic rule matching without providing legal reasoning. They often don’t explain:

• Regulatory context: Why specific cookies or requests create compliance problems
• Classification confidence: Whether categorisation is based on database knowledge or assumptions
• Risk severity: How violations compare in terms of regulatory exposure/ which should be fixed first

✔ Cressive Privacy Compliance provides detailed violation reasoning and risk assessment

Every violation flagged by Cressive Privacy Compliance includes detailed compliance reasoning:

• Classification method: Database match, rule-based detection or AI-assisted classification
• Risk assessment: Severity level based on data type, party classification, and regulatory context
• Remediation guidance: Specific technical steps to resolve the violation, which your technical teams, whether in-house or outsourced to agencies will thank you for.

Legal teams get defensible explanations for compliance decisions rather than just violation flags.

The Business Impact of Compliance Gaps

Privacy violations create measurable business risks:

• Regulatory fines: Up to 4% of global revenue under GDPR, $7,500 per violation under CCPA
• Legal costs: Investigation responses, regulatory defense, and potential litigation
• Operational disruption: Emergency compliance fixes, campaign shutdowns, and audit preparation
• Reputation impact: Consumer trust issues and competitive disadvantage

Organizations that avoid these problems typically have comprehensive visibility into their compliance status rather than relying on tools with detection gaps.

Next Steps

The post How current Privacy Compliance tools fail privacy teams appeared first on Cressive DX.

In Part 1 of our series, we introduced Share of Voice (SOV) as a critical metric for understanding your brand’s digital market presence. Now, let’s dive deeper into how this powerful metric is calculated and why it provides insights that simpler metrics simply can’t match.

The Science Behind SOV Calculation

Let’s look at how our DX Studio data platform calculates Share of Voice in practice through a systematic five-step process:

1. Data Collection

First, we gather search data for your target keywords by:

• Identifying keywords that define your market
• Collecting SERP data across these keywords
• Capturing both your brand’s and competitors’ positions

Our experience shows that 250-1000 keywords provide the optimal balance for statistical significance, depending on your sector.

2. Position Analysis

We analyze the raw position data to understand:

• Your brand’s placement in search results
• Position changes over time
• Competitor presence for your target keywords
• Position distribution across keyword groups (awareness, consideration, action)

3. Traffic Estimation

To estimate potential traffic value, we combine:

• Search volume data
• Position-based CTR models
• Search features that affect CTR

This transforms position data into visibility and potential traffic estimations.

4. Share Calculation

We calculate market share by combining position and traffic data across all competing brands, expressing your brand’s portion as a percentage of the total market. This gives us your Share of Voice – the percentage of potential search visibility belonging to your brand.

5. Monthly Aggregation and Reporting

Daily data is aggregated and reported monthly using DX Spotlight to provide:

• Stable metrics that smooth daily fluctuations
• Period-over-period comparisons
• Progress tracking against targets and competitors

What makes this metric particularly powerful is its ability to account for both the quality of your positions (through CTR curves) and the quantity of potential traffic (through search volume data). This combination provides a much more accurate picture of market presence than simpler metrics like average position or keyword rankings alone.

SOV in Action: A Real-World Example

Let’s dive into a real-world example that demonstrates how Share of Voice translates into actionable insights. Looking at one of our client performance charts, we can see significant growth in both Position Score and SOV over time:

A detailed analysis of position ownership across keyword categories reveals:

Key insights from the data:

• Increased Top 3 positions across all stages driving SOV growth
• Strong dominance in awareness stage (47.1% of Top 3 positions)
• Weaker presence in action stage despite recent gains
• Concentrated growth in high-CTR top positions
• Only 30% of consideration and 25% of action keywords owned by tracked competitors, revealing unidentified market players

The month-over-month improvements might seem incremental, but they represent significant gains in market visibility when you consider:

• The competitive nature of these positions
• The high search volume associated with these terms
• The compounding effect of improvements across different keyword groups

Short-Term vs. Long-Term Value of SOV

The example above demonstrates the immediate value of SOV in tracking and improving digital performance. While this client is already seeing tangible benefits, the real power of SOV lies in both its short-term insights and long-term predictive capabilities.

As seen in our research and echoed by experts like Les Binet, SOV delivers value across multiple time horizons:

Short-Term Benefits:

1. SEO Focus and Prioritization
   • Forces assessment and pragmatic prioritization of SEO factors
   • Drives focus on the most valuable keywords based on search volume
   • Encourages consideration of click-through rates, not just rankings
2. Competitor Intelligence
   • Reveals competitors you didn’t know you had in search
   • Provides insights into competitive strategies
   • Measures the whole sector, not just a few pre-selected competitors
3. Brand Visibility Insights
   • Spotlights opportunities to improve brand visibility
   • Identifies weaknesses relative to competitors
   • Provides a list of actionable improvements
4. Organizational Capabilities
   • Helps CMOs inform search strategy direction
   • Enables tracking of consumer demand
   • Provides a framework for reporting progress to stakeholders

As Richard Game captures here, these immediate benefits make SOV valuable even before its long-term impact on market share is realised.

In our final instalment, we’ll show how to transform SOV insights into strategic action and reveal how leading brands use this metric to drive sustainable growth.

To learn more about how Cressive DX can help you measure and improve your brand’s Share of Voice, contact our team for a personalised demonstration of our DX Spotlight platform.

The post The Science Behind Share of Voice: How It’s Measured and Why It Matters appeared first on Cressive DX.

Ah, the joy. The moment when you pull up your monthly performance dashboard and see those trend lines heading in the right direction. A rare point of agreement for both client and consultant. That steady climb in Search Performance KPIs isn’t just a validation of the underlying strategy; it’s a clear signal that your brand is gaining ground in the digital battlefield.

But what exactly are we looking at here, and why does it matter so much for a digital Brand?

Understanding Search Performance: The Digital Battleground

In a digital-first world, your brand’s search performance is arguably its most critical competitive advantage. Think about it – when was the last time you, or anyone you know, made a significant purchase decision without consulting Google? Search performance represents your brand’s ability to be present and prominent when potential customers are looking for solutions you provide.

But what exactly constitutes search performance? At its core, it’s your brand’s visibility and ranking in search engines compared to your competitors across the keywords that matter in your market. It’s not just about ranking well for a few terms – it’s about dominating the digital conversation in your industry.

Ranking position equates to being found, being ‘in the game’, to be seen by prospective customers at the top of the search funnel.

Share of Voice vs Position Score: The Two Pillars of Search Performance

At Cressive DX, we summarize search performance through two high-level KPIs: Position Score and Share of Voice (SOV). While both are important, they serve different purposes and provide different insights.

Position Score is the simpler of the two metrics. It provides a straightforward summary of your SERP (Search Engine Results Page) positions across all your target keywords.

For instance – from the below chart (which our tech team calls the “position tube map”) Cressive ranks No. 1 for the keyword Digital Brand Governance in March 2025.

Each keyword has similar daily position data that we collect, which when averaged out over all keywords and a period of time leads to Position Score. Think of it as your brand’s average ranking report card. It’s useful because:

• It gives you a quick snapshot of your overall ranking health
• It’s easy to understand and communicate to stakeholders
• It helps track basic SEO progress over time

But Share of Voice? That’s where things get really interesting.

Share of Voice goes beyond simple rankings to tell a more powerful story. While Position Score tells you where you rank, SOV reveals how much of the market you actually own by measuring your brand’s share of the digital conversation. It’s a sophisticated metric that analyses your visibility across search results, weighted by search volume and click-through rates. It takes into account:

• The actual search volume for each keyword
• The click-through rates at different positions
• Your competitors’ presence and rankings
• Both organic and paid search results
• The relative importance of different keywords in your market

This complexity makes SOV a more accurate representation of your brand’s true digital market presence and potential impact, relative to your competition. As referenced in multiple contributors on shareofvoice.com, SOV has historically been one of the most reliable predictors of market share growth, and in the digital age, this relationship has become even more pronounced.

Furthermore, as we cover here, a focus on Share of Voice/ Share of Search delivers value to the business in the short term.

The Market Dimensions of Share of Voice

Understanding Share of Voice requires thinking about your digital market in three key dimensions:

• the search terms people use when engaging with your market i.e. keywords
• the platforms where these conversations happen
• and the geographic location of your audience.

Let’s break this down.

The Keyword Dimension: Defining Your Market Space

Your market isn’t just about what you sell – it’s about the entire conversation surrounding your industry. Think of keywords as the language your potential customers use when they’re in your market space. This language can be understood through two complementary lenses:

First, looking at user intent:

• Problem Space Keywords: Terms people use when trying to understand or solve a problem (e.g., “how to gain muscle mass”)
• Solution Space Keywords: Terms related to specific solutions or product categories (e.g., “whey protein powder”)

Second, considering the buyer’s journey:

• Awareness Stage: Broad industry terms and educational queries (e.g., “what causes hair loss”)
• Consideration Stage: Comparison and evaluation terms (e.g., “minoxidil vs finasteride”)
• Conversion Stage: Purchase-intent keywords (e.g., “buy hair loss treatment online”)

Importantly, your market definition specifically excludes brand-specific terms (like your company name or product names). Why? Because brand searches don’t represent market share – they represent brand awareness. To truly understand your competitive position, you need to focus on non-branded searches where you’re competing for new customers. This becomes even more critical in the era of Google’s AI Overviews which are changing search behaviour, especially at the top of the funnel.

The Platform Dimension: Where the Conversations Happen

While Google remains the dominant player in search, the digital landscape has evolved significantly, especially post-2020. Here’s how the platform dimension breaks down:

• Google Organic and Paid: Still accounts for the majority of website traffic and remains the primary battlefield for digital visibility
• Social Media: Brands generally have a strong presence across Facebook, Instagram, Twitter, LinkedIn in order to expand their audience and build engagement
• Community-based Platforms: These include the likes of Quora and Reddit
• eCommerce: Organic and Paid positions in Amazon are critical for consumer products

As discussed in our Top 5 DM issues for 2025 article, we know the customer journey is becoming more non-linear and ‘across channel’ so data capture of these platforms and attribution to each of them is key to understanding the complete picture.

The Location Dimension

Geographic location of the searcher is also an important dimension as search results are localised and are becoming more so. This dimension is more important to search engine platforms rather than social media and community-based platforms.

In our next article (Part 2 of the series), we’ll dive deeper into how Share of Voice is calculated and analyse a real-world example that demonstrates its impact on digital performance. We’ll explore the science behind the metric and reveal how leading brands are using it to drive measurable growth.

To learn more about how Cressive DX can help you measure and improve your brand’s Share of Voice, contact our team for a personalised demonstration of our DX Spotlight platform.

The post Understanding Share of Voice: The Digital Brand’s North Star Metric appeared first on Cressive DX.

Google’s AI Overviews (AIO)—the generative summaries sometimes appearing at the top of search results—are creating new opportunities and challenges for SEO. They provide quick, synthesised answers, often citing multiple organic pages. For marketers, AIOs can potentially reduce clicks on traditional organic links while also spotlighting the websites Google trusts most.

As we cover in our analysis of the top issues facing digital marketing in 2025, we believe AIOs will cause substantial disruption to search marketing in the months and years to come.

To understand how AIOs work “in the wild,” our team analysed 4,000 search queries (2,000 each from the US and the UK). These queries covered awareness, consideration, and conversion keywords as well as question vs. non-question formats and short-tail, medium-tail, and long-tail variants. The analysis was carried out on 23rd January 2025.

Below, we share our 10 biggest takeaways.

Note: For those who want to dive into statistical significance tests (e.g., Kruskal-Wallis, Z-statistics, McNemar’s test), check out the Detailed Methodology & Stats at the end.

1. AIOs Appear for Almost Half of Searches

Across the full range of search terms, 47% triggered an AI Overview while 53% did not. In other words, you’ve got nearly a 50-50 chance of seeing an AI Overview for a given query.

As Google refines its generative approach, this rate may well increase—making it crucial to understand how (and why) AIOs surface.

2. Minimal Geographic Differences: US vs. UK

Breaking down the same dataset by location, we see a 46.63% incidence for the UK and 47.76% for the US. Given how closely these figures align, it appears that Google’s AIO rollout is similarly advanced in both markets.

If you’re ranking for queries in either region, anticipate a comparable chance of generating an AI Overview.

3. Question-Based Queries Are Far More Likely to Yield AIOs

One of the standout findings involves query intent:

Question-format keywords: ~85% show an AIO

Non-question keywords: ~43% show an AIO

If your audience tends to type “How do I…?” or “What is…?”, these types of queries are extremely likely to trigger an AIO.

4. Funnel Stage Influences AIO Appearance

We classified each query as awareness, consideration, or conversion. Here’s how often each stage displayed an AI Overview:

• Awareness: ~56% AIO incidence
• Consideration: ~23%
• Conversion: ~42%

5. Long-Tail Keywords Trigger AIOs Most Frequently

Next, we grouped queries into short-tail, medium-tail, and long-tail:

• Long-tail: ~65% include an AIO
• Medium-tail: ~49%
• Short-tail: ~34%

Specific, more detailed queries tend to invite more thorough AI Overviews—likely because Google sees a stronger need to synthesize multiple sources for these narrower topics.

6. The Nuanced Story of AIO Length

We also looked at the word count of AI Overviews based on funnel stage, keyword length, and whether it was a question or not.

Although these differences are statistically significant, the real-world impact may be relatively small. For example, consideration queries produce slightly longer overviews, but this could also be due to the complexity of the topic rather than the funnel stage itself.

In other words, AIO length is not driven exclusively by these factors—they’re just part of the picture. Content complexity and Google’s available data likely play a bigger role in shaping final word counts.

7. Nearly All AIOs Cite the Top 10 Organic Results

If you’re wondering whether organic rankings still matter when an AI is rewriting the SERP, the answer is a resounding yes. We found:

• 97.3% of AIOs cited at least one result from the top 10 organic listings.
• Only 2.7% didn’t cite any top 10 result.

8. The Two-Tier Citation Pattern: Positions 1–7 vs. 8–10

Digging deeper, we discovered a sharp divide in citation rates:

• Positions 1–7: ~83–85% citation rate
• Positions 8–10: ~56% citation rate

Our statistical tests show no meaningful difference between the top 3 positions and positions 4-7.

However, there’s a highly significant drop from positions 1–7 to positions 8–10. If you want to influence the AI Overview, aim to be within the top 7. After that point, citation rates plummet.

9. Number of Citations: More About Availability than Keyword Type

We also measured how many sources are typically cited in an AIO.

While the averages for awareness, consideration, conversion, and different keyword lengths varied (e.g., ~5–6 citations), the data suggests these slight differences don’t strongly correlate with the funnel stage or keyword type.

Instead, the number of citations appears to be driven by how much topically relevant content Google deems credible and already ranks highly. In other words, Google’s AI pulls from however many high-ranking pages it believes best serve the user query—so the richer the existing pool of quality and relevant content, the more citations you’ll see.

10 . Why Top Organic Results Are the Bedrock of AIO

One of our most compelling discoveries is also the most logical: AI Overviews essentially stand on the shoulders of Google’s ranking algorithms. Consider the following:

1. World-Class Relevance: Google has spent decades perfecting how to rank content. It’s far more efficient for them to build AI Overviews using the top-ranked pages than to re-invent the relevance engine from scratch.
2. Consistency vs. Contradiction: The AI Overview typically aligns with the consensus of top results. If an AIO were to contradict the highest-ranked sources, it would raise questions about whether the AI is incorrect or Google’s rankings are flawed. Either scenario undermines user trust.

For brands, this means SEO fundamentals still matter—perhaps more than ever. If you can get into (and stay in) the top 7 organic positions, you stand a much higher chance of:

• Being front and centre when an AI Overview appears.
• Shaping the narrative around a topic

Conclusions & Next Steps

The bottom line is that AI Overviews rely on the top organic results for both content and credibility. While AIOs may feel like a shortcut for users, relevance and authority remain rooted in Google’s ranking algorithms. With nearly half of all queries we examined triggering an AIO, your best strategy is to:

• Continue optimizing for Page 1, especially the top 7 positions.
• Craft comprehensive, relevant content that serves user intent (particularly for question-based queries)
• Monitor funnel-stage performance and adapt content strategy for awareness vs. consideration vs. conversion.

Generative AI may shift how users consume information on the SERP, but it doesn’t replace the fundamental importance of ranking highly for competitive keywords.

Detailed Methodology & Stats

1. Data Collection & Sample
   • 4,000 queries total: 2,000 each in the US and UK. Selected as indicative of client behaviour modelled over buying funnel.
   • Queries were classified by funnel stage, keyword length, and question vs. non-question.
2. AIO Incidence & Word Count
   • We recorded whether an AIO appeared and measured its word count if it did.
   • Sub-analyses split results by region, funnel stage, question format, and keyword length.
3. Citations
   • For each AIO, we noted whether it cited organic positions 1–10, and how many total sources it included.
4. Statistical Tests
   • We employed Kruskal-Wallis for comparing median word counts across multiple groups.
   • We used Z-statistics and McNemar’s tests to compare proportions (e.g., top 3 vs. positions 4–7, 1–7 vs. 8–10).
   • Significant differences suggest we can be confident the patterns (e.g., citation rates) are not due to random chance.

The post 10 Essential Insights From Our Google AI Overviews Study appeared first on Cressive DX.

Cressive DX is at the forefront of digital marketing and 2025 brings a new wave of challenges that businesses must tackle. 2024 was a year dominated by the rise of consumer AI tools and their promise to impact all walks of life. Many of our clients have questioned how these disruptive technologies will impact their marketing functions. 

From evolving customer journeys to technological shifts, we believe staying competitive requires a strategic shift. In this article, we’re sharing the top five issues facing digital marketers in 2025 and how we’re helping our clients prepare for them.

1. The Impact of Google AI Overviews on Search

The Challenge

AI Overview (AIO) on Google has shifted how users interact with search results by providing immediate answers at the top of the SERP. While Google had a rocky start with AI Overviews, continuous optimisation has meant that AIOs are now more accurate, especially with factual answers.

This can reduce top-of-funnel or awareness clicks to websites. Businesses that drive traffic to their websites through awareness based content such as guides, how-tos, recipes, etc. would likely see a reduction in response to queries like “What’s trending in fall fashion?” for a fashion retailer or “How to make pour-over coffee” for a nice coffee roaster.

We present key insights from a 4,000 keyword experiment we conducted on AIOs here.

Why It Matters

• Altered Funnel Performance: AIO can highlight your site mid-funnel but you may have to work harder (and invest more) to attract top-of-funnel prospects. This impacts your marketing ROI and revenue growth.
• Reduced Organic Traffic and Leads: AIO may overshadow your traditional listings, leading to fewer awareness-stage clicks and potentially reducing your sales pipeline.
• Lost Visibility at Critical Stages: If your site isn’t cited by AIO, you risk being absent from early consideration. This can lower brand awareness and limit future conversions.

How you can adapt to AI Overviews

• Refine content strategy: Write comprehensive, machine-readable explanations. Structure text like Q&A formats or step-by-step guides so AIO can easily parse and cite.
• Optimize for AIO: Similar to Featured Snippet optimization, use concise, highlight-ready segments alongside schema markup.
• Track AIO performance: Monitor how often your content surfaces in AI Overviews, adapting content and SEO tactics accordingly. Governance precedes performance here.
• Assess multi-stage funnel: Measure where users come from (AIO vs. organic listing vs. other channels) and how they move down the funnel.

A tool like DX Spotlight will help you keep track of your organic and overall search performance as well as your ownership of AI Overviews with respect to competitors.

2. Attribution in a Non-Linear Funnel

The Challenge

Modern buyer journeys zigzag across multiple platforms—Reddit, Spotify, social media, and more—making it difficult to isolate which channel truly drives conversions. Not understanding the ‘Place’ component of the marketing mix is a key fundamental issue to address.

This challenge is especially pronounced for B2C brands, where consumers might see an influencer’s Instagram reel, hear a mention on a podcast, and finally run a branded Google search before buying. Without robust cross-channel tracking, it’s easy to attribute the sale solely to organic search, ignoring the earlier touchpoints.

Why It Matters

• Inconsistent Brand Management: Fragmented insights make it harder to ensure consistent branding and messaging, which dilute brand equity and weaken customer trust.
• Inefficient Budget Allocation: Incomplete attribution can lead to overspending on underperforming channels or neglecting high-impact ones, directly affecting marketing ROI.
• Missed Revenue Opportunities: When conversion paths remain hidden, you risk underinvesting in key platforms where customers actually convert, leading to lost sales.

How you can manage the non-linearity

• Cross-platform tracking: Tag all campaigns, set up platform pixels (e.g., Facebook, LinkedIn, Pinterest), and centralize data to see cohesive user journeys.
• Adjust KPIs: Create metrics aligned to each platform’s user intent and funnel stage.
• Automate data capture: Use AI-driven analytics and workflow tools to gather, analyse, and visualize data from multiple sources.
• Channel-specific content: Tailor content for each channel (e.g., short Q&As for Reddit, audio-friendly content for podcasts, etc.).

3. The Bot Crisis in Analytics

The Challenge

Bot traffic is growing ever more sophisticated, often accounting for a significant amount of traffic. Cressive’s own research matches this report by Thales, putting bot traffic close to to 50%.

Brand and presence websites can encounter large spikes in traffic metrics as well as behavioural events such as scrolls and pageviews. Some sectors are particularly susceptible. Ecommerce, travel, hospitality sector businesses may see bots testing booking engines or filling forms, distorting performance metrics across various geographic domains.  

In both scenarios, analytics become skewed, ROI calculations suffer, and marketing decisions risk being guided by false signals.

Why it Matters

• Inaccurate KPIs and Poor Decision-Making: Contaminated data can misdirect marketing strategies, causing wasted spend on irrelevant audiences.
  
• Unclear ROI: Bot-driven conversions inflate results, masking the true performance of campaigns and causing you to over- or underspend in certain channels.
  
• Potential Security Risks: Malicious bots may exploit vulnerabilities, risking brand damage, revenue loss, or additional mitigation costs.

How you can ‘Rehumanize’ Web Analytics

• Firewalls and filters: First-line defences (bot-blocking, IP filtering) offer partial solutions but can’t block all advanced bots. They can be expensive and ineffective.
  
• Enhanced GA4 filtering: Implement custom segments, IP exclusions, and detect suspicious patterns (e.g., unusual bounce rates, improbable geolocation clusters). It’s time consuming and ineffective playing whack-a-mole with exclusions.
  
• AI-based detection: Tools like DX Spotlight which uses AI to identify non-human activity on your websites, effectively ‘rehumanizing’ analytics to enable confident decision-making. We cover humanize in detail in our detailed blog article.

See DX Spotlight Humanize in action below:

4. Cookie Consent Compliance

The Challenge

Stringent data privacy regulations (GDPR, CCPA, etc.) require explicit user consent for tracking, leading many visitors to opt out. Striking a balance between legal compliance and retaining actionable analytics is an ongoing struggle for digital marketers of all sizes. 

For instance, an e-commerce site, which relies heavily on a single website for all sales and marketing, might lose visibility into half of its user base when those visitors decline cookies.

However, the problem is far more complex for many of our clients, which are multi-site organizations operating across multiple regions. Due to different compliance requirements across regions, these organizations have to implement several variations of consent banners, resulting in a fragmented compliance picture with inconsistent data outcomes.

Why it Matters

• Reduced Data for Analysis: If a significant number of users opt out, your analytics may provide an incomplete picture, leading to suboptimal campaign strategies and wasted budget.
  
• Hindered User Experience: Poorly managed consent banners can frustrate visitors, causing them to abandon your site, directly affecting sales and customer loyalty.
  
• Legal and Financial Exposure: Fines can reach up to 4% of global revenue for serious compliance breaches, which can cripple marketing budgets and harm your reputation.

Possible Solutions

• First-party data strategies: Encourage logins (e.g., membership, loyalty programs), so users willingly share data for personalized experiences.
  
• Enhanced analytics for opted-in users: Focus on higher-quality data subsets. Expand understanding with server logs or name server data.
  
• User-centric design: Make cookie pop-ups transparent and user-friendly, explaining the benefits of consenting to non-essential cookies (e.g., better product recommendations)
  
• Automated compliance governance: A tool like DX Spotlight helps monitor consent management, ensuring you stay compliant while gathering relevant insights.

5 Migration/site changes such as CMS change

The Challenge

Overhauling a website—whether merging domains for a global manufacturing conglomerate or switching the CMS for a boutique travel agency—carries high risk. Migrations that overlook SEO best practices can trigger indexing issues, broken redirects, and duplicate content. 

Even for a single-site business, minor missteps in URL structures or metadata can result in immediate visibility loss, jeopardizing revenue until SEO and technical fixes are implemented.

In a larger organization with multiple sites, the complexity multiplies thereby increasing risk. It’s therefore more likely to miss critical details that cause traffic drops across entire regions.

Why It Matters

• Immediate Traffic and Revenue Loss: A poorly planned migration can lead to a steep drop in organic visibility, directly impacting e-commerce sales or lead generation.
  
• Extended Recovery Period: If rankings plummet, it can take months to reclaim your position, leading to prolonged dips in revenue and higher make-good costs.
  
• Stifled Future Growth: Choosing the wrong platform or neglecting SEO considerations can hamper your ability to scale, wasting ongoing marketing spend and undermining long-term business objectives.

How to Migrate Better

• Integrate SEO from Day One:
  • DO involve SEO teams early to map old URLs, plan redirects, and avoid “SEO afterthought” scenarios.
  • DO NOT assume a new CMS is fully optimized out of the box.
    
• Adopt a Marketing- and Customer-Centric Approach: DO recognize that migrations affect user experience, brand perception, and revenue—not just back-end systems.
  
• Establish a Comprehensive Data Baseline: DO benchmark key metrics (rankings, traffic, conversions) before making changes so you can accurately measure post-migration results.
  
• Plan for Ongoing Measurement and Auditing: DO automate rank tracking and on-page audits before, during, and after launch to quickly catch and address any issues.
  
• Contact Cressive DX and discuss your options: info@cressive.com

Detailed Methodology & Stats

1. Data Collection & Sample
   • 4,000 queries total: 2,000 each in the US and UK.
   • Queries were classified by funnel stage, keyword length, and question vs. non-question.
2. AIO Incidence & Word Count
   • We recorded whether an AIO appeared and measured its word count if it did.
   • Sub-analyses split results by region, funnel stage, question format, and keyword length.
3. Citations
   • For each AIO, we noted whether it cited organic positions 1–10, and how many total sources it included.
4. Statistical Tests
   • We employed Kruskal-Wallis for comparing median word counts across multiple groups.
   • We used Z-statistics and McNemar’s tests to compare proportions (e.g., top 3 vs. positions 4–7, 1–7 vs. 8–10).
   • Significant differences suggest we can be confident the patterns (e.g., citation rates) are not due to random chance.

The post 5 Top Issues Facing Digital Marketing and SEO in 2025 appeared first on Cressive DX.

Bot traffic now accounts for nearly 50% of all web traffic and is growing more sophisticated each year, making traditional analytics data unreliable for business decisions. While existing solutions struggle to address this challenge, DX Spotlight’s AI-powered Traffic Classification module identifies and filters out non-human traffic, restoring the human perspective to your analytics data.

Bot Traffic Today

For over a decade, web analytics served as a reliable compass for understanding digital customer behaviour. But that reality has fundamentally shifted. Today, your analytics are probably lying to you – and increasingly sophisticated bots are the culprits.

A staggering 50% of all internet traffic now comes from bots, with malicious/ bad bots alone accounting for 32% in 2023 (source). For businesses tracking their digital presence, this means one in two ‘visitors’ might not be human at all.

Types of Bot Traffic: Breaking Down the Numbers

Legitimate Bots (18% of total traffic):

• Search engine crawlers indexing content e.g. Googlebot, Bingbot, GPTBot
• Analytics and monitoring bots e.g. UptimeRobot, ArchiveBot
• Social media crawlers e.g. Facebookexternalhit, PinterestBot 

Malicious Bots (32% of total traffic):

• Traffic manipulation bots: Artificially inflate website metrics
• Web scrapers: Systematically copy data and content
• Ad fraud bots: Click on paid advertisements or on fake ads.
• Account takeover bots: Target login endpoints to gain unauthorized access

The Rising Challenge of Bot Detection

Traditional bot blocking is becoming increasingly ineffective. Modern bad bots don’t just conceal obvious automated markers – they actively mimic human behavior patterns. These bots have evolved to create traffic patterns nearly indistinguishable from legitimate users. 

Cressive DX’s analysis of client data regularly uncovers logically impossible patterns in raw analytics data – like pages being viewed without any corresponding sessions. These anomalies exist regardless of whether organizations use Google Analytics, Adobe Analytics, Matomo or other solutions, and so are increasingly more than a factor of the recording systems themselves.

When Numbers Lie: The Real Impact on Analytics

The current level of Bot infestation in analytics data makes analysis nigh impossible. One of our clients, a B2B SaaS brand, noticed a large spike in all traffic metrics during February 2024. The marketing team initially – optimistically – attributed this to their seasonal campaign. However, analysis revealed that 90% of this traffic came from sophisticated bad bots, making the campaign’s true impact unclear.

Another client saw pageviews rise up dramatically while sessions increased by 100%. The initial assumption was that their product campaign and updated internal linking structure were paying off. The reality? Bad bots were copying product information, creating artificial pageview inflation while maintaining somewhat realistic session counts.

These examples highlight a critical problem for digital brands: when bot traffic contaminates analytics data, it doesn’t just skew numbers – it fundamentally undermines the ability to make informed decisions. Marketing budgets risk getting misallocated chasing phantom engagement. Content strategies optimize for bots rather than humans. Most concerningly, brands lose sight of genuine customer behaviour patterns, making it impossible to improve real user experience and drive authentic growth.

“The impact is a critical for digital brands: bot traffic contaminates analytics data and it fundamentally undermines analysis” 

Some Markers of Bot Traffic for Self Diagnosis

While sophisticated bad bot traffic is difficult to quantify and adjust for, there are some markers in analytics data that can be used to ascertain their presence, using your analytics source. This analysis is best carried out over a month or longer period.

1. Traffic anomalies: Spikes in sessions and/or pageviews that are substantially higher than average traffic for the period.
2. Traffic from multiple unexpected locations on the same day.
3. Very high or very low bounce rates.
4. 1, 2 and/or 3 above combined with direct or undefined channels.

The Inadequacy of Existing Solutions

Most available solutions for managing bot traffic focus on prevention – blocking bots before they can access your website. While this approach seems logical, it faces several fundamental challenges:

Prevention vs Reality

• Standard advice typically includes:
• Installing firewalls e.g. Azure WAF
• Configuring robots.txt files
• Blocking suspicious IP addresses
• Customizing analytics platforms
• Implementing cloud-based protection services e.g. Cloudflare

While these measures can help reduce bot traffic, they face a fundamental problem: public websites need to remain accessible. Complete bot prevention is nearly impossible without severely impacting legitimate users.

“Blocking based solutions miss a critical point: public websites need to be accessible”  

Analytics Platform Limitations

Analytics platforms like Google Analytics 4 have built-in options to counter bot traffic:

• IP/host blacklisting
• Referral exclusion lists
• Built-in bot filtering
• Custom filters and segments

However, these tools rely on identifying known patterns. Modern bots constantly evolve their behaviour, making static filtering rules increasingly ineffective. Moreover, managing these filters becomes a resource-intensive task with diminishing returns.

The Missing Piece

Perhaps most importantly, traditional solutions don’t address a critical question: What happens when bots inevitably make it through? For businesses trying to understand their true customer engagement, blocking some bots isn’t enough – they need to identify and filter out non-human traffic from their analytics data. 

Traditional solutions don’t address a critical question: What happens when bots inevitably make it through?

Humanizing Analytics through DX Spotlight

Our Analytics Classification module, part of DX Spotlight, directly addresses this challenge. Rather than attempting to block bots – a strategy that often fails against sophisticated automation – the solution focuses on using AI to identify and filter out non-human traffic from analytics data. The module is currently in beta and undergoing continuous R&D, but the results already speak for themselves.

Looking at the B2B SaaS brand example from earlier, the difference between raw traffic (sessions and pageviews) and actual human traffic as determined by DX Spotlight is striking. While raw analytics showed a dramatic spike in sessions, the filtered data reveals a much more stable pattern of genuine user engagement. This clean, bot-free view of traffic provides the reliable foundation that brands need for data-driven decision making.

How DX Spotlight Traffic Classification Works

1. Data Ingestion and ETL: Data collection from any mainstream analytics source.
2. Pattern Analysis and Classification: ML-based classification pipeline
3. Reporting: Reporting Human Traffic on DX Spotlight.

Benefits for Brand Owners

With Bot Traffic identified and most importantly, quantified, Spotlight enables analysis of clean, human analytics data.

DX Spotlight even adjusts and provides human-only traffic across key dimensions such as channels, locations, devices and more.

Having human-only data makes strategic month-by-month planning meaningful, for example through our Bowler report that tracks our clients’ Governance and Site Performance progress based on monthly targets.

Your Analytics, Humanized through DX Spotlight

Clean analytics isn’t just about better numbers – it’s about understanding real customer behavior in a landscape where bots increasingly blur the line between automated and human traffic.

With DX Spotlight’s Traffic Classification module, brands finally see their digital presence through a clear lens: human traffic only.

Discover how much bot traffic is actually affecting your analytics and marketing decisions – schedule a demonstration today.

The post Beyond Basic Bot Detection: Humanizing Web Analytics through DX Spotlight appeared first on Cressive DX.