Who measures Authority Score and from what data
Authority Score is calculated by Semrush, the SEO software company founded in 2008 and now listed on the New York Stock Exchange (NYSE). The figure draws on several data sources the company owns outright, none of them Google's: a link index built by Semrush's own crawler, SemrushBot; a keyword database Semrush uses to estimate every domain's organic traffic; and that same link index, analyzed a second time to flag spam patterns.
The keyword database is what separates Semrush from a pure link vendor. According to its official documentation, the organic traffic that feeds into AS is estimated "based on a website's total keyword positions and the click potential of every position," not from real analytics data supplied by the domain owner. It's an estimate built on Semrush's own rank tracking, carrying the same margin of error as any third-party traffic estimate.
Semrush recalculates Authority Score for every domain once every two weeks, per its own knowledge base. A recent shift in a domain's link profile or organic positions can take up to fourteen days to show up in the public number.
None of the three data sources comes from Google. The search engine doesn't share its own link index or internal ranking data with third parties, so any tool offering an authority metric, Semrush included, necessarily builds it on its own crawling infrastructure. That's true of Moz's Domain Authority and Ahrefs' Domain Rating just as much as it is of Semrush.