Frequently asked questions

Keel is a self-serve GRC (governance, risk & compliance) and vendor-risk platform for small and mid-sized companies, across security, privacy, and quality frameworks like SOC 2, ISO 27001, HIPAA, PCI DSS, NIST CSF, and ISO 9001. You set up controls, collect evidence, manage policies and vendors, and publish a trust center - without a consultant or an enterprise price tag.

One control library crosswalked across SOC 2, ISO 27001, PCI DSS, HIPAA, ISO 9001, NIST CSF, ESG, and the AI governance shelf (AI Governance Essentials, ISO 42001, NIST AI RMF, and the EU AI Act). Map a control once and it satisfies the matching requirements in every framework you have applied. NIST CSF and AI Governance Essentials are free on every plan.

Keel gets you audit-ready: it organizes your controls, evidence, and policies and shows your readiness against each framework. The certificate or attestation itself is issued by an independent auditor - Keel is not a certification body and does not perform the audit. We make the audit far faster and cheaper to get through.

No. Keel is self-serve. A guided setup walks you from zero to a working program in an afternoon, and one-click starter control sets pre-map a framework for you. You can start free, no sales call.

Every new workspace starts with a 14-day free trial of Pro (no credit card). After that there is a free plan (NIST CSF and AI Governance Essentials, plus one paid framework), then Starter, Pro, and Enterprise tiers that add scale (frameworks, seats, vendors, storage, AI credits) and automation, plus a dedicated MSP / Partner plan for managed-service providers and consultancies. Add-ons like extra frameworks, Trust Center Pro (white-label; custom domain coming soon), and AI credit packs layer onto any plan. See the pricing page for details.

Yes. Every new workspace starts on a 14-day free trial of the Pro plan, with no credit card required, so you get the full Pro experience (more frameworks and seats, AI assist, integrations and API, and the full trust center) from day one. When the trial ends, you can upgrade to keep Pro, or do nothing and simply move to the Free plan, which keeps NIST CSF and AI Governance Essentials free forever. Either way your data stays exactly where it is; nothing is deleted.

Yes - every workspace gets a free, read-only auditor seat that does not count against your plan’s seat limit. Auditors can review your program and evidence without being able to change anything.

Every workspace is isolated at the database level with Postgres row-level security, enforced in the database - not just in application code - so your data is never reachable from another workspace. Traffic is served over HTTPS/TLS, data is encrypted at rest by our infrastructure providers, and the app connects with a least-privilege database role. See our trust page for details.

Add vendors by criticality and Keel sets review cadences so nothing goes unreviewed. Send a security questionnaire through a secure, no-login portal; the vendor contact can invite colleagues to help answer, and any of them can submit. Responses are auto-scored, and an AI builder can assemble a questionnaire from your concerns.

Real, shipping features: import a messy Word policy and AI rewrites it into a clean, framework-mapped draft; paste a vendor’s website and AI drafts their risk profile; describe your concerns and AI assembles a scored questionnaire. Metered AI credits are included on every paid plan.

White-labeling is available today on Enterprise (or with the Trust Center Pro add-on) - you can remove Keel branding from your public trust center. Serving it on your own custom hostname is coming soon.

Yes. Keel has a dedicated MSP / Partner plan, with partner pricing, built for managed-service providers and consultancies. Its multi-client console gives you a cross-client overview - readiness, open risks, tasks, and vendors for every workspace - with one-click switching. You can spin up a new, isolated client workspace right from the console and white-label each trust center. (Publishing each client's trust center on their own custom domain is coming soon.) See the For MSPs page for details.

Pro and Enterprise include a REST API and outbound webhooks (REST Hooks), plus automated directory sync from Microsoft Entra ID or Google Workspace. CSV import is available on every plan.

Yes. Turn on the opt-in weekly digest in Settings and Keel emails you a readiness summary every week - coverage, gaps to close, open risks and tasks, vendors due for review, and outstanding training. You can also email yourself an on-demand digest from the dashboard anytime.

Start free anytime and use the in-app guided setup plus the Help page, which has step-by-step guides for every module. For questions, reach our support team from the Support link inside the app or the site footer, or email [email protected].