Privacy Launches Aug 2026
GDPR · 2016/679
40 controls tracked Access: Premium Add-on from $39/mo
The EU General Data Protection Regulation sets the obligations for handling the personal data of EU residents. Keel focuses on the operative controller and processor duties that actually apply to a SaaS company, not the institutional articles.
Launches Aug 2026. Start free today on a live framework: your evidence carries over the day GDPR goes live.
Who needs GDPR?
- Any company processing the personal data of people in the EU
- SaaS vendors asked to sign a Data Processing Agreement (DPA)
- Teams that need lawful basis, data-subject rights, and breach readiness in place
How Keel helps with GDPR
- The operative controller/processor obligations across Chapters II–V as controls
- Crosswalk to your security framework so Article 32 work is not duplicated
- Readiness tracking for the duties that matter, minus the legal noise
Collect once, comply everywhere
GDPR shares its DNA with SOC 2, ISO 27001, and the other frameworks Keel supports. Implement a control once and it counts toward every framework it satisfies, so adding GDPR rarely means starting from scratch.
Other frameworks: ISO/IEC 27001 · CIS Critical Security Controls · PCI DSS · SOC 2 · NIST Cybersecurity Framework · NIST SP 800-53 · All frameworks →