Privacy & cookies
This is a plain-language summary of how Keel handles data today. We keep it honest and
current. For a specific request, or the formal policy, email
[email protected].
Keel is operated by Keel GRC LLC, headquartered in Buford, Georgia, USA, which is the data controller for the personal data described here.
Analytics & cookies on this website
Analytics and marketing cookies on our marketing site are off by default. When you first visit you can accept all, reject all, or choose by category, and you can change that choice any time from the Cookie preferences link in the footer. Only after you opt in do we load tools that set cookies and collect usage data such as pages viewed, referrer, approximate (city-level) location, and device or browser type:
- Google Analytics 4 and Microsoft Clarity - aggregate traffic, engagement, and site-quality analytics (analytics category).
- Metricool - traffic and marketing-performance measurement (analytics category).
- Meta (Facebook) Pixel and first-touch campaign attribution - advertising measurement (marketing category).
We do not sell your personal information. We honor Global Privacy Control and Do Not Track signals by leaving the optional categories off, and you can also block cookies in your browser. Blocking these does not affect your ability to use the site. For the full list of cookies and how long each lasts, see our Cookie Policy.
The Keel app
When you create a workspace and use the product, we process the account and compliance data you put in so the service can function. Each workspace's data is isolated at the database level with PostgreSQL row-level security, so one workspace can't reach another's data. The app uses essential cookies for sign-in and to remember your active workspace; these are required for it to work and aren't used for advertising. The app also uses Microsoft Clarity and Metricool to understand product usage and keep the service reliable, and it asks for your consent before loading them, the same as this site.
Sub-processors
We rely on a small set of reputable providers to run Keel:
- Cloudflare - hosting, CDN, and edge delivery.
- Neon (PostgreSQL) - primary application database.
- Clerk - authentication and session management.
- Stripe - subscription billing (we never see or store full card numbers).
- Resend - transactional and opt-in newsletter email.
- Cloudflare R2 - evidence and document storage.
- Sentry - error monitoring to keep the service reliable.
- Anthropic - powers optional in-product AI features you choose to run.
The current, maintained list - with each provider's purpose and hosting region - lives on our sub-processors page.
If you subscribe to our newsletter we store your address to send it and you can unsubscribe at any time. Transactional emails (invites, notifications, your opt-in weekly digest) are sent only in connection with your account.
Your rights
If you're in a region with data-protection rights (for example under GDPR or CCPA/CPRA), you
can request access to, correction of, or deletion of your personal data. Email
[email protected] and we'll help.
Contact
Questions about privacy or this page? Email [email protected].