Frequently asked questions

Keel is a GRC (governance, risk & compliance) and vendor-risk platform for small and mid-sized companies, across security, privacy, and quality frameworks like SOC 2, ISO 27001, HIPAA, PCI DSS, NIST CSF, and ISO 9001. You set up controls, collect evidence, manage policies and vendors, and publish a trust center - without a consultant or an enterprise price tag.

One control library, crosswalked across every framework you apply: map a control once and it satisfies the matching requirements everywhere. Keel authors and scores content for ISO/IEC 27001:2022, CIS Critical Security Controls v8.1, PCI DSS 4.0.1, SOC 2, SOX (Sarbanes-Oxley) Section 404, NIST Cybersecurity Framework 2.0, NIST SP 800-53 Rev. 5, FedRAMP Rev5 Class B, FedRAMP Rev5 Class C, FedRAMP Rev5 Class D, FedRAMP 20x, FedRAMP Consolidated Rules 2026, NIST SP 800-171 Rev. 2, HIPAA, GDPR, COPPA, Google Play Families, Amazon Appstore Child-Directed Apps, Apple App Store Kids Category, PIPEDA, ISO 9001:2015, ESG Essentials 1.1, US Employment Law - Federal Baseline 1.1, and the AI governance shelf (AI Governance Essentials 1.0, ISO/IEC 42001:2023, NIST AI Risk Management Framework 1.0, and EU AI Act). NIST Cybersecurity Framework 2.0 and AI Governance Essentials 1.0 are free on every plan.

Keel gets you audit-ready: it organizes your controls, evidence, and policies and shows your readiness against each framework. The certificate or attestation itself is issued by an independent auditor - Keel is not a certification body and does not perform the audit. We make the audit far faster and cheaper to get through.

No. A guided setup walks you from zero to a working program in an afternoon, and one-click starter control sets pre-map a framework for you. You can try it yourself on a 14-day trial before you talk to anyone.

Keel has Starter, Pro and Enterprise plans that add scale (frameworks, seats, vendors, storage, AI credits) and automation, plus a dedicated MSP / Partner plan for managed-service providers and consultancies. Each plan is quoted to your scope after a short demo. Every new workspace can start on a 14-day Pro trial first, with no credit card. Add-ons like Keel Quality and Trust Center Pro (white-label and a custom domain) are billed on top of your plan, and AI credit packs top up a plan's monthly AI credits. The plans page lists what each plan includes.

There is no minimum term and no automatic annual uplift. You can cancel yourself from billing settings at any time, effective at the end of the period you have already paid for. On Starter, reaching the framework limit means moving to Pro, which includes every framework. NIST CSF and AI Governance Essentials stay included on every plan. Each plan's seats, vendors, storage, and AI credits are listed in the comparison table on the plans page, so the next step up is visible before you need it. Your plan's price is locked for 24 months from the day you subscribe. Prices are in USD.

Yes. Every new workspace starts on a 14-day trial of the Pro plan, with no credit card required, so you get the full Pro experience (more frameworks and seats, AI assist, integrations and API, and the full trust center) from day one. Before it ends, book a demo and we quote the plan that fits. Your data stays exactly where it is either way; nothing is deleted.

Yes - every workspace gets a free auditor seat that does not count against your plan’s seat limit. Your auditor reviews your program and evidence and runs requests, samples and tests in your workspace. They cannot edit your controls or upload evidence.

Every workspace is isolated at the database level with Postgres row-level security, enforced in the database - not just in application code - so your data is never reachable from another workspace. Traffic is served over HTTPS/TLS, data is encrypted at rest by our infrastructure providers, and the app connects with a least-privilege database role. See our trust page for details.

Add vendors by criticality and Keel sets review cadences so nothing goes unreviewed. Send a security questionnaire through a secure, no-login portal; the vendor contact can invite colleagues to help answer, and any of them can submit. Responses are auto-scored, and an AI builder can assemble a questionnaire from your concerns.

Real, shipping features: import a messy Word policy and AI rewrites it into a clean, framework-mapped draft; paste a vendor’s website and AI drafts their risk profile; describe your concerns and AI assembles a scored questionnaire. Metered AI credits are included on Starter, Pro and Enterprise.

Yes. On Enterprise, on the MSP / Partner plan, or with the Trust Center Pro add-on, you can remove Keel branding from your public trust center and serve it on your own hostname, such as trust.yourcompany.com. You add two DNS records and Keel issues the certificate.

Yes. Keel has a dedicated MSP / Partner plan, with partner pricing, built for managed-service providers and consultancies. Its multi-client console gives you a cross-client overview - readiness, open risks, tasks, and vendors for every workspace - with one-click switching. You can spin up a new, isolated client workspace right from the console; each client workspace white-labels its trust center once that workspace is on a partner or Enterprise plan, or carries the Trust Center Pro add-on, and the same workspace can publish its trust center on the client's own domain. See the For MSPs page for details.

Pro and Enterprise include a REST API and outbound webhooks (REST Hooks), plus automated directory sync from Microsoft Entra ID or Google Workspace. CSV import is available on every plan.

Yes. Turn on the opt-in weekly digest in Settings and Keel emails you a readiness summary every week - coverage, gaps to close, open risks and tasks, vendors due for review, and outstanding training. You can also email yourself an on-demand digest from the dashboard anytime.

Start a trial anytime and use the in-app guided setup plus the Help page, which has step-by-step guides for every module. For questions, reach our support team from the Support link inside the app or the site footer, or email help@keelgrc.com.