Privacy & cookies

Analytics & cookies on this website

Analytics and marketing cookies on our marketing site are off by default. When you first visit you can accept all, reject all, or choose by category, and you can change that choice any time from the Cookie preferences link in the footer. Only after you opt in do we load tools that set cookies and collect usage data such as pages viewed, referrer, approximate (city-level) location, and device or browser type:

• Google Analytics 4 - aggregate traffic and engagement analytics (analytics category).
• Microsoft Clarity - usage analytics and session recording: it records your visit and replays it to us, including pointer movement, scrolling, clicks and the page as it appeared. Form-field values, and text containing a digit or an “@”, are redacted (analytics category).
• Metricool - traffic and marketing-performance measurement (analytics category).
• Meta (Facebook) Pixel and first-touch campaign attribution - advertising measurement (marketing category).

We do not sell your personal information. We honor Global Privacy Control and Do Not Track signals by leaving the optional categories off, and you can also block cookies in your browser. Blocking these does not affect your ability to use the site. For the full list of cookies and how long each lasts, see our Cookie Policy.

The Keel app

When you create a workspace and use the product, we process the account and compliance data you put in so the service can function. Each workspace’s data is isolated at the database level with PostgreSQL row-level security, so one workspace can’t reach another’s data. The app uses essential cookies for sign-in and to remember your active workspace; these are required for it to work and aren’t used for advertising.

We currently run no analytics in the signed-in app. There is no product analytics tool, no session recording and no advertising tag on app.keelgrc.com: no analytics vendor receives your in-app pageviews, the pages you open, or what you click on your controls, evidence and documents. Google Analytics, Microsoft Clarity, Metricool and the Meta Pixel run on this marketing site only. The only third parties that receive data from the app are the sub-processors listed below, each of which is there to make the product work.

Keel used a product-analytics tool in the signed-in app until August 2026, when it was removed and not replaced. That collection has stopped and the vendor is no longer a sub-processor. We have kept the app’s consent mechanism in place rather than removing it: the analytics category is still offered and currently loads nothing, so that anything we add later cannot run before you have accepted it.

Sub-processors

We rely on a small set of reputable providers to run Keel:

• Cloudflare - hosting, CDN, and edge delivery.
• Neon (PostgreSQL) - primary application database.
• Clerk - authentication and session management.
• Stripe - subscription billing (we never see or store full card numbers).
• Resend - transactional and opt-in newsletter email.
• Cloudflare R2 - evidence and document storage.
• Sentry - error monitoring to keep the service reliable.
• Anthropic - powers optional in-product AI features you choose to run.
• Microsoft Clarity - session recording and usage analytics on this marketing site only, not in the app (analytics category, opt-in).
• Metricool - traffic and marketing-performance measurement on this marketing site only, not in the app (analytics category, opt-in).

Every analytics provider in that list is limited to this marketing site. None of them processes data from the signed-in app.

The current, maintained list - with each provider’s purpose and the kind of provider it is - lives on our sub-processors page.

Email

If you subscribe to our newsletter we store your address to send it and you can unsubscribe at any time. Transactional emails (invites, notifications, your opt-in weekly digest) are sent only in connection with your account.

Your rights

If you’re in a region with data-protection rights (for example under GDPR or CCPA/CPRA), you can request access to, correction of, or deletion of your personal data. Email privacy@keelgrc.com and we’ll help.

Contact

Questions about privacy or this page? Email privacy@keelgrc.com.