Legal

Trademarks & attributions

Third-party trademarks, service marks, and trade names referenced on this site and in the Keel product are the property of their respective owners. Keel's use of these names is nominative and factual; it does not imply any affiliation with, sponsorship by, or endorsement from those owners.

Standards and frameworks

Keel references security and privacy frameworks, including ISO/IEC 27001, SOC 2, HIPAA, NIST, PCI DSS, and GDPR, by their names and clause or control numbers for the purpose of mapping your controls and evidence. These references are factual.

  • We describe framework requirements in our own words. We do not reproduce the copyrighted text of any standard.
  • We say work is aligned to, mapped to, or -style, never "certified", "official", or "powered by" a standards body.
  • "ISO" and "ISO/IEC 27001" are referenced as the relevant standards. Keel is not affiliated with or endorsed by ISO or the IEC. The full standard text is copyrighted and is not provided by Keel.
  • "SOC 2" refers to the AICPA's SOC 2 reporting framework. Keel is not affiliated with or endorsed by the AICPA.

Other GRC platforms & migration

Where Keel names other governance, risk, and compliance platforms (for example Vanta, Drata, and Secureframe), it does so nominatively and factually, to describe migrating your own data to Keel. Those names are trademarks of their respective owners. Keel is not affiliated with, sponsored by, or endorsed by them.

  • Our open-source keel-migrate tool uses each platform's official, documented API, authenticated with your own credentials, and is read-only. It does not scrape, reverse-engineer, or modify any third-party service.
  • The tool exports data you already own so you can move it. It is not affiliated with the platforms it exports from, and we do not display their logos or claim any partnership.

Integrations and partners

Where Keel names a third-party service, it does so factually to describe interoperability. We do not display partner logos or claim an "official integration" or partnership without a written agreement with that party.

Contact

Questions about attribution or trademark use? Email [email protected].