Kanonik
Log inTalk to usStart your trial
Menu

How Kanonik handles your data.

Kanonik stores your compliance record and your account details. It doesn't connect to your own systems. Your data is encrypted in transit and at rest, and each workspace is kept separate from the others.

This page covers how the service works; our Privacy Policy and DPA have the full terms. For algorithms and key handling, see the technical walkthrough.

What we do with your data

  • We don't use your data to train AI models

    We don't train, fine-tune or evaluate any AI model on your data. The Verifier sends the proposed change and related context to Anthropic's API under Anthropic's commercial terms, which don't permit training on it. The Verifier's verdicts are stored in your record. The content sent for a check isn't stored by Kanonik beyond operational logs, which we keep for up to 90 days.

  • What personal data your compliance record holds

    Your compliance record includes the names of control owners and approvers. Those names are personal data. We handle them as your processor, and only to provide the Service. The record isn't meant to hold any other employee or customer personal data. Our Privacy Policy lists everything we collect, including account and usage data, and why.

  • We don't ask for or store credentials to your systems

    Your AI connects to your systems on its own, and Kanonik isn't part of that connection. When someone uses @Kanonik in Slack, Microsoft Teams or Claude, they sign in to Kanonik as themselves and see only what their role allows.

What we store, and for how long

Account data
Your name, work email, company, role and country, so you can log in and we can support you. Our payment provider handles your billing details.
Record data
Control owners, approvers, the Verifier's results, approvals, and what each approved item looked like before and after.
Encryption
Every connection from the internet uses TLS 1.2 or 1.3. Your data is encrypted at rest by our cloud provider (Oracle Cloud block storage, AES-256). Each workspace also has its own key in our key vault. Today that key protects three fields: the workspace owner's email address, the addresses approval requests go to, and the proof-of-purchase reference on a framework license.
Separation
Every workspace's records carry a workspace id. Row-level security in the database is forced on the core record tables, and the application checks the workspace on every request.
Backups
Customer workspaces are backed up, and the backups are stored encrypted in our cloud provider's object storage.
Cancellation
Cancel any time in Settings; it takes effect at the end of your billing period, and you can undo it until then. Export your record any time before your subscription ends. When it ends, the workspace is suspended automatically, and nothing is deleted. We keep audit-log entries for the retention period set out in our Privacy Policy.

What security reviewers usually ask

Hosting
Hosted on Oracle Cloud Infrastructure in the United States.
Sub-processors
Oracle Cloud Infrastructure, Cloudflare, Anthropic (for the Verifier), Stripe, Postmark, GitLab (for feedback reports you file), and Slack if you turn it on. The Verifier's calls to Anthropic are covered by Anthropic's data-handling terms. The full list is in Annex III of our DPA.
Private deployment
Private or self-hosted deployment is available to enterprise customers: talk to us. Kanonik is deployed as infrastructure as code, so we go through the platform with you and test it with you.

Check an export yourself.

Every Proof Snapshot and Sealed Audit Package carries its own checker. You can check one in your browser, or download the sample Sealed Audit Package and follow the instructions inside.

Harbor Ledger, a sample company

  1. The Audit log lists every decision: who made it, when, and what the check said.

    Confirmed a control: Screen lock on company laptops

    25 Sep 10:15, Dana Rpassed

    Accepted a risk: Card processor outage stops outgoing payments

    24 Sep 16:10, Mei Lpassed

  2. You check the chain in your browser.

    Check the chain

  3. Each entry links to the one before it, so a changed entry would show.

    Adjacent links match in this view: 219 entries checked.

  4. Each export comes with an offline checker, so whoever you send it to can run the same check.

Start with your own record, and send your reviewer this page.

Solo is $99 a month and starts with a 14-day trial.

Start your trial