Trust and data handling
Security, without the mystery.
Keel is designed around clear boundaries: your organisation, your project team, each contributor and each client audience.
Australian data residency
Project data is hosted in Sydney, Australia, in an Australian-region Supabase database. Keel’s application and connected services are operated through Lovable and Cloudflare infrastructure.
Access by organisation and project
Each organisation has its own membership, roles and project teams. Database row-level security enforces those boundaries. Organisation admins, project managers and viewers sign in; support access by platform admins is time-limited, read-only and visible in the organisation audit log.
Personal contributor links
Delivery contributors do not need accounts. Their private links are personal, scoped to assigned work and validated on the server for every read and write. Changes are attributed to the contributor. Share links should be treated like a password and revoked when no longer needed.
Client-safe views
Client views and reports are filtered for their audience. Internal-only register entries, team input, sources and transcripts are never included. Client forecast sharing and other sensitive details are explicit choices.
AI, under your control
AI runs only when you trigger it or on scheduled drafts you enable. Every AI call is logged and subject to a monthly allowance. Curated outputs have version slots and AI-written content is marked for review. AI never changes your plan on its own. Customer content is not used to train AI models.
Secrets and integrations
Integration credentials and service secrets are encrypted and kept on the server. KithCRM and WorkflowMax imports run only for connections you configure, with the consent controls you enable. Email is delivered through Resend.
Sub-processors
These services process the data needed for the features you use. Optional CRM and timesheet connections also share relevant data with the provider you enable.
| Provider | Purpose | Processing |
|---|---|---|
| Supabase | PostgreSQL database and Australian-region data hosting | Australia (Sydney) |
| Lovable / Cloudflare | Application hosting, server runtime and authenticated service gateways | Varies by service |
| Anthropic | Claude language models for AI drafting, analysis and answers, through Lovable AI Gateway | Provider processing |
| Voyage AI | voyage-context-4 embeddings for project-source retrieval | Provider processing |
| Resend | Transactional invitations, confirmations and report delivery | Provider processing |
Questions or a security review?
Email hello@keelproject.com. Practice includes a data-processing agreement; uptime SLA and full export support are available on request.