generated: '2026-07-19'
method: searched
source: https://keatext.ai/en/security/
note: >-
  Keatext publishes no public API, so no API cross-cutting conformance (OAuth2,
  RFC 9457, pagination, etc.) can be asserted. These entries capture the
  organizational security & compliance program named on the public security page.
standards:
  - id: soc2
    conforms: true
    evidence: "AICPA SOC 2 compliance stated on keatext.ai/en/security/"
  - id: iso-27001
    conforms: true
    evidence: "ISO 27001 (Information Security Management) named on the security page"
  - id: iso-27017
    conforms: true
    evidence: "ISO 27017 (cloud-specific security controls) named on the security page"
  - id: iso-27018
    conforms: true
    evidence: "ISO 27018 (protection of PII in the cloud) named on the security page"
  - id: gdpr
    conforms: true
    evidence: "GDPR compliance stated on the homepage and security page"
  - id: hipaa
    conforms: partial
    evidence: "Described as HIPAA-aligned data security & privacy practices (not certified)"
  - id: owasp
    conforms: true
    evidence: "OWASP Testing Guide referenced for application security testing"